spynote | 54c20b3e6c1e64320fc051498410574cc425a04d918ebef597383b207219caaa

Sharing

Copy URL Twitter E-mail

General

Target
SpyNote 5.0.7z
Size 8.9MB
Sample260723-lbx9aavdma
SHA256 54c20b3e6c1e64320fc051498410574cc425a04d918ebef597383b207219caaa
MD5 a4eb635a9dbd57361a12139d13c27574
SHA1 9372ed37b207dfb4a179ec4df744ec64e14cb3be
SHA512 eed7e1fffef3049a66dad101e80cab579c3b94f142b7180de680dd9a74182750b3c5f4e2225df74f8d79a82fe52230183c510fc9755cffc8c4c407c101bb7e68
SSDEEP 196608:XcpJFIM9Bsb1S5x6Z+Ia/FUBJtha+K25PcMB2gtrbJ0zSga:XWxaIqSFwth955Pcs2gtPJEk
TLSH
T1999633F49C4BF91281C72D90DC75E1EA4470F2D9E930F640A32E5EA1E479ABA6E0F5D0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  SpyNote5.0/AxInterop.WMPLib.dll
- Size 52KB
- SHA256 ced589b5a9212b39c994fa43fe9e30c0fe25d4a9d4fb214a4f5a92ac63b40f22
- MD5 834a615000085cb50a41a49968731bde
- SHA1 a1ac522b9a57b341570e178bbf12836e42ba8759
- SHA512 deeee7e55ee7380adea2bc4b9e4e57bdff7c354c36d36b341538872f49328181a401deff648cd1bcdb15399d83e57974b941cc9a12c65fc5b03b25dde3023a17
- SSDEEP 768:9TiglqcPGmH+BSITBFo+iRdbBFS1WSbfi5qlD+P2mHvaVhXUWdYkXnb:4gvH+oETfiRnFS1WSbfi5qlsaV2WGMb
- TLSH
  T18F33952607C42EA7DFDF9079A4258112EBB0D9857092F3CB168C8AB065C33767DA15FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  SpyNote5.0/Interop.WMPLib.dll
- Size 323KB
- SHA256 e000c2f02c93f4b9f438ca9b5c6179f393ffdb8ef98f4b60b195e1d2035785d6
- MD5 c43b99f3b6f45fe8e07365c4c9390873
- SHA1 45fbcc2aa134fc97c7b105d055b8d42041dfd16b
- SHA512 7d601f0b1b416d8ea67cfa440b187619bfb6d79e7aee5746e265907247d76e84d76a52223698298853f45e68f7689d8ea556efeaf6a1782a850451a635b07717
- SSDEEP 6144:zsJi3gtWLExqLsY9jAaRgHuF07yp4f29sTahwXeVELC5IvmN8jqxAnOlUbSJY/WJ:zsJi3gtWLExqLsY9jAaRgHuF07yp4f2h
- TLSH
  T11B64A512320D9039D9ED437FC3A70B74567186052862EF0739AD3A59DF9728AAC2737B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  SpyNote5.0/Patch/Patch-StaminaMode-release.apk
- Size 789KB
- SHA256 204cfed93f23188a17306e98ca7fabcf1a0be6139328a524c7fa53bf57469708
- MD5 185ca9f19122c0e354f04a05cecfec1d
- SHA1 64b5a8f14c771ad5ca98338ab415ffb210813f80
- SHA512 54227e2fb8b9739c76c521cd2196d71ce8deff08b7ded324c553cbe413377925c0a5aeb2b800062da38a73f3b0569c4655e778ee9a6ca499aad32348da991c3c
- SSDEEP 12288:Tc63jD4IyDrPNY0jPsElk5QQTIpxZbpTF5+kFo0G9LzynxvekmToA:TfjUIertXlgCZbphIkF49LzynEkmTN
- TLSH
  T1B705BF91F749A427C9B3C93683F60B672655CC184A4BE7530995B22C4DFFAC48E89FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6 behavioral7
- Target
  SpyNote5.0/Patch/Patch-release.apk
- Size 789KB
- SHA256 8b422de5dcf3ec8f2eaaa079511c1c965c2b8c691f2e583f7aaa29dbc4b1824e
- MD5 03055162a5600999d8e832469e2e3fb1
- SHA1 4d74359c28dc212391b294b5949676bf2b73ed3b
- SHA512 93072da0f8a65abdf0ac87162006c38ed7f400b7e10c0e31c308f0c6eff893b910425872eaefc9886b6e343d12b8967e1319badd4fb44e767a77d277e3aa82fa
- SSDEEP 12288:hoiv2jD4IyDrPNY0jPsElk5QQTIpnZbpTF5+kFo0G9TzynxvskmTq8:how2jUIertXlggZbphIkF49Tzyn2kmT/
- TLSH
  T14A05AE91F74AA427C9B3C93683F60B6B2656CC184A47D7530995B22C4DFF9C48E98FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral8 behavioral9
- Target
  SpyNote5.0/SpyNote.exe
- Size 727KB
- SHA256 8e154ba521608bcf09bba26189e9e1bf86cae70ef7f283579518a641a0ea955f
- MD5 48e1bf0b6df63a18187e57348b06ad7e
- SHA1 605402f1d2ce5a04dd205412ab9edd8f90261967
- SHA512 54dd1dd4d9e2c7a849fe7576f66870978153976e05b029246ebdf8ae43a70a390c9377296d34dd439530609a42047d8bb8cf6be9a1bb7eff9c4e9d91f5041233
- SSDEEP 6144:Q39tSgm4Z+0iwarEl7hN0pQPXegq1yMX3Uhq0rHg061pXsml7:QNUgm4Z+0dFl7hNWEXegMMq11
- TLSH
  T11BF4A44493E4CBE7F039FF3774279CC40AE3AF05A2B1C94BA96537B40D36E868855686
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

defense_evasion discovery
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12