2f79a30540e3f31d86819c9fbf4d4f3a91d5d83ae07bcda94b1388818aebc933

Submit
Reports

Overview

overview

Static

static

Heaven's Exploits.zip

windows10-1703-x64

Heaven's Exploits.zip

windows11-21h2-x64

Heaven's E...er.exe

windows10-1703-x64

Heaven's E...er.exe

windows11-21h2-x64

Heaven's E...O.json

windows10-1703-x64

Heaven's E...O.json

windows11-21h2-x64

Heaven's E...ANO.iy

windows10-1703-x64

Heaven's E...ANO.iy

windows11-21h2-x64

Heaven's E..._FE.iy

windows10-1703-x64

Heaven's E..._FE.iy

windows11-21h2-x64

Heaven's E...g.json

windows10-1703-x64

Heaven's E...g.json

windows11-21h2-x64

Heaven's E...ed.txt

windows10-1703-x64

Heaven's E...ed.txt

windows11-21h2-x64

Heaven's E...ary.js

windows10-1703-x64

Heaven's E...ary.js

windows11-21h2-x64

Heaven's E...ipt.js

windows10-1703-x64

Heaven's E...ipt.js

windows11-21h2-x64

Heaven's E...on.txt

windows10-1703-x64

Heaven's E...on.txt

windows11-21h2-x64

Heaven's E...sh.txt

windows10-1703-x64

Heaven's E...sh.txt

windows11-21h2-x64

Heaven's E...op.ini

windows10-1703-x64

Heaven's E...op.ini

windows11-21h2-x64

Analysis

max time kernel
361s
max time network
1576s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
05-07-2024 08:54

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Heaven's Exploits.zip

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral2

Sample

Heaven's Exploits.zip

Resource

win11-20240704-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral3

Sample

Heaven's Exploits/Solara/SolaraBootstrapper.exe

Resource

win10-20240404-en

windows10-1703-x64

31 signatures

1800 seconds

Behavioral task

behavioral4

Sample

Heaven's Exploits/Solara/SolaraBootstrapper.exe

Resource

win11-20240704-en

discovery evasion themida trojan

windows11-21h2-x64

25 signatures

1800 seconds

Behavioral task

behavioral5

Sample

Heaven's Exploits/Solara/workspace/CFA HUB/Battlegrounder_2_GPO.json

Resource

win10-20240611-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral6

Sample

Heaven's Exploits/Solara/workspace/CFA HUB/Battlegrounder_2_GPO.json

Resource

win11-20240508-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral7

Sample

Heaven's Exploits/Solara/workspace/IY_ANO.iy

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral8

Sample

Heaven's Exploits/Solara/workspace/IY_ANO.iy

Resource

win11-20240704-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral9

Sample

Heaven's Exploits/Solara/workspace/IY_FE.iy

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral10

Sample

Heaven's Exploits/Solara/workspace/IY_FE.iy

Resource

win11-20240704-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral11

Sample

Heaven's Exploits/Solara/workspace/KavoConfig.json

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral12

Sample

Heaven's Exploits/Solara/workspace/KavoConfig.json

Resource

win11-20240704-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral13

Sample

Heaven's Exploits/Solara/workspace/vape/CustomModules/cachechecked.txt

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral14

Sample

Heaven's Exploits/Solara/workspace/vape/CustomModules/cachechecked.txt

Resource

win11-20240704-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral15

Sample

Heaven's Exploits/Solara/workspace/vape/GuiLibrary.js

Resource

win10-20240404-en

execution

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral16

Sample

Heaven's Exploits/Solara/workspace/vape/GuiLibrary.js

Resource

win11-20240704-en

execution

windows11-21h2-x64

1 signatures

1800 seconds

Behavioral task

behavioral17

Sample

Heaven's Exploits/Solara/workspace/vape/MainScript.js

Resource

win10-20240404-en

execution

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral18

Sample

Heaven's Exploits/Solara/workspace/vape/MainScript.js

Resource

win11-20240704-en

execution

windows11-21h2-x64

1 signatures

1800 seconds

Behavioral task

behavioral19

Sample

Heaven's Exploits/Solara/workspace/vape/assetsversion.txt

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral20

Sample

Heaven's Exploits/Solara/workspace/vape/assetsversion.txt

Resource

win11-20240704-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral21

Sample

Heaven's Exploits/Solara/workspace/vape/commithash.txt

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral22

Sample

Heaven's Exploits/Solara/workspace/vape/commithash.txt

Resource

win11-20240704-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral23

Sample

Heaven's Exploits/desktop.ini

Resource

win10-20240611-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral24

Sample

Heaven's Exploits/desktop.ini

Resource

win11-20240704-en

windows11-21h2-x64

3 signatures

1800 seconds

Report Analysis Logs

General

Target

Heaven's Exploits/Solara/workspace/vape/assetsversion.txt
Size

2B
MD5

1f0e3dad99908345f7439f8ffabdffc4
SHA1

b3f0c7f6bb763af1be91d9e74eabfeb199dc1f1f
SHA256

9400f1b21cb527d7fa3d3eabba93557a18ebe7a2ca4e471cfe5e4c5b4ca7f767
SHA512

8d89aa701de5a35b24cfadbd2088986ae13311d1a7c63abe5c780c62bc939a0577c3a78cf7ee4951c1b09f6849074c21ca1f7023e89bee683c1dbb2134a984d0

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE "C:\Users\Admin\AppData\Local\Temp\Heaven's Exploits\Solara\workspace\vape\assetsversion.txt"
1⤵
PID:220

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads