Analysis
- max time kernel
148s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
- submitted
16/05/2026, 07:57
General
- Target SpyNote_v6.4/Resources/Audio/v.wav
- Size 440KB
- Sample260516-js983abx91
- SHA256 b6c3c2795b5aac2ef9da3c764de04274ef6b921995ef863407cd6a109f8c6c94
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 8 IoCs
- Suspicious use of SendNotifyMessage 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\SpyNote_v6.4\Resources\Audio\v.wav"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5080-4-0x00007FF69AD60000-0x00007FF69AE58000-memory.dmp
memory/5080-5-0x00007FFE66D30000-0x00007FFE66D64000-memory.dmp
memory/5080-9-0x00007FFE62FA0000-0x00007FFE62FC2000-memory.dmp
memory/5080-6-0x00007FFE5CFC0000-0x00007FFE5D276000-memory.dmp
memory/5080-10-0x00007FFE62CF0000-0x00007FFE62D1B000-memory.dmp
memory/5080-8-0x00007FFE66CD0000-0x00007FFE66CE9000-memory.dmp
memory/5080-7-0x00007FFE67AC0000-0x00007FFE67AD1000-memory.dmp
memory/5080-13-0x00007FFE62CA0000-0x00007FFE62CB1000-memory.dmp
memory/5080-12-0x00007FFE64CE0000-0x00007FFE64CF4000-memory.dmp
memory/5080-11-0x00007FFE50660000-0x00007FFE509F0000-memory.dmp
memory/5080-14-0x00007FFE5DCC0000-0x00007FFE5DD92000-memory.dmp
memory/5080-15-0x00007FFE503C0000-0x00007FFE50656000-memory.dmp
memory/5080-16-0x00007FFE5CED0000-0x00007FFE5CFB8000-memory.dmp
memory/5080-17-0x00007FFE502D0000-0x00007FFE503B3000-memory.dmp
memory/5080-18-0x00007FFE62C50000-0x00007FFE62C91000-memory.dmp
memory/5080-22-0x00007FFE62210000-0x00007FFE6223D000-memory.dmp
memory/5080-24-0x00007FFE621B0000-0x00007FFE621C1000-memory.dmp
memory/5080-23-0x00007FFE621D0000-0x00007FFE621EA000-memory.dmp
memory/5080-26-0x00007FFE500C0000-0x00007FFE502CB000-memory.dmp
memory/5080-32-0x00007FFE5DC50000-0x00007FFE5DC62000-memory.dmp
memory/5080-33-0x000001F59D2B0000-0x000001F59D579000-memory.dmp
memory/5080-35-0x000001F59D980000-0x000001F59DB9A000-memory.dmp
memory/5080-31-0x00007FFE5DC70000-0x00007FFE5DC8B000-memory.dmp
memory/5080-30-0x00007FFE5DAB0000-0x00007FFE5DB5B000-memory.dmp
memory/5080-29-0x00007FFE5DC90000-0x00007FFE5DCB5000-memory.dmp
memory/5080-28-0x00007FFE5DF70000-0x00007FFE5DFBF000-memory.dmp
memory/5080-27-0x00007FFE5DE40000-0x00007FFE5DED8000-memory.dmp
memory/5080-21-0x00007FFE62240000-0x00007FFE62266000-memory.dmp
memory/5080-20-0x00007FFE62270000-0x00007FFE62288000-memory.dmp
memory/5080-19-0x00007FFE62C20000-0x00007FFE62C4F000-memory.dmp
memory/5080-25-0x00007FFE62190000-0x00007FFE621A1000-memory.dmp
memory/5080-34-0x00007FFE4A390000-0x00007FFE4A5D5000-memory.dmp