2f79a30540e3f31d86819c9fbf4d4f3a91d5d83ae07bcda94b1388818aebc933

Submit
Reports

Overview

overview

Static

static

Heaven's Exploits.zip

windows10-1703-x64

Heaven's Exploits.zip

windows11-21h2-x64

Heaven's E...er.exe

windows10-1703-x64

Heaven's E...er.exe

windows11-21h2-x64

Heaven's E...O.json

windows10-1703-x64

Heaven's E...O.json

windows11-21h2-x64

Heaven's E...ANO.iy

windows10-1703-x64

Heaven's E...ANO.iy

windows11-21h2-x64

Heaven's E..._FE.iy

windows10-1703-x64

Heaven's E..._FE.iy

windows11-21h2-x64

Heaven's E...g.json

windows10-1703-x64

Heaven's E...g.json

windows11-21h2-x64

Heaven's E...ed.txt

windows10-1703-x64

Heaven's E...ed.txt

windows11-21h2-x64

Heaven's E...ary.js

windows10-1703-x64

Heaven's E...ary.js

windows11-21h2-x64

Heaven's E...ipt.js

windows10-1703-x64

Heaven's E...ipt.js

windows11-21h2-x64

Heaven's E...on.txt

windows10-1703-x64

Heaven's E...on.txt

windows11-21h2-x64

Heaven's E...sh.txt

windows10-1703-x64

Heaven's E...sh.txt

windows11-21h2-x64

Heaven's E...op.ini

windows10-1703-x64

Heaven's E...op.ini

windows11-21h2-x64

Analysis

max time kernel
361s
max time network
1612s
platform
windows10-1703_x64
resource
win10-20240611-en
resource tags

arch:x64arch:x86image:win10-20240611-enlocale:en-usos:windows10-1703-x64system
submitted
05-07-2024 08:54

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Heaven's Exploits.zip

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral2

Sample

Heaven's Exploits.zip

Resource

win11-20240704-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral3

Sample

Heaven's Exploits/Solara/SolaraBootstrapper.exe

Resource

win10-20240404-en

windows10-1703-x64

31 signatures

1800 seconds

Behavioral task

behavioral4

Sample

Heaven's Exploits/Solara/SolaraBootstrapper.exe

Resource

win11-20240704-en

discovery evasion themida trojan

windows11-21h2-x64

25 signatures

1800 seconds

Behavioral task

behavioral5

Sample

Heaven's Exploits/Solara/workspace/CFA HUB/Battlegrounder_2_GPO.json

Resource

win10-20240611-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral6

Sample

Heaven's Exploits/Solara/workspace/CFA HUB/Battlegrounder_2_GPO.json

Resource

win11-20240508-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral7

Sample

Heaven's Exploits/Solara/workspace/IY_ANO.iy

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral8

Sample

Heaven's Exploits/Solara/workspace/IY_ANO.iy

Resource

win11-20240704-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral9

Sample

Heaven's Exploits/Solara/workspace/IY_FE.iy

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral10

Sample

Heaven's Exploits/Solara/workspace/IY_FE.iy

Resource

win11-20240704-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral11

Sample

Heaven's Exploits/Solara/workspace/KavoConfig.json

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral12

Sample

Heaven's Exploits/Solara/workspace/KavoConfig.json

Resource

win11-20240704-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral13

Sample

Heaven's Exploits/Solara/workspace/vape/CustomModules/cachechecked.txt

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral14

Sample

Heaven's Exploits/Solara/workspace/vape/CustomModules/cachechecked.txt

Resource

win11-20240704-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral15

Sample

Heaven's Exploits/Solara/workspace/vape/GuiLibrary.js

Resource

win10-20240404-en

execution

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral16

Sample

Heaven's Exploits/Solara/workspace/vape/GuiLibrary.js

Resource

win11-20240704-en

execution

windows11-21h2-x64

1 signatures

1800 seconds

Behavioral task

behavioral17

Sample

Heaven's Exploits/Solara/workspace/vape/MainScript.js

Resource

win10-20240404-en

execution

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral18

Sample

Heaven's Exploits/Solara/workspace/vape/MainScript.js

Resource

win11-20240704-en

execution

windows11-21h2-x64

1 signatures

1800 seconds

Behavioral task

behavioral19

Sample

Heaven's Exploits/Solara/workspace/vape/assetsversion.txt

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral20

Sample

Heaven's Exploits/Solara/workspace/vape/assetsversion.txt

Resource

win11-20240704-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral21

Sample

Heaven's Exploits/Solara/workspace/vape/commithash.txt

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral22

Sample

Heaven's Exploits/Solara/workspace/vape/commithash.txt

Resource

win11-20240704-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral23

Sample

Heaven's Exploits/desktop.ini

Resource

win10-20240611-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral24

Sample

Heaven's Exploits/desktop.ini

Resource

win11-20240704-en

windows11-21h2-x64

3 signatures

1800 seconds

Report Analysis Logs

General

Target

Heaven's Exploits/desktop.ini
Size

115B
MD5

237ae24d8a78e44b4b04bdf60d3b615b
SHA1

c46f23018848fda2af873988bb912ba0902603cf
SHA256

1e649ff90acd5e0c3fc1e9a91880239ddb63abd447a799d7897d493488749e62
SHA512

f0d900342cbc3471643e7bec97f9d9b47e77aa04c85a7b64b281c09dfafa711f3f5e718437610ae8fd2f726f0d66e1771b6b21eac1bf31d4d9c8aab9dd81baca

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE "C:\Users\Admin\AppData\Local\Temp\Heaven's Exploits\desktop.ini"
1⤵
PID:1756

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads