| Category | Machine | Started | Completed |
|---|---|---|---|
| ARCHIVE | s1_win7_x6403_us | Feb. 18, 2025, 6:06 p.m. | Feb. 18, 2025, 6:08 p.m. |
Archive betacraft-launcher-1.09_17/gradlew.bat @ betacraft-launcher-1.09_17.zip
Summary
| Size | 2.3KB |
|---|---|
| Type | ASCII text, with CRLF line terminators |
| MD5 | 632f7f6dcc28a13f168cc431061e0438 |
| SHA1 | d841ffc9855dcc642901e8abf28dee20b0485864 |
| SHA256 | 398db6d288bcbfc7b2059f15e2bb6f301cb39e8c421bd1e5c5682ab9bb8ed104 |
| SHA512 |
ee023003b0d6562a1aec12b18747ab126821be96e892413a9154c05ec05986d023c8bb26a154cf964b7e7da2a4f8a76c35dd36aceda3374abe0736a5c7330225
|
| CRC32 | 44E6C4D4 |
| ssdeep | 48:YmdmK63w2StxW2WK0N2gjPWK0mKMdCe3duCmKfzfbzx1:YmYpSGaPCP |
| Yara | None matched |
-
cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "gxjInGipOc" C:\Users\test22\AppData\Local\Temp\betacraft-launcher-1.09_17/gradlew.bat
1932 -
java.exe "C:\Program Files (x86)\Java\jre1.8.0_131\bin\java.exe" -XX:+HeapDumpOnOutOfMemoryError -Xmx1024m -Dfile.encoding=windows-1252 -Duser.country=US -Duser.language=en -Duser.variant -cp C:\Users\test22\.gradle\wrapper\dists\gradle-4.10.3-bin\31t79e2qsceia4mkbojplrgx\gradle-4.10.3\lib\gradle-launcher-4.10.3.jar org.gradle.launcher.daemon.bootstrap.GradleDaemon 4.10.3
2844
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| objects.githubusercontent.com | 185.199.111.133 | |
| github.com | 20.200.245.247 | |
| services.gradle.org | 104.16.72.101 |
Suricata Alerts
No Suricata Alerts
Suricata TLS
| Flow | Issuer | Subject | Fingerprint |
|---|---|---|---|
|
TLS 1.2 192.168.56.103:49169 185.199.111.133:443 |
C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1 | C=US, ST=California, L=San Francisco, O=GitHub, Inc., CN=*.github.io | 97:d8:c5:70:0f:12:24:6c:88:bc:fa:06:7e:8c:a7:4d:a8:62:67:28 |
|
TLS 1.2 192.168.56.103:49168 20.200.245.247:443 |
C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo ECC Domain Validation Secure Server CA | CN=github.com | e4:33:71:dd:d6:91:4a:75:b6:1f:9e:4f:74:6d:9b:f0:dd:26:fc:3a |
|
TLS 1.2 192.168.56.103:49167 104.16.73.101:443 |
C=US, O=Google Trust Services, CN=WE1 | CN=gradle.org | 0c:90:f6:0a:98:12:3f:4a:d8:96:7d:37:8b:ae:ac:0b:cc:4c:8a:f6 |
| url | http://commons.apache.org/lang/ |
| url | http://nekohtml.sourceforge.net/index.html |
| url | http://bugreport.java.com/bugreport/crash.jsp |
| url | http://www.apache.org/licenses/LICENSE-2.0 |
| url | http://commons.apache.org/cli/ |
| url | http://www.joda.org/joda-time/ |
| url | http://www.github.com/3breadt/dd-plist |
| url | https://github.com/gradle/gradle/issues/2293t |
| url | http://www.oracle.com/hotspot/jvm/vm/compiler/id |
| url | http://xml.apache.org/commons/ |
| url | http://bndtools.org/ |
| url | http://www.apache.org/licenses/LICENSE-2.0.txt |
| url | http://www.gradle.org |
| url | https://dl.google.com/dl/android/maven2/ |
| url | http://commons.apache.org/proper/commons-codec/ |
| url | http://xerces.apache.org/xerces2-j/ |
| url | http://www.oracle.com/hotspot/jvm/ |
| url | http://commons.apache.org/collections/ |
| url | http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6325169. |
| url | http://jatl.google.com |
| url | https://repo.maven.apache.org/maven2/ |
| url | http://openjdk.java.net/jeps/220). |
| url | http://www.saxproject.org/ |
| url | https://docs.gradle.org/%s/userguide/%s.html |
| url | http://ant.apache.org/ivy/ |
| url | https://www.apache.org/licenses/LICENSE-2.0.txt |
| url | http://bugreport.sun.com/bugreport/ |
| url | https://github.com/bndtools/bnd |
| url | https://docs.gradle.org/%s/dsl/%s.html |
| url | http://www.oracle.com/hotspot/jvm/vm/code_sweeper/id |
| url | http://apache.org/licenses/LICENSE-2.0 |
| url | http://www.mozilla.org/rhino |
| url | http://xml.apache.org/ |
| url | http://opensource.org/licenses/mit |
| url | http://github.com/FasterXML/jackson |
| url | https://github.com/google/gson |
| url | http://www.beanshell.org/ |
| url | http://bnd.bndtools.org/ |
| url | http://www.oracle.com/hotspot/jvm/java/monitor/address |
| url | https://github.com/FasterXML/jackson-core |
| url | http://commons.apache.org/io/ |
| url | http://www.apache.org/ |
| url | http://asm.ow2.org |
| url | https://gradle.com/scans/help/gradle-incompatible-plugin-version |
| url | https://gradle.com/scans/help/gradle-cli |
| url | https://help.gradle.org |
| url | http://www.google.com/ |
| url | http://www.slf4j.org/codes.htmln |
| url | http://www.slf4j.org/codes.html |
| url | http://www.oracle.com/technetwork/java/javaseproducts/ |
| description | Create a windows service | rule | Create_Service | ||||||
| description | Communications over RAW Socket | rule | Network_TCP_Socket | ||||||
| description | Communication using DGA | rule | Network_DGA | ||||||
| description | Match Windows Http API call | rule | Str_Win32_Http_API | ||||||
| description | Take ScreenShot | rule | ScreenShot | ||||||
| description | Escalate priviledges | rule | Escalate_priviledges | ||||||
| description | Steal credential | rule | local_credential_Steal | ||||||
| description | PWS Memory | rule | Generic_PWS_Memory_Zero | ||||||
| description | Record Audio | rule | Sniff_Audio | ||||||
| description | Communications over HTTP | rule | Network_HTTP | ||||||
| description | Communications use DNS | rule | Network_DNS | ||||||
| description | Code injection with CreateRemoteThread in a remote process | rule | Code_injection | ||||||
| description | (no description) | rule | DebuggerCheck__GlobalFlags | ||||||
| description | (no description) | rule | DebuggerCheck__QueryInfo | ||||||
| description | (no description) | rule | DebuggerCheck__RemoteAPI | ||||||
| description | (no description) | rule | DebuggerHiding__Thread | ||||||
| description | (no description) | rule | DebuggerHiding__Active | ||||||
| description | (no description) | rule | DebuggerException__ConsoleCtrl | ||||||
| description | (no description) | rule | DebuggerException__SetConsoleCtrl | ||||||
| description | (no description) | rule | ThreadControl__Context | ||||||
| description | (no description) | rule | SEH__vectored | ||||||
| description | (no description) | rule | Check_Dlls | ||||||
| description | Checks if being debugged | rule | anti_dbg | ||||||
| description | Anti-Sandbox checks for ThreatExpert | rule | antisb_threatExpert | ||||||
| description | Bypass DEP | rule | disable_dep | ||||||
| description | Affect hook table | rule | win_hook | ||||||
| description | File Downloader | rule | Network_Downloader | ||||||
| description | Match Windows Inet API call | rule | Str_Win32_Internet_API | ||||||
| description | Communications over FTP | rule | Network_FTP | ||||||
| description | Run a KeyLogger | rule | KeyLogger | ||||||
| description | Communications over P2P network | rule | Network_P2P_Win | ||||||
| description | Create a windows service | rule | Create_Service | ||||||
| description | Communications over RAW Socket | rule | Network_TCP_Socket | ||||||
| description | Communication using DGA | rule | Network_DGA | ||||||
| description | Match Windows Http API call | rule | Str_Win32_Http_API | ||||||
| description | Take ScreenShot | rule | ScreenShot | ||||||
| description | Escalate priviledges | rule | Escalate_priviledges | ||||||
| description | Steal credential | rule | local_credential_Steal | ||||||
| description | PWS Memory | rule | Generic_PWS_Memory_Zero | ||||||
| description | Record Audio | rule | Sniff_Audio | ||||||
| description | Communications over HTTP | rule | Network_HTTP | ||||||
| description | Communications use DNS | rule | Network_DNS | ||||||
| description | Code injection with CreateRemoteThread in a remote process | rule | Code_injection | ||||||
| description | (no description) | rule | DebuggerCheck__GlobalFlags | ||||||
| description | (no description) | rule | DebuggerCheck__QueryInfo | ||||||
| description | (no description) | rule | DebuggerCheck__RemoteAPI | ||||||
| description | (no description) | rule | DebuggerHiding__Thread | ||||||
| description | (no description) | rule | DebuggerHiding__Active | ||||||
| description | (no description) | rule | DebuggerException__ConsoleCtrl | ||||||
| description | (no description) | rule | DebuggerException__SetConsoleCtrl | ||||||
| file | C:\Users\test22\AppData\Local\Temp\.gradle\4.10.3\fileHashes\fileHashes.lock |
| file | C:\Users\test22\.gradle\daemon\4.10.3\registry.bin.lock |
| file | C:\Users\test22\.gradle\caches\4.10.3\fileHashes\fileHashes.lock |
| file | C:\Users\test22\.gradle\caches\journal-1\journal-1.lock |
| file | C:\Users\test22\.gradle\native\25\windows-i386\native-platform.dll.lock |
| file | C:\Users\test22\AppData\Local\Temp\.gradle\buildOutputCleanup\buildOutputCleanup.lock |
| file | C:\Users\test22\AppData\Local\Temp\.gradle\4.10.3\taskHistory\taskHistory.lock |