Analysis
- max time kernel
149s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
02/11/2026, 02:48
General
- Target MyApplication/gradlew.bat
- Size 2KB
- Sample261102-daqh2sss2p
- SHA256 1d297e00bd21de3ace22b4d7f2de1f9dfa858883d66bbf7c1ccbecccec8f4f3b
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 11 IoCs
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
- Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\MyApplication\gradlew.bat"1⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava.exe -version2⤵
-
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe"java.exe" "-Xmx64m" "-Xms64m" "-Dorg.gradle.appname=gradlew" -classpath "" -jar "C:\Users\Admin\AppData\Local\Temp\MyApplication\\gradle\wrapper\gradle-wrapper.jar"2⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jdk-1.8\bin\java.exe"C:\Program Files\Java\jdk-1.8\bin\java.exe" -Xmx32m -Xms32m -cp . JavaProbe3⤵
-
-
C:\Users\Admin\.gradle\.tmp\jdks\OpenJDK21U-jdk_x64_windows_hotspot_21-any-vendor-215581569114577199.tmp\jdk-21.0.7+6\bin\java.exeC:\Users\Admin\.gradle\.tmp\jdks\OpenJDK21U-jdk_x64_windows_hotspot_21-any-vendor-215581569114577199.tmp\jdk-21.0.7+6\bin\java.exe -Xmx32m -Xms32m -cp . JavaProbe3⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
VCRUNTIME140.dll
java.dll
java.exe
jimage.dll
jli.dll
jsvml.dll
msvcp140.dll
classes.jsa
jvm.dll
vcruntime140_1.dll
verify.dll
ADDITIONAL_LICENSE_INFO
ASSEMBLY_EXCEPTION
LICENSE
jvm.cfg
JavaProbe.class
native-platform.dll
jansi.dll
gradle-base-services-9.5.0.jar
gradle-launcher-9.5.0.jar
memory/808-1490-0x000001B921280000-0x000001B921281000-memory.dmp
memory/1624-2-0x000001EC00000000-0x000001EC00270000-memory.dmp
memory/1624-12-0x000001EC7FCE0000-0x000001EC7FCE1000-memory.dmp
memory/1624-14-0x000001EC00000000-0x000001EC00270000-memory.dmp
memory/1624-13-0x000001EC7F420000-0x000001EC7FCD0000-memory.dmp
memory/5440-77-0x0000014239CD0000-0x0000014239CE0000-memory.dmp
memory/5440-1574-0x00000142390A0000-0x0000014239950000-memory.dmp
memory/5440-73-0x0000014239CC0000-0x0000014239CD0000-memory.dmp
memory/5440-76-0x0000014239C00000-0x0000014239C10000-memory.dmp
memory/5440-68-0x0000014239CB0000-0x0000014239CC0000-memory.dmp
memory/5440-81-0x0000014239CE0000-0x0000014239CF0000-memory.dmp
memory/5440-80-0x0000014239C10000-0x0000014239C20000-memory.dmp
memory/5440-94-0x0000014239C30000-0x0000014239C40000-memory.dmp
memory/5440-95-0x0000014239C20000-0x0000014239C30000-memory.dmp
memory/5440-100-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-104-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-125-0x00000142390A0000-0x0000014239950000-memory.dmp
memory/5440-136-0x0000014239C80000-0x0000014239C90000-memory.dmp
memory/5440-135-0x0000014239C40000-0x0000014239C50000-memory.dmp
memory/5440-206-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-220-0x0000014239C60000-0x0000014239C70000-memory.dmp
memory/5440-217-0x0000014239C50000-0x0000014239C60000-memory.dmp
memory/5440-222-0x0000014239C70000-0x0000014239C80000-memory.dmp
memory/5440-310-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-629-0x0000014239C90000-0x0000014239CA0000-memory.dmp
memory/5440-1229-0x0000014239CA0000-0x0000014239CB0000-memory.dmp
memory/5440-67-0x0000014239BE0000-0x0000014239BF0000-memory.dmp
memory/5440-63-0x0000014239BD0000-0x0000014239BE0000-memory.dmp
memory/5440-1330-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-1332-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-64-0x0000014239CA0000-0x0000014239CB0000-memory.dmp
memory/5440-1346-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-1358-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-1378-0x0000014239CB0000-0x0000014239CC0000-memory.dmp
memory/5440-1377-0x00007FFB2AA20000-0x00007FFB2AA44000-memory.dmp
memory/5440-1376-0x00000142390A0000-0x0000014239950000-memory.dmp
memory/5440-54-0x0000014239C50000-0x0000014239C60000-memory.dmp
memory/5440-1405-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-1407-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-1406-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-1436-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-1447-0x0000014239CC0000-0x0000014239CD0000-memory.dmp
memory/5440-1470-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-1485-0x0000014239CD0000-0x0000014239CE0000-memory.dmp
memory/5440-55-0x0000014239C60000-0x0000014239C70000-memory.dmp
memory/5440-56-0x0000014239C70000-0x0000014239C80000-memory.dmp
memory/5440-1491-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-1493-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-1492-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-1505-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-1515-0x0000014239CE0000-0x0000014239CF0000-memory.dmp
memory/5440-1518-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-1522-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-1557-0x00000142390A0000-0x0000014239950000-memory.dmp
memory/5440-72-0x0000014239BF0000-0x0000014239C00000-memory.dmp
memory/5440-1592-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-1779-0x00000142390A0000-0x0000014239950000-memory.dmp
memory/5440-1861-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-57-0x0000014239C80000-0x0000014239C90000-memory.dmp
memory/5440-58-0x0000014239BC0000-0x0000014239BD0000-memory.dmp
memory/5440-60-0x0000014239C90000-0x0000014239CA0000-memory.dmp
memory/5440-2003-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-2009-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-2137-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-2142-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-47-0x0000014239950000-0x0000014239BC0000-memory.dmp
memory/5440-48-0x0000014239C40000-0x0000014239C50000-memory.dmp
memory/5440-45-0x0000014239C20000-0x0000014239C30000-memory.dmp
memory/5440-44-0x0000014239C30000-0x0000014239C40000-memory.dmp
memory/5440-41-0x0000014239C10000-0x0000014239C20000-memory.dmp
memory/5440-39-0x0000014239C00000-0x0000014239C10000-memory.dmp
memory/5440-37-0x0000014239BF0000-0x0000014239C00000-memory.dmp
memory/5440-35-0x0000014239BE0000-0x0000014239BF0000-memory.dmp
memory/5440-33-0x0000014239BD0000-0x0000014239BE0000-memory.dmp
memory/5440-31-0x0000014239BC0000-0x0000014239BD0000-memory.dmp
memory/5440-27-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-17-0x0000014239950000-0x0000014239BC0000-memory.dmp
memory/5440-2195-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-2197-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-2192-0x00000142376C0000-0x00000142376C1000-memory.dmp
memory/5440-2199-0x00007FFB2AA20000-0x00007FFB2AA44000-memory.dmp
memory/5440-2198-0x00000142390A0000-0x0000014239950000-memory.dmp
memory/5440-2219-0x0000014239CE0000-0x0000014239CF0000-memory.dmp
memory/5440-2218-0x0000014239CD0000-0x0000014239CE0000-memory.dmp
memory/5440-2217-0x0000014239CC0000-0x0000014239CD0000-memory.dmp
memory/5440-2216-0x0000014239CB0000-0x0000014239CC0000-memory.dmp
memory/5440-2215-0x0000014239CA0000-0x0000014239CB0000-memory.dmp
memory/5440-2214-0x0000014239C80000-0x0000014239C90000-memory.dmp
memory/5440-2213-0x0000014239C90000-0x0000014239CA0000-memory.dmp
memory/5440-2212-0x0000014239C70000-0x0000014239C80000-memory.dmp
memory/5440-2211-0x0000014239C60000-0x0000014239C70000-memory.dmp
memory/5440-2210-0x0000014239C50000-0x0000014239C60000-memory.dmp
memory/5440-2209-0x0000014239C40000-0x0000014239C50000-memory.dmp
memory/5440-2208-0x0000014239C20000-0x0000014239C30000-memory.dmp
memory/5440-2207-0x0000014239C30000-0x0000014239C40000-memory.dmp
memory/5440-2206-0x0000014239C10000-0x0000014239C20000-memory.dmp
memory/5440-2205-0x0000014239C00000-0x0000014239C10000-memory.dmp
memory/5440-2204-0x0000014239BF0000-0x0000014239C00000-memory.dmp
memory/5440-2203-0x0000014239BE0000-0x0000014239BF0000-memory.dmp
memory/5440-2202-0x0000014239BD0000-0x0000014239BE0000-memory.dmp
memory/5440-2201-0x0000014239BC0000-0x0000014239BD0000-memory.dmp
memory/5440-2200-0x0000014239950000-0x0000014239BC0000-memory.dmp