Analysis
- max time kernel
148s - max time network
133s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
02/10/2026, 07:56
General
- Target villager-news-bedrock-addon-java-port-main/gradlew.bat
- Size 2KB
- Sample261002-js1dvsxflf
- SHA256 475c4f08cd57cf2faa819e7f36d72aa93f0ad646ea23a8f7fa3ef54dee1cbc52
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
- Executes a command shell one-liner 1 TTPs 3 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
- Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\villager-news-bedrock-addon-java-port-main\gradlew.bat"1⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava.exe -version2⤵
-
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe"java.exe" "-Xmx64m" "-Xms64m" "-Dorg.gradle.appname=gradlew" -jar "C:\Users\Admin\AppData\Local\Temp\villager-news-bedrock-addon-java-port-main\\gradle\wrapper\gradle-wrapper.jar"2⤵
- Loads dropped DLL
-
-
C:\Windows\system32\cmd.exe"C:\Windows\system32\cmd.exe" /c exit 12⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exe"C:\Windows\system32\cmd.exe" /c exit 12⤵
- Executes a command shell one-liner
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
3903daac9bc4a3b7.timestamp
native-platform.dll
jansi.dll
gradle-base-services-9.5.1.jar
gradle-launcher-9.5.1.jar
memory/2924-2-0x000001B488DB0000-0x000001B489020000-memory.dmp
memory/2924-12-0x000001B4871E0000-0x000001B4871E1000-memory.dmp
memory/2924-13-0x000001B488DB0000-0x000001B489020000-memory.dmp
memory/3900-117-0x00000269F0CE0000-0x00000269F0CF0000-memory.dmp
memory/3900-82-0x00000269F0C40000-0x00000269F0C50000-memory.dmp
memory/3900-30-0x00000269F0B20000-0x00000269F0B30000-memory.dmp
memory/3900-32-0x00000269F0B30000-0x00000269F0B40000-memory.dmp
memory/3900-34-0x00000269F0B40000-0x00000269F0B50000-memory.dmp
memory/3900-37-0x00000269F0B50000-0x00000269F0B60000-memory.dmp
memory/3900-38-0x00000269F0B60000-0x00000269F0B70000-memory.dmp
memory/3900-40-0x00000269F0B70000-0x00000269F0B80000-memory.dmp
memory/3900-42-0x00000269F0B80000-0x00000269F0B90000-memory.dmp
memory/3900-45-0x00000269F08B0000-0x00000269F0B20000-memory.dmp
memory/3900-46-0x00000269F0B90000-0x00000269F0BA0000-memory.dmp
memory/3900-47-0x00000269F0BA0000-0x00000269F0BB0000-memory.dmp
memory/3900-49-0x00000269F0BB0000-0x00000269F0BC0000-memory.dmp
memory/3900-51-0x00000269F0B20000-0x00000269F0B30000-memory.dmp
memory/3900-52-0x00000269F0BC0000-0x00000269F0BD0000-memory.dmp
memory/3900-56-0x00000269F0BD0000-0x00000269F0BE0000-memory.dmp
memory/3900-55-0x00000269F0B30000-0x00000269F0B40000-memory.dmp
memory/3900-59-0x00000269F0B40000-0x00000269F0B50000-memory.dmp
memory/3900-62-0x00000269F0B50000-0x00000269F0B60000-memory.dmp
memory/3900-61-0x00000269F0BF0000-0x00000269F0C00000-memory.dmp
memory/3900-60-0x00000269F0BE0000-0x00000269F0BF0000-memory.dmp
memory/3900-67-0x00000269F0C00000-0x00000269F0C10000-memory.dmp
memory/3900-66-0x00000269F0B60000-0x00000269F0B70000-memory.dmp
memory/3900-71-0x00000269F0B70000-0x00000269F0B80000-memory.dmp
memory/3900-72-0x00000269F0C10000-0x00000269F0C20000-memory.dmp
memory/3900-75-0x00000269F0B80000-0x00000269F0B90000-memory.dmp
memory/3900-76-0x00000269F0C20000-0x00000269F0C30000-memory.dmp
memory/3900-80-0x00000269F0C30000-0x00000269F0C40000-memory.dmp
memory/3900-122-0x00000269F0C60000-0x00000269F0C70000-memory.dmp
memory/3900-81-0x00000269F0BA0000-0x00000269F0BB0000-memory.dmp
memory/3900-79-0x00000269F0B90000-0x00000269F0BA0000-memory.dmp
memory/3900-84-0x00000269F0BB0000-0x00000269F0BC0000-memory.dmp
memory/3900-85-0x00000269F0C50000-0x00000269F0C60000-memory.dmp
memory/3900-88-0x00000269F0C60000-0x00000269F0C70000-memory.dmp
memory/3900-87-0x00000269F0BC0000-0x00000269F0BD0000-memory.dmp
memory/3900-90-0x00000269F0BD0000-0x00000269F0BE0000-memory.dmp
memory/3900-91-0x00000269F0C70000-0x00000269F0C80000-memory.dmp
memory/3900-96-0x00000269F0BF0000-0x00000269F0C00000-memory.dmp
memory/3900-126-0x00000269F0D10000-0x00000269F0D20000-memory.dmp
memory/3900-95-0x00000269F0BE0000-0x00000269F0BF0000-memory.dmp
memory/3900-99-0x00000269F0C90000-0x00000269F0CA0000-memory.dmp
memory/3900-102-0x00000269F0C00000-0x00000269F0C10000-memory.dmp
memory/3900-103-0x00000269F0CA0000-0x00000269F0CB0000-memory.dmp
memory/3900-106-0x00000269F0CB0000-0x00000269F0CC0000-memory.dmp
memory/3900-105-0x00000269F0C10000-0x00000269F0C20000-memory.dmp
memory/3900-109-0x00000269EF040000-0x00000269EF041000-memory.dmp
memory/3900-123-0x00000269F0D00000-0x00000269F0D10000-memory.dmp
memory/3900-111-0x00000269F0CC0000-0x00000269F0CD0000-memory.dmp
memory/3900-114-0x00000269F0CD0000-0x00000269F0CE0000-memory.dmp
memory/3900-113-0x00000269F0C30000-0x00000269F0C40000-memory.dmp
memory/3900-16-0x00000269F08B0000-0x00000269F0B20000-memory.dmp
memory/3900-116-0x00000269F0C40000-0x00000269F0C50000-memory.dmp
memory/3900-120-0x00000269F0CF0000-0x00000269F0D00000-memory.dmp
memory/3900-119-0x00000269F0C50000-0x00000269F0C60000-memory.dmp
memory/3900-110-0x00000269F0C20000-0x00000269F0C30000-memory.dmp
memory/3900-26-0x00000269EF040000-0x00000269EF041000-memory.dmp
memory/3900-97-0x00000269F0C80000-0x00000269F0C90000-memory.dmp
memory/3900-125-0x00000269F0C70000-0x00000269F0C80000-memory.dmp
memory/3900-127-0x00000269EF040000-0x00000269EF041000-memory.dmp
memory/3900-133-0x00000269F0C90000-0x00000269F0CA0000-memory.dmp
memory/3900-132-0x00000269F0D30000-0x00000269F0D40000-memory.dmp
memory/3900-131-0x00000269F0D20000-0x00000269F0D30000-memory.dmp
memory/3900-130-0x00000269F0C80000-0x00000269F0C90000-memory.dmp
memory/3900-134-0x00000269EF040000-0x00000269EF041000-memory.dmp
memory/3900-137-0x00000269F0D40000-0x00000269F0D50000-memory.dmp
memory/3900-136-0x00000269F0CA0000-0x00000269F0CB0000-memory.dmp
memory/3900-139-0x00000269F0CB0000-0x00000269F0CC0000-memory.dmp
memory/3900-140-0x00000269EF040000-0x00000269EF041000-memory.dmp
memory/3900-145-0x00000269F0D50000-0x00000269F0D60000-memory.dmp
memory/3900-144-0x00000269F0CC0000-0x00000269F0CD0000-memory.dmp
memory/3900-149-0x00000269F0CD0000-0x00000269F0CE0000-memory.dmp
memory/3900-157-0x00000269F0D60000-0x00000269F0D70000-memory.dmp
memory/3900-156-0x00000269F0CE0000-0x00000269F0CF0000-memory.dmp
memory/3900-160-0x00000269F0CF0000-0x00000269F0D00000-memory.dmp
memory/3900-165-0x00000269F0D00000-0x00000269F0D10000-memory.dmp
memory/3900-167-0x00000269F0D10000-0x00000269F0D20000-memory.dmp
memory/3900-181-0x00000269EF040000-0x00000269EF041000-memory.dmp
memory/3900-196-0x00000269F0D70000-0x00000269F0D80000-memory.dmp
memory/3900-208-0x00000269F0D80000-0x00000269F0D90000-memory.dmp
memory/3900-207-0x00000269F0D40000-0x00000269F0D50000-memory.dmp
memory/3900-195-0x00000269F0D30000-0x00000269F0D40000-memory.dmp
memory/3900-216-0x00000269F0D90000-0x00000269F0DA0000-memory.dmp
memory/3900-194-0x00000269F0D20000-0x00000269F0D30000-memory.dmp
memory/3900-176-0x00000269EF040000-0x00000269EF041000-memory.dmp
memory/3900-250-0x00000269F0DA0000-0x00000269F0DB0000-memory.dmp
memory/3900-249-0x00000269F0D50000-0x00000269F0D60000-memory.dmp
memory/3900-259-0x00000269F0DB0000-0x00000269F0DC0000-memory.dmp
memory/3900-335-0x00000269F0DC0000-0x00000269F0DD0000-memory.dmp
memory/3900-334-0x00000269F0D60000-0x00000269F0D70000-memory.dmp
memory/3900-345-0x00000269F0DD0000-0x00000269F0DE0000-memory.dmp
memory/3900-472-0x00000269F0DE0000-0x00000269F0DF0000-memory.dmp
memory/3900-613-0x00000269F0DF0000-0x00000269F0E00000-memory.dmp
memory/3900-618-0x00000269F0E00000-0x00000269F0E10000-memory.dmp
memory/3900-617-0x00000269F0D70000-0x00000269F0D80000-memory.dmp
memory/3900-896-0x00000269F0D80000-0x00000269F0D90000-memory.dmp
memory/3900-904-0x00000269F0D90000-0x00000269F0DA0000-memory.dmp
memory/3900-905-0x00000269F0E30000-0x00000269F0E40000-memory.dmp
memory/3900-895-0x00000269F0E20000-0x00000269F0E30000-memory.dmp
memory/3900-894-0x00000269F0E10000-0x00000269F0E20000-memory.dmp
memory/3900-912-0x00000269EF040000-0x00000269EF041000-memory.dmp
memory/3900-915-0x00000269F0E40000-0x00000269F0E50000-memory.dmp
memory/3900-914-0x00000269F0DA0000-0x00000269F0DB0000-memory.dmp
memory/3900-1408-0x00000269EF040000-0x00000269EF041000-memory.dmp
memory/3900-1419-0x00000269EF040000-0x00000269EF041000-memory.dmp
memory/3900-1421-0x00000269EF040000-0x00000269EF041000-memory.dmp
memory/3900-1439-0x00000269EF040000-0x00000269EF041000-memory.dmp
memory/3900-1446-0x00000269EF040000-0x00000269EF041000-memory.dmp
memory/3900-1545-0x00000269EF040000-0x00000269EF041000-memory.dmp
memory/3900-1548-0x00000269EF040000-0x00000269EF041000-memory.dmp
memory/3900-1549-0x00007FF8BE230000-0x00007FF8BE254000-memory.dmp