Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
15/08/2026, 12:20
General
- Target apache-maven-3.9.11/bin/mvn.cmd
- Size 6KB
- Sample260815-ph6e1sff89
- SHA256 f89d866139add674690bba0702a0cc4f9769276362c4da01f96267ab85f6487e
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\apache-maven-3.9.11\bin\mvn.cmd"1⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe"C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe" --enable-native-access=ALL-UNNAMED -version2⤵
-
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe"C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe" -classpath "C:\Users\Admin\AppData\Local\Temp\apache-maven-3.9.11\boot\plexus-classworlds-2.9.0.jar" "-Dclassworlds.conf=C:\Users\Admin\AppData\Local\Temp\apache-maven-3.9.11\bin\m2.conf" "-Dmaven.home=C:\Users\Admin\AppData\Local\Temp\apache-maven-3.9.11" "-Dlibrary.jansi.path=C:\Users\Admin\AppData\Local\Temp\apache-maven-3.9.11\lib\jansi-native" "-Dmaven.multiModuleProjectDirectory=C:\Users\Admin\AppData\Local\Temp\apache-maven-3.9.11\bin" org.codehaus.plexus.classworlds.launcher.Launcher2⤵
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/724-2-0x000001EEB7B20000-0x000001EEB7D90000-memory.dmp
memory/724-11-0x000001EEB64E0000-0x000001EEB64E1000-memory.dmp
memory/724-15-0x000001EEB7D90000-0x000001EEB7DA0000-memory.dmp
memory/724-17-0x000001EEB7DA0000-0x000001EEB7DB0000-memory.dmp
memory/724-19-0x000001EEB7DB0000-0x000001EEB7DC0000-memory.dmp
memory/724-21-0x000001EEB7DC0000-0x000001EEB7DD0000-memory.dmp
memory/724-23-0x000001EEB7DD0000-0x000001EEB7DE0000-memory.dmp
memory/724-25-0x000001EEB7DE0000-0x000001EEB7DF0000-memory.dmp
memory/724-27-0x000001EEB7DF0000-0x000001EEB7E00000-memory.dmp
memory/724-29-0x000001EEB7E00000-0x000001EEB7E10000-memory.dmp
memory/724-32-0x000001EEB7E10000-0x000001EEB7E20000-memory.dmp
memory/724-31-0x000001EEB7B20000-0x000001EEB7D90000-memory.dmp
memory/724-37-0x000001EEB7E20000-0x000001EEB7E30000-memory.dmp
memory/724-40-0x000001EEB7D90000-0x000001EEB7DA0000-memory.dmp
memory/724-39-0x000001EEB7E40000-0x000001EEB7E50000-memory.dmp
memory/724-38-0x000001EEB7E30000-0x000001EEB7E40000-memory.dmp
memory/724-43-0x000001EEB7E50000-0x000001EEB7E60000-memory.dmp
memory/724-42-0x000001EEB7DA0000-0x000001EEB7DB0000-memory.dmp
memory/724-47-0x000001EEB7E60000-0x000001EEB7E70000-memory.dmp
memory/724-52-0x000001EEB7DD0000-0x000001EEB7DE0000-memory.dmp
memory/724-51-0x000001EEB7E80000-0x000001EEB7E90000-memory.dmp
memory/724-50-0x000001EEB7E70000-0x000001EEB7E80000-memory.dmp
memory/724-49-0x000001EEB7DC0000-0x000001EEB7DD0000-memory.dmp
memory/724-46-0x000001EEB7DB0000-0x000001EEB7DC0000-memory.dmp
memory/724-56-0x000001EEB7E90000-0x000001EEB7EA0000-memory.dmp
memory/724-55-0x000001EEB7DE0000-0x000001EEB7DF0000-memory.dmp
memory/724-58-0x000001EEB7EA0000-0x000001EEB7EB0000-memory.dmp
memory/724-57-0x000001EEB7DF0000-0x000001EEB7E00000-memory.dmp
memory/724-61-0x000001EEB7E00000-0x000001EEB7E10000-memory.dmp
memory/724-62-0x000001EEB7EB0000-0x000001EEB7EC0000-memory.dmp
memory/724-64-0x000001EEB7EC0000-0x000001EEB7ED0000-memory.dmp
memory/724-63-0x000001EEB7E10000-0x000001EEB7E20000-memory.dmp
memory/724-69-0x000001EEB7ED0000-0x000001EEB7EE0000-memory.dmp
memory/724-68-0x000001EEB7E40000-0x000001EEB7E50000-memory.dmp
memory/724-67-0x000001EEB7E30000-0x000001EEB7E40000-memory.dmp
memory/724-71-0x000001EEB7EE0000-0x000001EEB7EF0000-memory.dmp
memory/724-66-0x000001EEB7E20000-0x000001EEB7E30000-memory.dmp
memory/724-73-0x000001EEB7E50000-0x000001EEB7E60000-memory.dmp
memory/724-74-0x000001EEB7EF0000-0x000001EEB7F00000-memory.dmp
memory/724-81-0x000001EEB7F10000-0x000001EEB7F20000-memory.dmp
memory/724-80-0x000001EEB7E80000-0x000001EEB7E90000-memory.dmp
memory/724-79-0x000001EEB7E70000-0x000001EEB7E80000-memory.dmp
memory/724-78-0x000001EEB7F00000-0x000001EEB7F10000-memory.dmp
memory/724-76-0x000001EEB7E60000-0x000001EEB7E70000-memory.dmp
memory/724-83-0x000001EEB7F20000-0x000001EEB7F30000-memory.dmp
memory/724-86-0x000001EEB7F30000-0x000001EEB7F40000-memory.dmp
memory/724-85-0x000001EEB7E90000-0x000001EEB7EA0000-memory.dmp
memory/724-88-0x000001EEB7EA0000-0x000001EEB7EB0000-memory.dmp
memory/724-89-0x000001EEB7F40000-0x000001EEB7F50000-memory.dmp
memory/724-92-0x000001EEB7F50000-0x000001EEB7F60000-memory.dmp
memory/724-91-0x000001EEB7EB0000-0x000001EEB7EC0000-memory.dmp
memory/724-96-0x000001EEB7F60000-0x000001EEB7F70000-memory.dmp
memory/724-98-0x000001EEB7ED0000-0x000001EEB7EE0000-memory.dmp
memory/724-97-0x000001EEB7F70000-0x000001EEB7F80000-memory.dmp
memory/724-95-0x000001EEB7EC0000-0x000001EEB7ED0000-memory.dmp
memory/724-100-0x000001EEB7EE0000-0x000001EEB7EF0000-memory.dmp
memory/724-101-0x000001EEB7F80000-0x000001EEB7F90000-memory.dmp
memory/724-105-0x000001EEB7F90000-0x000001EEB7FA0000-memory.dmp
memory/724-104-0x000001EEB7F00000-0x000001EEB7F10000-memory.dmp
memory/724-103-0x000001EEB7EF0000-0x000001EEB7F00000-memory.dmp
memory/724-107-0x000001EEB7FA0000-0x000001EEB7FB0000-memory.dmp
memory/724-111-0x000001EEB7FB0000-0x000001EEB7FC0000-memory.dmp
memory/724-110-0x000001EEB7F10000-0x000001EEB7F20000-memory.dmp
memory/724-115-0x000001EEB7FC0000-0x000001EEB7FD0000-memory.dmp
memory/724-114-0x000001EEB7F20000-0x000001EEB7F30000-memory.dmp
memory/724-118-0x000001EEB7FD0000-0x000001EEB7FE0000-memory.dmp
memory/724-117-0x000001EEB7F30000-0x000001EEB7F40000-memory.dmp
memory/724-121-0x000001EEB7FE0000-0x000001EEB7FF0000-memory.dmp
memory/724-120-0x000001EEB7F40000-0x000001EEB7F50000-memory.dmp
memory/724-124-0x000001EEB7FF0000-0x000001EEB8000000-memory.dmp
memory/724-123-0x000001EEB7F50000-0x000001EEB7F60000-memory.dmp
memory/724-128-0x000001EEB8000000-0x000001EEB8010000-memory.dmp
memory/724-127-0x000001EEB7F70000-0x000001EEB7F80000-memory.dmp
memory/724-126-0x000001EEB7F60000-0x000001EEB7F70000-memory.dmp
memory/724-130-0x000001EEB8010000-0x000001EEB8020000-memory.dmp
memory/724-132-0x000001EEB7F80000-0x000001EEB7F90000-memory.dmp
memory/724-133-0x000001EEB8020000-0x000001EEB8030000-memory.dmp
memory/724-136-0x000001EEB8030000-0x000001EEB8040000-memory.dmp
memory/724-135-0x000001EEB7F90000-0x000001EEB7FA0000-memory.dmp
memory/724-139-0x000001EEB8040000-0x000001EEB8050000-memory.dmp
memory/724-138-0x000001EEB7FA0000-0x000001EEB7FB0000-memory.dmp
memory/724-143-0x000001EEB8050000-0x000001EEB8060000-memory.dmp
memory/724-142-0x000001EEB7FB0000-0x000001EEB7FC0000-memory.dmp
memory/724-144-0x000001EEB7FC0000-0x000001EEB7FD0000-memory.dmp
memory/724-145-0x000001EEB8060000-0x000001EEB8070000-memory.dmp
memory/724-149-0x000001EEB8070000-0x000001EEB8080000-memory.dmp
memory/724-148-0x000001EEB7FD0000-0x000001EEB7FE0000-memory.dmp
memory/724-151-0x000001EEB8080000-0x000001EEB8090000-memory.dmp
memory/724-150-0x000001EEB7FE0000-0x000001EEB7FF0000-memory.dmp
memory/724-156-0x000001EEB7FF0000-0x000001EEB8000000-memory.dmp
memory/724-159-0x000001EEB8000000-0x000001EEB8010000-memory.dmp
memory/724-158-0x000001EEB80A0000-0x000001EEB80B0000-memory.dmp
memory/724-157-0x000001EEB8090000-0x000001EEB80A0000-memory.dmp
memory/724-162-0x000001EEB8010000-0x000001EEB8020000-memory.dmp
memory/724-165-0x000001EEB8020000-0x000001EEB8030000-memory.dmp
memory/724-164-0x000001EEB80C0000-0x000001EEB80D0000-memory.dmp
memory/724-163-0x000001EEB80B0000-0x000001EEB80C0000-memory.dmp
memory/724-236-0x000001EEB64E0000-0x000001EEB64E1000-memory.dmp
memory/724-237-0x000001EEB64E0000-0x000001EEB64E1000-memory.dmp
memory/724-251-0x000001EEB64E0000-0x000001EEB64E1000-memory.dmp
memory/724-252-0x00007FF94C1A0000-0x00007FF94C1C4000-memory.dmp