Analysis
- max time kernel
150s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
02/10/2026, 09:56
General
- Target gradlew.bat
- Size 2KB
- Sample261002-lyc7mav13j
- SHA256 475c4f08cd57cf2faa819e7f36d72aa93f0ad646ea23a8f7fa3ef54dee1cbc52
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
- Executes a command shell one-liner 1 TTPs 3 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
- Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\gradlew.bat"1⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava.exe -version2⤵
-
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe"java.exe" "-Xmx64m" "-Xms64m" "-Dorg.gradle.appname=gradlew" -jar "C:\Users\Admin\AppData\Local\Temp\\gradle\wrapper\gradle-wrapper.jar"2⤵
- Loads dropped DLL
-
-
C:\Windows\system32\cmd.exe"C:\Windows\system32\cmd.exe" /c exit 12⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exe"C:\Windows\system32\cmd.exe" /c exit 12⤵
- Executes a command shell one-liner
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
3903daac9bc4a3b7.timestamp
native-platform.dll
jansi.dll
gradle-base-services-9.5.1.jar
gradle-launcher-9.5.1.jar
memory/2968-136-0x000001FE3B250000-0x000001FE3B260000-memory.dmp
memory/2968-47-0x000001FE3B150000-0x000001FE3B160000-memory.dmp
memory/2968-33-0x000001FE3B0F0000-0x000001FE3B100000-memory.dmp
memory/2968-35-0x000001FE3B100000-0x000001FE3B110000-memory.dmp
memory/2968-37-0x000001FE3B110000-0x000001FE3B120000-memory.dmp
memory/2968-39-0x000001FE3B120000-0x000001FE3B130000-memory.dmp
memory/2968-41-0x000001FE3B130000-0x000001FE3B140000-memory.dmp
memory/2968-44-0x000001FE3B140000-0x000001FE3B150000-memory.dmp
memory/2968-46-0x000001FE3AE60000-0x000001FE3B0D0000-memory.dmp
memory/2968-48-0x000001FE3B160000-0x000001FE3B170000-memory.dmp
memory/2968-132-0x000001FE3B240000-0x000001FE3B250000-memory.dmp
memory/2968-50-0x000001FE3B0D0000-0x000001FE3B0E0000-memory.dmp
memory/2968-51-0x000001FE3B170000-0x000001FE3B180000-memory.dmp
memory/2968-61-0x000001FE3ADF0000-0x000001FE3ADF1000-memory.dmp
memory/2968-60-0x000001FE3B1A0000-0x000001FE3B1B0000-memory.dmp
memory/2968-58-0x000001FE3B0F0000-0x000001FE3B100000-memory.dmp
memory/2968-57-0x000001FE3B190000-0x000001FE3B1A0000-memory.dmp
memory/2968-56-0x000001FE3B180000-0x000001FE3B190000-memory.dmp
memory/2968-55-0x000001FE3B0E0000-0x000001FE3B0F0000-memory.dmp
memory/2968-59-0x000001FE3B100000-0x000001FE3B110000-memory.dmp
memory/2968-65-0x000001FE3B1B0000-0x000001FE3B1C0000-memory.dmp
memory/2968-68-0x000001FE3B1C0000-0x000001FE3B1D0000-memory.dmp
memory/2968-67-0x000001FE3B120000-0x000001FE3B130000-memory.dmp
memory/2968-64-0x000001FE3B110000-0x000001FE3B120000-memory.dmp
memory/2968-71-0x000001FE3B130000-0x000001FE3B140000-memory.dmp
memory/2968-72-0x000001FE3B1D0000-0x000001FE3B1E0000-memory.dmp
memory/2968-79-0x000001FE3B1E0000-0x000001FE3B1F0000-memory.dmp
memory/2968-81-0x000001FE3B1F0000-0x000001FE3B200000-memory.dmp
memory/2968-80-0x000001FE3B150000-0x000001FE3B160000-memory.dmp
memory/2968-78-0x000001FE3B140000-0x000001FE3B150000-memory.dmp
memory/2968-83-0x000001FE3B160000-0x000001FE3B170000-memory.dmp
memory/2968-84-0x000001FE3B200000-0x000001FE3B210000-memory.dmp
memory/2968-91-0x000001FE3B190000-0x000001FE3B1A0000-memory.dmp
memory/2968-88-0x000001FE3B210000-0x000001FE3B220000-memory.dmp
memory/2968-89-0x000001FE3B220000-0x000001FE3B230000-memory.dmp
memory/2968-87-0x000001FE3B170000-0x000001FE3B180000-memory.dmp
memory/2968-90-0x000001FE3B180000-0x000001FE3B190000-memory.dmp
memory/2968-93-0x000001FE3B230000-0x000001FE3B240000-memory.dmp
memory/2968-96-0x000001FE3B1A0000-0x000001FE3B1B0000-memory.dmp
memory/2968-97-0x000001FE3B240000-0x000001FE3B250000-memory.dmp
memory/2968-100-0x000001FE3B1B0000-0x000001FE3B1C0000-memory.dmp
memory/2968-101-0x000001FE3B250000-0x000001FE3B260000-memory.dmp
memory/2968-104-0x000001FE3B260000-0x000001FE3B270000-memory.dmp
memory/2968-103-0x000001FE3B1C0000-0x000001FE3B1D0000-memory.dmp
memory/2968-108-0x000001FE3B270000-0x000001FE3B280000-memory.dmp
memory/2968-107-0x000001FE3B1D0000-0x000001FE3B1E0000-memory.dmp
memory/2968-110-0x000001FE3B1E0000-0x000001FE3B1F0000-memory.dmp
memory/2968-111-0x000001FE3B280000-0x000001FE3B290000-memory.dmp
memory/2968-115-0x000001FE3B290000-0x000001FE3B2A0000-memory.dmp
memory/2968-114-0x000001FE3B1F0000-0x000001FE3B200000-memory.dmp
memory/2968-133-0x000001FE3B2E0000-0x000001FE3B2F0000-memory.dmp
memory/2968-126-0x000001FE3B2C0000-0x000001FE3B2D0000-memory.dmp
memory/2968-125-0x000001FE3ADF0000-0x000001FE3ADF1000-memory.dmp
memory/2968-29-0x000001FE3B0D0000-0x000001FE3B0E0000-memory.dmp
memory/2968-135-0x000001FE3B300000-0x000001FE3B310000-memory.dmp
memory/2968-134-0x000001FE3B2F0000-0x000001FE3B300000-memory.dmp
memory/2968-118-0x000001FE3B2A0000-0x000001FE3B2B0000-memory.dmp
memory/2968-32-0x000001FE3B0E0000-0x000001FE3B0F0000-memory.dmp
memory/2968-557-0x000001FE3B330000-0x000001FE3B340000-memory.dmp
memory/2968-127-0x000001FE3B2D0000-0x000001FE3B2E0000-memory.dmp
memory/2968-122-0x000001FE3B2B0000-0x000001FE3B2C0000-memory.dmp
memory/2968-137-0x000001FE3ADF0000-0x000001FE3ADF1000-memory.dmp
memory/2968-121-0x000001FE3B220000-0x000001FE3B230000-memory.dmp
memory/2968-120-0x000001FE3B210000-0x000001FE3B220000-memory.dmp
memory/2968-117-0x000001FE3B200000-0x000001FE3B210000-memory.dmp
memory/2968-141-0x000001FE3B310000-0x000001FE3B320000-memory.dmp
memory/2968-140-0x000001FE3B260000-0x000001FE3B270000-memory.dmp
memory/2968-152-0x000001FE3B270000-0x000001FE3B280000-memory.dmp
memory/2968-158-0x000001FE3B320000-0x000001FE3B330000-memory.dmp
memory/2968-157-0x000001FE3B280000-0x000001FE3B290000-memory.dmp
memory/2968-163-0x000001FE3B330000-0x000001FE3B340000-memory.dmp
memory/2968-162-0x000001FE3B290000-0x000001FE3B2A0000-memory.dmp
memory/2968-167-0x000001FE3B2A0000-0x000001FE3B2B0000-memory.dmp
memory/2968-176-0x000001FE3B2B0000-0x000001FE3B2C0000-memory.dmp
memory/2968-177-0x000001FE3ADF0000-0x000001FE3ADF1000-memory.dmp
memory/2968-201-0x000001FE3B340000-0x000001FE3B350000-memory.dmp
memory/2968-199-0x000001FE3B2D0000-0x000001FE3B2E0000-memory.dmp
memory/2968-198-0x000001FE3B2C0000-0x000001FE3B2D0000-memory.dmp
memory/2968-210-0x000001FE3B350000-0x000001FE3B360000-memory.dmp
memory/2968-230-0x000001FE3B300000-0x000001FE3B310000-memory.dmp
memory/2968-231-0x000001FE3B360000-0x000001FE3B370000-memory.dmp
memory/2968-229-0x000001FE3B2F0000-0x000001FE3B300000-memory.dmp
memory/2968-228-0x000001FE3B2E0000-0x000001FE3B2F0000-memory.dmp
memory/2968-254-0x000001FE3B370000-0x000001FE3B380000-memory.dmp
memory/2968-324-0x000001FE3B380000-0x000001FE3B390000-memory.dmp
memory/2968-323-0x000001FE3B310000-0x000001FE3B320000-memory.dmp
memory/2968-338-0x000001FE3B390000-0x000001FE3B3A0000-memory.dmp
memory/2968-460-0x000001FE3B320000-0x000001FE3B330000-memory.dmp
memory/2968-461-0x000001FE3B3A0000-0x000001FE3B3B0000-memory.dmp
memory/2968-558-0x000001FE3B3B0000-0x000001FE3B3C0000-memory.dmp
memory/2968-128-0x000001FE3B230000-0x000001FE3B240000-memory.dmp
memory/2968-626-0x000001FE3B3C0000-0x000001FE3B3D0000-memory.dmp
memory/2968-685-0x000001FE3ADF0000-0x000001FE3ADF1000-memory.dmp
memory/2968-688-0x000001FE3B3D0000-0x000001FE3B3E0000-memory.dmp
memory/2968-898-0x000001FE3B3E0000-0x000001FE3B3F0000-memory.dmp
memory/2968-897-0x000001FE3B340000-0x000001FE3B350000-memory.dmp
memory/2968-906-0x000001FE3B350000-0x000001FE3B360000-memory.dmp
memory/2968-907-0x000001FE3B3F0000-0x000001FE3B400000-memory.dmp
memory/2968-917-0x000001FE3ADF0000-0x000001FE3ADF1000-memory.dmp
memory/2968-916-0x000001FE3ADF0000-0x000001FE3ADF1000-memory.dmp
memory/2968-1417-0x000001FE3ADF0000-0x000001FE3ADF1000-memory.dmp
memory/2968-1419-0x000001FE3ADF0000-0x000001FE3ADF1000-memory.dmp
memory/2968-26-0x000001FE3ADF0000-0x000001FE3ADF1000-memory.dmp
memory/2968-1431-0x000001FE3ADF0000-0x000001FE3ADF1000-memory.dmp
memory/2968-1451-0x000001FE3ADF0000-0x000001FE3ADF1000-memory.dmp
memory/2968-16-0x000001FE3AE60000-0x000001FE3B0D0000-memory.dmp
memory/2968-1528-0x000001FE3ADF0000-0x000001FE3ADF1000-memory.dmp
memory/2968-1531-0x000001FE3ADF0000-0x000001FE3ADF1000-memory.dmp
memory/2968-1529-0x000001FE3ADF0000-0x000001FE3ADF1000-memory.dmp
memory/2968-1534-0x000001FE3ADF0000-0x000001FE3ADF1000-memory.dmp
memory/2968-1535-0x00007FFE5C2F0000-0x00007FFE5C314000-memory.dmp
memory/5060-2-0x000001FD91110000-0x000001FD91380000-memory.dmp
memory/5060-12-0x000001FD8F8A0000-0x000001FD8F8A1000-memory.dmp
memory/5060-13-0x000001FD91110000-0x000001FD91380000-memory.dmp