Analysis
- max time kernel
148s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
15/10/2026, 18:06
General
- Target anubis-addon-template/gradlew.bat
- Size 2KB
- Sample261015-wpwmqaaz2s
- SHA256 fedad02c18e266ec094995a5751b7fe1eb6e74f66bf75db64fae2e50eb22c234
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\anubis-addon-template\gradlew.bat"1⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava.exe -version2⤵
-
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe"java.exe" "-Xmx64m" "-Xms64m" "-Dorg.gradle.appname=gradlew" -jar "C:\Users\Admin\AppData\Local\Temp\anubis-addon-template\\gradle\wrapper\gradle-wrapper.jar"2⤵
- Loads dropped DLL
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
3903daac9bc4a3b7.timestamp
native-platform.dll
jansi.dll
gradle-base-services-9.4.1.jar
gradle-launcher-9.4.1.jar
memory/3736-129-0x000001C4CDE30000-0x000001C4CDE40000-memory.dmp
memory/3736-165-0x000001C4CDE10000-0x000001C4CDE20000-memory.dmp
memory/3736-33-0x000001C4CDC50000-0x000001C4CDC60000-memory.dmp
memory/3736-36-0x000001C4CDC60000-0x000001C4CDC70000-memory.dmp
memory/3736-37-0x000001C4CDC70000-0x000001C4CDC80000-memory.dmp
memory/3736-39-0x000001C4CDC80000-0x000001C4CDC90000-memory.dmp
memory/3736-41-0x000001C4CDC90000-0x000001C4CDCA0000-memory.dmp
memory/3736-44-0x000001C4CDCA0000-0x000001C4CDCB0000-memory.dmp
memory/3736-51-0x000001C4CDCC0000-0x000001C4CDCD0000-memory.dmp
memory/3736-50-0x000001C4CDCD0000-0x000001C4CDCE0000-memory.dmp
memory/3736-48-0x000001C4CDCB0000-0x000001C4CDCC0000-memory.dmp
memory/3736-47-0x000001C4CD9C0000-0x000001C4CDC30000-memory.dmp
memory/3736-52-0x000001C4CD9A0000-0x000001C4CD9A1000-memory.dmp
memory/3736-56-0x000001C4CDCE0000-0x000001C4CDCF0000-memory.dmp
memory/3736-55-0x000001C4CDC40000-0x000001C4CDC50000-memory.dmp
memory/3736-54-0x000001C4CDC30000-0x000001C4CDC40000-memory.dmp
memory/3736-57-0x000001C4CDCF0000-0x000001C4CDD00000-memory.dmp
memory/3736-62-0x000001C4CDD00000-0x000001C4CDD10000-memory.dmp
memory/3736-61-0x000001C4CDC50000-0x000001C4CDC60000-memory.dmp
memory/3736-65-0x000001C4CDC60000-0x000001C4CDC70000-memory.dmp
memory/3736-66-0x000001C4CDD10000-0x000001C4CDD20000-memory.dmp
memory/3736-71-0x000001C4CDD20000-0x000001C4CDD30000-memory.dmp
memory/3736-70-0x000001C4CDC70000-0x000001C4CDC80000-memory.dmp
memory/3736-75-0x000001C4CDD30000-0x000001C4CDD40000-memory.dmp
memory/3736-74-0x000001C4CDC80000-0x000001C4CDC90000-memory.dmp
memory/3736-76-0x000001C4CDC90000-0x000001C4CDCA0000-memory.dmp
memory/3736-77-0x000001C4CDD40000-0x000001C4CDD50000-memory.dmp
memory/3736-81-0x000001C4CDD50000-0x000001C4CDD60000-memory.dmp
memory/3736-80-0x000001C4CDCA0000-0x000001C4CDCB0000-memory.dmp
memory/3736-82-0x000001C4CDCB0000-0x000001C4CDCC0000-memory.dmp
memory/3736-83-0x000001C4CDCD0000-0x000001C4CDCE0000-memory.dmp
memory/3736-84-0x000001C4CDD60000-0x000001C4CDD70000-memory.dmp
memory/3736-87-0x000001C4CDD70000-0x000001C4CDD80000-memory.dmp
memory/3736-86-0x000001C4CDCC0000-0x000001C4CDCD0000-memory.dmp
memory/3736-92-0x000001C4CDD80000-0x000001C4CDD90000-memory.dmp
memory/3736-91-0x000001C4CDCE0000-0x000001C4CDCF0000-memory.dmp
memory/3736-90-0x000001C4CD9A0000-0x000001C4CD9A1000-memory.dmp
memory/3736-95-0x000001C4CDD90000-0x000001C4CDDA0000-memory.dmp
memory/3736-98-0x000001C4CDDA0000-0x000001C4CDDB0000-memory.dmp
memory/3736-97-0x000001C4CDD00000-0x000001C4CDD10000-memory.dmp
memory/3736-94-0x000001C4CDCF0000-0x000001C4CDD00000-memory.dmp
memory/3736-102-0x000001C4CDDB0000-0x000001C4CDDC0000-memory.dmp
memory/3736-101-0x000001C4CDD10000-0x000001C4CDD20000-memory.dmp
memory/3736-104-0x000001C4CDD20000-0x000001C4CDD30000-memory.dmp
memory/3736-105-0x000001C4CDDC0000-0x000001C4CDDD0000-memory.dmp
memory/3736-107-0x000001C4CD9A0000-0x000001C4CD9A1000-memory.dmp
memory/3736-110-0x000001C4CDDD0000-0x000001C4CDDE0000-memory.dmp
memory/3736-109-0x000001C4CDD30000-0x000001C4CDD40000-memory.dmp
memory/3736-116-0x000001C4CDD50000-0x000001C4CDD60000-memory.dmp
memory/3736-115-0x000001C4CDDF0000-0x000001C4CDE00000-memory.dmp
memory/3736-122-0x000001C4CDD70000-0x000001C4CDD80000-memory.dmp
memory/3736-131-0x000001C4CDD90000-0x000001C4CDDA0000-memory.dmp
memory/3736-130-0x000001C4CDE40000-0x000001C4CDE50000-memory.dmp
memory/3736-31-0x000001C4CDC40000-0x000001C4CDC50000-memory.dmp
memory/3736-132-0x000001C4CD9A0000-0x000001C4CD9A1000-memory.dmp
memory/3736-128-0x000001C4CDE20000-0x000001C4CDE30000-memory.dmp
memory/3736-30-0x000001C4CDC30000-0x000001C4CDC40000-memory.dmp
memory/3736-121-0x000001C4CDE10000-0x000001C4CDE20000-memory.dmp
memory/3736-127-0x000001C4CDD80000-0x000001C4CDD90000-memory.dmp
memory/3736-120-0x000001C4CDE00000-0x000001C4CDE10000-memory.dmp
memory/3736-119-0x000001C4CDD60000-0x000001C4CDD70000-memory.dmp
memory/3736-114-0x000001C4CDDE0000-0x000001C4CDDF0000-memory.dmp
memory/3736-113-0x000001C4CDD40000-0x000001C4CDD50000-memory.dmp
memory/3736-138-0x000001C4CDE50000-0x000001C4CDE60000-memory.dmp
memory/3736-137-0x000001C4CDDA0000-0x000001C4CDDB0000-memory.dmp
memory/3736-136-0x000001C4CD9A0000-0x000001C4CD9A1000-memory.dmp
memory/3736-150-0x000001C4CDE60000-0x000001C4CDE70000-memory.dmp
memory/3736-149-0x000001C4CDDB0000-0x000001C4CDDC0000-memory.dmp
memory/3736-154-0x000001C4CDDC0000-0x000001C4CDDD0000-memory.dmp
memory/3736-155-0x000001C4CDDD0000-0x000001C4CDDE0000-memory.dmp
memory/3736-160-0x000001C4CDE70000-0x000001C4CDE80000-memory.dmp
memory/3736-159-0x000001C4CDDF0000-0x000001C4CDE00000-memory.dmp
memory/3736-158-0x000001C4CDDE0000-0x000001C4CDDF0000-memory.dmp
memory/3736-123-0x000001C4CD9A0000-0x000001C4CD9A1000-memory.dmp
memory/3736-164-0x000001C4CDE00000-0x000001C4CDE10000-memory.dmp
memory/3736-169-0x000001C4CD9A0000-0x000001C4CD9A1000-memory.dmp
memory/3736-190-0x000001C4CDE80000-0x000001C4CDE90000-memory.dmp
memory/3736-208-0x000001C4CDE30000-0x000001C4CDE40000-memory.dmp
memory/3736-210-0x000001C4CDE90000-0x000001C4CDEA0000-memory.dmp
memory/3736-209-0x000001C4CDE40000-0x000001C4CDE50000-memory.dmp
memory/3736-207-0x000001C4CDE20000-0x000001C4CDE30000-memory.dmp
memory/3736-265-0x000001C4CDEA0000-0x000001C4CDEB0000-memory.dmp
memory/3736-312-0x000001C4CDEB0000-0x000001C4CDEC0000-memory.dmp
memory/3736-311-0x000001C4CDE50000-0x000001C4CDE60000-memory.dmp
memory/3736-365-0x000001C4CDEC0000-0x000001C4CDED0000-memory.dmp
memory/3736-363-0x000001C4CDE60000-0x000001C4CDE70000-memory.dmp
memory/3736-487-0x000001C4CDED0000-0x000001C4CDEE0000-memory.dmp
memory/3736-632-0x000001C4CD9A0000-0x000001C4CD9A1000-memory.dmp
memory/3736-646-0x000001C4CDEE0000-0x000001C4CDEF0000-memory.dmp
memory/3736-865-0x000001C4CDF00000-0x000001C4CDF10000-memory.dmp
memory/3736-864-0x000001C4CDEF0000-0x000001C4CDF00000-memory.dmp
memory/3736-1057-0x000001C4CDF10000-0x000001C4CDF20000-memory.dmp
memory/3736-863-0x000001C4CDE70000-0x000001C4CDE80000-memory.dmp
memory/3736-1079-0x000001C4CD9A0000-0x000001C4CD9A1000-memory.dmp
memory/3736-1089-0x000001C4CDE90000-0x000001C4CDEA0000-memory.dmp
memory/3736-1103-0x000001C4CDF40000-0x000001C4CDF50000-memory.dmp
memory/3736-1100-0x000001C4CDEA0000-0x000001C4CDEB0000-memory.dmp
memory/3736-1088-0x000001C4CDF30000-0x000001C4CDF40000-memory.dmp
memory/3736-1087-0x000001C4CDF20000-0x000001C4CDF30000-memory.dmp
memory/3736-1086-0x000001C4CDE80000-0x000001C4CDE90000-memory.dmp
memory/3736-1125-0x000001C4CDF50000-0x000001C4CDF60000-memory.dmp
memory/3736-26-0x000001C4CD9A0000-0x000001C4CD9A1000-memory.dmp
memory/3736-1124-0x000001C4CDEB0000-0x000001C4CDEC0000-memory.dmp
memory/3736-1241-0x000001C4CD9A0000-0x000001C4CD9A1000-memory.dmp
memory/3736-1357-0x000001C4CD9A0000-0x000001C4CD9A1000-memory.dmp
memory/3736-1365-0x000001C4CD9A0000-0x000001C4CD9A1000-memory.dmp
memory/3736-16-0x000001C4CD9C0000-0x000001C4CDC30000-memory.dmp
memory/3736-1466-0x000001C4CD9A0000-0x000001C4CD9A1000-memory.dmp
memory/3736-1471-0x000001C4CD9A0000-0x000001C4CD9A1000-memory.dmp
memory/3736-1472-0x00007FFD2DF80000-0x00007FFD2DFA4000-memory.dmp
memory/5708-2-0x0000025D43590000-0x0000025D43800000-memory.dmp
memory/5708-12-0x0000025D41CB0000-0x0000025D41CB1000-memory.dmp
memory/5708-13-0x0000025D43590000-0x0000025D43800000-memory.dmp