Analysis

  • user interaction
    yes
  • max time kernel
    93s
  • max time network
    86s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    24/10/2026, 17:30

General

  • Target
    NotMeter.exe
  • Size 126.9MB
  • Sample261024-v264jsv1fx
  • SHA256 14018e06e10eb0ffe0966ce7aca1682b8f4acdd3adfbc9e4858a33d1230faed9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NotMeter.exe
    "C:\Users\Admin\AppData\Local\Temp\NotMeter.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    PID:5832

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Pretendard-Black.otf

        • Path C:\Users\Admin\AppData\Local\Not4You-Meter\cache\fonts\b8f66515aae84677be091078a7c2458d\pretendard\Pretendard-Black.otf
        • Size 1.5MB
        • SHA256 94628b0bcea8936b6e5c30d98d685eb9bbaffb0fe2ed255542ecc656c248e021
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Pretendard-Bold.otf

        • Path C:\Users\Admin\AppData\Local\Not4You-Meter\cache\fonts\b8f66515aae84677be091078a7c2458d\pretendard\Pretendard-Bold.otf
        • Size 1.5MB
        • SHA256 2e91915fab54df71cc9598ebf608b2bdb54c6fe3c066ac61dff0bc44fca71cc7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Pretendard-ExtraBold.otf

        • Path C:\Users\Admin\AppData\Local\Not4You-Meter\cache\fonts\b8f66515aae84677be091078a7c2458d\pretendard\Pretendard-ExtraBold.otf
        • Size 1.5MB
        • SHA256 c35fe941b7568d52a96010561540e47f9d3948dfde66ba25bc1908233e0a40cd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Pretendard-Medium.otf

        • Path C:\Users\Admin\AppData\Local\Not4You-Meter\cache\fonts\b8f66515aae84677be091078a7c2458d\pretendard\Pretendard-Medium.otf
        • Size 1.6MB
        • SHA256 675f1de626324c36f87da71406d57aeb19921f038f71838045bd56457f71fd6b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Pretendard-SemiBold.otf

        • Path C:\Users\Admin\AppData\Local\Not4You-Meter\cache\fonts\b8f66515aae84677be091078a7c2458d\pretendard\Pretendard-SemiBold.otf
        • Size 1.6MB
        • SHA256 eac28ccfd1f74e7a2c01b0ed1a654b4bae50de97b394679d2ad19dcfc3449f01
        • MD5 SHA1 SHA512 SSDEEP TLSH

        settings.json

        • Path C:\Users\Admin\AppData\Local\Not4You-Meter\settings.json
        • Size 29KB
        • SHA256 ed3deac60302db667cac9ec5297007d8ab7479c5e34ca6f251cf0715bd4e05b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        D3DCompiler_47_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\NotMeter\vrN5oq1cxFcu\D3DCompiler_47_cor3.dll
        • Size 4.5MB
        • SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PresentationNative_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\NotMeter\vrN5oq1cxFcu\PresentationNative_cor3.dll
        • Size 1.2MB
        • SHA256 3fb36edaa2c4fe4ac8be075a3a4e903da159bbe38fb77e51c32b58e2adecb2d6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wpfgfx_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\NotMeter\vrN5oq1cxFcu\wpfgfx_cor3.dll
        • Size 1.9MB
        • SHA256 5a3e8766965f76a7cc0a3ba15db615ea009d4414b4cf4290c1cb59b211b8f68d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/5832-108-0x000002B98DAB0000-0x000002B98DAE0000-memory.dmp

        memory/5832-120-0x000002B98FF10000-0x000002B98FF20000-memory.dmp

        memory/5832-15-0x000002B9823D0000-0x000002B982600000-memory.dmp

        memory/5832-55-0x000002B984E80000-0x000002B984EC0000-memory.dmp

        memory/5832-27-0x000002B980620000-0x000002B980670000-memory.dmp

        memory/5832-72-0x000002B984FD0000-0x000002B985010000-memory.dmp

        memory/5832-68-0x000002B984F40000-0x000002B984F90000-memory.dmp

        memory/5832-92-0x000002B985870000-0x000002B985890000-memory.dmp

        memory/5832-96-0x000002B98D9F0000-0x000002B98DA10000-memory.dmp

        memory/5832-88-0x000002B984ED0000-0x000002B984EF0000-memory.dmp

        memory/5832-100-0x000002B98DBF0000-0x000002B98DD00000-memory.dmp

        memory/5832-84-0x000002B984EC0000-0x000002B984ED0000-memory.dmp

        memory/5832-80-0x000002B98D950000-0x000002B98D9D0000-memory.dmp

        memory/5832-76-0x000002B985010000-0x000002B985840000-memory.dmp

        memory/5832-104-0x000002B98E820000-0x000002B98EFC0000-memory.dmp

        memory/5832-7-0x000002B981310000-0x000002B981FA0000-memory.dmp

        memory/5832-112-0x000002B98FDC0000-0x000002B98FE10000-memory.dmp

        memory/5832-116-0x000002B990080000-0x000002B990180000-memory.dmp

        memory/5832-124-0x000002B98FF40000-0x000002B98FF60000-memory.dmp

        memory/5832-23-0x000002B980570000-0x000002B980590000-memory.dmp

        memory/5832-129-0x000002B990A20000-0x000002B990A50000-memory.dmp

        memory/5832-133-0x000002B990B70000-0x000002B990C30000-memory.dmp

        memory/5832-31-0x000002B980590000-0x000002B9805B0000-memory.dmp

        memory/5832-19-0x000002B984740000-0x000002B9848A0000-memory.dmp

        memory/5832-35-0x000002B984AA0000-0x000002B984CA0000-memory.dmp

        memory/5832-146-0x000002B990C30000-0x000002B990C50000-memory.dmp

        memory/5832-150-0x000002B98FF60000-0x000002B98FF70000-memory.dmp

        memory/5832-154-0x000002B990D20000-0x000002B990D70000-memory.dmp

        memory/5832-173-0x000002B990D80000-0x000002B990DA0000-memory.dmp

        memory/5832-177-0x000002B990E70000-0x000002B990EE0000-memory.dmp

        memory/5832-181-0x000002B98DA30000-0x000002B98DA40000-memory.dmp

        memory/5832-185-0x000002B990DF0000-0x000002B990E00000-memory.dmp

        memory/5832-189-0x000002B990F80000-0x000002B990FC0000-memory.dmp

        memory/5832-197-0x000002B990A50000-0x000002B990A60000-memory.dmp

        memory/5832-193-0x000002B991060000-0x000002B9910C0000-memory.dmp

        memory/5832-39-0x000002B982780000-0x000002B9827A0000-memory.dmp

        memory/5832-47-0x000002B984D70000-0x000002B984E00000-memory.dmp

        memory/5832-51-0x000002B9827C0000-0x000002B9827F0000-memory.dmp

        memory/5832-43-0x000002B982830000-0x000002B982870000-memory.dmp

        memory/5832-11-0x000002B9837E0000-0x000002B984740000-memory.dmp