spynote

General

Target

https://github.com/gov-uk/GOV.UK
Sample

250117-ssprsstqck

Score

10^/10

Malware Config

Targets

- Target
  
  https://github.com/gov-uk/GOV.UK
Score

10^/10

spynote banker infostealer rat trojan
- Spynote
  Spynote is a Remote Access Trojan first seen in 2017.
  banker trojan infostealer rat spynote
- Spynote family
  spynote
- Spynote payload
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

1

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

2

T1633

System Checks

2

T1633.001

Credential Access

Discovery

System Information Discovery

2

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Spynote family

Spynote payload

Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Tasks

static1

urlscan1

behavioral1