Analysis
- max time kernel
148s - max time network
144s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
02/11/2026, 02:48
General
- Target MyApplication/gradlew.bat
- Size 2KB
- Sample261102-daqh2sss2p
- SHA256 1d297e00bd21de3ace22b4d7f2de1f9dfa858883d66bbf7c1ccbecccec8f4f3b
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 11 IoCs
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
- Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\MyApplication\gradlew.bat"1⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava.exe -version2⤵
-
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe"java.exe" "-Xmx64m" "-Xms64m" "-Dorg.gradle.appname=gradlew" -classpath "" -jar "C:\Users\Admin\AppData\Local\Temp\MyApplication\\gradle\wrapper\gradle-wrapper.jar"2⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jdk-1.8\bin\java.exe"C:\Program Files\Java\jdk-1.8\bin\java.exe" -Xmx32m -Xms32m -cp . JavaProbe3⤵
-
-
C:\Users\Admin\.gradle\.tmp\jdks\OpenJDK21U-jdk_x64_windows_hotspot_21-any-vendor-218324022579680930434.tmp\jdk-21.0.7+6\bin\java.exeC:\Users\Admin\.gradle\.tmp\jdks\OpenJDK21U-jdk_x64_windows_hotspot_21-any-vendor-218324022579680930434.tmp\jdk-21.0.7+6\bin\java.exe -Xmx32m -Xms32m -cp . JavaProbe3⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
java.dll
java.exe
jimage.dll
jli.dll
jsvml.dll
msvcp140.dll
classes.jsa
jvm.dll
vcruntime140.dll
vcruntime140_1.dll
verify.dll
ADDITIONAL_LICENSE_INFO
ASSEMBLY_EXCEPTION
LICENSE
jvm.cfg
JavaProbe.class
native-platform.dll
jansi.dll
gradle-base-services-9.5.0.jar
gradle-launcher-9.5.0.jar
memory/3024-1556-0x0000024CE8630000-0x0000024CE8631000-memory.dmp
memory/4476-172-0x000002DDEA110000-0x000002DDEA120000-memory.dmp
memory/4476-340-0x000002DDEA080000-0x000002DDEA090000-memory.dmp
memory/4476-60-0x000002DDE9EE0000-0x000002DDE9EF0000-memory.dmp
memory/4476-66-0x000002DDE9F90000-0x000002DDE9FA0000-memory.dmp
memory/4476-65-0x000002DDE9EF0000-0x000002DDE9F00000-memory.dmp
memory/4476-71-0x000002DDE9FA0000-0x000002DDE9FB0000-memory.dmp
memory/4476-70-0x000002DDE9F00000-0x000002DDE9F10000-memory.dmp
memory/4476-74-0x000002DDE9F10000-0x000002DDE9F20000-memory.dmp
memory/4476-75-0x000002DDE9FB0000-0x000002DDE9FC0000-memory.dmp
memory/4476-79-0x000002DDE9FC0000-0x000002DDE9FD0000-memory.dmp
memory/4476-78-0x000002DDE9F20000-0x000002DDE9F30000-memory.dmp
memory/4476-81-0x000002DDE9FD0000-0x000002DDE9FE0000-memory.dmp
memory/4476-80-0x000002DDE9F30000-0x000002DDE9F40000-memory.dmp
memory/4476-83-0x000002DDE9F40000-0x000002DDE9F50000-memory.dmp
memory/4476-84-0x000002DDE9FE0000-0x000002DDE9FF0000-memory.dmp
memory/4476-86-0x000002DDE9F50000-0x000002DDE9F60000-memory.dmp
memory/4476-87-0x000002DDE9FF0000-0x000002DDEA000000-memory.dmp
memory/4476-89-0x000002DDE9F60000-0x000002DDE9F70000-memory.dmp
memory/4476-90-0x000002DDEA000000-0x000002DDEA010000-memory.dmp
memory/4476-95-0x000002DDEA010000-0x000002DDEA020000-memory.dmp
memory/4476-94-0x000002DDE9F70000-0x000002DDE9F80000-memory.dmp
memory/4476-98-0x000002DDEA020000-0x000002DDEA030000-memory.dmp
memory/4476-97-0x000002DDE9F80000-0x000002DDE9F90000-memory.dmp
memory/4476-102-0x000002DDEA030000-0x000002DDEA040000-memory.dmp
memory/4476-101-0x000002DDE9F90000-0x000002DDE9FA0000-memory.dmp
memory/4476-105-0x000002DDEA040000-0x000002DDEA050000-memory.dmp
memory/4476-104-0x000002DDE9FA0000-0x000002DDE9FB0000-memory.dmp
memory/4476-109-0x000002DDEA050000-0x000002DDEA060000-memory.dmp
memory/4476-108-0x000002DDE9FB0000-0x000002DDE9FC0000-memory.dmp
memory/4476-113-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-112-0x000002DDEA060000-0x000002DDEA070000-memory.dmp
memory/4476-111-0x000002DDE9FC0000-0x000002DDE9FD0000-memory.dmp
memory/4476-116-0x000002DDE9FD0000-0x000002DDE9FE0000-memory.dmp
memory/4476-117-0x000002DDEA070000-0x000002DDEA080000-memory.dmp
memory/4476-129-0x000002DDE9FF0000-0x000002DDEA000000-memory.dmp
memory/4476-128-0x000002DDEA0C0000-0x000002DDEA0D0000-memory.dmp
memory/4476-127-0x000002DDEA0B0000-0x000002DDEA0C0000-memory.dmp
memory/4476-126-0x000002DDEA0A0000-0x000002DDEA0B0000-memory.dmp
memory/4476-125-0x000002DDEA090000-0x000002DDEA0A0000-memory.dmp
memory/4476-134-0x000002DDEA0D0000-0x000002DDEA0E0000-memory.dmp
memory/4476-133-0x000002DDEA000000-0x000002DDEA010000-memory.dmp
memory/4476-124-0x000002DDEA080000-0x000002DDEA090000-memory.dmp
memory/4476-123-0x000002DDE9FE0000-0x000002DDE9FF0000-memory.dmp
memory/4476-135-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-140-0x000002DDEA0E0000-0x000002DDEA0F0000-memory.dmp
memory/4476-139-0x000002DDEA010000-0x000002DDEA020000-memory.dmp
memory/4476-154-0x000002DDEA030000-0x000002DDEA040000-memory.dmp
memory/4476-153-0x000002DDEA100000-0x000002DDEA110000-memory.dmp
memory/4476-152-0x000002DDEA0F0000-0x000002DDEA100000-memory.dmp
memory/4476-151-0x000002DDEA020000-0x000002DDEA030000-memory.dmp
memory/4476-158-0x000002DDEA040000-0x000002DDEA050000-memory.dmp
memory/4476-162-0x000002DDEA050000-0x000002DDEA060000-memory.dmp
memory/4476-2275-0x00007FFC939B0000-0x00007FFC939D4000-memory.dmp
memory/4476-171-0x000002DDEA060000-0x000002DDEA070000-memory.dmp
memory/4476-218-0x000002DDEA120000-0x000002DDEA130000-memory.dmp
memory/4476-217-0x000002DDEA070000-0x000002DDEA080000-memory.dmp
memory/4476-314-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-315-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-345-0x000002DDEA130000-0x000002DDEA140000-memory.dmp
memory/4476-344-0x000002DDEA0C0000-0x000002DDEA0D0000-memory.dmp
memory/4476-343-0x000002DDEA0B0000-0x000002DDEA0C0000-memory.dmp
memory/4476-342-0x000002DDEA0A0000-0x000002DDEA0B0000-memory.dmp
memory/4476-341-0x000002DDEA090000-0x000002DDEA0A0000-memory.dmp
memory/4476-61-0x000002DDE9F80000-0x000002DDE9F90000-memory.dmp
memory/4476-443-0x000002DDEA140000-0x000002DDEA150000-memory.dmp
memory/4476-861-0x000002DDEA0E0000-0x000002DDEA0F0000-memory.dmp
memory/4476-860-0x000002DDEA150000-0x000002DDEA160000-memory.dmp
memory/4476-859-0x000002DDEA160000-0x000002DDEA170000-memory.dmp
memory/4476-858-0x000002DDEA0D0000-0x000002DDEA0E0000-memory.dmp
memory/4476-913-0x000002DDEA180000-0x000002DDEA190000-memory.dmp
memory/4476-912-0x000002DDEA170000-0x000002DDEA180000-memory.dmp
memory/4476-911-0x000002DDEA100000-0x000002DDEA110000-memory.dmp
memory/4476-910-0x000002DDEA0F0000-0x000002DDEA100000-memory.dmp
memory/4476-976-0x000002DDEA190000-0x000002DDEA1A0000-memory.dmp
memory/4476-1042-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-1149-0x000002DDEA110000-0x000002DDEA120000-memory.dmp
memory/4476-1173-0x000002DDEA1C0000-0x000002DDEA1D0000-memory.dmp
memory/4476-1172-0x000002DDEA120000-0x000002DDEA130000-memory.dmp
memory/4476-1148-0x000002DDEA1B0000-0x000002DDEA1C0000-memory.dmp
memory/4476-1147-0x000002DDEA1A0000-0x000002DDEA1B0000-memory.dmp
memory/4476-1179-0x000002DDEA1D0000-0x000002DDEA1E0000-memory.dmp
memory/4476-1178-0x000002DDEA130000-0x000002DDEA140000-memory.dmp
memory/4476-57-0x000002DDE9ED0000-0x000002DDE9EE0000-memory.dmp
memory/4476-58-0x000002DDE9F70000-0x000002DDE9F80000-memory.dmp
memory/4476-1401-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-1403-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-50-0x000002DDE9F50000-0x000002DDE9F60000-memory.dmp
memory/4476-1439-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-1461-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-53-0x000002DDE9EC0000-0x000002DDE9ED0000-memory.dmp
memory/4476-1475-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-1474-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-1505-0x00007FFC939B0000-0x00007FFC939D4000-memory.dmp
memory/4476-1532-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-1534-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-54-0x000002DDE9F60000-0x000002DDE9F70000-memory.dmp
memory/4476-48-0x000002DDE9C40000-0x000002DDE9EB0000-memory.dmp
memory/4476-1559-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-1558-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-1561-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-1565-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-1567-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-1596-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-1632-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-1660-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-49-0x000002DDE9F40000-0x000002DDE9F50000-memory.dmp
memory/4476-52-0x000002DDE9EB0000-0x000002DDE9EC0000-memory.dmp
memory/4476-45-0x000002DDE9F30000-0x000002DDE9F40000-memory.dmp
memory/4476-2135-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-43-0x000002DDE9F20000-0x000002DDE9F30000-memory.dmp
memory/4476-42-0x000002DDE9F10000-0x000002DDE9F20000-memory.dmp
memory/4476-39-0x000002DDE9F00000-0x000002DDE9F10000-memory.dmp
memory/4476-37-0x000002DDE9EF0000-0x000002DDE9F00000-memory.dmp
memory/4476-35-0x000002DDE9EE0000-0x000002DDE9EF0000-memory.dmp
memory/4476-33-0x000002DDE9ED0000-0x000002DDE9EE0000-memory.dmp
memory/4476-31-0x000002DDE9EC0000-0x000002DDE9ED0000-memory.dmp
memory/4476-30-0x000002DDE9EB0000-0x000002DDE9EC0000-memory.dmp
memory/4476-26-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-16-0x000002DDE9C40000-0x000002DDE9EB0000-memory.dmp
memory/4476-2274-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-2271-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-2269-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/4476-2272-0x000002DDE8380000-0x000002DDE8381000-memory.dmp
memory/5020-12-0x000001B436E80000-0x000001B436E81000-memory.dmp
memory/5020-13-0x000001B436EA0000-0x000001B437110000-memory.dmp
memory/5020-2-0x000001B436EA0000-0x000001B437110000-memory.dmp