Analysis
- max time kernel
149s - max time network
131s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
04/11/2026, 16:49
General
- Target gradlew.bat
- Size 2KB
- Sample261104-vbtersys3k
- SHA256 5c0a21ecd6b3a6292e0746bff3b75fd2d8f47b9ff226ce53dc22b30184ef3bec
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
- Executes a command shell one-liner 1 TTPs 3 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
- Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\gradlew.bat"1⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava.exe -version2⤵
-
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe"java.exe" "-Xmx64m" "-Xms64m" "-Dorg.gradle.appname=gradlew" -jar "C:\Users\Admin\AppData\Local\Temp\\gradle\wrapper\gradle-wrapper.jar"2⤵
- Loads dropped DLL
-
-
C:\Windows\system32\cmd.exe"C:\Windows\system32\cmd.exe" /c exit 12⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exe"C:\Windows\system32\cmd.exe" /c exit 12⤵
- Executes a command shell one-liner
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
3903daac9bc4a3b7.timestamp
native-platform.dll
jansi.dll
gradle-base-services-9.5.1.jar
gradle-launcher-9.5.1.jar
memory/3508-121-0x000001C7B0140000-0x000001C7B0150000-memory.dmp
memory/3508-904-0x000001C7B01C0000-0x000001C7B01D0000-memory.dmp
memory/3508-33-0x000001C7AFF80000-0x000001C7AFF90000-memory.dmp
memory/3508-34-0x000001C7AFF90000-0x000001C7AFFA0000-memory.dmp
memory/3508-36-0x000001C7AFFA0000-0x000001C7AFFB0000-memory.dmp
memory/3508-39-0x000001C7AFFB0000-0x000001C7AFFC0000-memory.dmp
memory/3508-41-0x000001C7AFFC0000-0x000001C7AFFD0000-memory.dmp
memory/3508-43-0x000001C7AFFD0000-0x000001C7AFFE0000-memory.dmp
memory/3508-47-0x000001C7AFCF0000-0x000001C7AFF60000-memory.dmp
memory/3508-48-0x000001C7AFFE0000-0x000001C7AFFF0000-memory.dmp
memory/3508-54-0x000001C7B0010000-0x000001C7B0020000-memory.dmp
memory/3508-53-0x000001C7AFF60000-0x000001C7AFF70000-memory.dmp
memory/3508-52-0x000001C7AE520000-0x000001C7AE521000-memory.dmp
memory/3508-50-0x000001C7AFFF0000-0x000001C7B0000000-memory.dmp
memory/3508-49-0x000001C7B0000000-0x000001C7B0010000-memory.dmp
memory/3508-57-0x000001C7B0020000-0x000001C7B0030000-memory.dmp
memory/3508-56-0x000001C7AFF70000-0x000001C7AFF80000-memory.dmp
memory/3508-61-0x000001C7AFF80000-0x000001C7AFF90000-memory.dmp
memory/3508-62-0x000001C7B0030000-0x000001C7B0040000-memory.dmp
memory/3508-65-0x000001C7B0040000-0x000001C7B0050000-memory.dmp
memory/3508-64-0x000001C7AFF90000-0x000001C7AFFA0000-memory.dmp
memory/3508-71-0x000001C7B0050000-0x000001C7B0060000-memory.dmp
memory/3508-70-0x000001C7AFFA0000-0x000001C7AFFB0000-memory.dmp
memory/3508-74-0x000001C7B0060000-0x000001C7B0070000-memory.dmp
memory/3508-73-0x000001C7AFFB0000-0x000001C7AFFC0000-memory.dmp
memory/3508-77-0x000001C7B0070000-0x000001C7B0080000-memory.dmp
memory/3508-76-0x000001C7AFFC0000-0x000001C7AFFD0000-memory.dmp
memory/3508-80-0x000001C7AFFD0000-0x000001C7AFFE0000-memory.dmp
memory/3508-81-0x000001C7B0080000-0x000001C7B0090000-memory.dmp
memory/3508-83-0x000001C7AFFE0000-0x000001C7AFFF0000-memory.dmp
memory/3508-84-0x000001C7B0000000-0x000001C7B0010000-memory.dmp
memory/3508-82-0x000001C7B0090000-0x000001C7B00A0000-memory.dmp
memory/3508-87-0x000001C7B00A0000-0x000001C7B00B0000-memory.dmp
memory/3508-86-0x000001C7AFFF0000-0x000001C7B0000000-memory.dmp
memory/3508-90-0x000001C7B00B0000-0x000001C7B00C0000-memory.dmp
memory/3508-89-0x000001C7B0010000-0x000001C7B0020000-memory.dmp
memory/3508-95-0x000001C7B00C0000-0x000001C7B00D0000-memory.dmp
memory/3508-94-0x000001C7B0020000-0x000001C7B0030000-memory.dmp
memory/3508-97-0x000001C7B0030000-0x000001C7B0040000-memory.dmp
memory/3508-99-0x000001C7B00D0000-0x000001C7B00E0000-memory.dmp
memory/3508-101-0x000001C7B0040000-0x000001C7B0050000-memory.dmp
memory/3508-102-0x000001C7B00E0000-0x000001C7B00F0000-memory.dmp
memory/3508-105-0x000001C7B00F0000-0x000001C7B0100000-memory.dmp
memory/3508-104-0x000001C7B0050000-0x000001C7B0060000-memory.dmp
memory/3508-108-0x000001C7B0060000-0x000001C7B0070000-memory.dmp
memory/3508-109-0x000001C7B0100000-0x000001C7B0110000-memory.dmp
memory/3508-112-0x000001C7B0110000-0x000001C7B0120000-memory.dmp
memory/3508-111-0x000001C7B0070000-0x000001C7B0080000-memory.dmp
memory/3508-116-0x000001C7B0120000-0x000001C7B0130000-memory.dmp
memory/3508-115-0x000001C7B0090000-0x000001C7B00A0000-memory.dmp
memory/3508-114-0x000001C7B0080000-0x000001C7B0090000-memory.dmp
memory/3508-28-0x000001C7AFF60000-0x000001C7AFF70000-memory.dmp
memory/3508-30-0x000001C7AFF70000-0x000001C7AFF80000-memory.dmp
memory/3508-124-0x000001C7B0150000-0x000001C7B0160000-memory.dmp
memory/3508-120-0x000001C7B00A0000-0x000001C7B00B0000-memory.dmp
memory/3508-130-0x000001C7B0170000-0x000001C7B0180000-memory.dmp
memory/3508-129-0x000001C7B0160000-0x000001C7B0170000-memory.dmp
memory/3508-128-0x000001C7B00C0000-0x000001C7B00D0000-memory.dmp
memory/3508-123-0x000001C7B00B0000-0x000001C7B00C0000-memory.dmp
memory/3508-131-0x000001C7B00D0000-0x000001C7B00E0000-memory.dmp
memory/3508-118-0x000001C7B0130000-0x000001C7B0140000-memory.dmp
memory/3508-132-0x000001C7AE520000-0x000001C7AE521000-memory.dmp
memory/3508-134-0x000001C7B00E0000-0x000001C7B00F0000-memory.dmp
memory/3508-137-0x000001C7B0180000-0x000001C7B0190000-memory.dmp
memory/3508-136-0x000001C7B00F0000-0x000001C7B0100000-memory.dmp
memory/3508-141-0x000001C7AE520000-0x000001C7AE521000-memory.dmp
memory/3508-144-0x000001C7B0190000-0x000001C7B01A0000-memory.dmp
memory/3508-143-0x000001C7B0100000-0x000001C7B0110000-memory.dmp
memory/3508-155-0x000001C7B01A0000-0x000001C7B01B0000-memory.dmp
memory/3508-154-0x000001C7B0110000-0x000001C7B0120000-memory.dmp
memory/3508-158-0x000001C7B0120000-0x000001C7B0130000-memory.dmp
memory/3508-172-0x000001C7B0130000-0x000001C7B0140000-memory.dmp
memory/3508-181-0x000001C7B01B0000-0x000001C7B01C0000-memory.dmp
memory/3508-180-0x000001C7B0140000-0x000001C7B0150000-memory.dmp
memory/3508-194-0x000001C7B01C0000-0x000001C7B01D0000-memory.dmp
memory/3508-193-0x000001C7B0150000-0x000001C7B0160000-memory.dmp
memory/3508-206-0x000001C7B0160000-0x000001C7B0170000-memory.dmp
memory/3508-208-0x000001C7B01D0000-0x000001C7B01E0000-memory.dmp
memory/3508-207-0x000001C7B0170000-0x000001C7B0180000-memory.dmp
memory/3508-216-0x000001C7B01E0000-0x000001C7B01F0000-memory.dmp
memory/3508-252-0x000001C7B01F0000-0x000001C7B0200000-memory.dmp
memory/3508-307-0x000001C7B0180000-0x000001C7B0190000-memory.dmp
memory/3508-308-0x000001C7B0200000-0x000001C7B0210000-memory.dmp
memory/3508-335-0x000001C7B0210000-0x000001C7B0220000-memory.dmp
memory/3508-334-0x000001C7B0190000-0x000001C7B01A0000-memory.dmp
memory/3508-341-0x000001C7B01A0000-0x000001C7B01B0000-memory.dmp
memory/3508-342-0x000001C7B0220000-0x000001C7B0230000-memory.dmp
memory/3508-491-0x000001C7B0230000-0x000001C7B0240000-memory.dmp
memory/3508-492-0x000001C7B0240000-0x000001C7B0250000-memory.dmp
memory/3508-640-0x000001C7B0250000-0x000001C7B0260000-memory.dmp
memory/3508-638-0x000001C7B01B0000-0x000001C7B01C0000-memory.dmp
memory/3508-905-0x000001C7B0260000-0x000001C7B0270000-memory.dmp
memory/3508-909-0x000001C7B0290000-0x000001C7B02A0000-memory.dmp
memory/3508-908-0x000001C7B01D0000-0x000001C7B01E0000-memory.dmp
memory/3508-907-0x000001C7B0280000-0x000001C7B0290000-memory.dmp
memory/3508-906-0x000001C7B0270000-0x000001C7B0280000-memory.dmp
memory/3508-125-0x000001C7AE520000-0x000001C7AE521000-memory.dmp
memory/3508-1419-0x000001C7AE520000-0x000001C7AE521000-memory.dmp
memory/3508-1417-0x000001C7AE520000-0x000001C7AE521000-memory.dmp
memory/3508-26-0x000001C7AE520000-0x000001C7AE521000-memory.dmp
memory/3508-1433-0x000001C7AE520000-0x000001C7AE521000-memory.dmp
memory/3508-1446-0x000001C7AE520000-0x000001C7AE521000-memory.dmp
memory/3508-16-0x000001C7AFCF0000-0x000001C7AFF60000-memory.dmp
memory/3508-1547-0x00007FF8AF220000-0x00007FF8AF244000-memory.dmp
memory/5920-2-0x000001FB23290000-0x000001FB23500000-memory.dmp
memory/5920-12-0x000001FB21920000-0x000001FB21921000-memory.dmp
memory/5920-13-0x000001FB23290000-0x000001FB23500000-memory.dmp