General
- Target MasonClient.exe
- Size 53KB
- Sample260627-24fspses2n
- SHA256 bea441d7f4464dfa53414685054bf24149fce66f3ad34da256354245016de32d
- MD5 af66d94d288bb326683e1bc07b4095fc
- SHA1 fb88c8fdf366e22a726f6b046e3c3cc28d51a730
- SHA512 c2fa6c2f7fce9798414e5432404e4b500efc1ed8bd74bc982af7a6bf96dea10548ddf220674d8ae9f4a1cada7c1f7ff7b3783cef1ccc7a284b905033d291e0ae
- SSDEEP 768:cWRf+TDjfEeMm8hlOqC4q1cG7xXUZtDbCdgMBXzop2liNHrhBOoSXx:cWYzfh38hl45xXw9bCdttopxrDOVx
- TLSH T11A33D589E3D94130C1FF7BB959B363114B35B5138412C61F68D849EE272EBC94AA1BE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MasonClient.exe
Resource
win10ltsc2021-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
MasonClient.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
MasonClient.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target MasonClient.exe
- Size 53KB
- SHA256 bea441d7f4464dfa53414685054bf24149fce66f3ad34da256354245016de32d
- MD5 af66d94d288bb326683e1bc07b4095fc
- SHA1 fb88c8fdf366e22a726f6b046e3c3cc28d51a730
- SHA512 c2fa6c2f7fce9798414e5432404e4b500efc1ed8bd74bc982af7a6bf96dea10548ddf220674d8ae9f4a1cada7c1f7ff7b3783cef1ccc7a284b905033d291e0ae
- SSDEEP 768:cWRf+TDjfEeMm8hlOqC4q1cG7xXUZtDbCdgMBXzop2liNHrhBOoSXx:cWYzfh38hl45xXw9bCdttopxrDOVx
- TLSH T11A33D589E3D94130C1FF7BB959B363114B35B5138412C61F68D849EE272EBC94AA1BE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1