Analysis
- user interaction
yes - max time kernel
93s - max time network
86s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/10/2026, 17:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NotMeter.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NotMeter.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target NotMeter.exe
- Size 126.9MB
- Sample261024-v264jsv1fx
- SHA256 14018e06e10eb0ffe0966ce7aca1682b8f4acdd3adfbc9e4858a33d1230faed9
- MD5 667d77c5f450c7cf2224435fef222809
- SHA1 2a2196a812b7d9fc1d7efa8c97007bbe2e7fa503
- SHA512 3614befd72a9917427fe36857b2325fde811198335744de1af5fd5deafad92ca75f87acf6c9b04549e701cd358f3aa54f9e32544e6ba60159791afcc71e15864
- SSDEEP 3145728:+nH5mJyYIiaecacdDoDjlcwUcq/P3/CyJF6LCdYFS1u4:+H5mJyZiEDIlcdPNF4uYFSI4
- TLSH T1E5583356E2FD00E8D5BBC0B8C6575517EBB1385913349BEB62A48A652F33BE06E3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
pid Process 5832 NotMeter.exe 5832 NotMeter.exe 5832 NotMeter.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 5832 NotMeter.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Not4You-Meter\cache\fonts\b8f66515aae84677be091078a7c2458d\pretendard\Pretendard-Black.otf
- Size 1.5MB
- SHA256 94628b0bcea8936b6e5c30d98d685eb9bbaffb0fe2ed255542ecc656c248e021
- MD5 de507f665f6ea63a94678e529b2a4ff0
- SHA1 b9162985d25a21b393185c6139d283fba46fd739
- SHA512 624dbf28e8b115ffdb2080600266ec22c174e72d1aa57e7d0272b5aa6d0bdc0dd4ffa4375c27453c6b4bdff8a0d8da85007ca845948b6dac0202da764d6f3cd4
- SSDEEP 24576:YJRhMk8g/l+qyL95Sh0n8Q614t1jjuZvASrYw/UCahPJW3BpUCY:QRG7d20161PZvASrvMCaC3I3
- TLSH T18875D030929E9540DCEA52320123D26813D5938887EF7125BB2C2F98C5D5F7E99ACFBD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Not4You-Meter\cache\fonts\b8f66515aae84677be091078a7c2458d\pretendard\Pretendard-Bold.otf
- Size 1.5MB
- SHA256 2e91915fab54df71cc9598ebf608b2bdb54c6fe3c066ac61dff0bc44fca71cc7
- MD5 f8a9b84216af5155ffe0e8661203f36f
- SHA1 bd4ac82cc26cf93c89cfbfbbba8825c5198b5b99
- SHA512 82d994f44d0cf7b115e7a4225c8a35c2fedad30c0af62927d3426844955a694789931c86c9940e7834994dd09cce4efa5e80c606b22178c3d1ebe28e022bcad9
- SSDEEP 49152:IXUQPDqtk1fXJsIumimcgYkcr+HlK0HMoZe9PL:2UQPDq21PJslhgbcr+HlK0HtZUPL
- TLSH T1CE75D079924E4140DD9D49322022D25823C593D483FF7792BE1E2E6D9AD4F3921E8BFE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Not4You-Meter\cache\fonts\b8f66515aae84677be091078a7c2458d\pretendard\Pretendard-ExtraBold.otf
- Size 1.5MB
- SHA256 c35fe941b7568d52a96010561540e47f9d3948dfde66ba25bc1908233e0a40cd
- MD5 67e8e4773c05f2988c52dfe6ea337f33
- SHA1 ea07e7375c62c8386f77431f0f62a2cbdea34618
- SHA512 c1694cdcb3fc9f6e47987b78b6cc0a2157c17ee47ef0debf7edfea1873623be4ee4f20737051a66aedc7ff90363fa984081662849d10124849d31c204682c42c
- SSDEEP 24576:wd4dgTV5kuKmDQmiE7xeEes5gfW6BSi/9EKpp07DYicr0nPDPYEoEXX8MG:Kpjqs5wWASi/9EfDprPY9YX8MG
- TLSH T17775E031935E4190E8EE11325443E26C23D193D447EEB2A2BE299F4587D8F3949E8BFD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Not4You-Meter\cache\fonts\b8f66515aae84677be091078a7c2458d\pretendard\Pretendard-Medium.otf
- Size 1.6MB
- SHA256 675f1de626324c36f87da71406d57aeb19921f038f71838045bd56457f71fd6b
- MD5 9ac30a1a68a5140a58b23aaf8025f1db
- SHA1 b05adb9ac89775d7f22733216ff7fa9fe0364853
- SHA512 6421657ca6bfd975f058c6acdebda89d0d1c415ac60becbc1317be40cac4ffcee05a7b4dbcee1a61efb97f6a2551431788a9e72af743c8d98dcda9b407d85636
- SSDEEP 49152:1J3X37evDb3BFIra6UFZ85Nr1V6cED9rbnRSjWRA1Y:TX37evDb3BFIr+FZ85Nr1V6cED9rrNRD
- TLSH T12575CF35536A9195EC8F1E7131B3F14972D5E3C457EF35A0B0282E029898FEE12B9BD2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Not4You-Meter\cache\fonts\b8f66515aae84677be091078a7c2458d\pretendard\Pretendard-SemiBold.otf
- Size 1.6MB
- SHA256 eac28ccfd1f74e7a2c01b0ed1a654b4bae50de97b394679d2ad19dcfc3449f01
- MD5 d9d912f2630bae445757f4769271c35c
- SHA1 9bab4642eae558c9c7f308c8d1be33f9f412a2d4
- SHA512 c8b28ab79c71bc4ac7eb31a4780de95696db5f0dc7f0da45e157b732a204fdb673bca41045856477414fc4b3b7dcbcafe65de3f9b427ce515a99918ff1512181
- SSDEEP 49152:EVMVZUdQucR6z0dWd1pMVwf0nkCeJfQUZusRT/0YV:E4ZUdQuc6z0dMge8nzeJf5TRLNV
- TLSH T17275DF7852AE8288ECDA2D313232E25836D5E3D847DF7290F1242D256884FF951F5BE7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Not4You-Meter\settings.json
- Size 29KB
- SHA256 ed3deac60302db667cac9ec5297007d8ab7479c5e34ca6f251cf0715bd4e05b5
- MD5 08301bce6d88241c93e8906b6d265a01
- SHA1 57dc6a12ae57c7ca4230e3e45ad37aba37af75df
- SHA512 987f191730d1315f52d8c4c2ae791949060f6713a765f235ad3e1ccb0702a6f366d0a044e8b5679adf24a2d30b95eab3060b9bd79a497ad3ebfeb6fee9cbddec
- SSDEEP 384:yiM0bPIzApEsEVGczlHakMWAhGNNaZVOAc9qZwLtiQZhhFv3:yiM0bZa5/5HakMWA9VOAc9qejv3
- TLSH T151D27725CC145EFD2AFD903C94689603FE952B6724460D2BBBFE150C3FB69363501EAA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\NotMeter\vrN5oq1cxFcu\D3DCompiler_47_cor3.dll
- Size 4.5MB
- SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
- MD5 19e527a35241c171d37dc1e6c530053c
- SHA1 b1567bada7a27ab78e65da440f21809f50b9d34c
- SHA512 23d38b55f5b17bf0228b16a85787d384da0a700190fc289281190272a0d2dd374be0f7f64d8b642836ccbe2351b72e9ef5c7e2b12d0a7495317e986fd5e3c886
- SSDEEP 49152:c6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/V:cUdeqt737jFm5wd
- TLSH T143268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\NotMeter\vrN5oq1cxFcu\PresentationNative_cor3.dll
- Size 1.2MB
- SHA256 3fb36edaa2c4fe4ac8be075a3a4e903da159bbe38fb77e51c32b58e2adecb2d6
- MD5 b43c09fd1eab8feb0d9d87e6eeb8fa95
- SHA1 d8935765faf6e12d1d7f7e8b0f54f8e0f077a43c
- SHA512 1432fefe98029f475c0a53e0c551dd917713da346e9b7d5ee5ee5314fb43072cfb24f95b4e2ceef2f67d7f01084d398428b075bf09812a9f90f510f0a40bdfc8
- SSDEEP 24576:mhNpKcF6kPHmTw+MLYpX7T3hjnHFOcJqCPoG5MupGJvaCbztQcfRYQXLFGvHLPa7:mxKcdPHmMLYpX7T35/fPoGPpGFjztQcT
- TLSH T1F0453A22E2E642E5C47FC1B8C646972BFBB07449131C66CB87608B552F67FE0963E364
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\NotMeter\vrN5oq1cxFcu\wpfgfx_cor3.dll
- Size 1.9MB
- SHA256 5a3e8766965f76a7cc0a3ba15db615ea009d4414b4cf4290c1cb59b211b8f68d
- MD5 a3de08b2853c72b4923558e1794f5272
- SHA1 358225bd1a2884e79e1688af4df3b53b65cb3d06
- SHA512 fd67ec2068a4cbe8e05ceac4e94a90649d2e0dd09171cd0a3ebd651a8aefe008bb1ab819fb489f5a3278b2ff083f5973b2ec91fd41639891ba57061c4bfa0ddd
- SSDEEP 49152:zJBarecoR28GPaM6YqVim/oBiEyBhocmue:LnlkRwiIoBi1BOh
- TLSH T1D5955A46B6AC40E9C07AD33CDAD7961BF27174152761A3CF23A0479E6F27BD00A7A361
- MD5 SHA1 SHA512 SSDEEP TLSH