Analysis
- max time kernel
148s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
- submitted
16/05/2026, 07:57
General
- Target SpyNote_v6.4/Resources/Audio/c.wav
- Size 375KB
- Sample260516-js983abx91
- SHA256 d987b1f46ec60ec58bc3ebf2d70ce42de12fea78bcc37ffd970c309e42f1271b
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\SpyNote_v6.4\Resources\Audio\c.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4708-5-0x00007FFD98390000-0x00007FFD983C4000-memory.dmp
memory/4708-4-0x00007FF6FC270000-0x00007FF6FC368000-memory.dmp
memory/4708-9-0x00007FFD91330000-0x00007FFD91352000-memory.dmp
memory/4708-6-0x00007FFD8FE90000-0x00007FFD90146000-memory.dmp
memory/4708-10-0x00007FFD91300000-0x00007FFD9132B000-memory.dmp
memory/4708-7-0x00007FFD95EF0000-0x00007FFD95F01000-memory.dmp
memory/4708-8-0x00007FFD95E20000-0x00007FFD95E39000-memory.dmp
memory/4708-13-0x00007FFD948F0000-0x00007FFD94901000-memory.dmp
memory/4708-11-0x00007FFD83C40000-0x00007FFD83FD0000-memory.dmp
memory/4708-23-0x00007FFD90D20000-0x00007FFD90D3A000-memory.dmp
memory/4708-26-0x00007FFD83790000-0x00007FFD8399B000-memory.dmp
memory/4708-32-0x00007FFD90590000-0x00007FFD905A2000-memory.dmp
memory/4708-30-0x00007FFD836E0000-0x00007FFD8378B000-memory.dmp
memory/4708-31-0x00007FFD905B0000-0x00007FFD905CB000-memory.dmp
memory/4708-33-0x000002742AE70000-0x000002742AF42000-memory.dmp
memory/4708-29-0x00007FFD90720000-0x00007FFD90745000-memory.dmp
memory/4708-34-0x000002742B350000-0x000002742C400000-memory.dmp
memory/4708-28-0x00007FFD90750000-0x00007FFD9079F000-memory.dmp
memory/4708-27-0x00007FFD903B0000-0x00007FFD90448000-memory.dmp
memory/4708-25-0x00007FFD907A0000-0x00007FFD907B1000-memory.dmp
memory/4708-24-0x00007FFD907C0000-0x00007FFD907D1000-memory.dmp
memory/4708-22-0x00007FFD90B30000-0x00007FFD90B5D000-memory.dmp
memory/4708-21-0x00007FFD90D60000-0x00007FFD90D86000-memory.dmp
memory/4708-20-0x00007FFD91210000-0x00007FFD91228000-memory.dmp
memory/4708-19-0x00007FFD912D0000-0x00007FFD912FF000-memory.dmp
memory/4708-17-0x00007FFD8FAC0000-0x00007FFD8FBA3000-memory.dmp
memory/4708-18-0x00007FFD91230000-0x00007FFD91271000-memory.dmp
memory/4708-15-0x00007FFD839A0000-0x00007FFD83C36000-memory.dmp
memory/4708-16-0x00007FFD8FBB0000-0x00007FFD8FC98000-memory.dmp
memory/4708-14-0x00007FFD905D0000-0x00007FFD906A2000-memory.dmp
memory/4708-12-0x00007FFD95E00000-0x00007FFD95E14000-memory.dmp
memory/4708-35-0x00007FFD7C690000-0x00007FFD7C8D5000-memory.dmp
memory/4708-130-0x000002742B350000-0x000002742C400000-memory.dmp
memory/4708-226-0x000002742B350000-0x000002742C400000-memory.dmp
memory/4708-258-0x000002742B350000-0x000002742C400000-memory.dmp
memory/4708-290-0x000002742B350000-0x000002742C400000-memory.dmp
memory/4708-322-0x000002742B350000-0x000002742C400000-memory.dmp
memory/4708-354-0x000002742B350000-0x000002742C400000-memory.dmp