Overview
overview
3Static
static
3Pleasure-H...er.jar
windows10-2004-x64
1Pleasure-H...er.jar
windows11-ltsc_2024-x64
1Pleasure-H...radlew
ubuntu-18.04-amd64
1Pleasure-H...radlew
debian-9-armhf
1Pleasure-H...radlew
debian-9-mips
Pleasure-H...radlew
debian-9-mipsel
Pleasure-H...ew.bat
windows10-2004-x64
3Pleasure-H...ew.bat
windows11-ltsc_2024-x64
3Pleasure-H...ons.py
windows10-2004-x64
3Pleasure-H...ons.py
windows11-ltsc_2024-x64
3Pleasure-H...ogg.py
windows10-2004-x64
3Pleasure-H...ogg.py
windows11-ltsc_2024-x64
3Pleasure-H...son.py
windows10-2004-x64
3Pleasure-H...son.py
windows11-ltsc_2024-x64
3Analysis
- max time kernel
148s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
11/08/2026, 22:30
Static task
static1
Behavioral task
behavioral1
Sample
Pleasure-Horizons-0.5.3-/gradle/wrapper/gradle-wrapper.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Pleasure-Horizons-0.5.3-/gradle/wrapper/gradle-wrapper.jar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Pleasure-Horizons-0.5.3-/gradlew
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral4
Sample
Pleasure-Horizons-0.5.3-/gradlew
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral5
Sample
Pleasure-Horizons-0.5.3-/gradlew
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral6
Sample
Pleasure-Horizons-0.5.3-/gradlew
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral7
Sample
Pleasure-Horizons-0.5.3-/gradlew.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Pleasure-Horizons-0.5.3-/gradlew.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Pleasure-Horizons-0.5.3-/src/main/resources/assets/pleasurecraft/python/animations/evaluate_animation_jsons.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Pleasure-Horizons-0.5.3-/src/main/resources/assets/pleasurecraft/python/animations/evaluate_animation_jsons.py
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral11
Sample
Pleasure-Horizons-0.5.3-/src/main/resources/assets/pleasurecraft/python/sounds/convert_sounds_to_ogg.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Pleasure-Horizons-0.5.3-/src/main/resources/assets/pleasurecraft/python/sounds/convert_sounds_to_ogg.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
Pleasure-Horizons-0.5.3-/src/main/resources/assets/pleasurecraft/python/sounds/generate_sounds_json.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Pleasure-Horizons-0.5.3-/src/main/resources/assets/pleasurecraft/python/sounds/generate_sounds_json.py
Resource
win11ltsc2024-20260709-en
General
- Target Pleasure-Horizons-0.5.3-/gradlew.bat
- Size 2KB
- Sample260811-2e52astblb
- SHA256 1d297e00bd21de3ace22b4d7f2de1f9dfa858883d66bbf7c1ccbecccec8f4f3b
- MD5 7dd1a1fde1043efef3d624e3cb720522
- SHA1 33356fb0e882906e1b013ada80fd0ef1286c79f9
- SHA512 c865ca86c88d844dc59c7313885846c0105ea50326a13569b12e9b7b69bca009cd2cbcb8a83965cac219043a568a48af15e5c5e5e32547c127b2e77b2b840134
- TLSH T1405155BB7B4743761FBC27A67E1C4982B212A2662F4FA30CB45F850D713174A51C2E9B
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 3752 cmd.exe - Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 3752 wrote to memory of 1856 3752 cmd.exe 90 PID 3752 wrote to memory of 6016 3752 cmd.exe 91
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Pleasure-Horizons-0.5.3-\gradlew.bat"1⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
PID:3752 -
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava.exe -version2⤵PID:1856
-
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe"java.exe" "-Xmx64m" "-Xms64m" "-Dorg.gradle.appname=gradlew" -classpath "" -jar "C:\Users\Admin\AppData\Local\Temp\Pleasure-Horizons-0.5.3-\\gradle\wrapper\gradle-wrapper.jar"2⤵PID:6016
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\ProgramData\Oracle\Java\.oracle_jre_usage\3903daac9bc4a3b7.timestamp
- Size 46B
- SHA256 c5a52aa870e600a13dac6159f456424be5b07b67443f605717a1cc2a7f469ccb
- MD5 286ed934f87b9587cbed2e290f82c481
- SHA1 596099acda7e21701898dd3b4aab67457e20d424
- SHA512 e0d687b955fcd850736dc205fe12a7b11aea21423bf093784dbb9496e80b7b216dc57542263c079c972576146dd91f68cf8231aceb8006614548bdd6acc4539b
- MD5 SHA1 SHA512