Analysis
- max time kernel
148s - max time network
123s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
04/11/2026, 16:49
General
- Target gradlew.bat
- Size 2KB
- Sample261104-vbtersys3k
- SHA256 5c0a21ecd6b3a6292e0746bff3b75fd2d8f47b9ff226ce53dc22b30184ef3bec
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
- Executes a command shell one-liner 1 TTPs 3 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
- Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\gradlew.bat"1⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava.exe -version2⤵
-
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe"java.exe" "-Xmx64m" "-Xms64m" "-Dorg.gradle.appname=gradlew" -jar "C:\Users\Admin\AppData\Local\Temp\\gradle\wrapper\gradle-wrapper.jar"2⤵
- Loads dropped DLL
-
-
C:\Windows\system32\cmd.exe"C:\Windows\system32\cmd.exe" /c exit 12⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exe"C:\Windows\system32\cmd.exe" /c exit 12⤵
- Executes a command shell one-liner
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
3903daac9bc4a3b7.timestamp
native-platform.dll
jansi.dll
gradle-base-services-9.5.1.jar
gradle-launcher-9.5.1.jar
memory/2040-118-0x0000020F6FC00000-0x0000020F6FC10000-memory.dmp
memory/2040-79-0x0000020F6FBE0000-0x0000020F6FBF0000-memory.dmp
memory/2040-34-0x0000020F6FAF0000-0x0000020F6FB00000-memory.dmp
memory/2040-35-0x0000020F6FB00000-0x0000020F6FB10000-memory.dmp
memory/2040-38-0x0000020F6FB10000-0x0000020F6FB20000-memory.dmp
memory/2040-39-0x0000020F6FB20000-0x0000020F6FB30000-memory.dmp
memory/2040-41-0x0000020F6FB30000-0x0000020F6FB40000-memory.dmp
memory/2040-43-0x0000020F6FB40000-0x0000020F6FB50000-memory.dmp
memory/2040-46-0x0000020F6FB50000-0x0000020F6FB60000-memory.dmp
memory/2040-45-0x0000020F6F860000-0x0000020F6FAD0000-memory.dmp
memory/2040-48-0x0000020F6FB60000-0x0000020F6FB70000-memory.dmp
memory/2040-52-0x0000020F6FB70000-0x0000020F6FB80000-memory.dmp
memory/2040-50-0x0000020F6FAD0000-0x0000020F6FAE0000-memory.dmp
memory/2040-54-0x0000020F6FB80000-0x0000020F6FB90000-memory.dmp
memory/2040-53-0x0000020F6FAE0000-0x0000020F6FAF0000-memory.dmp
memory/2040-58-0x0000020F6FAF0000-0x0000020F6FB00000-memory.dmp
memory/2040-59-0x0000020F6FB90000-0x0000020F6FBA0000-memory.dmp
memory/2040-61-0x0000020F6FBA0000-0x0000020F6FBB0000-memory.dmp
memory/2040-60-0x0000020F6FB00000-0x0000020F6FB10000-memory.dmp
memory/2040-66-0x0000020F6FBB0000-0x0000020F6FBC0000-memory.dmp
memory/2040-65-0x0000020F6FB10000-0x0000020F6FB20000-memory.dmp
memory/2040-68-0x0000020F6FB20000-0x0000020F6FB30000-memory.dmp
memory/2040-69-0x0000020F6FBC0000-0x0000020F6FBD0000-memory.dmp
memory/2040-74-0x0000020F6FB30000-0x0000020F6FB40000-memory.dmp
memory/2040-75-0x0000020F6FBD0000-0x0000020F6FBE0000-memory.dmp
memory/2040-128-0x0000020F6FCC0000-0x0000020F6FCD0000-memory.dmp
memory/2040-77-0x0000020F6FB40000-0x0000020F6FB50000-memory.dmp
memory/2040-80-0x0000020F6FB50000-0x0000020F6FB60000-memory.dmp
memory/2040-81-0x0000020F6FBF0000-0x0000020F6FC00000-memory.dmp
memory/2040-84-0x0000020F6FB60000-0x0000020F6FB70000-memory.dmp
memory/2040-87-0x0000020F6FB70000-0x0000020F6FB80000-memory.dmp
memory/2040-86-0x0000020F6FC10000-0x0000020F6FC20000-memory.dmp
memory/2040-85-0x0000020F6FC00000-0x0000020F6FC10000-memory.dmp
memory/2040-90-0x0000020F6FC20000-0x0000020F6FC30000-memory.dmp
memory/2040-89-0x0000020F6FB80000-0x0000020F6FB90000-memory.dmp
memory/2040-93-0x0000020F6FB90000-0x0000020F6FBA0000-memory.dmp
memory/2040-94-0x0000020F6FC30000-0x0000020F6FC40000-memory.dmp
memory/2040-95-0x0000020F6E040000-0x0000020F6E041000-memory.dmp
memory/2040-98-0x0000020F6FC40000-0x0000020F6FC50000-memory.dmp
memory/2040-97-0x0000020F6FBA0000-0x0000020F6FBB0000-memory.dmp
memory/2040-101-0x0000020F6FC50000-0x0000020F6FC60000-memory.dmp
memory/2040-100-0x0000020F6FBB0000-0x0000020F6FBC0000-memory.dmp
memory/2040-105-0x0000020F6FC60000-0x0000020F6FC70000-memory.dmp
memory/2040-104-0x0000020F6FBC0000-0x0000020F6FBD0000-memory.dmp
memory/2040-108-0x0000020F6FC70000-0x0000020F6FC80000-memory.dmp
memory/2040-107-0x0000020F6FBD0000-0x0000020F6FBE0000-memory.dmp
memory/2040-111-0x0000020F6E040000-0x0000020F6E041000-memory.dmp
memory/2040-113-0x0000020F6FC80000-0x0000020F6FC90000-memory.dmp
memory/2040-123-0x0000020F6FCB0000-0x0000020F6FCC0000-memory.dmp
memory/2040-117-0x0000020F6FC90000-0x0000020F6FCA0000-memory.dmp
memory/2040-116-0x0000020F6FBF0000-0x0000020F6FC00000-memory.dmp
memory/2040-120-0x0000020F6FCA0000-0x0000020F6FCB0000-memory.dmp
memory/2040-119-0x0000020F6FC10000-0x0000020F6FC20000-memory.dmp
memory/2040-29-0x0000020F6FAD0000-0x0000020F6FAE0000-memory.dmp
memory/2040-112-0x0000020F6FBE0000-0x0000020F6FBF0000-memory.dmp
memory/2040-31-0x0000020F6FAE0000-0x0000020F6FAF0000-memory.dmp
memory/2040-127-0x0000020F6FC20000-0x0000020F6FC30000-memory.dmp
memory/2040-138-0x0000020F6FC40000-0x0000020F6FC50000-memory.dmp
memory/2040-141-0x0000020F6FCF0000-0x0000020F6FD00000-memory.dmp
memory/2040-140-0x0000020F6FC50000-0x0000020F6FC60000-memory.dmp
memory/2040-139-0x0000020F6FCE0000-0x0000020F6FCF0000-memory.dmp
memory/2040-136-0x0000020F6FCD0000-0x0000020F6FCE0000-memory.dmp
memory/2040-135-0x0000020F6FC30000-0x0000020F6FC40000-memory.dmp
memory/2040-143-0x0000020F6E040000-0x0000020F6E041000-memory.dmp
memory/2040-144-0x0000020F6FC60000-0x0000020F6FC70000-memory.dmp
memory/2040-147-0x0000020F6FD00000-0x0000020F6FD10000-memory.dmp
memory/2040-146-0x0000020F6FC70000-0x0000020F6FC80000-memory.dmp
memory/2040-149-0x0000020F6FC80000-0x0000020F6FC90000-memory.dmp
memory/2040-155-0x0000020F6FD10000-0x0000020F6FD20000-memory.dmp
memory/2040-154-0x0000020F6FC90000-0x0000020F6FCA0000-memory.dmp
memory/2040-161-0x0000020F6FD20000-0x0000020F6FD30000-memory.dmp
memory/2040-160-0x0000020F6FCA0000-0x0000020F6FCB0000-memory.dmp
memory/2040-181-0x0000020F6FCB0000-0x0000020F6FCC0000-memory.dmp
memory/2040-197-0x0000020F6FCC0000-0x0000020F6FCD0000-memory.dmp
memory/2040-198-0x0000020F6FD30000-0x0000020F6FD40000-memory.dmp
memory/2040-218-0x0000020F6FCE0000-0x0000020F6FCF0000-memory.dmp
memory/2040-217-0x0000020F6FD50000-0x0000020F6FD60000-memory.dmp
memory/2040-216-0x0000020F6FD40000-0x0000020F6FD50000-memory.dmp
memory/2040-215-0x0000020F6FCD0000-0x0000020F6FCE0000-memory.dmp
memory/2040-252-0x0000020F6FD60000-0x0000020F6FD70000-memory.dmp
memory/2040-251-0x0000020F6FCF0000-0x0000020F6FD00000-memory.dmp
memory/2040-322-0x0000020F6FD70000-0x0000020F6FD80000-memory.dmp
memory/2040-339-0x0000020F6FD00000-0x0000020F6FD10000-memory.dmp
memory/2040-340-0x0000020F6FD80000-0x0000020F6FD90000-memory.dmp
memory/2040-460-0x0000020F6FD90000-0x0000020F6FDA0000-memory.dmp
memory/2040-634-0x0000020F6FD20000-0x0000020F6FD30000-memory.dmp
memory/2040-633-0x0000020F6FDB0000-0x0000020F6FDC0000-memory.dmp
memory/2040-636-0x0000020F6FDC0000-0x0000020F6FDD0000-memory.dmp
memory/2040-632-0x0000020F6FDA0000-0x0000020F6FDB0000-memory.dmp
memory/2040-631-0x0000020F6FD10000-0x0000020F6FD20000-memory.dmp
memory/2040-895-0x0000020F6FD30000-0x0000020F6FD40000-memory.dmp
memory/2040-899-0x0000020F6FDE0000-0x0000020F6FDF0000-memory.dmp
memory/2040-898-0x0000020F6FD50000-0x0000020F6FD60000-memory.dmp
memory/2040-910-0x0000020F6FDF0000-0x0000020F6FE00000-memory.dmp
memory/2040-897-0x0000020F6FD40000-0x0000020F6FD50000-memory.dmp
memory/2040-896-0x0000020F6FDD0000-0x0000020F6FDE0000-memory.dmp
memory/2040-26-0x0000020F6E040000-0x0000020F6E041000-memory.dmp
memory/2040-16-0x0000020F6F860000-0x0000020F6FAD0000-memory.dmp
memory/2040-913-0x0000020F6E040000-0x0000020F6E041000-memory.dmp
memory/2040-1297-0x0000020F6E040000-0x0000020F6E041000-memory.dmp
memory/2040-1422-0x0000020F6E040000-0x0000020F6E041000-memory.dmp
memory/2040-1423-0x0000020F6E040000-0x0000020F6E041000-memory.dmp
memory/2040-1424-0x0000020F6E040000-0x0000020F6E041000-memory.dmp
memory/2040-1477-0x0000020F6E040000-0x0000020F6E041000-memory.dmp
memory/2040-1479-0x0000020F6E040000-0x0000020F6E041000-memory.dmp
memory/2040-1534-0x0000020F6E040000-0x0000020F6E041000-memory.dmp
memory/2040-1537-0x0000020F6E040000-0x0000020F6E041000-memory.dmp
memory/2040-1540-0x0000020F6E040000-0x0000020F6E041000-memory.dmp
memory/2040-1541-0x00007FF920E00000-0x00007FF920E24000-memory.dmp
memory/4680-2-0x0000018C00000000-0x0000018C00270000-memory.dmp
memory/4680-12-0x0000018C7C3B0000-0x0000018C7C3B1000-memory.dmp
memory/4680-13-0x0000018C00000000-0x0000018C00270000-memory.dmp