Analysis
- max time kernel
148s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
02/10/2026, 09:56
General
- Target gradlew.bat
- Size 2KB
- Sample261002-lyc7mav13j
- SHA256 475c4f08cd57cf2faa819e7f36d72aa93f0ad646ea23a8f7fa3ef54dee1cbc52
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
- Executes a command shell one-liner 1 TTPs 3 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
- Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\gradlew.bat"1⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava.exe -version2⤵
-
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe"java.exe" "-Xmx64m" "-Xms64m" "-Dorg.gradle.appname=gradlew" -jar "C:\Users\Admin\AppData\Local\Temp\\gradle\wrapper\gradle-wrapper.jar"2⤵
- Loads dropped DLL
-
-
C:\Windows\system32\cmd.exe"C:\Windows\system32\cmd.exe" /c exit 12⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exe"C:\Windows\system32\cmd.exe" /c exit 12⤵
- Executes a command shell one-liner
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
3903daac9bc4a3b7.timestamp
native-platform.dll
jansi.dll
gradle-base-services-9.5.1.jar
gradle-launcher-9.5.1.jar
memory/1800-2-0x0000017D419B0000-0x0000017D41C20000-memory.dmp
memory/1800-12-0x0000017D40370000-0x0000017D40371000-memory.dmp
memory/1800-13-0x0000017D419B0000-0x0000017D41C20000-memory.dmp
memory/3372-114-0x000001890FA20000-0x000001890FA30000-memory.dmp
memory/3372-904-0x000001890FC20000-0x000001890FC30000-memory.dmp
memory/3372-29-0x000001890F900000-0x000001890F910000-memory.dmp
memory/3372-30-0x000001890F910000-0x000001890F920000-memory.dmp
memory/3372-32-0x000001890F920000-0x000001890F930000-memory.dmp
memory/3372-35-0x000001890F930000-0x000001890F940000-memory.dmp
memory/3372-36-0x000001890F940000-0x000001890F950000-memory.dmp
memory/3372-39-0x000001890F950000-0x000001890F960000-memory.dmp
memory/3372-41-0x000001890F960000-0x000001890F970000-memory.dmp
memory/3372-43-0x000001890F970000-0x000001890F980000-memory.dmp
memory/3372-46-0x000001890F980000-0x000001890F990000-memory.dmp
memory/3372-45-0x000001890F690000-0x000001890F900000-memory.dmp
memory/3372-48-0x000001890F990000-0x000001890F9A0000-memory.dmp
memory/3372-133-0x000001890FB20000-0x000001890FB30000-memory.dmp
memory/3372-51-0x000001890F910000-0x000001890F920000-memory.dmp
memory/3372-50-0x000001890F900000-0x000001890F910000-memory.dmp
memory/3372-57-0x000001890F920000-0x000001890F930000-memory.dmp
memory/3372-56-0x000001890F9C0000-0x000001890F9D0000-memory.dmp
memory/3372-55-0x000001890F9B0000-0x000001890F9C0000-memory.dmp
memory/3372-61-0x000001890F9D0000-0x000001890F9E0000-memory.dmp
memory/3372-60-0x000001890F930000-0x000001890F940000-memory.dmp
memory/3372-64-0x000001890F9E0000-0x000001890F9F0000-memory.dmp
memory/3372-63-0x000001890F940000-0x000001890F950000-memory.dmp
memory/3372-69-0x000001890F9F0000-0x000001890FA00000-memory.dmp
memory/3372-68-0x000001890F950000-0x000001890F960000-memory.dmp
memory/3372-74-0x000001890F960000-0x000001890F970000-memory.dmp
memory/3372-75-0x000001890FA00000-0x000001890FA10000-memory.dmp
memory/3372-79-0x000001890FA10000-0x000001890FA20000-memory.dmp
memory/3372-78-0x000001890F970000-0x000001890F980000-memory.dmp
memory/3372-80-0x000001890F980000-0x000001890F990000-memory.dmp
memory/3372-81-0x000001890FA20000-0x000001890FA30000-memory.dmp
memory/3372-87-0x000001890F9A0000-0x000001890F9B0000-memory.dmp
memory/3372-86-0x000001890FA40000-0x000001890FA50000-memory.dmp
memory/3372-85-0x000001890FA30000-0x000001890FA40000-memory.dmp
memory/3372-84-0x000001890F990000-0x000001890F9A0000-memory.dmp
memory/3372-91-0x000001890FA50000-0x000001890FA60000-memory.dmp
memory/3372-90-0x000001890F9C0000-0x000001890F9D0000-memory.dmp
memory/3372-89-0x000001890F9B0000-0x000001890F9C0000-memory.dmp
memory/3372-93-0x000001890FA60000-0x000001890FA70000-memory.dmp
memory/3372-98-0x000001890FA70000-0x000001890FA80000-memory.dmp
memory/3372-97-0x000001890F9D0000-0x000001890F9E0000-memory.dmp
memory/3372-101-0x000001890FA80000-0x000001890FA90000-memory.dmp
memory/3372-100-0x000001890F9E0000-0x000001890F9F0000-memory.dmp
memory/3372-104-0x000001890F9F0000-0x000001890FA00000-memory.dmp
memory/3372-105-0x000001890FA90000-0x000001890FAA0000-memory.dmp
memory/3372-108-0x000001890FAA0000-0x000001890FAB0000-memory.dmp
memory/3372-107-0x000001890FA00000-0x000001890FA10000-memory.dmp
memory/3372-112-0x000001890FAB0000-0x000001890FAC0000-memory.dmp
memory/3372-111-0x000001890FA10000-0x000001890FA20000-memory.dmp
memory/3372-115-0x000001890FAC0000-0x000001890FAD0000-memory.dmp
memory/3372-16-0x000001890F690000-0x000001890F900000-memory.dmp
memory/3372-119-0x000001890FAD0000-0x000001890FAE0000-memory.dmp
memory/3372-121-0x000001890FAE0000-0x000001890FAF0000-memory.dmp
memory/3372-128-0x000001890DDB0000-0x000001890DDB1000-memory.dmp
memory/3372-26-0x000001890DDB0000-0x000001890DDB1000-memory.dmp
memory/3372-127-0x000001890FB00000-0x000001890FB10000-memory.dmp
memory/3372-52-0x000001890F9A0000-0x000001890F9B0000-memory.dmp
memory/3372-132-0x000001890FB10000-0x000001890FB20000-memory.dmp
memory/3372-131-0x000001890FA70000-0x000001890FA80000-memory.dmp
memory/3372-126-0x000001890FA60000-0x000001890FA70000-memory.dmp
memory/3372-124-0x000001890FAF0000-0x000001890FB00000-memory.dmp
memory/3372-123-0x000001890FA50000-0x000001890FA60000-memory.dmp
memory/3372-118-0x000001890FA40000-0x000001890FA50000-memory.dmp
memory/3372-117-0x000001890FA30000-0x000001890FA40000-memory.dmp
memory/3372-135-0x000001890DDB0000-0x000001890DDB1000-memory.dmp
memory/3372-138-0x000001890FB30000-0x000001890FB40000-memory.dmp
memory/3372-137-0x000001890FA90000-0x000001890FAA0000-memory.dmp
memory/3372-145-0x000001890FB40000-0x000001890FB50000-memory.dmp
memory/3372-144-0x000001890FAA0000-0x000001890FAB0000-memory.dmp
memory/3372-154-0x000001890FAB0000-0x000001890FAC0000-memory.dmp
memory/3372-158-0x000001890FB50000-0x000001890FB60000-memory.dmp
memory/3372-157-0x000001890FAC0000-0x000001890FAD0000-memory.dmp
memory/3372-164-0x000001890FAD0000-0x000001890FAE0000-memory.dmp
memory/3372-194-0x000001890FAF0000-0x000001890FB00000-memory.dmp
memory/3372-192-0x000001890FB60000-0x000001890FB70000-memory.dmp
memory/3372-190-0x000001890FAE0000-0x000001890FAF0000-memory.dmp
memory/3372-212-0x000001890FB70000-0x000001890FB80000-memory.dmp
memory/3372-211-0x000001890FB00000-0x000001890FB10000-memory.dmp
memory/3372-222-0x000001890FB80000-0x000001890FB90000-memory.dmp
memory/3372-221-0x000001890FB20000-0x000001890FB30000-memory.dmp
memory/3372-220-0x000001890FB10000-0x000001890FB20000-memory.dmp
memory/3372-278-0x000001890FB90000-0x000001890FBA0000-memory.dmp
memory/3372-321-0x000001890FBA0000-0x000001890FBB0000-memory.dmp
memory/3372-320-0x000001890FB30000-0x000001890FB40000-memory.dmp
memory/3372-336-0x000001890FBB0000-0x000001890FBC0000-memory.dmp
memory/3372-335-0x000001890FB40000-0x000001890FB50000-memory.dmp
memory/3372-346-0x000001890FBC0000-0x000001890FBD0000-memory.dmp
memory/3372-615-0x000001890FBE0000-0x000001890FBF0000-memory.dmp
memory/3372-614-0x000001890FBD0000-0x000001890FBE0000-memory.dmp
memory/3372-613-0x000001890FB50000-0x000001890FB60000-memory.dmp
memory/3372-903-0x000001890FC10000-0x000001890FC20000-memory.dmp
memory/3372-134-0x000001890FA80000-0x000001890FA90000-memory.dmp
memory/3372-902-0x000001890FC00000-0x000001890FC10000-memory.dmp
memory/3372-901-0x000001890FBF0000-0x000001890FC00000-memory.dmp
memory/3372-900-0x000001890FB60000-0x000001890FB70000-memory.dmp
memory/3372-996-0x000001890FC30000-0x000001890FC40000-memory.dmp
memory/3372-991-0x000001890FB70000-0x000001890FB80000-memory.dmp
memory/3372-1113-0x000001890DDB0000-0x000001890DDB1000-memory.dmp
memory/3372-1416-0x000001890DDB0000-0x000001890DDB1000-memory.dmp
memory/3372-1418-0x000001890DDB0000-0x000001890DDB1000-memory.dmp
memory/3372-1417-0x000001890DDB0000-0x000001890DDB1000-memory.dmp
memory/3372-1476-0x000001890DDB0000-0x000001890DDB1000-memory.dmp
memory/3372-1477-0x000001890DDB0000-0x000001890DDB1000-memory.dmp
memory/3372-1479-0x000001890DDB0000-0x000001890DDB1000-memory.dmp
memory/3372-1499-0x000001890DDB0000-0x000001890DDB1000-memory.dmp
memory/3372-1530-0x000001890DDB0000-0x000001890DDB1000-memory.dmp
memory/3372-1531-0x000001890DDB0000-0x000001890DDB1000-memory.dmp
memory/3372-1535-0x000001890DDB0000-0x000001890DDB1000-memory.dmp
memory/3372-1536-0x00007FFA32650000-0x00007FFA32674000-memory.dmp