General

  • Target

    Heaven's Exploits.zip

  • Size

    336KB

  • MD5

    5048bb4d5026d1039654a97c8378edf2

  • SHA1

    48d7de93c5fba06572515a109dc04f335310136f

  • SHA256

    2f79a30540e3f31d86819c9fbf4d4f3a91d5d83ae07bcda94b1388818aebc933

  • SHA512

    cf4df4da62e9107b19fd0d4a88ede0fab8e14b474aba159a9e133859b8b34751e13bbfa6cd58eac6c2bf73f24b16e20eb12b2384c5a2e029a2a4611115337b9e

  • SSDEEP

    6144:lBzZhyoFThwHDh2GfPZHx3X8STKeAX0kMxb/ENHPNbmLq5hauTW3gIBcT1Z3UR:lBzZMoFThMhx9MSTK+bsNvN2KsxmLER

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Heaven's Exploits.zip
    .zip
  • Heaven's Exploits/Solara/SolaraBootstrapper.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Heaven's Exploits/Solara/workspace/CFA HUB/Battlegrounder_2_GPO.json
  • Heaven's Exploits/Solara/workspace/IY_ANO.iy
  • Heaven's Exploits/Solara/workspace/IY_FE.iy
  • Heaven's Exploits/Solara/workspace/KavoConfig.JSON
  • Heaven's Exploits/Solara/workspace/vape/CustomModules/cachechecked.txt
  • Heaven's Exploits/Solara/workspace/vape/GuiLibrary.lua
    .js
  • Heaven's Exploits/Solara/workspace/vape/MainScript.lua
    .js
  • Heaven's Exploits/Solara/workspace/vape/assetsversion.txt
  • Heaven's Exploits/Solara/workspace/vape/commithash.txt
  • Heaven's Exploits/desktop.ini