Analysis
- geolocation tags
- max time kernel
152s - max time network
166s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
30/09/2026, 12:18
General
- Target NotMeter.exe
- Size 147.6MB
- Sample260930-pgtd3axajb
- SHA256 bad75308b79675e4c3b7238fdc2118e6bfecdc14ca2715557e393b3d0673e5cd
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of FindShellTrayWindow 2 IoCs
- Suspicious use of SendNotifyMessage 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NotMeter.exe"C:\Users\Admin\AppData\Local\Temp\NotMeter.exe"1⤵
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
Jalnan.otf
Pretendard-Black.otf
Pretendard-Bold.otf
Pretendard-ExtraBold.otf
Pretendard-Medium.otf
Pretendard-SemiBold.otf
stats-signing-key.bin
D3DCompiler_47_cor3.dll
PresentationNative_cor3.dll
wpfgfx_cor3.dll
memory/2860-67-0x000002CF1B930000-0x000002CF1B980000-memory.dmp
memory/2860-173-0x000002CF07450000-0x000002CF074A0000-memory.dmp
memory/2860-54-0x000002CF1B8A0000-0x000002CF1B8E0000-memory.dmp
memory/2860-71-0x000002CF1B9C0000-0x000002CF1BA00000-memory.dmp
memory/2860-6-0x000002CF13F70000-0x000002CF14C00000-memory.dmp
memory/2860-34-0x000002CF1B590000-0x000002CF1B790000-memory.dmp
memory/2860-79-0x000002CF1BAD0000-0x000002CF1BB50000-memory.dmp
memory/2860-87-0x000002CF1BA00000-0x000002CF1BA20000-memory.dmp
memory/2860-83-0x000002CF1B830000-0x000002CF1B840000-memory.dmp
memory/2860-95-0x000002CF1BB90000-0x000002CF1BBB0000-memory.dmp
memory/2860-99-0x000002CF1BD80000-0x000002CF1BE90000-memory.dmp
memory/2860-107-0x000002CF03DC0000-0x000002CF03DF0000-memory.dmp
memory/2860-103-0x000002CF04890000-0x000002CF05030000-memory.dmp
memory/2860-91-0x000002CF1BB70000-0x000002CF1BB90000-memory.dmp
memory/2860-75-0x000002CF03540000-0x000002CF03D70000-memory.dmp
memory/2860-115-0x000002CF03E30000-0x000002CF03E50000-memory.dmp
memory/2860-111-0x000002CF03E10000-0x000002CF03E20000-memory.dmp
memory/2860-120-0x000002CF06970000-0x000002CF06A30000-memory.dmp
memory/2860-124-0x000002CF06A30000-0x000002CF06A80000-memory.dmp
memory/2860-46-0x000002CF1B790000-0x000002CF1B820000-memory.dmp
memory/2860-135-0x000002CF03F80000-0x000002CF03F90000-memory.dmp
memory/2860-50-0x000002CF1A1B0000-0x000002CF1A1E0000-memory.dmp
memory/2860-189-0x000002CF07640000-0x000002CF076B0000-memory.dmp
memory/2860-185-0x000002CF06AA0000-0x000002CF06AB0000-memory.dmp
memory/2860-196-0x000002CF07830000-0x000002CF07930000-memory.dmp
memory/2860-181-0x000002CF07540000-0x000002CF075A0000-memory.dmp
memory/2860-177-0x000002CF07210000-0x000002CF07230000-memory.dmp
memory/2860-42-0x000002CF13240000-0x000002CF13280000-memory.dmp
memory/2860-169-0x000002CF07050000-0x000002CF07070000-memory.dmp
memory/2860-165-0x000002CF07300000-0x000002CF073D0000-memory.dmp
memory/2860-161-0x000002CF06F00000-0x000002CF06F30000-memory.dmp
memory/2860-38-0x000002CF13200000-0x000002CF13220000-memory.dmp
memory/2860-153-0x000002CF07120000-0x000002CF071D0000-memory.dmp
memory/2860-147-0x000002CF06FB0000-0x000002CF07020000-memory.dmp
memory/2860-143-0x000002CF06B40000-0x000002CF06B80000-memory.dmp
memory/2860-139-0x000002CF06D50000-0x000002CF06F00000-memory.dmp
memory/2860-201-0x000002CF076B0000-0x000002CF076D0000-memory.dmp
memory/2860-205-0x000002CF07A60000-0x000002CF07AF0000-memory.dmp
memory/2860-209-0x000002CF07980000-0x000002CF079A0000-memory.dmp
memory/2860-213-0x000002CF079A0000-0x000002CF079D0000-memory.dmp
memory/2860-217-0x000002CF07B40000-0x000002CF07B60000-memory.dmp
memory/2860-237-0x000002CF08240000-0x000002CF08290000-memory.dmp
memory/2860-233-0x000002CF07C80000-0x000002CF07CC0000-memory.dmp
memory/2860-18-0x000002CF1B230000-0x000002CF1B390000-memory.dmp
memory/2860-22-0x000002CF12BD0000-0x000002CF12BF0000-memory.dmp
memory/2860-26-0x000002CF12BF0000-0x000002CF12C40000-memory.dmp
memory/2860-30-0x000002CF131C0000-0x000002CF131E0000-memory.dmp
memory/2860-11-0x000002CF00000000-0x000002CF00F60000-memory.dmp
memory/2860-265-0x000002CF080E0000-0x000002CF080F0000-memory.dmp
memory/2860-14-0x000002CF19E20000-0x000002CF1A050000-memory.dmp
memory/2860-297-0x000002CF082D0000-0x000002CF082F0000-memory.dmp
memory/2860-303-0x000002CF083D0000-0x000002CF08400000-memory.dmp
memory/2860-307-0x000002CF0D250000-0x000002CF0D2A0000-memory.dmp