Analysis
- max time kernel
149s - max time network
141s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
02/11/2026, 00:49
General
- Target ShinraMeter-BPSR-windows-x64.exe
- Size 19.9MB
- Sample261102-a6e6eazsbz
- SHA256 da4371ddfea177ac0a186aadd50ac3b9000374587e8bec92dd9a49d27cd2ca6b
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 1 IoCs
- Suspicious behavior: LoadsDriver 1 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ShinraMeter-BPSR-windows-x64.exe"C:\Users\Admin\AppData\Local\Temp\ShinraMeter-BPSR-windows-x64.exe"1⤵
- Loads dropped DLL
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
-
C:\Users\Admin\AppData\Local\ShinraMeter-BPSR\windivert\2.2.2\WinDivert64.sysC:\Users\Admin\AppData\Local\ShinraMeter-BPSR\windivert\2.2.2\WinDivert64.sys1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
WinDivert.dll
WinDivert64.sys
memory/5676-40-0x00007FF7093F0000-0x00007FF70A7E3000-memory.dmp
memory/5676-39-0x0000000062800000-0x0000000062813000-memory.dmp
memory/5676-26-0x000001B6E7060000-0x000001B6E7061000-memory.dmp
memory/5676-30-0x000001B6E7060000-0x000001B6E7061000-memory.dmp
memory/5676-28-0x000001B6E7060000-0x000001B6E7061000-memory.dmp
memory/5676-27-0x000001B6E7060000-0x000001B6E7061000-memory.dmp
memory/5676-25-0x000001B6E7060000-0x000001B6E7061000-memory.dmp
memory/5676-44-0x00007FF7093F0000-0x00007FF70A7E3000-memory.dmp
memory/5676-42-0x00007FF7093F0000-0x00007FF70A7E3000-memory.dmp
memory/5676-38-0x00007FF7093F0000-0x00007FF70A7E3000-memory.dmp
memory/5676-29-0x000001B6E7060000-0x000001B6E7061000-memory.dmp
memory/5676-21-0x000001B6E7060000-0x000001B6E7061000-memory.dmp
memory/5676-19-0x000001B6E7060000-0x000001B6E7061000-memory.dmp
memory/5676-46-0x00007FF7093F0000-0x00007FF70A7E3000-memory.dmp
memory/5676-48-0x00007FF7093F0000-0x00007FF70A7E3000-memory.dmp
memory/5676-50-0x00007FF7093F0000-0x00007FF70A7E3000-memory.dmp
memory/5676-52-0x00007FF7093F0000-0x00007FF70A7E3000-memory.dmp
memory/5676-54-0x00007FF7093F0000-0x00007FF70A7E3000-memory.dmp
memory/5676-56-0x00007FF7093F0000-0x00007FF70A7E3000-memory.dmp
memory/5676-58-0x00007FF7093F0000-0x00007FF70A7E3000-memory.dmp
memory/5676-60-0x00007FF7093F0000-0x00007FF70A7E3000-memory.dmp
memory/5676-62-0x00007FF7093F0000-0x00007FF70A7E3000-memory.dmp
memory/5676-64-0x00007FF7093F0000-0x00007FF70A7E3000-memory.dmp