Analysis
- max time kernel
148s - max time network
119s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
07/11/2026, 16:48
General
- Target MonitoreoSilos/gradle/wrapper/gradle-wrapper.jar
- Size 44KB
- Sample261107-vbmbfsdt3s
- SHA256 76805e32c009c0cf0dd5d206bddc9fb22ea42e84db904b764f3047de095493f3
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 10 IoCs
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\MonitoreoSilos\gradle\wrapper\gradle-wrapper.jar1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jdk-1.8\bin\java.exe"C:\Program Files\Java\jdk-1.8\bin\java.exe" -Xmx32m -Xms32m -cp . JavaProbe2⤵
-
-
C:\Users\Admin\.gradle\.tmp\jdks\OpenJDK25U-jdk_x64_windows_hotspot_25-any-vendor-253298673697288543696.tmp\jdk-25.0.3+9\bin\java.exeC:\Users\Admin\.gradle\.tmp\jdks\OpenJDK25U-jdk_x64_windows_hotspot_25-any-vendor-253298673697288543696.tmp\jdk-25.0.3+9\bin\java.exe -Xmx32m -Xms32m -cp . JavaProbe2⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
VCRUNTIME140.dll
java.dll
java.exe
jimage.dll
jli.dll
msvcp140.dll
classes.jsa
jvm.dll
vcruntime140_1.dll
verify.dll
ADDITIONAL_LICENSE_INFO
ASSEMBLY_EXCEPTION
LICENSE
jvm.cfg
JavaProbe.class
native-platform.dll
jansi.dll
gradle-base-services-9.6.0.jar
gradle-launcher-9.6.0.jar
memory/780-1586-0x0000019DC4170000-0x0000019DC4171000-memory.dmp
memory/5028-130-0x00000129F6B00000-0x00000129F73B0000-memory.dmp
memory/5028-198-0x00000129804F0000-0x0000012980500000-memory.dmp
memory/5028-43-0x0000012980330000-0x0000012980340000-memory.dmp
memory/5028-42-0x0000012980290000-0x00000129802A0000-memory.dmp
memory/5028-47-0x0000012980340000-0x0000012980350000-memory.dmp
memory/5028-46-0x00000129802A0000-0x00000129802B0000-memory.dmp
memory/5028-49-0x0000012980350000-0x0000012980360000-memory.dmp
memory/5028-48-0x00000129802B0000-0x00000129802C0000-memory.dmp
memory/5028-54-0x0000012980360000-0x0000012980370000-memory.dmp
memory/5028-53-0x00000129802C0000-0x00000129802D0000-memory.dmp
memory/5028-59-0x00000129802D0000-0x00000129802E0000-memory.dmp
memory/5028-60-0x0000012980370000-0x0000012980380000-memory.dmp
memory/5028-65-0x0000012980380000-0x0000012980390000-memory.dmp
memory/5028-64-0x00000129802F0000-0x0000012980300000-memory.dmp
memory/5028-63-0x00000129802E0000-0x00000129802F0000-memory.dmp
memory/5028-68-0x0000012980390000-0x00000129803A0000-memory.dmp
memory/5028-69-0x0000012980300000-0x0000012980310000-memory.dmp
memory/5028-70-0x00000129803A0000-0x00000129803B0000-memory.dmp
memory/5028-73-0x00000129803B0000-0x00000129803C0000-memory.dmp
memory/5028-72-0x0000012980310000-0x0000012980320000-memory.dmp
memory/5028-75-0x0000012980320000-0x0000012980330000-memory.dmp
memory/5028-77-0x00000129803C0000-0x00000129803D0000-memory.dmp
memory/5028-78-0x0000012980330000-0x0000012980340000-memory.dmp
memory/5028-79-0x00000129803D0000-0x00000129803E0000-memory.dmp
memory/5028-82-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-84-0x00000129803E0000-0x00000129803F0000-memory.dmp
memory/5028-83-0x0000012980340000-0x0000012980350000-memory.dmp
memory/5028-87-0x00000129803F0000-0x0000012980400000-memory.dmp
memory/5028-86-0x0000012980350000-0x0000012980360000-memory.dmp
memory/5028-90-0x0000012980360000-0x0000012980370000-memory.dmp
memory/5028-91-0x0000012980400000-0x0000012980410000-memory.dmp
memory/5028-93-0x0000012980370000-0x0000012980380000-memory.dmp
memory/5028-94-0x0000012980410000-0x0000012980420000-memory.dmp
memory/5028-97-0x0000012980380000-0x0000012980390000-memory.dmp
memory/5028-98-0x0000012980420000-0x0000012980430000-memory.dmp
memory/5028-99-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-102-0x0000012980430000-0x0000012980440000-memory.dmp
memory/5028-105-0x0000012980440000-0x0000012980450000-memory.dmp
memory/5028-104-0x00000129803A0000-0x00000129803B0000-memory.dmp
memory/5028-101-0x0000012980390000-0x00000129803A0000-memory.dmp
memory/5028-109-0x0000012980450000-0x0000012980460000-memory.dmp
memory/5028-113-0x0000012980470000-0x0000012980480000-memory.dmp
memory/5028-119-0x00000129803E0000-0x00000129803F0000-memory.dmp
memory/5028-118-0x0000012980490000-0x00000129804A0000-memory.dmp
memory/5028-117-0x0000012980480000-0x0000012980490000-memory.dmp
memory/5028-116-0x00000129803D0000-0x00000129803E0000-memory.dmp
memory/5028-112-0x00000129803C0000-0x00000129803D0000-memory.dmp
memory/5028-111-0x0000012980460000-0x0000012980470000-memory.dmp
memory/5028-108-0x00000129803B0000-0x00000129803C0000-memory.dmp
memory/5028-123-0x00000129804A0000-0x00000129804B0000-memory.dmp
memory/5028-122-0x00000129803F0000-0x0000012980400000-memory.dmp
memory/5028-126-0x00000129804B0000-0x00000129804C0000-memory.dmp
memory/5028-125-0x0000012980400000-0x0000012980410000-memory.dmp
memory/5028-131-0x0000012980410000-0x0000012980420000-memory.dmp
memory/5028-40-0x0000012980320000-0x0000012980330000-memory.dmp
memory/5028-134-0x00000129804C0000-0x00000129804D0000-memory.dmp
memory/5028-133-0x0000012980420000-0x0000012980430000-memory.dmp
memory/5028-137-0x00000129804D0000-0x00000129804E0000-memory.dmp
memory/5028-136-0x0000012980430000-0x0000012980440000-memory.dmp
memory/5028-139-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-146-0x0000012980460000-0x0000012980470000-memory.dmp
memory/5028-145-0x0000012980440000-0x0000012980450000-memory.dmp
memory/5028-144-0x00000129F6B00000-0x00000129F73B0000-memory.dmp
memory/5028-177-0x0000012980450000-0x0000012980460000-memory.dmp
memory/5028-178-0x00000129804E0000-0x00000129804F0000-memory.dmp
memory/5028-39-0x0000012980280000-0x0000012980290000-memory.dmp
memory/5028-196-0x0000012980470000-0x0000012980480000-memory.dmp
memory/5028-209-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-291-0x0000012980500000-0x0000012980510000-memory.dmp
memory/5028-290-0x0000012980490000-0x00000129804A0000-memory.dmp
memory/5028-289-0x0000012980480000-0x0000012980490000-memory.dmp
memory/5028-408-0x0000012980510000-0x0000012980520000-memory.dmp
memory/5028-486-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-906-0x00000129804C0000-0x00000129804D0000-memory.dmp
memory/5028-894-0x00000129804B0000-0x00000129804C0000-memory.dmp
memory/5028-893-0x0000012980540000-0x0000012980550000-memory.dmp
memory/5028-905-0x0000012980560000-0x0000012980570000-memory.dmp
memory/5028-904-0x0000012980550000-0x0000012980560000-memory.dmp
memory/5028-892-0x0000012980530000-0x0000012980540000-memory.dmp
memory/5028-891-0x0000012980520000-0x0000012980530000-memory.dmp
memory/5028-890-0x00000129804A0000-0x00000129804B0000-memory.dmp
memory/5028-1112-0x0000012980570000-0x0000012980580000-memory.dmp
memory/5028-1111-0x00000129804D0000-0x00000129804E0000-memory.dmp
memory/5028-1148-0x00000129805A0000-0x00000129805B0000-memory.dmp
memory/5028-1149-0x00000129804E0000-0x00000129804F0000-memory.dmp
memory/5028-1146-0x0000012980580000-0x0000012980590000-memory.dmp
memory/5028-1147-0x0000012980590000-0x00000129805A0000-memory.dmp
memory/5028-1154-0x00000129805B0000-0x00000129805C0000-memory.dmp
memory/5028-1153-0x00000129804F0000-0x0000012980500000-memory.dmp
memory/5028-1366-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-1397-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-1437-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-1458-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-1473-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-1525-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-1548-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-1550-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-1565-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-1567-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-1568-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-36-0x0000012980270000-0x0000012980280000-memory.dmp
memory/5028-1566-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-1588-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-1589-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-1596-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-1594-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-1618-0x00007FF8A0C00000-0x00007FF8A0C24000-memory.dmp
memory/5028-1617-0x00000129F6B00000-0x00000129F73B0000-memory.dmp
memory/5028-1654-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-1680-0x00000129F6B00000-0x00000129F73B0000-memory.dmp
memory/5028-1696-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-1697-0x00000129F6B00000-0x00000129F73B0000-memory.dmp
memory/5028-37-0x0000012980310000-0x0000012980320000-memory.dmp
memory/5028-34-0x0000012980300000-0x0000012980310000-memory.dmp
memory/5028-31-0x00000129802E0000-0x00000129802F0000-memory.dmp
memory/5028-32-0x00000129802F0000-0x0000012980300000-memory.dmp
memory/5028-29-0x0000012980000000-0x0000012980270000-memory.dmp
memory/5028-30-0x00000129802D0000-0x00000129802E0000-memory.dmp
memory/5028-25-0x00000129802C0000-0x00000129802D0000-memory.dmp
memory/5028-23-0x00000129802B0000-0x00000129802C0000-memory.dmp
memory/5028-21-0x00000129802A0000-0x00000129802B0000-memory.dmp
memory/5028-17-0x0000012980270000-0x0000012980280000-memory.dmp
memory/5028-18-0x0000012980280000-0x0000012980290000-memory.dmp
memory/5028-19-0x0000012980290000-0x00000129802A0000-memory.dmp
memory/5028-11-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-2-0x0000012980000000-0x0000012980270000-memory.dmp
memory/5028-2229-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-2246-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-2244-0x00000129F5190000-0x00000129F5191000-memory.dmp
memory/5028-2250-0x00007FF8A0C00000-0x00007FF8A0C24000-memory.dmp
memory/5028-2249-0x00000129F6B00000-0x00000129F73B0000-memory.dmp