General

  • Target
    SpyNote_v6.4.rar
  • Size 22.0MB
  • Sample260914-nmvzeaxta1
  • SHA256 71ce71735aa47a3b1d17e1b6639aaf6213b4c284243ad5ae7bb36fa1c5c9975f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • spynote

C2
  • [SPY_NOTE_HOST_OK]:[SPY_NOTE_PORT_OK]

Targets

    • Target
      SpyNote_v6.4.rar
    • Size 22.0MB
    • SHA256 71ce71735aa47a3b1d17e1b6639aaf6213b4c284243ad5ae7bb36fa1c5c9975f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Audio/c.wav
    • Size 375KB
    • SHA256 d987b1f46ec60ec58bc3ebf2d70ce42de12fea78bcc37ffd970c309e42f1271b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Audio/v.wav
    • Size 440KB
    • SHA256 b6c3c2795b5aac2ef9da3c764de04274ef6b921995ef863407cd6a109f8c6c94
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/AccountManager/account.png
    • Size 329B
    • SHA256 2d522164e403478e178483dfd9d1f31ba2e8e8e9056f967aa626308e39aa6bd0
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/AccountManager/com.android.email.png
    • Size 438B
    • SHA256 6e68465a4c4e86f84517a3b230510e4d5d2f163744cd592c55da8a89b0c866f5
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/AccountManager/com.bbm.account.png
    • Size 433B
    • SHA256 35bbb89ec6aceeaf456c11e00ffcc8b9b08a642f22ba136b2e16ae49a2ca4767
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/AccountManager/com.bbm.contacts.png
    • Size 433B
    • SHA256 35bbb89ec6aceeaf456c11e00ffcc8b9b08a642f22ba136b2e16ae49a2ca4767
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/AccountManager/com.dropbox.android.account.png
    • Size 505B
    • SHA256 a013f12f38f6be308711e29790a7fb0c6cb7c059d3574ddd775aa0b4e2db8607
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/AccountManager/com.facebook.messenger.png
    • Size 463B
    • SHA256 38d2cdff888a68fa4928ada746db2588e76127447aca16bead6e03d940d9d266
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/AccountManager/com.google.png
    • Size 731B
    • SHA256 9c93e054668c0f1702dde013f1c662a67a2927dcf159dd430ac900ce8ed18bcd
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/AccountManager/com.sec.android.app.sns3.twitter.png
    • Size 391B
    • SHA256 b22a3b32746acf7e778308f4a894c95151bd4c8d728cbb4180bbc025c543663d
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/AccountManager/com.twitter.android.auth.login.png
    • Size 391B
    • SHA256 b22a3b32746acf7e778308f4a894c95151bd4c8d728cbb4180bbc025c543663d
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/AccountManager/com.whatsapp.png
    • Size 895B
    • SHA256 d0e60e17eb46f9cff30ab4ef170ba90b4b9b77b4eeb48ba476611347d6421f25
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/AccountManager/org.telegram.messenger.png
    • Size 377B
    • SHA256 6913959595d510db620cfead0d1240c6415082dc5c5405a573c8410033d6d2ef
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/AccountManager/org.telegram.plus.png
    • Size 377B
    • SHA256 6913959595d510db620cfead0d1240c6415082dc5c5405a573c8410033d6d2ef
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/AppProperties/Activities.png
    • Size 336B
    • SHA256 7849aeae0621d68f0120a4ee284f43a063e68830ae27d6b16152a424b4f05cb6
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/AppProperties/Permissions.png
    • Size 485B
    • SHA256 45d5048018c3ae7accfdc8730dfe854d0f759b01be10cc875bd293ba494b6eba
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/AppProperties/Receivers.png
    • Size 863B
    • SHA256 e3518c96be9323ae6e153849fb84645a2b7ffceeb8362208c31facfc91921bbd
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/Bar/bluetooth.png
    • Size 3KB
    • SHA256 5aa93986d9dfa421e660e243eab231108a4e85a95579eba44407b1312bdcb365
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/Bar/gps.png
    • Size 3KB
    • SHA256 7142f424130ca442541021619c5f3f8607158f44535f0972077d79d4ca2845c9
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/Bar/mobile_data.png
    • Size 2KB
    • SHA256 a4303e9a4430c7134f2a5a62f33796a6ab3bd54bdff7d1d5bb31bb7d02b74120
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/Bar/normal.png
    • Size 3KB
    • SHA256 d07503cec95c4b2e7bc440083de1236eac1dc8776578c8f02cfdb4cb409d583c
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/Bar/silent.png
    • Size 3KB
    • SHA256 ae4214f11b87ed94e97e0e1a8b76d53f99bb49b17d11f0a39050e96abdab35e8
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/Bar/vibrate.png
    • Size 2KB
    • SHA256 0e4c4f61e7227d1d0762705bcc5633ca35a1848d6ceff75a00b5ccb1f494a1c2
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/Bar/wifi_connected.png
    • Size 3KB
    • SHA256 9f2f412a4ec92fd520c8ebfd0b2801144f4872fb229d6b965ec32efc8a06b63c
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/Bar/wifi_disconnected.png
    • Size 3KB
    • SHA256 5331c380b7933d587a065acf52836a901969950a69dcd55c745ce8db0f22b0f5
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/Bar/wifi_rest.png
    • Size 789B
    • SHA256 52c62db222b9bffdddaaf3e0ad71df5a83d8e3fea890b86a10da5044904bcf1d
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/Battery/b0false.png
    • Size 2KB
    • SHA256 3e5654d6e576057ff2bdf1cb42d9abda0bf6238bb040ff6874dadf3686bfb379
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/Battery/b0true.png
    • Size 2KB
    • SHA256 68df3e7785826fb1c7bceeff6c9cba810df411aa6c05eac2a56cd9a8c83ba5e2
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/Battery/b100false.png
    • Size 2KB
    • SHA256 9691da6d394d51e879ea5db12042e8da1ba078335691c7ddf504813737a214ec
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/Battery/b100true.png
    • Size 2KB
    • SHA256 5e202b4f4c883bfd931b3d2eb0db19b85b4e37a9034fca3932db706cac594f8e
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote_v6.4/Resources/Icons/Battery/b10false.png
    • Size 2KB
    • SHA256 1c0c90b10662364554b5c95bf4be10b514aef99aa302096a0ab7f54be1fe0a5a
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10

MITRE ATT&CK Matrix

Tasks

static1

bankertrojaninfostealerratspynote
Score
10/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10