Analysis
- max time kernel
148s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
15/08/2026, 12:20
General
- Target apache-maven-3.9.11/bin/mvn.cmd
- Size 6KB
- Sample260815-ph6e1sff89
- SHA256 f89d866139add674690bba0702a0cc4f9769276362c4da01f96267ab85f6487e
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\apache-maven-3.9.11\bin\mvn.cmd"1⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe"C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe" --enable-native-access=ALL-UNNAMED -version2⤵
-
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe"C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe" -classpath "C:\Users\Admin\AppData\Local\Temp\apache-maven-3.9.11\boot\plexus-classworlds-2.9.0.jar" "-Dclassworlds.conf=C:\Users\Admin\AppData\Local\Temp\apache-maven-3.9.11\bin\m2.conf" "-Dmaven.home=C:\Users\Admin\AppData\Local\Temp\apache-maven-3.9.11" "-Dlibrary.jansi.path=C:\Users\Admin\AppData\Local\Temp\apache-maven-3.9.11\lib\jansi-native" "-Dmaven.multiModuleProjectDirectory=C:\Users\Admin\AppData\Local\Temp\apache-maven-3.9.11\bin" org.codehaus.plexus.classworlds.launcher.Launcher2⤵
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4568-2-0x0000025F5A810000-0x0000025F5AA80000-memory.dmp
memory/4568-11-0x0000025F58F10000-0x0000025F58F11000-memory.dmp
memory/4568-15-0x0000025F5AA80000-0x0000025F5AA90000-memory.dmp
memory/4568-17-0x0000025F5AA90000-0x0000025F5AAA0000-memory.dmp
memory/4568-19-0x0000025F5AAA0000-0x0000025F5AAB0000-memory.dmp
memory/4568-21-0x0000025F5AAB0000-0x0000025F5AAC0000-memory.dmp
memory/4568-24-0x0000025F5AAC0000-0x0000025F5AAD0000-memory.dmp
memory/4568-25-0x0000025F5AAD0000-0x0000025F5AAE0000-memory.dmp
memory/4568-27-0x0000025F5AAE0000-0x0000025F5AAF0000-memory.dmp
memory/4568-29-0x0000025F5AAF0000-0x0000025F5AB00000-memory.dmp
memory/4568-32-0x0000025F5A810000-0x0000025F5AA80000-memory.dmp
memory/4568-33-0x0000025F5AB00000-0x0000025F5AB10000-memory.dmp
memory/4568-36-0x0000025F5AB10000-0x0000025F5AB20000-memory.dmp
memory/4568-41-0x0000025F5AA90000-0x0000025F5AAA0000-memory.dmp
memory/4568-40-0x0000025F5AB30000-0x0000025F5AB40000-memory.dmp
memory/4568-39-0x0000025F5AB20000-0x0000025F5AB30000-memory.dmp
memory/4568-38-0x0000025F5AA80000-0x0000025F5AA90000-memory.dmp
memory/4568-47-0x0000025F5AAB0000-0x0000025F5AAC0000-memory.dmp
memory/4568-46-0x0000025F5AB50000-0x0000025F5AB60000-memory.dmp
memory/4568-45-0x0000025F5AB40000-0x0000025F5AB50000-memory.dmp
memory/4568-44-0x0000025F5AAA0000-0x0000025F5AAB0000-memory.dmp
memory/4568-54-0x0000025F5AAD0000-0x0000025F5AAE0000-memory.dmp
memory/4568-56-0x0000025F5AB80000-0x0000025F5AB90000-memory.dmp
memory/4568-62-0x0000025F5AB00000-0x0000025F5AB10000-memory.dmp
memory/4568-61-0x0000025F5ABA0000-0x0000025F5ABB0000-memory.dmp
memory/4568-60-0x0000025F5AB90000-0x0000025F5ABA0000-memory.dmp
memory/4568-59-0x0000025F5AAF0000-0x0000025F5AB00000-memory.dmp
memory/4568-53-0x0000025F5AB70000-0x0000025F5AB80000-memory.dmp
memory/4568-52-0x0000025F5AB60000-0x0000025F5AB70000-memory.dmp
memory/4568-51-0x0000025F5AAC0000-0x0000025F5AAD0000-memory.dmp
memory/4568-55-0x0000025F5AAE0000-0x0000025F5AAF0000-memory.dmp
memory/4568-64-0x0000025F5AB10000-0x0000025F5AB20000-memory.dmp
memory/4568-65-0x0000025F5ABB0000-0x0000025F5ABC0000-memory.dmp
memory/4568-67-0x0000025F5AB20000-0x0000025F5AB30000-memory.dmp
memory/4568-69-0x0000025F5ABC0000-0x0000025F5ABD0000-memory.dmp
memory/4568-68-0x0000025F5AB30000-0x0000025F5AB40000-memory.dmp
memory/4568-71-0x0000025F5ABD0000-0x0000025F5ABE0000-memory.dmp
memory/4568-73-0x0000025F5AB40000-0x0000025F5AB50000-memory.dmp
memory/4568-75-0x0000025F5ABE0000-0x0000025F5ABF0000-memory.dmp
memory/4568-74-0x0000025F5AB50000-0x0000025F5AB60000-memory.dmp
memory/4568-77-0x0000025F5ABF0000-0x0000025F5AC00000-memory.dmp
memory/4568-79-0x0000025F5AB60000-0x0000025F5AB70000-memory.dmp
memory/4568-81-0x0000025F5AC00000-0x0000025F5AC10000-memory.dmp
memory/4568-80-0x0000025F5AB70000-0x0000025F5AB80000-memory.dmp
memory/4568-83-0x0000025F5AC10000-0x0000025F5AC20000-memory.dmp
memory/4568-86-0x0000025F5AC20000-0x0000025F5AC30000-memory.dmp
memory/4568-85-0x0000025F5AB80000-0x0000025F5AB90000-memory.dmp
memory/4568-90-0x0000025F5AC30000-0x0000025F5AC40000-memory.dmp
memory/4568-89-0x0000025F5ABA0000-0x0000025F5ABB0000-memory.dmp
memory/4568-88-0x0000025F5AB90000-0x0000025F5ABA0000-memory.dmp
memory/4568-91-0x0000025F58F10000-0x0000025F58F11000-memory.dmp
memory/4568-95-0x0000025F5AC40000-0x0000025F5AC50000-memory.dmp
memory/4568-96-0x0000025F5ABB0000-0x0000025F5ABC0000-memory.dmp
memory/4568-98-0x0000025F5ABC0000-0x0000025F5ABD0000-memory.dmp
memory/4568-94-0x0000025F5AC50000-0x0000025F5AC60000-memory.dmp
memory/4568-99-0x0000025F5AC60000-0x0000025F5AC70000-memory.dmp
memory/4568-102-0x0000025F5AC70000-0x0000025F5AC80000-memory.dmp
memory/4568-101-0x0000025F5ABD0000-0x0000025F5ABE0000-memory.dmp
memory/4568-105-0x0000025F5AC80000-0x0000025F5AC90000-memory.dmp
memory/4568-104-0x0000025F5ABE0000-0x0000025F5ABF0000-memory.dmp
memory/4568-108-0x0000025F5ABF0000-0x0000025F5AC00000-memory.dmp
memory/4568-109-0x0000025F5AC90000-0x0000025F5ACA0000-memory.dmp
memory/4568-112-0x0000025F5ACA0000-0x0000025F5ACB0000-memory.dmp
memory/4568-111-0x0000025F5AC00000-0x0000025F5AC10000-memory.dmp
memory/4568-115-0x0000025F5ACB0000-0x0000025F5ACC0000-memory.dmp
memory/4568-114-0x0000025F5AC10000-0x0000025F5AC20000-memory.dmp
memory/4568-119-0x0000025F5ACC0000-0x0000025F5ACD0000-memory.dmp
memory/4568-118-0x0000025F5AC20000-0x0000025F5AC30000-memory.dmp
memory/4568-121-0x0000025F5AC30000-0x0000025F5AC40000-memory.dmp
memory/4568-122-0x0000025F5ACD0000-0x0000025F5ACE0000-memory.dmp
memory/4568-126-0x0000025F5ACE0000-0x0000025F5ACF0000-memory.dmp
memory/4568-125-0x0000025F5AC40000-0x0000025F5AC50000-memory.dmp
memory/4568-124-0x0000025F5AC50000-0x0000025F5AC60000-memory.dmp
memory/4568-128-0x0000025F5ACF0000-0x0000025F5AD00000-memory.dmp
memory/4568-131-0x0000025F5AD00000-0x0000025F5AD10000-memory.dmp
memory/4568-130-0x0000025F5AC60000-0x0000025F5AC70000-memory.dmp
memory/4568-134-0x0000025F5AD10000-0x0000025F5AD20000-memory.dmp
memory/4568-133-0x0000025F5AC70000-0x0000025F5AC80000-memory.dmp
memory/4568-137-0x0000025F5AD20000-0x0000025F5AD30000-memory.dmp
memory/4568-136-0x0000025F5AC80000-0x0000025F5AC90000-memory.dmp
memory/4568-140-0x0000025F5AC90000-0x0000025F5ACA0000-memory.dmp
memory/4568-141-0x0000025F5AD30000-0x0000025F5AD40000-memory.dmp
memory/4568-143-0x0000025F5AD40000-0x0000025F5AD50000-memory.dmp
memory/4568-142-0x0000025F5ACA0000-0x0000025F5ACB0000-memory.dmp
memory/4568-146-0x0000025F5AD50000-0x0000025F5AD60000-memory.dmp
memory/4568-145-0x0000025F5ACB0000-0x0000025F5ACC0000-memory.dmp
memory/4568-148-0x0000025F5ACC0000-0x0000025F5ACD0000-memory.dmp
memory/4568-149-0x0000025F5AD60000-0x0000025F5AD70000-memory.dmp
memory/4568-152-0x0000025F5AD70000-0x0000025F5AD80000-memory.dmp
memory/4568-151-0x0000025F5ACD0000-0x0000025F5ACE0000-memory.dmp
memory/4568-157-0x0000025F5AD80000-0x0000025F5AD90000-memory.dmp
memory/4568-156-0x0000025F5ACE0000-0x0000025F5ACF0000-memory.dmp
memory/4568-161-0x0000025F5AD90000-0x0000025F5ADA0000-memory.dmp
memory/4568-160-0x0000025F5ACF0000-0x0000025F5AD00000-memory.dmp
memory/4568-165-0x0000025F5ADA0000-0x0000025F5ADB0000-memory.dmp
memory/4568-164-0x0000025F5AD00000-0x0000025F5AD10000-memory.dmp
memory/4568-167-0x0000025F5ADB0000-0x0000025F5ADC0000-memory.dmp
memory/4568-166-0x0000025F5AD10000-0x0000025F5AD20000-memory.dmp
memory/4568-250-0x0000025F58F10000-0x0000025F58F11000-memory.dmp
memory/4568-265-0x0000025F58F10000-0x0000025F58F11000-memory.dmp
memory/4568-266-0x00007FFAD4790000-0x00007FFAD47B4000-memory.dmp