2f79a30540e3f31d86819c9fbf4d4f3a91d5d83ae07bcda94b1388818aebc933

Submit
Reports

Overview

overview

Static

static

Heaven's Exploits.zip

windows10-1703-x64

Heaven's Exploits.zip

windows11-21h2-x64

Heaven's E...er.exe

windows10-1703-x64

Heaven's E...er.exe

windows11-21h2-x64

Heaven's E...O.json

windows10-1703-x64

Heaven's E...O.json

windows11-21h2-x64

Heaven's E...ANO.iy

windows10-1703-x64

Heaven's E...ANO.iy

windows11-21h2-x64

Heaven's E..._FE.iy

windows10-1703-x64

Heaven's E..._FE.iy

windows11-21h2-x64

Heaven's E...g.json

windows10-1703-x64

Heaven's E...g.json

windows11-21h2-x64

Heaven's E...ed.txt

windows10-1703-x64

Heaven's E...ed.txt

windows11-21h2-x64

Heaven's E...ary.js

windows10-1703-x64

Heaven's E...ary.js

windows11-21h2-x64

Heaven's E...ipt.js

windows10-1703-x64

Heaven's E...ipt.js

windows11-21h2-x64

Heaven's E...on.txt

windows10-1703-x64

Heaven's E...on.txt

windows11-21h2-x64

Heaven's E...sh.txt

windows10-1703-x64

Heaven's E...sh.txt

windows11-21h2-x64

Heaven's E...op.ini

windows10-1703-x64

Heaven's E...op.ini

windows11-21h2-x64

Analysis

max time kernel
361s
max time network
1596s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
05-07-2024 08:54

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Heaven's Exploits.zip

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral2

Sample

Heaven's Exploits.zip

Resource

win11-20240704-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral3

Sample

Heaven's Exploits/Solara/SolaraBootstrapper.exe

Resource

win10-20240404-en

windows10-1703-x64

31 signatures

1800 seconds

Behavioral task

behavioral4

Sample

Heaven's Exploits/Solara/SolaraBootstrapper.exe

Resource

win11-20240704-en

discovery evasion themida trojan

windows11-21h2-x64

25 signatures

1800 seconds

Behavioral task

behavioral5

Sample

Heaven's Exploits/Solara/workspace/CFA HUB/Battlegrounder_2_GPO.json

Resource

win10-20240611-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral6

Sample

Heaven's Exploits/Solara/workspace/CFA HUB/Battlegrounder_2_GPO.json

Resource

win11-20240508-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral7

Sample

Heaven's Exploits/Solara/workspace/IY_ANO.iy

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral8

Sample

Heaven's Exploits/Solara/workspace/IY_ANO.iy

Resource

win11-20240704-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral9

Sample

Heaven's Exploits/Solara/workspace/IY_FE.iy

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral10

Sample

Heaven's Exploits/Solara/workspace/IY_FE.iy

Resource

win11-20240704-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral11

Sample

Heaven's Exploits/Solara/workspace/KavoConfig.json

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral12

Sample

Heaven's Exploits/Solara/workspace/KavoConfig.json

Resource

win11-20240704-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral13

Sample

Heaven's Exploits/Solara/workspace/vape/CustomModules/cachechecked.txt

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral14

Sample

Heaven's Exploits/Solara/workspace/vape/CustomModules/cachechecked.txt

Resource

win11-20240704-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral15

Sample

Heaven's Exploits/Solara/workspace/vape/GuiLibrary.js

Resource

win10-20240404-en

execution

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral16

Sample

Heaven's Exploits/Solara/workspace/vape/GuiLibrary.js

Resource

win11-20240704-en

execution

windows11-21h2-x64

1 signatures

1800 seconds

Behavioral task

behavioral17

Sample

Heaven's Exploits/Solara/workspace/vape/MainScript.js

Resource

win10-20240404-en

execution

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral18

Sample

Heaven's Exploits/Solara/workspace/vape/MainScript.js

Resource

win11-20240704-en

execution

windows11-21h2-x64

1 signatures

1800 seconds

Behavioral task

behavioral19

Sample

Heaven's Exploits/Solara/workspace/vape/assetsversion.txt

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral20

Sample

Heaven's Exploits/Solara/workspace/vape/assetsversion.txt

Resource

win11-20240704-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral21

Sample

Heaven's Exploits/Solara/workspace/vape/commithash.txt

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral22

Sample

Heaven's Exploits/Solara/workspace/vape/commithash.txt

Resource

win11-20240704-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral23

Sample

Heaven's Exploits/desktop.ini

Resource

win10-20240611-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral24

Sample

Heaven's Exploits/desktop.ini

Resource

win11-20240704-en

windows11-21h2-x64

3 signatures

1800 seconds

Report Analysis Logs

General

Target

Heaven's Exploits/Solara/workspace/vape/commithash.txt
Size

40B
MD5

4c6cbef0698e3036ac126cf319a3c30e
SHA1

d470501cb0673bec65506aa4078216138b20ed46
SHA256

21c90014fcccd39e7ddf2d13be9cbd946ec2819bef3aa42a72cf75753bbcf0aa
SHA512

1093a5d28072e34feb3dc96e85279a5513bc23239d278b08762f9302567959a367043a39fb8d170228e386609e0a07a1a0fa65ae8834aacabffed2e12ce2a0a0

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE "C:\Users\Admin\AppData\Local\Temp\Heaven's Exploits\Solara\workspace\vape\commithash.txt"
1⤵
PID:4208

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads