Analysis
- max time kernel
148s - max time network
130s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
30/07/2026, 04:10
General
- Target gradlew.bat
- Size 2KB
- Sample260730-erc5qabe28
- SHA256 18774a0ac0203f6893bf1db3291a0d77f06cd1b4dca2a43b51e7009da3e28cfa
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\gradlew.bat"1⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava.exe -version2⤵
-
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe"java.exe" "-Xmx64m" "-Xms64m" "-Dorg.gradle.appname=gradlew" -classpath "C:\Users\Admin\AppData\Local\Temp\\gradle\wrapper\gradle-wrapper.jar" org.gradle.wrapper.GradleWrapperMain2⤵
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
3903daac9bc4a3b7.timestamp
memory/1720-16-0x0000020BEFA70000-0x0000020BEFCE0000-memory.dmp
memory/1720-26-0x0000020BEE150000-0x0000020BEE151000-memory.dmp
memory/1720-31-0x0000020BEFCE0000-0x0000020BEFCF0000-memory.dmp
memory/1720-34-0x0000020BEFD00000-0x0000020BEFD10000-memory.dmp
memory/1720-32-0x0000020BEFCF0000-0x0000020BEFD00000-memory.dmp
memory/1720-36-0x0000020BEFD10000-0x0000020BEFD20000-memory.dmp
memory/1720-38-0x0000020BEFD20000-0x0000020BEFD30000-memory.dmp
memory/1720-40-0x0000020BEFD30000-0x0000020BEFD40000-memory.dmp
memory/1720-42-0x0000020BEFD40000-0x0000020BEFD50000-memory.dmp
memory/1720-44-0x0000020BEFD50000-0x0000020BEFD60000-memory.dmp
memory/1720-49-0x0000020BEFA70000-0x0000020BEFCE0000-memory.dmp
memory/1720-54-0x0000020BEFD90000-0x0000020BEFDA0000-memory.dmp
memory/1720-53-0x0000020BEFCE0000-0x0000020BEFCF0000-memory.dmp
memory/1720-52-0x0000020BEFD80000-0x0000020BEFD90000-memory.dmp
memory/1720-57-0x0000020BEFDA0000-0x0000020BEFDB0000-memory.dmp
memory/1720-51-0x0000020BEFD70000-0x0000020BEFD80000-memory.dmp
memory/1720-50-0x0000020BEFD60000-0x0000020BEFD70000-memory.dmp
memory/1720-62-0x0000020BEFDB0000-0x0000020BEFDC0000-memory.dmp
memory/1720-61-0x0000020BEFCF0000-0x0000020BEFD00000-memory.dmp
memory/1720-65-0x0000020BEFDC0000-0x0000020BEFDD0000-memory.dmp
memory/1720-64-0x0000020BEFD00000-0x0000020BEFD10000-memory.dmp
memory/1720-70-0x0000020BEFDD0000-0x0000020BEFDE0000-memory.dmp
memory/1720-69-0x0000020BEFD10000-0x0000020BEFD20000-memory.dmp
memory/1720-73-0x0000020BEFD20000-0x0000020BEFD30000-memory.dmp
memory/1720-74-0x0000020BEFDE0000-0x0000020BEFDF0000-memory.dmp
memory/1720-78-0x0000020BEFDF0000-0x0000020BEFE00000-memory.dmp
memory/1720-77-0x0000020BEFD30000-0x0000020BEFD40000-memory.dmp
memory/1720-80-0x0000020BEFE00000-0x0000020BEFE10000-memory.dmp
memory/1720-79-0x0000020BEFD40000-0x0000020BEFD50000-memory.dmp
memory/1720-83-0x0000020BEFD50000-0x0000020BEFD60000-memory.dmp
memory/1720-85-0x0000020BEFE10000-0x0000020BEFE20000-memory.dmp
memory/1720-86-0x0000020BEFD70000-0x0000020BEFD80000-memory.dmp
memory/1720-84-0x0000020BEFD60000-0x0000020BEFD70000-memory.dmp
memory/1720-87-0x0000020BEFE20000-0x0000020BEFE30000-memory.dmp
memory/1720-91-0x0000020BEFE30000-0x0000020BEFE40000-memory.dmp
memory/1720-90-0x0000020BEFD90000-0x0000020BEFDA0000-memory.dmp
memory/1720-89-0x0000020BEFD80000-0x0000020BEFD90000-memory.dmp
memory/1720-93-0x0000020BEE150000-0x0000020BEE151000-memory.dmp
memory/1720-94-0x0000020BEFDA0000-0x0000020BEFDB0000-memory.dmp
memory/1720-96-0x0000020BEFDB0000-0x0000020BEFDC0000-memory.dmp
memory/1720-97-0x0000020BEFDC0000-0x0000020BEFDD0000-memory.dmp
memory/1720-99-0x0000020BEFDD0000-0x0000020BEFDE0000-memory.dmp
memory/1720-100-0x0000020BEFE40000-0x0000020BEFE50000-memory.dmp
memory/1720-101-0x0000020BEFDE0000-0x0000020BEFDF0000-memory.dmp
memory/1720-103-0x0000020BEFDF0000-0x0000020BEFE00000-memory.dmp
memory/1720-104-0x0000020BEFE50000-0x0000020BEFE60000-memory.dmp
memory/1720-105-0x0000020BEE150000-0x0000020BEE151000-memory.dmp
memory/1720-106-0x0000020BEFE00000-0x0000020BEFE10000-memory.dmp
memory/1720-109-0x0000020BEFE10000-0x0000020BEFE20000-memory.dmp
memory/1720-110-0x0000020BEFE60000-0x0000020BEFE70000-memory.dmp
memory/1720-112-0x0000020BEFE20000-0x0000020BEFE30000-memory.dmp
memory/1720-113-0x0000020BEFE70000-0x0000020BEFE80000-memory.dmp
memory/1720-115-0x0000020BEFE30000-0x0000020BEFE40000-memory.dmp
memory/1720-118-0x0000020BEFE80000-0x0000020BEFE90000-memory.dmp
memory/1720-120-0x0000020BEFE90000-0x0000020BEFEA0000-memory.dmp
memory/1720-119-0x0000020BEFE40000-0x0000020BEFE50000-memory.dmp
memory/1720-124-0x0000020BEFEA0000-0x0000020BEFEB0000-memory.dmp
memory/1720-123-0x0000020BEFE50000-0x0000020BEFE60000-memory.dmp
memory/1720-129-0x0000020BEFE60000-0x0000020BEFE70000-memory.dmp
memory/1720-132-0x0000020BEFE70000-0x0000020BEFE80000-memory.dmp
memory/1720-135-0x0000020BEFE80000-0x0000020BEFE90000-memory.dmp
memory/1720-137-0x0000020BEFE90000-0x0000020BEFEA0000-memory.dmp
memory/1720-141-0x0000020BEFEA0000-0x0000020BEFEB0000-memory.dmp
memory/1720-165-0x0000020BEE150000-0x0000020BEE151000-memory.dmp
memory/1720-166-0x0000020BEFD80000-0x0000020BEFD90000-memory.dmp
memory/1720-167-0x0000020BEFCF0000-0x0000020BEFD00000-memory.dmp
memory/1720-168-0x0000020BEFCE0000-0x0000020BEFCF0000-memory.dmp
memory/1720-169-0x0000020BEFD00000-0x0000020BEFD10000-memory.dmp
memory/1720-170-0x0000020BEFD10000-0x0000020BEFD20000-memory.dmp
memory/1720-171-0x0000020BEFD20000-0x0000020BEFD30000-memory.dmp
memory/1720-173-0x0000020BEFD40000-0x0000020BEFD50000-memory.dmp
memory/1720-176-0x0000020BEFD70000-0x0000020BEFD80000-memory.dmp
memory/1720-185-0x0000020BEFE00000-0x0000020BEFE10000-memory.dmp
memory/1720-191-0x0000020BEFE60000-0x0000020BEFE70000-memory.dmp
memory/1720-190-0x0000020BEFE50000-0x0000020BEFE60000-memory.dmp
memory/1720-189-0x0000020BEFE40000-0x0000020BEFE50000-memory.dmp
memory/1720-188-0x0000020BEFE30000-0x0000020BEFE40000-memory.dmp
memory/1720-187-0x0000020BEFE20000-0x0000020BEFE30000-memory.dmp
memory/1720-186-0x0000020BEFE10000-0x0000020BEFE20000-memory.dmp
memory/1720-184-0x0000020BEFDF0000-0x0000020BEFE00000-memory.dmp
memory/1720-182-0x0000020BEFDD0000-0x0000020BEFDE0000-memory.dmp
memory/1720-181-0x0000020BEFDC0000-0x0000020BEFDD0000-memory.dmp
memory/1720-180-0x0000020BEFDB0000-0x0000020BEFDC0000-memory.dmp
memory/1720-179-0x0000020BEFDA0000-0x0000020BEFDB0000-memory.dmp
memory/1720-178-0x0000020BEFD60000-0x0000020BEFD70000-memory.dmp
memory/1720-177-0x0000020BEFA70000-0x0000020BEFCE0000-memory.dmp
memory/1720-195-0x0000020BEFEA0000-0x0000020BEFEB0000-memory.dmp
memory/1720-194-0x0000020BEFE90000-0x0000020BEFEA0000-memory.dmp
memory/1720-193-0x0000020BEFE80000-0x0000020BEFE90000-memory.dmp
memory/1720-192-0x0000020BEFE70000-0x0000020BEFE80000-memory.dmp
memory/1720-175-0x0000020BEFD90000-0x0000020BEFDA0000-memory.dmp
memory/1720-174-0x0000020BEFD50000-0x0000020BEFD60000-memory.dmp
memory/1720-183-0x0000020BEFDE0000-0x0000020BEFDF0000-memory.dmp
memory/1720-172-0x0000020BEFD30000-0x0000020BEFD40000-memory.dmp
memory/2736-2-0x000002A800000000-0x000002A800270000-memory.dmp
memory/2736-12-0x000002A874E20000-0x000002A874E21000-memory.dmp
memory/2736-13-0x000002A800000000-0x000002A800270000-memory.dmp