Overview
overview
9Static
static
3Heaven's Exploits.zip
windows10-1703-x64
1Heaven's Exploits.zip
windows11-21h2-x64
1Heaven's E...er.exe
windows10-1703-x64
9Heaven's E...er.exe
windows11-21h2-x64
9Heaven's E...O.json
windows10-1703-x64
3Heaven's E...O.json
windows11-21h2-x64
3Heaven's E...ANO.iy
windows10-1703-x64
3Heaven's E...ANO.iy
windows11-21h2-x64
3Heaven's E..._FE.iy
windows10-1703-x64
3Heaven's E..._FE.iy
windows11-21h2-x64
3Heaven's E...g.json
windows10-1703-x64
3Heaven's E...g.json
windows11-21h2-x64
3Heaven's E...ed.txt
windows10-1703-x64
1Heaven's E...ed.txt
windows11-21h2-x64
3Heaven's E...ary.js
windows10-1703-x64
3Heaven's E...ary.js
windows11-21h2-x64
3Heaven's E...ipt.js
windows10-1703-x64
3Heaven's E...ipt.js
windows11-21h2-x64
3Heaven's E...on.txt
windows10-1703-x64
1Heaven's E...on.txt
windows11-21h2-x64
3Heaven's E...sh.txt
windows10-1703-x64
1Heaven's E...sh.txt
windows11-21h2-x64
3Heaven's E...op.ini
windows10-1703-x64
1Heaven's E...op.ini
windows11-21h2-x64
3Analysis
-
max time kernel
616s -
max time network
1608s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
05-07-2024 08:54
Static task
static1
Behavioral task
behavioral1
Sample
Heaven's Exploits.zip
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
Heaven's Exploits.zip
Resource
win11-20240704-en
Behavioral task
behavioral3
Sample
Heaven's Exploits/Solara/SolaraBootstrapper.exe
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
Heaven's Exploits/Solara/SolaraBootstrapper.exe
Resource
win11-20240704-en
Behavioral task
behavioral5
Sample
Heaven's Exploits/Solara/workspace/CFA HUB/Battlegrounder_2_GPO.json
Resource
win10-20240611-en
Behavioral task
behavioral6
Sample
Heaven's Exploits/Solara/workspace/CFA HUB/Battlegrounder_2_GPO.json
Resource
win11-20240508-en
Behavioral task
behavioral7
Sample
Heaven's Exploits/Solara/workspace/IY_ANO.iy
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
Heaven's Exploits/Solara/workspace/IY_ANO.iy
Resource
win11-20240704-en
Behavioral task
behavioral9
Sample
Heaven's Exploits/Solara/workspace/IY_FE.iy
Resource
win10-20240404-en
Behavioral task
behavioral10
Sample
Heaven's Exploits/Solara/workspace/IY_FE.iy
Resource
win11-20240704-en
Behavioral task
behavioral11
Sample
Heaven's Exploits/Solara/workspace/KavoConfig.json
Resource
win10-20240404-en
Behavioral task
behavioral12
Sample
Heaven's Exploits/Solara/workspace/KavoConfig.json
Resource
win11-20240704-en
Behavioral task
behavioral13
Sample
Heaven's Exploits/Solara/workspace/vape/CustomModules/cachechecked.txt
Resource
win10-20240404-en
Behavioral task
behavioral14
Sample
Heaven's Exploits/Solara/workspace/vape/CustomModules/cachechecked.txt
Resource
win11-20240704-en
Behavioral task
behavioral15
Sample
Heaven's Exploits/Solara/workspace/vape/GuiLibrary.js
Resource
win10-20240404-en
Behavioral task
behavioral16
Sample
Heaven's Exploits/Solara/workspace/vape/GuiLibrary.js
Resource
win11-20240704-en
Behavioral task
behavioral17
Sample
Heaven's Exploits/Solara/workspace/vape/MainScript.js
Resource
win10-20240404-en
Behavioral task
behavioral18
Sample
Heaven's Exploits/Solara/workspace/vape/MainScript.js
Resource
win11-20240704-en
Behavioral task
behavioral19
Sample
Heaven's Exploits/Solara/workspace/vape/assetsversion.txt
Resource
win10-20240404-en
Behavioral task
behavioral20
Sample
Heaven's Exploits/Solara/workspace/vape/assetsversion.txt
Resource
win11-20240704-en
Behavioral task
behavioral21
Sample
Heaven's Exploits/Solara/workspace/vape/commithash.txt
Resource
win10-20240404-en
Behavioral task
behavioral22
Sample
Heaven's Exploits/Solara/workspace/vape/commithash.txt
Resource
win11-20240704-en
Behavioral task
behavioral23
Sample
Heaven's Exploits/desktop.ini
Resource
win10-20240611-en
Behavioral task
behavioral24
Sample
Heaven's Exploits/desktop.ini
Resource
win11-20240704-en
General
-
Target
Heaven's Exploits/Solara/workspace/vape/MainScript.js
-
Size
83KB
-
MD5
4e3739d68f5985ab3797ab33e0975cdd
-
SHA1
7c37faf5a8643a5190ba286b630c9d3fe5bf32af
-
SHA256
3befe40113dd767799be851b50d23a56923ea296d2b50b3051a5764e18bd5641
-
SHA512
679faf5fa0f189eef742360cd5efecc429760544a0a6002fab8ea66d04c59202113ca1df804cc50af2adb9dba5ce94407ff22f0f1e7074d3d2ff8f703b5d5d9e
-
SSDEEP
768:aABxHBr9wodvBHW50nmXsWjk1jpVxjfjTIkjblSBd4UN6j0jo/QIIj8j8jLzYvDj:zh9lNDZL3QwxBXpEJxrSCNhPKydZlM
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs