8d3cbb361ad830c50f9e46fe912cd04b2c9d1ca571124e7ff4c59c30a6865aa5

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
12-10-2024 09:52

Target

gradlew.bat
Size

2KB
MD5

5f5d1ab20ea18615cacf8a6a2d887587
SHA1

f9fd0fb4f067b868f7a11e1c0a8115e1cfcf3002
SHA256

8e327fcb99d29ce0fe3ee2fec6e6a25de815a2df83a6a44a553dea89ffc92955
SHA512

ae8896b5cdb70b2362e9e641a56a44060f6c896ffa972a4974e0eb256a716e11793ce666a95979c6b72d2db60c5caa51507d2bb373a4dafc89296b4d954b8cb6

Score

1^/10

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2352 wrote to memory of 2368	2352	cmd.exe	31
PID 2352 wrote to memory of 2368	2352	cmd.exe	31
PID 2352 wrote to memory of 2368	2352	cmd.exe	31
PID 2352 wrote to memory of 2504	2352	cmd.exe	32
PID 2352 wrote to memory of 2504	2352	cmd.exe	32
PID 2352 wrote to memory of 2504	2352	cmd.exe	32

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\gradlew.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:2352
- C:\Windows\system32\java.exe
  java.exe -version
  2⤵
  PID:2368
- C:\Windows\system32\java.exe
  "java.exe" "-Xmx64m" "-Xms64m" "-Dorg.gradle.appname=gradlew" -classpath "C:\Users\Admin\AppData\Local\Temp\\gradle\wrapper\gradle-wrapper.jar" org.gradle.wrapper.GradleWrapperMain
  2⤵
  PID:2504

memory/2368-2-0x00000000023A0000-0x0000000002610000-memory.dmp

Filesize
2.4MB

Download
memory/2368-11-0x0000000002050000-0x0000000002051000-memory.dmp

Filesize
4KB

Download
memory/2368-12-0x00000000023A0000-0x0000000002610000-memory.dmp

Filesize
2.4MB

Download
memory/2504-15-0x0000000002660000-0x00000000028D0000-memory.dmp

Filesize
2.4MB

Download
memory/2504-26-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/2504-27-0x0000000002660000-0x00000000028D0000-memory.dmp

Filesize
2.4MB

Download