Analysis
- max time kernel
149s - max time network
157s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
02/10/2026, 07:56
General
- Target villager-news-bedrock-addon-java-port-main/gradlew.bat
- Size 2KB
- Sample261002-js1dvsxflf
- SHA256 475c4f08cd57cf2faa819e7f36d72aa93f0ad646ea23a8f7fa3ef54dee1cbc52
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
- Executes a command shell one-liner 1 TTPs 3 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
- Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\villager-news-bedrock-addon-java-port-main\gradlew.bat"1⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava.exe -version2⤵
-
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe"java.exe" "-Xmx64m" "-Xms64m" "-Dorg.gradle.appname=gradlew" -jar "C:\Users\Admin\AppData\Local\Temp\villager-news-bedrock-addon-java-port-main\\gradle\wrapper\gradle-wrapper.jar"2⤵
- Loads dropped DLL
-
-
C:\Windows\system32\cmd.exe"C:\Windows\system32\cmd.exe" /c exit 12⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exe"C:\Windows\system32\cmd.exe" /c exit 12⤵
- Executes a command shell one-liner
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
3903daac9bc4a3b7.timestamp
native-platform.dll
jansi.dll
gradle-base-services-9.5.1.jar
gradle-launcher-9.5.1.jar
memory/5244-139-0x0000028B803B0000-0x0000028B803C0000-memory.dmp
memory/5244-247-0x0000028B80490000-0x0000028B804A0000-memory.dmp
memory/5244-33-0x0000028B80290000-0x0000028B802A0000-memory.dmp
memory/5244-35-0x0000028B802A0000-0x0000028B802B0000-memory.dmp
memory/5244-37-0x0000028B802B0000-0x0000028B802C0000-memory.dmp
memory/5244-39-0x0000028B802C0000-0x0000028B802D0000-memory.dmp
memory/5244-41-0x0000028B802D0000-0x0000028B802E0000-memory.dmp
memory/5244-44-0x0000028B802E0000-0x0000028B802F0000-memory.dmp
memory/5244-46-0x0000028B80000000-0x0000028B80270000-memory.dmp
memory/5244-48-0x0000028B80300000-0x0000028B80310000-memory.dmp
memory/5244-47-0x0000028B802F0000-0x0000028B80300000-memory.dmp
memory/5244-52-0x0000028B80310000-0x0000028B80320000-memory.dmp
memory/5244-51-0x0000028B80270000-0x0000028B80280000-memory.dmp
memory/5244-54-0x0000028B80320000-0x0000028B80330000-memory.dmp
memory/5244-53-0x0000028B80280000-0x0000028B80290000-memory.dmp
memory/5244-55-0x0000028BF1F20000-0x0000028BF1F21000-memory.dmp
memory/5244-59-0x0000028B80330000-0x0000028B80340000-memory.dmp
memory/5244-61-0x0000028B80340000-0x0000028B80350000-memory.dmp
memory/5244-60-0x0000028B802A0000-0x0000028B802B0000-memory.dmp
memory/5244-58-0x0000028B80290000-0x0000028B802A0000-memory.dmp
memory/5244-66-0x0000028B80350000-0x0000028B80360000-memory.dmp
memory/5244-65-0x0000028B802B0000-0x0000028B802C0000-memory.dmp
memory/5244-70-0x0000028B802C0000-0x0000028B802D0000-memory.dmp
memory/5244-71-0x0000028B80360000-0x0000028B80370000-memory.dmp
memory/5244-77-0x0000028B80370000-0x0000028B80380000-memory.dmp
memory/5244-75-0x0000028B802D0000-0x0000028B802E0000-memory.dmp
memory/5244-79-0x0000028B80380000-0x0000028B80390000-memory.dmp
memory/5244-81-0x0000028B80390000-0x0000028B803A0000-memory.dmp
memory/5244-80-0x0000028B802F0000-0x0000028B80300000-memory.dmp
memory/5244-78-0x0000028B802E0000-0x0000028B802F0000-memory.dmp
memory/5244-83-0x0000028B80300000-0x0000028B80310000-memory.dmp
memory/5244-84-0x0000028B803A0000-0x0000028B803B0000-memory.dmp
memory/5244-86-0x0000028B80310000-0x0000028B80320000-memory.dmp
memory/5244-88-0x0000028B803B0000-0x0000028B803C0000-memory.dmp
memory/5244-90-0x0000028B803C0000-0x0000028B803D0000-memory.dmp
memory/5244-89-0x0000028B80320000-0x0000028B80330000-memory.dmp
memory/5244-95-0x0000028B803D0000-0x0000028B803E0000-memory.dmp
memory/5244-94-0x0000028B80330000-0x0000028B80340000-memory.dmp
memory/5244-97-0x0000028B80340000-0x0000028B80350000-memory.dmp
memory/5244-98-0x0000028B803E0000-0x0000028B803F0000-memory.dmp
memory/5244-100-0x0000028B80350000-0x0000028B80360000-memory.dmp
memory/5244-102-0x0000028B803F0000-0x0000028B80400000-memory.dmp
memory/5244-106-0x0000028B80400000-0x0000028B80410000-memory.dmp
memory/5244-104-0x0000028B80360000-0x0000028B80370000-memory.dmp
memory/5244-109-0x0000028B80410000-0x0000028B80420000-memory.dmp
memory/5244-108-0x0000028B80370000-0x0000028B80380000-memory.dmp
memory/5244-112-0x0000028B80420000-0x0000028B80430000-memory.dmp
memory/5244-111-0x0000028B80380000-0x0000028B80390000-memory.dmp
memory/5244-114-0x0000028B80390000-0x0000028B803A0000-memory.dmp
memory/5244-115-0x0000028BF1F20000-0x0000028BF1F21000-memory.dmp
memory/5244-116-0x0000028BF1F20000-0x0000028BF1F21000-memory.dmp
memory/5244-136-0x0000028B80450000-0x0000028B80460000-memory.dmp
memory/5244-135-0x0000028B803A0000-0x0000028B803B0000-memory.dmp
memory/5244-134-0x0000028B80490000-0x0000028B804A0000-memory.dmp
memory/5244-140-0x0000028B804A0000-0x0000028B804B0000-memory.dmp
memory/5244-29-0x0000028B80270000-0x0000028B80280000-memory.dmp
memory/5244-31-0x0000028B80280000-0x0000028B80290000-memory.dmp
memory/5244-133-0x0000028B80480000-0x0000028B80490000-memory.dmp
memory/5244-1403-0x0000028BF1F20000-0x0000028BF1F21000-memory.dmp
memory/5244-130-0x0000028B80440000-0x0000028B80450000-memory.dmp
memory/5244-129-0x0000028B80430000-0x0000028B80440000-memory.dmp
memory/5244-145-0x0000028B804B0000-0x0000028B804C0000-memory.dmp
memory/5244-144-0x0000028B803C0000-0x0000028B803D0000-memory.dmp
memory/5244-152-0x0000028B803D0000-0x0000028B803E0000-memory.dmp
memory/5244-156-0x0000028B804C0000-0x0000028B804D0000-memory.dmp
memory/5244-155-0x0000028B803E0000-0x0000028B803F0000-memory.dmp
memory/5244-162-0x0000028B803F0000-0x0000028B80400000-memory.dmp
memory/5244-170-0x0000028BF1F20000-0x0000028BF1F21000-memory.dmp
memory/5244-183-0x0000028B804D0000-0x0000028B804E0000-memory.dmp
memory/5244-178-0x0000028B80400000-0x0000028B80410000-memory.dmp
memory/5244-175-0x0000028BF1F20000-0x0000028BF1F21000-memory.dmp
memory/5244-193-0x0000028B80410000-0x0000028B80420000-memory.dmp
memory/5244-195-0x0000028B804E0000-0x0000028B804F0000-memory.dmp
memory/5244-210-0x0000028B80430000-0x0000028B80440000-memory.dmp
memory/5244-211-0x0000028B804F0000-0x0000028B80500000-memory.dmp
memory/5244-209-0x0000028B80420000-0x0000028B80430000-memory.dmp
memory/5244-132-0x0000028B80470000-0x0000028B80480000-memory.dmp
memory/5244-248-0x0000028B80500000-0x0000028B80510000-memory.dmp
memory/5244-246-0x0000028B80480000-0x0000028B80490000-memory.dmp
memory/5244-242-0x0000028B80440000-0x0000028B80450000-memory.dmp
memory/5244-245-0x0000028B80470000-0x0000028B80480000-memory.dmp
memory/5244-243-0x0000028B80460000-0x0000028B80470000-memory.dmp
memory/5244-316-0x0000028B80510000-0x0000028B80520000-memory.dmp
memory/5244-315-0x0000028B80450000-0x0000028B80460000-memory.dmp
memory/5244-334-0x0000028B804A0000-0x0000028B804B0000-memory.dmp
memory/5244-335-0x0000028B80520000-0x0000028B80530000-memory.dmp
memory/5244-342-0x0000028B80530000-0x0000028B80540000-memory.dmp
memory/5244-341-0x0000028B804B0000-0x0000028B804C0000-memory.dmp
memory/5244-475-0x0000028B80540000-0x0000028B80550000-memory.dmp
memory/5244-575-0x0000028B804C0000-0x0000028B804D0000-memory.dmp
memory/5244-576-0x0000028B80550000-0x0000028B80560000-memory.dmp
memory/5244-630-0x0000028B80560000-0x0000028B80570000-memory.dmp
memory/5244-904-0x0000028B804D0000-0x0000028B804E0000-memory.dmp
memory/5244-909-0x0000028B804E0000-0x0000028B804F0000-memory.dmp
memory/5244-908-0x0000028B805A0000-0x0000028B805B0000-memory.dmp
memory/5244-907-0x0000028B80590000-0x0000028B805A0000-memory.dmp
memory/5244-906-0x0000028B80580000-0x0000028B80590000-memory.dmp
memory/5244-905-0x0000028B80570000-0x0000028B80580000-memory.dmp
memory/5244-1299-0x0000028BF1F20000-0x0000028BF1F21000-memory.dmp
memory/5244-131-0x0000028B80460000-0x0000028B80470000-memory.dmp
memory/5244-1418-0x0000028BF1F20000-0x0000028BF1F21000-memory.dmp
memory/5244-1420-0x0000028BF1F20000-0x0000028BF1F21000-memory.dmp
memory/5244-26-0x0000028BF1F20000-0x0000028BF1F21000-memory.dmp
memory/5244-1473-0x0000028BF1F20000-0x0000028BF1F21000-memory.dmp
memory/5244-16-0x0000028B80000000-0x0000028B80270000-memory.dmp
memory/5244-1484-0x0000028BF1F20000-0x0000028BF1F21000-memory.dmp
memory/5244-1483-0x0000028BF1F20000-0x0000028BF1F21000-memory.dmp
memory/5244-1529-0x0000028BF1F20000-0x0000028BF1F21000-memory.dmp
memory/5244-1534-0x0000028BF1F20000-0x0000028BF1F21000-memory.dmp
memory/5244-1533-0x0000028BF1F20000-0x0000028BF1F21000-memory.dmp
memory/5244-1535-0x0000028BF1F20000-0x0000028BF1F21000-memory.dmp
memory/5244-1536-0x00007FFF15AC0000-0x00007FFF15AE4000-memory.dmp
memory/5396-2-0x000001B427ED0000-0x000001B428140000-memory.dmp
memory/5396-12-0x000001B426890000-0x000001B426891000-memory.dmp
memory/5396-13-0x000001B427ED0000-0x000001B428140000-memory.dmp