General

  • Target
    SpyNote 6.4.7z
  • Size 19.3MB
  • Sample261021-hrqmlazte1
  • SHA256 3c4de323a791ec49930fe03a4fcb4fba86f5000625b9fc9c024160f59285426f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • spynote

C2
  • [SPY_NOTE_HOST_OK]:[SPY_NOTE_PORT_OK]

Targets

    • Target
      SpyNote 6.4/CoreAudioApi.dll
    • Size 24KB
    • SHA256 df6115987161ee1238f9564bd10c998d9016f582e5b7b9d23d21a74d6955bdd3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      SpyNote 6.4/Resources/Imports/Gsm/GSM.dll
    • Size 5KB
    • SHA256 61b0ca29ce7a62932699f33c272fd6d3731a1430ac3455b7a240b01ae461370f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      SpyNote 6.4/Resources/Imports/Payload/SL.exe
    • Size 1.5MB
    • SHA256 0080743a4364b8e5d8ec6a19010ee12dc79fcf815f592db639af262420ada0f8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      SpyNote 6.4/Resources/Imports/Payload/stub.apk
    • Size 730KB
    • SHA256 7b20a276931c8625b39ebc46017c7e4d4a7bdf319b9f451231d777b078b0cd6a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      SpyNote 6.4/Resources/Imports/PlayerJava/PlayerJava.jar
    • Size 3KB
    • SHA256 e22d8a06415f21b900a9a079a6a7928d6c84d2cf33aa07c6ad385dfbbfcd55ed
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      SpyNote 6.4/Resources/Imports/T/sS.exe
    • Size 20KB
    • SHA256 e3865e0d3f776a6827f4ddb640cc66c56ede8826a1f29383e3578b85caf248ef
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      SpyNote 6.4/Resources/Imports/platform-tools/plwin.exe
    • Size 25KB
    • SHA256 268fa687554273029bf87668367b4084d4928de6b2a4cf4fbcd52e944d0efe16
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      SpyNote 6.4/SpyNote Cracked.exe
    • Size 6.1MB
    • SHA256 b3ca2f2cc15a16fc390172a9507337dc1f73d3501b46e2c761238171456654ae
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks