Analysis
- max time kernel
148s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
07/11/2026, 16:48
General
- Target MonitoreoSilos/gradlew.bat
- Size 2KB
- Sample261107-vbmbfsdt3s
- SHA256 1d297e00bd21de3ace22b4d7f2de1f9dfa858883d66bbf7c1ccbecccec8f4f3b
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 10 IoCs
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
- Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\MonitoreoSilos\gradlew.bat"1⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava.exe -version2⤵
-
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe"java.exe" "-Xmx64m" "-Xms64m" "-Dorg.gradle.appname=gradlew" -classpath "" -jar "C:\Users\Admin\AppData\Local\Temp\MonitoreoSilos\\gradle\wrapper\gradle-wrapper.jar"2⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jdk-1.8\bin\java.exe"C:\Program Files\Java\jdk-1.8\bin\java.exe" -Xmx32m -Xms32m -cp . JavaProbe3⤵
-
-
C:\Users\Admin\.gradle\.tmp\jdks\OpenJDK25U-jdk_x64_windows_hotspot_25-any-vendor-255249686868053048906.tmp\jdk-25.0.3+9\bin\java.exeC:\Users\Admin\.gradle\.tmp\jdks\OpenJDK25U-jdk_x64_windows_hotspot_25-any-vendor-255249686868053048906.tmp\jdk-25.0.3+9\bin\java.exe -Xmx32m -Xms32m -cp . JavaProbe3⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
3903daac9bc4a3b7.timestamp
VCRUNTIME140.dll
java.dll
java.exe
jimage.dll
jli.dll
msvcp140.dll
classes.jsa
jvm.dll
vcruntime140_1.dll
verify.dll
ADDITIONAL_LICENSE_INFO
ASSEMBLY_EXCEPTION
LICENSE
jvm.cfg
release
JavaProbe.class
native-platform.dll
jansi.dll
gradle-base-services-9.6.0.jar
gradle-launcher-9.6.0.jar
memory/2112-12-0x000002B013350000-0x000002B013351000-memory.dmp
memory/2112-13-0x000002B014D60000-0x000002B014FD0000-memory.dmp
memory/2112-2-0x000002B014D60000-0x000002B014FD0000-memory.dmp
memory/4332-118-0x000001C69A7E0000-0x000001C69A7F0000-memory.dmp
memory/4332-353-0x000001C69A930000-0x000001C69A940000-memory.dmp
memory/4332-53-0x000001C69A750000-0x000001C69A760000-memory.dmp
memory/4332-52-0x000001C69A6B0000-0x000001C69A6C0000-memory.dmp
memory/4332-63-0x000001C69A780000-0x000001C69A790000-memory.dmp
memory/4332-61-0x000001C69A6E0000-0x000001C69A6F0000-memory.dmp
memory/4332-66-0x000001C69A790000-0x000001C69A7A0000-memory.dmp
memory/4332-65-0x000001C69A6F0000-0x000001C69A700000-memory.dmp
memory/4332-70-0x000001C69A7A0000-0x000001C69A7B0000-memory.dmp
memory/4332-69-0x000001C69A700000-0x000001C69A710000-memory.dmp
memory/4332-74-0x000001C69A710000-0x000001C69A720000-memory.dmp
memory/4332-75-0x000001C69A7B0000-0x000001C69A7C0000-memory.dmp
memory/4332-79-0x000001C69A7C0000-0x000001C69A7D0000-memory.dmp
memory/4332-78-0x000001C69A720000-0x000001C69A730000-memory.dmp
memory/4332-82-0x000001C69A730000-0x000001C69A740000-memory.dmp
memory/4332-83-0x000001C69A7D0000-0x000001C69A7E0000-memory.dmp
memory/4332-85-0x000001C69A7E0000-0x000001C69A7F0000-memory.dmp
memory/4332-84-0x000001C69A740000-0x000001C69A750000-memory.dmp
memory/4332-87-0x000001C69A750000-0x000001C69A760000-memory.dmp
memory/4332-88-0x000001C69A7F0000-0x000001C69A800000-memory.dmp
memory/4332-92-0x000001C69A800000-0x000001C69A810000-memory.dmp
memory/4332-91-0x000001C69A770000-0x000001C69A780000-memory.dmp
memory/4332-90-0x000001C69A760000-0x000001C69A770000-memory.dmp
memory/4332-94-0x000001C69A810000-0x000001C69A820000-memory.dmp
memory/4332-96-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-99-0x000001C69A820000-0x000001C69A830000-memory.dmp
memory/4332-98-0x000001C69A780000-0x000001C69A790000-memory.dmp
memory/4332-102-0x000001C69A830000-0x000001C69A840000-memory.dmp
memory/4332-101-0x000001C69A790000-0x000001C69A7A0000-memory.dmp
memory/4332-105-0x000001C69A7A0000-0x000001C69A7B0000-memory.dmp
memory/4332-106-0x000001C69A840000-0x000001C69A850000-memory.dmp
memory/4332-109-0x000001C69A850000-0x000001C69A860000-memory.dmp
memory/4332-108-0x000001C69A7B0000-0x000001C69A7C0000-memory.dmp
memory/4332-112-0x000001C69A7C0000-0x000001C69A7D0000-memory.dmp
memory/4332-113-0x000001C69A860000-0x000001C69A870000-memory.dmp
memory/4332-116-0x000001C69A870000-0x000001C69A880000-memory.dmp
memory/4332-115-0x000001C69A7D0000-0x000001C69A7E0000-memory.dmp
memory/4332-119-0x000001C69A880000-0x000001C69A890000-memory.dmp
memory/4332-122-0x000001C69A890000-0x000001C69A8A0000-memory.dmp
memory/4332-128-0x000001C69A8B0000-0x000001C69A8C0000-memory.dmp
memory/4332-127-0x000001C69A810000-0x000001C69A820000-memory.dmp
memory/4332-129-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-135-0x000001C69A830000-0x000001C69A840000-memory.dmp
memory/4332-134-0x000001C69A8D0000-0x000001C69A8E0000-memory.dmp
memory/4332-133-0x000001C69A8C0000-0x000001C69A8D0000-memory.dmp
memory/4332-132-0x000001C69A820000-0x000001C69A830000-memory.dmp
memory/4332-126-0x000001C69A8A0000-0x000001C69A8B0000-memory.dmp
memory/4332-136-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-125-0x000001C69A800000-0x000001C69A810000-memory.dmp
memory/4332-121-0x000001C69A7F0000-0x000001C69A800000-memory.dmp
memory/4332-57-0x000001C69A770000-0x000001C69A780000-memory.dmp
memory/4332-139-0x000001C69A8E0000-0x000001C69A8F0000-memory.dmp
memory/4332-138-0x000001C69A840000-0x000001C69A850000-memory.dmp
memory/4332-146-0x000001C69A8F0000-0x000001C69A900000-memory.dmp
memory/4332-145-0x000001C69A850000-0x000001C69A860000-memory.dmp
memory/4332-157-0x000001C69A900000-0x000001C69A910000-memory.dmp
memory/4332-156-0x000001C69A860000-0x000001C69A870000-memory.dmp
memory/4332-163-0x000001C69A870000-0x000001C69A880000-memory.dmp
memory/4332-173-0x000001C69A880000-0x000001C69A890000-memory.dmp
memory/4332-176-0x000001C69A910000-0x000001C69A920000-memory.dmp
memory/4332-175-0x000001C69A890000-0x000001C69A8A0000-memory.dmp
memory/4332-219-0x000001C69A920000-0x000001C69A930000-memory.dmp
memory/4332-218-0x000001C69A8A0000-0x000001C69A8B0000-memory.dmp
memory/4332-56-0x000001C69A760000-0x000001C69A770000-memory.dmp
memory/4332-352-0x000001C69A8B0000-0x000001C69A8C0000-memory.dmp
memory/4332-461-0x000001C69A940000-0x000001C69A950000-memory.dmp
memory/4332-459-0x000001C69A8C0000-0x000001C69A8D0000-memory.dmp
memory/4332-460-0x000001C69A8D0000-0x000001C69A8E0000-memory.dmp
memory/4332-932-0x000001C69A900000-0x000001C69A910000-memory.dmp
memory/4332-931-0x000001C69A980000-0x000001C69A990000-memory.dmp
memory/4332-930-0x000001C69A970000-0x000001C69A980000-memory.dmp
memory/4332-929-0x000001C69A8F0000-0x000001C69A900000-memory.dmp
memory/4332-919-0x000001C69A8E0000-0x000001C69A8F0000-memory.dmp
memory/4332-1055-0x000001C69A990000-0x000001C69A9A0000-memory.dmp
memory/4332-918-0x000001C69A960000-0x000001C69A970000-memory.dmp
memory/4332-917-0x000001C69A950000-0x000001C69A960000-memory.dmp
memory/4332-1166-0x000001C69A9A0000-0x000001C69A9B0000-memory.dmp
memory/4332-1203-0x000001C69A920000-0x000001C69A930000-memory.dmp
memory/4332-1202-0x000001C69A9D0000-0x000001C69A9E0000-memory.dmp
memory/4332-1201-0x000001C69A9C0000-0x000001C69A9D0000-memory.dmp
memory/4332-1274-0x000001C69A930000-0x000001C69A940000-memory.dmp
memory/4332-1200-0x000001C69A9B0000-0x000001C69A9C0000-memory.dmp
memory/4332-1199-0x000001C69A910000-0x000001C69A920000-memory.dmp
memory/4332-1447-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-1449-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-1459-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-1477-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-1505-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-1506-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-1507-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-1524-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-1548-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-1563-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-1564-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-1565-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-1575-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-1570-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-59-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-2239-0x00007FFDB1910000-0x00007FFDB1934000-memory.dmp
memory/4332-1591-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-1593-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-1597-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-1621-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-1663-0x00007FFDB1910000-0x00007FFDB1934000-memory.dmp
memory/4332-1684-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-1685-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-58-0x000001C69A6D0000-0x000001C69A6E0000-memory.dmp
memory/4332-55-0x000001C69A6C0000-0x000001C69A6D0000-memory.dmp
memory/4332-49-0x000001C69A740000-0x000001C69A750000-memory.dmp
memory/4332-2171-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-47-0x000001C69A440000-0x000001C69A6B0000-memory.dmp
memory/4332-48-0x000001C69A730000-0x000001C69A740000-memory.dmp
memory/4332-45-0x000001C69A720000-0x000001C69A730000-memory.dmp
memory/4332-42-0x000001C69A710000-0x000001C69A720000-memory.dmp
memory/4332-40-0x000001C69A700000-0x000001C69A710000-memory.dmp
memory/4332-38-0x000001C69A6F0000-0x000001C69A700000-memory.dmp
memory/4332-36-0x000001C69A6E0000-0x000001C69A6F0000-memory.dmp
memory/4332-34-0x000001C69A6D0000-0x000001C69A6E0000-memory.dmp
memory/4332-31-0x000001C69A6B0000-0x000001C69A6C0000-memory.dmp
memory/4332-33-0x000001C69A6C0000-0x000001C69A6D0000-memory.dmp
memory/4332-26-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-16-0x000001C69A440000-0x000001C69A6B0000-memory.dmp
memory/4332-2229-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-2237-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-2235-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/4332-2233-0x000001C698BA0000-0x000001C698BA1000-memory.dmp
memory/6052-1590-0x000001841D630000-0x000001841D631000-memory.dmp