Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
02/11/2026, 02:48
General
- Target MyApplication/gradle/wrapper/gradle-wrapper.jar
- Size 44KB
- Sample261102-daqh2sss2p
- SHA256 76805e32c009c0cf0dd5d206bddc9fb22ea42e84db904b764f3047de095493f3
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 12 IoCs
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\MyApplication\gradle\wrapper\gradle-wrapper.jar1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jdk-1.8\bin\java.exe"C:\Program Files\Java\jdk-1.8\bin\java.exe" -Xmx32m -Xms32m -cp . JavaProbe2⤵
-
-
C:\Users\Admin\.gradle\.tmp\jdks\OpenJDK21U-jdk_x64_windows_hotspot_21-any-vendor-219083361394388590074.tmp\jdk-21.0.7+6\bin\java.exeC:\Users\Admin\.gradle\.tmp\jdks\OpenJDK21U-jdk_x64_windows_hotspot_21-any-vendor-219083361394388590074.tmp\jdk-21.0.7+6\bin\java.exe -Xmx32m -Xms32m -cp . JavaProbe2⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
VCRUNTIME140.dll
java.dll
java.exe
jimage.dll
jli.dll
jsvml.dll
msvcp140.dll
classes.jsa
jvm.dll
vcruntime140_1.dll
verify.dll
ADDITIONAL_LICENSE_INFO
ASSEMBLY_EXCEPTION
LICENSE
jvm.cfg
JavaProbe.class
native-platform.dll
jansi.dll
gradle-base-services-9.5.0.jar
gradle-launcher-9.5.0.jar
memory/2508-125-0x00000295235D0000-0x00000295235E0000-memory.dmp
memory/2508-177-0x00000295235A0000-0x00000295235B0000-memory.dmp
memory/2508-43-0x00000295233B0000-0x00000295233C0000-memory.dmp
memory/2508-44-0x0000029523450000-0x0000029523460000-memory.dmp
memory/2508-46-0x0000029523460000-0x0000029523470000-memory.dmp
memory/2508-45-0x00000295233C0000-0x00000295233D0000-memory.dmp
memory/2508-48-0x00000295233D0000-0x00000295233E0000-memory.dmp
memory/2508-49-0x0000029523470000-0x0000029523480000-memory.dmp
memory/2508-54-0x0000029523480000-0x0000029523490000-memory.dmp
memory/2508-53-0x00000295233E0000-0x00000295233F0000-memory.dmp
memory/2508-58-0x00000295233F0000-0x0000029523400000-memory.dmp
memory/2508-60-0x0000029523490000-0x00000295234A0000-memory.dmp
memory/2508-63-0x00000295234A0000-0x00000295234B0000-memory.dmp
memory/2508-62-0x0000029523400000-0x0000029523410000-memory.dmp
memory/2508-66-0x0000029523410000-0x0000029523420000-memory.dmp
memory/2508-67-0x00000295234B0000-0x00000295234C0000-memory.dmp
memory/2508-69-0x00000295234C0000-0x00000295234D0000-memory.dmp
memory/2508-68-0x0000029523420000-0x0000029523430000-memory.dmp
memory/2508-71-0x0000029523430000-0x0000029523440000-memory.dmp
memory/2508-72-0x00000295234D0000-0x00000295234E0000-memory.dmp
memory/2508-78-0x00000295234F0000-0x0000029523500000-memory.dmp
memory/2508-77-0x0000029523450000-0x0000029523460000-memory.dmp
memory/2508-75-0x00000295234E0000-0x00000295234F0000-memory.dmp
memory/2508-74-0x0000029523440000-0x0000029523450000-memory.dmp
memory/2508-82-0x0000029523500000-0x0000029523510000-memory.dmp
memory/2508-81-0x0000029523460000-0x0000029523470000-memory.dmp
memory/2508-85-0x0000029523510000-0x0000029523520000-memory.dmp
memory/2508-84-0x0000029523470000-0x0000029523480000-memory.dmp
memory/2508-88-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-90-0x0000029523520000-0x0000029523530000-memory.dmp
memory/2508-89-0x0000029523480000-0x0000029523490000-memory.dmp
memory/2508-94-0x0000029523530000-0x0000029523540000-memory.dmp
memory/2508-93-0x0000029523490000-0x00000295234A0000-memory.dmp
memory/2508-96-0x00000295234A0000-0x00000295234B0000-memory.dmp
memory/2508-97-0x0000029523540000-0x0000029523550000-memory.dmp
memory/2508-100-0x0000029523550000-0x0000029523560000-memory.dmp
memory/2508-99-0x00000295234B0000-0x00000295234C0000-memory.dmp
memory/2508-103-0x0000029523560000-0x0000029523570000-memory.dmp
memory/2508-102-0x00000295234C0000-0x00000295234D0000-memory.dmp
memory/2508-109-0x00000295234E0000-0x00000295234F0000-memory.dmp
memory/2508-115-0x0000029523500000-0x0000029523510000-memory.dmp
memory/2508-114-0x00000295235A0000-0x00000295235B0000-memory.dmp
memory/2508-113-0x0000029523590000-0x00000295235A0000-memory.dmp
memory/2508-112-0x00000295234F0000-0x0000029523500000-memory.dmp
memory/2508-108-0x0000029523580000-0x0000029523590000-memory.dmp
memory/2508-107-0x0000029523570000-0x0000029523580000-memory.dmp
memory/2508-106-0x00000295234D0000-0x00000295234E0000-memory.dmp
memory/2508-118-0x00000295235B0000-0x00000295235C0000-memory.dmp
memory/2508-117-0x0000029523510000-0x0000029523520000-memory.dmp
memory/2508-122-0x00000295235C0000-0x00000295235D0000-memory.dmp
memory/2508-121-0x0000029523520000-0x0000029523530000-memory.dmp
memory/2508-119-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-40-0x0000029523440000-0x0000029523450000-memory.dmp
memory/2508-124-0x0000029523530000-0x0000029523540000-memory.dmp
memory/2508-129-0x00000295235E0000-0x00000295235F0000-memory.dmp
memory/2508-128-0x0000029523540000-0x0000029523550000-memory.dmp
memory/2508-133-0x00000295235F0000-0x0000029523600000-memory.dmp
memory/2508-132-0x0000029523550000-0x0000029523560000-memory.dmp
memory/2508-135-0x0000029523560000-0x0000029523570000-memory.dmp
memory/2508-137-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-143-0x0000029523580000-0x0000029523590000-memory.dmp
memory/2508-142-0x0000029523570000-0x0000029523580000-memory.dmp
memory/2508-157-0x0000029523600000-0x0000029523610000-memory.dmp
memory/2508-39-0x00000295233A0000-0x00000295233B0000-memory.dmp
memory/2508-179-0x0000029523610000-0x0000029523620000-memory.dmp
memory/2508-176-0x0000029523590000-0x00000295235A0000-memory.dmp
memory/2508-281-0x0000029523620000-0x0000029523630000-memory.dmp
memory/2508-301-0x0000029523630000-0x0000029523640000-memory.dmp
memory/2508-300-0x00000295235B0000-0x00000295235C0000-memory.dmp
memory/2508-497-0x0000029523640000-0x0000029523650000-memory.dmp
memory/2508-495-0x00000295235C0000-0x00000295235D0000-memory.dmp
memory/2508-834-0x0000029523650000-0x0000029523660000-memory.dmp
memory/2508-832-0x00000295235D0000-0x00000295235E0000-memory.dmp
memory/2508-884-0x00000295235F0000-0x0000029523600000-memory.dmp
memory/2508-883-0x0000029523670000-0x0000029523680000-memory.dmp
memory/2508-882-0x0000029523660000-0x0000029523670000-memory.dmp
memory/2508-881-0x00000295235E0000-0x00000295235F0000-memory.dmp
memory/2508-885-0x0000029523680000-0x0000029523690000-memory.dmp
memory/2508-1071-0x0000029523690000-0x00000295236A0000-memory.dmp
memory/2508-1112-0x0000029523610000-0x0000029523620000-memory.dmp
memory/2508-1111-0x00000295236B0000-0x00000295236C0000-memory.dmp
memory/2508-1122-0x00000295236C0000-0x00000295236D0000-memory.dmp
memory/2508-1121-0x0000029523620000-0x0000029523630000-memory.dmp
memory/2508-1110-0x00000295236A0000-0x00000295236B0000-memory.dmp
memory/2508-1108-0x0000029523600000-0x0000029523610000-memory.dmp
memory/2508-1331-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-1333-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-1363-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-1392-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-1395-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-1398-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-1400-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-1437-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-1442-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-1514-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-1517-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-1518-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-1555-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-1556-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-2314-0x00007FF872AE0000-0x00007FF872B04000-memory.dmp
memory/2508-1575-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-1576-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-1578-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-1625-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-1647-0x00007FF872AE0000-0x00007FF872B04000-memory.dmp
memory/2508-1651-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-1658-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-1688-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-36-0x0000029523390000-0x00000295233A0000-memory.dmp
memory/2508-37-0x0000029523430000-0x0000029523440000-memory.dmp
memory/2508-34-0x0000029523420000-0x0000029523430000-memory.dmp
memory/2508-33-0x0000029523410000-0x0000029523420000-memory.dmp
memory/2508-32-0x0000029523120000-0x0000029523390000-memory.dmp
memory/2508-29-0x0000029523400000-0x0000029523410000-memory.dmp
memory/2508-27-0x00000295233F0000-0x0000029523400000-memory.dmp
memory/2508-25-0x00000295233E0000-0x00000295233F0000-memory.dmp
memory/2508-23-0x00000295233D0000-0x00000295233E0000-memory.dmp
memory/2508-21-0x00000295233C0000-0x00000295233D0000-memory.dmp
memory/2508-19-0x00000295233B0000-0x00000295233C0000-memory.dmp
memory/2508-18-0x00000295233A0000-0x00000295233B0000-memory.dmp
memory/2508-15-0x0000029523390000-0x00000295233A0000-memory.dmp
memory/2508-11-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-2-0x0000029523120000-0x0000029523390000-memory.dmp
memory/2508-2309-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-2306-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2508-2311-0x00000295218B0000-0x00000295218B1000-memory.dmp
memory/2824-1573-0x0000022B0D2C0000-0x0000022B0D2C1000-memory.dmp