Overview

overview

10

Static

static

10

SpyNote_v6...te.exe

windows10-ltsc 2021-x64

5

SpyNote_v6...te.exe

windows11-21h2-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SpyNote_v6.4.rar

  • Size

    22.0MB

  • Sample

    250106-t5chnstmcn

  • MD5

    84325e47432141d8440127bce6b974d0

  • SHA1

    3ffa30171e6d57af803b6fae0f8b35559bc45274

  • SHA256

    71ce71735aa47a3b1d17e1b6639aaf6213b4c284243ad5ae7bb36fa1c5c9975f

  • SHA512

    701f3573be8634d5a10d72935be0ae9a1929804e1f16634bc3ed104c1e863df14456a5b7ffb62a0c7612db506017ad672ed447ee6bd2dbf81af88caf840ae03e

  • SSDEEP

    393216:KTkHSGrRzx7bynxYnMHcBNvUqvvDY4gXX9w+ijU0UkL20tzPt/OGtgwGIR46mrn:KQHSqomnM8BNvnNga+KU0zp//RxmL

Score
10/10
spynotediscovery

Malware Config

Extracted

Family

spynote

C2

[SPY_NOTE_HOST_OK]:[SPY_NOTE_PORT_OK]

Targets

    • Target

      SpyNote_v6.4/SpyNote.exe

    • Size

      6.7MB

    • MD5

      d9265f1d01fe8cfde1b241886e834a8c

    • SHA1

      a5f29b1c2a6f981c246976de1ba7e053841aa562

    • SHA256

      53f32f6ed5e1fbd5f5a29f83ab0eebc385f693824544fa4664242c91c7d9f1bf

    • SHA512

      59fc93e2ba15e8c901216dd2108ddfc3f1b7fa954ba0cc903d684aa4a2353b295c7e5c9f8f20e744de743cff436fee5fd0e96ba1f156a0a681a275f20af85e6b

    • SSDEEP

      196608:2dHPY7vsZ+oa4DuuyrMi8VKe+PMfw7k2c4PAVv1sUpr:+vfZ+IaLM9we+P2myds

    Score
    5/10
    discovery

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks