Overview

overview

7

Static

static

3

SuzunaSetup-1.1.1.exe

windows11-21h2-x64

7

Versions/s...ta.exe

windows11-21h2-x64

4

Versions/s...ion.js

windows11-21h2-x64

3

Versions/s...le.bat

windows11-21h2-x64

3

Versions/s...tus.js

windows11-21h2-x64

3

Versions/s...ise.js

windows11-21h2-x64

3

Versions/s...es.bat

windows11-21h2-x64

3

Versions/s...nit.js

windows11-21h2-x64

3

Versions/s...one.js

windows11-21h2-x64

3

Versions/s...own.js

windows11-21h2-x64

3

Versions/s...tor.js

windows11-21h2-x64

3

Versions/s...ier.js

windows11-21h2-x64

3

Versions/s...pec.js

windows11-21h2-x64

3

Versions/s...pec.js

windows11-21h2-x64

3

Versions/s...Spy.js

windows11-21h2-x64

3

Versions/s...nge.js

windows11-21h2-x64

3

Versions/s...ent.js

windows11-21h2-x64

3

Versions/s...pec.js

windows11-21h2-x64

3

Versions/s...fig.js

windows11-21h2-x64

3

Versions/s...ent.js

windows11-21h2-x64

3

Versions/s...pec.js

windows11-21h2-x64

3

Versions/s...pec.js

windows11-21h2-x64

3

Versions/s...er.bat

windows11-21h2-x64

3

Versions/s...pec.js

windows11-21h2-x64

3

Versions/s...bol.js

windows11-21h2-x64

3

Versions/s...Ref.js

windows11-21h2-x64

3

Versions/s...pec.js

windows11-21h2-x64

3

Versions/s...bol.js

windows11-21h2-x64

3

Versions/s...ect.js

windows11-21h2-x64

3

Versions/s...pec.js

windows11-21h2-x64

3

Versions/s...pec.js

windows11-21h2-x64

3

Versions/s...pec.js

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    SuzunaSetup-1.1.1.exe
  • Size 221.3MB
  • Sample260909-erd21s1xes
  • SHA256 6c9ae9c0869fd3767b04d37e8d9000bda6f14da4d09f82f26b92102f1c442327
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryexecution

Malware Config

Targets

    • Target
      SuzunaSetup-1.1.1.exe
    • Size 221.3MB
    • SHA256 6c9ae9c0869fd3767b04d37e8d9000bda6f14da4d09f82f26b92102f1c442327
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1
    • Target
      Versions/suzuna-client/2018/RexursPlayerBeta.exe
    • Size 28.4MB
    • SHA256 8b00302b92175905a06fc42de834b8789e8bdf3ec52252b5eadda20ba958a9f0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    discovery
    behavioral2
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/AppTempCommon/Common/Action.lua
    • Size 1KB
    • SHA256 59a8cff173c59b4e6521f100bf80414ceb74388bc951b886124f141544ea4c5c
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral3
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/AppTempCommon/Common/Immutable.lua
    • Size 2KB
    • SHA256 ac34cdae486676b7a2370238de025c6c0cb74177ebd1324d293706bd77ac6212
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral4
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/AppTempCommon/LuaApp/Enum/RetrievalStatus.lua
    • Size 407B
    • SHA256 392f976e4095903f6882c1ffe92693069247dadc73fa099a937380082895cac0
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral5
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/AppTempCommon/LuaApp/Promise.lua
    • Size 7KB
    • SHA256 0cd89a584ce763258088e494ce44bedc01b468e5ef8689b927ed3e7a937b3e95
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral6
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/AppTempCommon/LuaApp/TableUtilities.lua
    • Size 3KB
    • SHA256 7053e7680ea2b42186c7139cbb30a88a8593969e2fcb8e2c5cc13c2c14dbbd56
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral7
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/AppTempCommon/LuaChat/TimeUnit.lua
    • Size 357B
    • SHA256 f5665b548de906f17bdc57e04d75ec0eccccd7ca0d79776012c9b0b95409383a
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral8
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/AppTempCommon/LuaChat/TimeZone.lua
    • Size 194B
    • SHA256 a87b79260c010145cb12a3e73b96bba671c1879ce13f9d76fc2d518b4cd01d5e
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral9
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/LocalizationPlugin/Components/Dropdown.lua
    • Size 4KB
    • SHA256 544630ed336d2ddf20e6bcd2bff26262912551a7b8a6bd2cd89a78189dc91152
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral10
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/LocalizationPlugin/Components/LocaleSelector.lua
    • Size 2KB
    • SHA256 0b5e521c5d7c7e5e2495aa54b04313c717653b45f7ba144d45eb26599073f4b9
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral11
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/LocalizationPlugin/Components/Modalifier.lua
    • Size 1KB
    • SHA256 7ce51288707932bc9928be843277900a7c47130ac6735004dbdafa55a77fb494
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral12
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/OtterImpl/createGroupMotor.spec.lua
    • Size 3KB
    • SHA256 00a305277941812892e63a672d3bcb1472ddffdb6687d294d85bf713c695b6a9
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral13
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/OtterImpl/createSingleMotor.spec.lua
    • Size 2KB
    • SHA256 e61a3fe41eadc9d8fcc23e726619439abd395303ca460510eb75b6e02dbcaf50
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral14
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/OtterImpl/createSpy.lua
    • Size 727B
    • SHA256 64895caa443b884465b924d18f28a5143abcb8546b998c5c5432dc9bbcddbc02
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral15
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/RoactImpl/Change.lua
    • Size 722B
    • SHA256 b309ed098e1a98afb528a1fa64f61c65517fb2d8384d494923dd1feb5f615e28
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral16
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/RoactImpl/Component.lua
    • Size 10KB
    • SHA256 c9f0878ecfadd479f426ae38b14df6ca7be3f61c4f4d857c3a3aa4997d5bb267
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral17
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/RoactImpl/Component.spec.lua
    • Size 13KB
    • SHA256 dc65e8b8d1caa32696e708f6cf02c1dcd171806a41cff8954bc0b20b2efef2fa
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral18
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/RoactImpl/Config.lua
    • Size 3KB
    • SHA256 590bf95f8fe0fcc617f548685890b03aa85eeb3b5ab289c8a8d50a720b483bcd
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral19
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/RoactImpl/Event.lua
    • Size 606B
    • SHA256 7bf0798b772f77d55edb8419bc8a8b101ebab50167ca892cf1d577d05bdd848f
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral20
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/RoactImpl/Instrumentation.spec.lua
    • Size 2KB
    • SHA256 dc034539940c848942aced27930d2fa7fad8a7f3b16b7320db340f36895d9bfe
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral21
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/RoactImpl/PureComponent.spec.lua
    • Size 1KB
    • SHA256 00905a2fad136ef0d3f633ec07f43e1e72afda764a6d6c893da5541bc417cf59
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral22
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/RoactImpl/Reconciler.lua
    • Size 15KB
    • SHA256 6f4623de3b2f25e6415cd1d93014221f8a089386c2610d5c229aee04dec8b828
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral23
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/RoactImpl/ReconcilerCompat.spec.lua
    • Size 1KB
    • SHA256 5c8b2b40df57b021e3aaa82b2b7f1a0b23ee3c1b9b433e3921fbcb325cc5c3eb
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral24
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/RoactImpl/Symbol.lua
    • Size 856B
    • SHA256 8be38367a21c748ef1f37d82b307fba96e329902273cb37f9ff9d688f06b50ac
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral25
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/RoactImpl/createRef.lua
    • Size 463B
    • SHA256 3eec81be9ea568235ede45f22119f21c7f0f5282669c17e3b288f753ece32fa3
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral26
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/RoactImpl/init.spec.lua
    • Size 11KB
    • SHA256 467ae83a49e9c43511ed49372cac10910e6f0e02d770e2c7f465a3b39843aca5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral27
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/RoactRoduxImpl/Symbol.lua
    • Size 899B
    • SHA256 23e382ae609174e382c09acdb659ae0564c0ca12014e4f241ab10b63ab688304
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral28
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/RoactRoduxImpl/connect.lua
    • Size 2KB
    • SHA256 d575285ef72ca9b33a87234c0d18b83ff41ae3d2791e0a2f7b87b5cc1ac79b6e
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral29
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/RoactRoduxImpl/connect.spec.lua
    • Size 2KB
    • SHA256 ff4147093a564b973d3936c038831ce57f2f1b1ac708c4c78067452af135297a
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral30
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/RoactRoduxImpl/connect2.spec.lua
    • Size 5KB
    • SHA256 cd26c3053f4a150d2aebcdcbffe20db89630705fb9ed08e50b862b2e3ca8137f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral31
    • Target
      Versions/suzuna-client/2018/content/LuaPackages/RoduxImpl/Signal.spec.lua
    • Size 2KB
    • SHA256 070826ab55bfa2e85124e4e890358e7b063c8ed331a9cec1bedc85be78dea00d
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral32

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
3/10

behavioral1

discovery
Score
7/10

behavioral2

discovery
Score
4/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10