Overview
overview
10Static
static
10SpyNote 6....pi.dll
windows10-2004-x64
1SpyNote 6....pi.dll
windows11-ltsc_2024-x64
1SpyNote 6....SM.dll
windows10-2004-x64
1SpyNote 6....SM.dll
windows11-ltsc_2024-x64
1SpyNote 6....SL.exe
windows10-2004-x64
1SpyNote 6....SL.exe
windows11-ltsc_2024-x64
1SpyNote 6....ub.apk
android-9-x86
SpyNote 6....ub.apk
android-10-x64
SpyNote 6....ub.apk
android-11-x64
SpyNote 6....va.jar
windows10-2004-x64
1SpyNote 6....va.jar
windows11-ltsc_2024-x64
1SpyNote 6....sS.exe
windows10-2004-x64
1SpyNote 6....sS.exe
windows11-ltsc_2024-x64
1SpyNote 6....in.exe
windows10-2004-x64
1SpyNote 6....in.exe
windows11-ltsc_2024-x64
1SpyNote 6....ed.exe
windows10-2004-x64
3SpyNote 6....ed.exe
windows11-ltsc_2024-x64
3General
- Target SpyNote 6.4.7z
- Size 19.3MB
- Sample261021-hrqmlazte1
- SHA256 3c4de323a791ec49930fe03a4fcb4fba86f5000625b9fc9c024160f59285426f
- MD5 4702f1ff2350577cc585830413882d49
- SHA1 af05c4ed134c41f866a81e90f2906c51f3fe6aa1
- SHA512 994e75c87dfda934755153070946100db40f79231864bd1a06617e83ad1b1babb313b050ddc4459dad3f37be8511aa8003c085ce012177651d860682b44f059b
- SSDEEP 393216:PM5gJ74UoKKxhjYm6r3lo53COTjlBSr7YzZSG/sTUxvqavrXcAtJvD3525hB0t9i:U5e74UoKK+3lEzBS4hOUxiArrtit0t8
- TLSH T1071733B86F7D276A0A041A2BDAB695220E777878C73891EF0D8013A351F5E764FF04B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
SpyNote 6.4/CoreAudioApi.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
SpyNote 6.4/CoreAudioApi.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
SpyNote 6.4/Resources/Imports/Gsm/GSM.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
SpyNote 6.4/Resources/Imports/Gsm/GSM.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
SpyNote 6.4/Resources/Imports/Payload/SL.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
SpyNote 6.4/Resources/Imports/Payload/SL.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
SpyNote 6.4/Resources/Imports/Payload/stub.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral8
Sample
SpyNote 6.4/Resources/Imports/Payload/stub.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral9
Sample
SpyNote 6.4/Resources/Imports/Payload/stub.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral10
Sample
SpyNote 6.4/Resources/Imports/PlayerJava/PlayerJava.jar
Resource
win10v2004-20260911-en
Behavioral task
behavioral11
Sample
SpyNote 6.4/Resources/Imports/PlayerJava/PlayerJava.jar
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral12
Sample
SpyNote 6.4/Resources/Imports/T/sS.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral13
Sample
SpyNote 6.4/Resources/Imports/T/sS.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral14
Sample
SpyNote 6.4/Resources/Imports/platform-tools/plwin.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral15
Sample
SpyNote 6.4/Resources/Imports/platform-tools/plwin.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral16
Sample
SpyNote 6.4/SpyNote Cracked.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral17
Sample
SpyNote 6.4/SpyNote Cracked.exe
Resource
win11ltsc2024-20260911-en
Malware Config
Extracted
-
spynote
-
[SPY_NOTE_HOST_OK]:[SPY_NOTE_PORT_OK]
Targets
-
- Target SpyNote 6.4/CoreAudioApi.dll
- Size 24KB
- SHA256 df6115987161ee1238f9564bd10c998d9016f582e5b7b9d23d21a74d6955bdd3
- MD5 6a009b7c4b252788d80d4e40adcf51ce
- SHA1 9302cd4f00fa70b768feec2a49505052cd4bd13e
- SHA512 7a27bc38249b293fbfb9389cac3365bf64e9536281c347939192e6b151b4e574bd9743df81721dc4e6beca0ab0a5784436b7f7bff780fdddef4c7c26b02cc354
- SSDEEP 384:JGuIVn86+5zUH4RmcBoZhn9ipvNeFSAucqmPBJGbsw3uiIx5L5gV:CVn86YzgoW0VNeFS0Tbw3up5tgV
- TLSH T1E3B22B52E3B0866ADBCED3FD78EB1711277192417B23D3991BAC605ABB733620715223
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target SpyNote 6.4/Resources/Imports/Gsm/GSM.dll
- Size 5KB
- SHA256 61b0ca29ce7a62932699f33c272fd6d3731a1430ac3455b7a240b01ae461370f
- MD5 c4ceacedf5310a761b828bed9f7dbc62
- SHA1 f2c4c23d1c04df3899bc0a1e1812eca8f421fbb1
- SHA512 58c42d60a28c6e344060242e77cc841ba1a892cb8b9d5dae02c8f9b2e4c1deeebb599e6a1c401a3c585eb44c28d9c72b2ee56be273169af1d52850e426a1da32
- SSDEEP 96:Vuyz+/KPV+gzlmtrLPfdHOzHFu90rdjF:5z+m9ELPfdHH90H
- TLSH T1D5C1520673AC033BD86A4772FD63D2F05271EB786B524B7E1AC4830BAC5359009B2B76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target SpyNote 6.4/Resources/Imports/Payload/SL.exe
- Size 1.5MB
- SHA256 0080743a4364b8e5d8ec6a19010ee12dc79fcf815f592db639af262420ada0f8
- MD5 2eabc8a774c544e9b6e23ba1b83ed783
- SHA1 a880005b4f619e004f4d9adcce2a9612112c26b2
- SHA512 ed8cd1ec97e0954715c81c284bbc2751340a7933511862cda65e72be35fdd9d4a8693066f3023025f92b06c845173c2e5da6f4d88a3e97c62c640643dff475a9
- SSDEEP 768:1KSAOfhZXvSzjWKDIp93ZZwpZpTQdBHiF7QHsIMd3uDzZuFs+mk:nrfhZXvSzjWb5wz16S7l9eDzZu7
- TLSH T1A2756FC432948216F5BE27F885A0B12F0FBCBD57D50ED35E5A8CB8B92972770BA03546
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target SpyNote 6.4/Resources/Imports/Payload/stub.apk
- Size 730KB
- SHA256 7b20a276931c8625b39ebc46017c7e4d4a7bdf319b9f451231d777b078b0cd6a
- MD5 0c0290abde03555f3c66c81eba860a3d
- SHA1 939a8e6d0ed4bd8c9f491405ecf069df7bddb7cc
- SHA512 441922d41856ec246d1cb29e3b290b62b2d3bc4ca54f896af1df72263e67a320f1b3b85f4d5bd129fa32b4633a1b9f74a63783791f1ea1cb1ca97a8a26b8ea48
- SSDEEP 12288:CJc+EIBvAvcKIth8eGz3zaR9QHqd8gmw+/goe13VvqX:CJc+EIO0K4KeGTzaR+imz/goeHvqX
- TLSH T198F4AE86E789B433CAB7C03647B6CBAB51964C584B46D7131995B23C4DBBBC08E85FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target SpyNote 6.4/Resources/Imports/PlayerJava/PlayerJava.jar
- Size 3KB
- SHA256 e22d8a06415f21b900a9a079a6a7928d6c84d2cf33aa07c6ad385dfbbfcd55ed
- MD5 d9c23d7574c0d886321dcd029e463f2c
- SHA1 7fad47eb6860a01325c6d526a43d9bbadb66aff7
- SHA512 c32c019fb0bacbd70441cf3ed769bfde9597389f840ff8511db36586756382ef22bd163a7b7cb9e258a4b7a896e5d1a606d92513a141cb2e3c6e421a66ecb316
- TLSH T113712E2BF82411EFE104D17DB2314BF3212EE031ABE9C111ED9D6E062E8B8D9AE45741
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target SpyNote 6.4/Resources/Imports/T/sS.exe
- Size 20KB
- SHA256 e3865e0d3f776a6827f4ddb640cc66c56ede8826a1f29383e3578b85caf248ef
- MD5 fcc080409bf077b1c85f159218e62dbf
- SHA1 616e64d4ca2286d4f4b11df583fa2b9ba81c6e78
- SHA512 14d7ceac1730faadfe10ff573ed825f8e449c7ae879892d09d832b67d68a128c07ef94c675a5221edde82e7b73fd1b852ddbda7894e554cce98fa1625fb00eb6
- SSDEEP 384:3AOcHfvbeLb7i4yimcx5GLD9WLEO2a0R7RknlcDqfJ:3AO+fDen7i4fmFrRFknGDy
- TLSH T1F0923B2A23F4D732C87D57BB8852920107F2D725D163FB5EAECD785A1D973504382B92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target SpyNote 6.4/Resources/Imports/platform-tools/plwin.exe
- Size 25KB
- SHA256 268fa687554273029bf87668367b4084d4928de6b2a4cf4fbcd52e944d0efe16
- MD5 9aadaec3eccf406b2591e32c438a67a4
- SHA1 fb971b1687400fcedf5ac4a36f45ead3b54d14e3
- SHA512 cba31ace6459a83dca18a486fc7a06da50419442d92e25e2661fdc101542b49ae3778fe197b6409396b7093747c67316917760de8576d351cd37e51e3dda9d3d
- SSDEEP 768:Q3ULAwpnEUaSCMc/o6/d5cfsEAIHtYcFmVc6K:eULAwcSCMcdWfsQfmVcl
- TLSH T114C25D1123D48236C47D1BF91976A1104371E99FC91BEADE79CCD49E2F737008BA27A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target SpyNote 6.4/SpyNote Cracked.exe
- Size 6.1MB
- SHA256 b3ca2f2cc15a16fc390172a9507337dc1f73d3501b46e2c761238171456654ae
- MD5 b4bb4a074169545d22ad0278e66ec96b
- SHA1 c386177d35f0959fa55606df1bb6995b46030c61
- SHA512 c0374732df1bdc15fac5229019d2962485d9a221b970690c1d2e6eb0af6401b0c98fc5d9e1584b7896e28c122afb1faa196ae5ba441f234a522c2746c5931998
- SSDEEP 98304:Op2AEpDZEXXZlZYZlbHn7CFK5PnOSPz3ZhqARLlJQHagle:OQvdZEXpGbH7CU9OiphhxlJJg
- TLSH T11D56BD667DC3B9ABC6EF11B2F19BC9F13192CCD226B4430681509FA72E9111B1B2DB47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10