Analysis
- max time kernel
150s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
02/11/2026, 00:50
General
- Target ShinraMeter-BPSR-windows-x64.exe
- Size 19.8MB
- Sample261102-a67wesdg94
- SHA256 6eabea6ab6a94806af280be41f7f3e2c523d51ba34fe35c808b1ac0e0d286ea8
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 1 IoCs
- Suspicious behavior: LoadsDriver 1 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ShinraMeter-BPSR-windows-x64.exe"C:\Users\Admin\AppData\Local\Temp\ShinraMeter-BPSR-windows-x64.exe"1⤵
- Loads dropped DLL
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
-
C:\Users\Admin\AppData\Local\ShinraMeter-BPSR\windivert\2.2.2\WinDivert64.sysC:\Users\Admin\AppData\Local\ShinraMeter-BPSR\windivert\2.2.2\WinDivert64.sys1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
WinDivert.dll
WinDivert64.sys
memory/5832-40-0x00007FF6BE630000-0x00007FF6BFA11000-memory.dmp
memory/5832-39-0x0000000062800000-0x0000000062813000-memory.dmp
memory/5832-27-0x000001A07F720000-0x000001A07F721000-memory.dmp
memory/5832-26-0x000001A07F720000-0x000001A07F721000-memory.dmp
memory/5832-25-0x000001A07F720000-0x000001A07F721000-memory.dmp
memory/5832-24-0x000001A07F720000-0x000001A07F721000-memory.dmp
memory/5832-22-0x000001A07F720000-0x000001A07F721000-memory.dmp
memory/5832-44-0x00007FF6BE630000-0x00007FF6BFA11000-memory.dmp
memory/5832-42-0x00007FF6BE630000-0x00007FF6BFA11000-memory.dmp
memory/5832-38-0x00007FF6BE630000-0x00007FF6BFA11000-memory.dmp
memory/5832-23-0x000001A07F720000-0x000001A07F721000-memory.dmp
memory/5832-18-0x000001A07F720000-0x000001A07F721000-memory.dmp
memory/5832-16-0x000001A07F720000-0x000001A07F721000-memory.dmp
memory/5832-46-0x00007FF6BE630000-0x00007FF6BFA11000-memory.dmp
memory/5832-48-0x00007FF6BE630000-0x00007FF6BFA11000-memory.dmp
memory/5832-50-0x00007FF6BE630000-0x00007FF6BFA11000-memory.dmp
memory/5832-52-0x00007FF6BE630000-0x00007FF6BFA11000-memory.dmp
memory/5832-54-0x00007FF6BE630000-0x00007FF6BFA11000-memory.dmp
memory/5832-56-0x00007FF6BE630000-0x00007FF6BFA11000-memory.dmp
memory/5832-58-0x00007FF6BE630000-0x00007FF6BFA11000-memory.dmp
memory/5832-60-0x00007FF6BE630000-0x00007FF6BFA11000-memory.dmp
memory/5832-62-0x00007FF6BE630000-0x00007FF6BFA11000-memory.dmp
memory/5832-64-0x00007FF6BE630000-0x00007FF6BFA11000-memory.dmp