Analysis
- geolocation tags
- max time kernel
150s - max time network
130s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-de - resource tags
- submitted
30/09/2026, 16:04
General
- Target marlowwwclient-main/gradlew.bat
- Size 2KB
- Sample260930-thwm2aca93
- SHA256 9ca26d733ada3a45f27b2151288f54e75c9f95b287d1f82ef942ec5cc2d4f006
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\marlowwwclient-main\gradlew.bat"1⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava.exe -version2⤵
-
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe"java.exe" "-Xmx64m" "-Xms64m" "-Dorg.gradle.appname=gradlew" -jar "C:\Users\Admin\AppData\Local\Temp\marlowwwclient-main\\gradle\wrapper\gradle-wrapper.jar"2⤵
- Loads dropped DLL
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
native-platform.dll
jansi.dll
gradle-base-services-9.2.1.jar
gradle-build-process-services-9.2.1.jar
gradle-classloaders-9.2.1.jar
gradle-concurrent-9.2.1.jar
gradle-gradle-cli-main-9.2.1.jar
gradle-launcher-9.2.1.jar
gradle-logging-9.2.1.jar
gradle-service-lookup-9.2.1.jar
gradle-stdlib-java-extensions-9.2.1.jar
memory/608-128-0x0000022118BE0000-0x0000022118BF0000-memory.dmp
memory/608-38-0x0000022118AC0000-0x0000022118AD0000-memory.dmp
memory/608-46-0x0000022118AF0000-0x0000022118B00000-memory.dmp
memory/608-48-0x0000022118810000-0x0000022118A80000-memory.dmp
memory/608-52-0x0000022118B20000-0x0000022118B30000-memory.dmp
memory/608-54-0x0000022118A80000-0x0000022118A90000-memory.dmp
memory/608-55-0x0000022118B30000-0x0000022118B40000-memory.dmp
memory/608-58-0x0000022118B40000-0x0000022118B50000-memory.dmp
memory/608-57-0x0000022118A90000-0x0000022118AA0000-memory.dmp
memory/608-59-0x0000022118AA0000-0x0000022118AB0000-memory.dmp
memory/608-60-0x0000022118B50000-0x0000022118B60000-memory.dmp
memory/608-61-0x0000022116D70000-0x0000022116D71000-memory.dmp
memory/608-63-0x0000022118AB0000-0x0000022118AC0000-memory.dmp
memory/608-64-0x0000022118B60000-0x0000022118B70000-memory.dmp
memory/608-69-0x0000022118B70000-0x0000022118B80000-memory.dmp
memory/608-68-0x0000022118AC0000-0x0000022118AD0000-memory.dmp
memory/608-73-0x0000022118B80000-0x0000022118B90000-memory.dmp
memory/608-72-0x0000022118AD0000-0x0000022118AE0000-memory.dmp
memory/608-78-0x0000022118B90000-0x0000022118BA0000-memory.dmp
memory/608-77-0x0000022118AE0000-0x0000022118AF0000-memory.dmp
memory/608-81-0x0000022118AF0000-0x0000022118B00000-memory.dmp
memory/608-83-0x0000022118BA0000-0x0000022118BB0000-memory.dmp
memory/608-82-0x0000022118B00000-0x0000022118B10000-memory.dmp
memory/608-87-0x0000022118BB0000-0x0000022118BC0000-memory.dmp
memory/608-86-0x0000022118B10000-0x0000022118B20000-memory.dmp
memory/608-89-0x0000022118BC0000-0x0000022118BD0000-memory.dmp
memory/608-88-0x0000022118B20000-0x0000022118B30000-memory.dmp
memory/608-92-0x0000022118BD0000-0x0000022118BE0000-memory.dmp
memory/608-91-0x0000022118B30000-0x0000022118B40000-memory.dmp
memory/608-94-0x0000022118B40000-0x0000022118B50000-memory.dmp
memory/608-96-0x0000022118BE0000-0x0000022118BF0000-memory.dmp
memory/608-134-0x0000022118C80000-0x0000022118C90000-memory.dmp
memory/608-97-0x0000022118B50000-0x0000022118B60000-memory.dmp
memory/608-100-0x0000022116D70000-0x0000022116D71000-memory.dmp
memory/608-103-0x0000022118B60000-0x0000022118B70000-memory.dmp
memory/608-104-0x0000022118B70000-0x0000022118B80000-memory.dmp
memory/608-105-0x0000022118C00000-0x0000022118C10000-memory.dmp
memory/608-107-0x0000022118B80000-0x0000022118B90000-memory.dmp
memory/608-108-0x0000022118C10000-0x0000022118C20000-memory.dmp
memory/608-111-0x0000022116D70000-0x0000022116D71000-memory.dmp
memory/608-112-0x0000022118B90000-0x0000022118BA0000-memory.dmp
memory/608-113-0x0000022118BA0000-0x0000022118BB0000-memory.dmp
memory/608-114-0x0000022118C20000-0x0000022118C30000-memory.dmp
memory/608-116-0x0000022118BB0000-0x0000022118BC0000-memory.dmp
memory/608-117-0x0000022118C30000-0x0000022118C40000-memory.dmp
memory/608-119-0x0000022116D70000-0x0000022116D71000-memory.dmp
memory/608-122-0x0000022118C40000-0x0000022118C50000-memory.dmp
memory/608-121-0x0000022118BC0000-0x0000022118BD0000-memory.dmp
memory/608-49-0x0000022118B10000-0x0000022118B20000-memory.dmp
memory/608-127-0x0000022118C60000-0x0000022118C70000-memory.dmp
memory/608-126-0x0000022118C50000-0x0000022118C60000-memory.dmp
memory/608-125-0x0000022118BD0000-0x0000022118BE0000-memory.dmp
memory/608-131-0x0000022118C70000-0x0000022118C80000-memory.dmp
memory/608-130-0x0000022118BF0000-0x0000022118C00000-memory.dmp
memory/608-47-0x0000022118B00000-0x0000022118B10000-memory.dmp
memory/608-136-0x0000022118C00000-0x0000022118C10000-memory.dmp
memory/608-98-0x0000022118BF0000-0x0000022118C00000-memory.dmp
memory/608-142-0x0000022118CB0000-0x0000022118CC0000-memory.dmp
memory/608-141-0x0000022118CA0000-0x0000022118CB0000-memory.dmp
memory/608-140-0x0000022118C10000-0x0000022118C20000-memory.dmp
memory/608-143-0x0000022116D70000-0x0000022116D71000-memory.dmp
memory/608-144-0x0000022118C20000-0x0000022118C30000-memory.dmp
memory/608-147-0x0000022118C30000-0x0000022118C40000-memory.dmp
memory/608-150-0x0000022118CC0000-0x0000022118CD0000-memory.dmp
memory/608-149-0x0000022118C40000-0x0000022118C50000-memory.dmp
memory/608-152-0x0000022118C50000-0x0000022118C60000-memory.dmp
memory/608-153-0x0000022118C60000-0x0000022118C70000-memory.dmp
memory/608-157-0x0000022118C70000-0x0000022118C80000-memory.dmp
memory/608-162-0x0000022118CD0000-0x0000022118CE0000-memory.dmp
memory/608-161-0x0000022118C90000-0x0000022118CA0000-memory.dmp
memory/608-160-0x0000022118C80000-0x0000022118C90000-memory.dmp
memory/608-165-0x0000022118CA0000-0x0000022118CB0000-memory.dmp
memory/608-166-0x0000022118CB0000-0x0000022118CC0000-memory.dmp
memory/608-173-0x0000022118CC0000-0x0000022118CD0000-memory.dmp
memory/608-178-0x0000022118CE0000-0x0000022118CF0000-memory.dmp
memory/608-181-0x0000022118CD0000-0x0000022118CE0000-memory.dmp
memory/608-215-0x0000022118CF0000-0x0000022118D00000-memory.dmp
memory/608-257-0x0000022118D00000-0x0000022118D10000-memory.dmp
memory/608-356-0x0000022118D10000-0x0000022118D20000-memory.dmp
memory/608-505-0x0000022118D20000-0x0000022118D30000-memory.dmp
memory/608-520-0x0000022118D30000-0x0000022118D40000-memory.dmp
memory/608-524-0x0000022118D40000-0x0000022118D50000-memory.dmp
memory/608-523-0x0000022118CE0000-0x0000022118CF0000-memory.dmp
memory/608-536-0x0000022118D50000-0x0000022118D60000-memory.dmp
memory/608-578-0x0000022116D70000-0x0000022116D71000-memory.dmp
memory/608-646-0x0000022118D60000-0x0000022118D70000-memory.dmp
memory/608-697-0x0000022118D70000-0x0000022118D80000-memory.dmp
memory/608-757-0x0000022118D80000-0x0000022118D90000-memory.dmp
memory/608-43-0x0000022118AE0000-0x0000022118AF0000-memory.dmp
memory/608-40-0x0000022118AD0000-0x0000022118AE0000-memory.dmp
memory/608-135-0x0000022118C90000-0x0000022118CA0000-memory.dmp
memory/608-793-0x0000022118D90000-0x0000022118DA0000-memory.dmp
memory/608-792-0x0000022118CF0000-0x0000022118D00000-memory.dmp
memory/608-879-0x0000022118DA0000-0x0000022118DB0000-memory.dmp
memory/608-877-0x0000022118D00000-0x0000022118D10000-memory.dmp
memory/608-36-0x0000022118AB0000-0x0000022118AC0000-memory.dmp
memory/608-34-0x0000022118AA0000-0x0000022118AB0000-memory.dmp
memory/608-33-0x0000022118A90000-0x0000022118AA0000-memory.dmp
memory/608-1013-0x0000022116D70000-0x0000022116D71000-memory.dmp
memory/608-30-0x0000022118A80000-0x0000022118A90000-memory.dmp
memory/608-26-0x0000022116D70000-0x0000022116D71000-memory.dmp
memory/608-16-0x0000022118810000-0x0000022118A80000-memory.dmp
memory/608-1047-0x0000022116D70000-0x0000022116D71000-memory.dmp
memory/608-1046-0x0000022116D70000-0x0000022116D71000-memory.dmp
memory/608-1050-0x0000022116D70000-0x0000022116D71000-memory.dmp
memory/608-1049-0x0000022116D70000-0x0000022116D71000-memory.dmp
memory/608-1129-0x0000022116D70000-0x0000022116D71000-memory.dmp
memory/608-1135-0x0000022116D70000-0x0000022116D71000-memory.dmp
memory/4288-2-0x0000023C962C0000-0x0000023C96530000-memory.dmp
memory/4288-12-0x0000023C94A50000-0x0000023C94A51000-memory.dmp
memory/4288-13-0x0000023C962C0000-0x0000023C96530000-memory.dmp