3a703fe4bc4e4c19f7569b7ba00f1d4dc75bdffc605528e588e54fd789a51301

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
05-01-2025 16:06

Target

Wave-Executor-master/gradlew.bat
Size

2KB
MD5

b19dcfdb742582b6ccb4e0f4c77791b1
SHA1

aad30867c46885fcfc019c318138b0f62fa53172
SHA256

2f18fc6abd50803de7b3a225038d284268904c9d13caa6cf81f99365dc876479
SHA512

9336d2e0d52322fad871f89130903c8f0a14fa6be6579f653c7959d83d0fde7a99106e7878aa3168713c0ce1a0904f72527ddca99543016dbe54d7fe109fd9eb

Score

1^/10

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2484 wrote to memory of 2452	2484	cmd.exe	31
PID 2484 wrote to memory of 2452	2484	cmd.exe	31
PID 2484 wrote to memory of 2452	2484	cmd.exe	31
PID 2484 wrote to memory of 2700	2484	cmd.exe	32
PID 2484 wrote to memory of 2700	2484	cmd.exe	32
PID 2484 wrote to memory of 2700	2484	cmd.exe	32

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Wave-Executor-master\gradlew.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:2484
- C:\Windows\system32\java.exe
  java.exe -version
  2⤵
  PID:2452
- C:\Windows\system32\java.exe
  "java.exe" "-Dorg.gradle.appname=gradlew" -classpath "C:\Users\Admin\AppData\Local\Temp\Wave-Executor-master\\gradle\wrapper\gradle-wrapper.jar" org.gradle.wrapper.GradleWrapperMain
  2⤵
  PID:2700

memory/2452-2-0x0000000002670000-0x00000000028E0000-memory.dmp

Filesize
2.4MB

Download
memory/2452-11-0x0000000000150000-0x0000000000151000-memory.dmp

Filesize
4KB

Download
memory/2452-12-0x0000000002670000-0x00000000028E0000-memory.dmp

Filesize
2.4MB

Download
memory/2700-15-0x0000000002490000-0x0000000002700000-memory.dmp

Filesize
2.4MB

Download
memory/2700-25-0x0000000000140000-0x0000000000141000-memory.dmp

Filesize
4KB

Download
memory/2700-27-0x0000000000140000-0x0000000000141000-memory.dmp

Filesize
4KB

Download
memory/2700-28-0x0000000002490000-0x0000000002700000-memory.dmp

Filesize
2.4MB

Download