General
- Target MasonClient.exe
- Size 48KB
- Sample260606-y2vbjacv51
- SHA256 e9dba4aa8af05a323c137737a56d918b01ea870afa6ad517cfcc3bf5c4539d7e
- MD5 281d050a125bef7270407db7e120a556
- SHA1 26d1a65a1770b3a83ba086fd08e9fe7e2d6a7ebf
- SHA512 997ab1bbcc0ab449a167733adf6ec0bb627f4471ae4cb5e173fd3507fe18d69ee5d59a43ee7d9093cb2374d461b35ea218762e9e3944c2976368a1241afd7c05
- SSDEEP 1536:kP4IXPtUy32UMAUm+eUSGnlmXXOcEXOcfXOcBXOcgXOc69y2UOXUk+Smt/mdXOcV:kP4IXPtUy32UMAUm+eUxnlmXXOcEXOc1
- TLSH T13B23D68DE7E55125DABF5EB119B30208C3B076934916C62F7CD805CB2B2BB984681FE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MasonClient.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
MasonClient.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target MasonClient.exe
- Size 48KB
- SHA256 e9dba4aa8af05a323c137737a56d918b01ea870afa6ad517cfcc3bf5c4539d7e
- MD5 281d050a125bef7270407db7e120a556
- SHA1 26d1a65a1770b3a83ba086fd08e9fe7e2d6a7ebf
- SHA512 997ab1bbcc0ab449a167733adf6ec0bb627f4471ae4cb5e173fd3507fe18d69ee5d59a43ee7d9093cb2374d461b35ea218762e9e3944c2976368a1241afd7c05
- SSDEEP 1536:kP4IXPtUy32UMAUm+eUSGnlmXXOcEXOcfXOcBXOcgXOc69y2UOXUk+Smt/mdXOcV:kP4IXPtUy32UMAUm+eUxnlmXXOcEXOc1
- TLSH T13B23D68DE7E55125DABF5EB119B30208C3B076934916C62F7CD805CB2B2BB984681FE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1