General
- Target MasonClient.exe
- Size 48KB
- Sample260629-rd746agy8l
- SHA256 1d648a604865587f71166193ffbb87d69c9680792e90dfc7b183410b697f8277
- MD5 11d96ae820b84cc28eaed9ed9f0ea6f4
- SHA1 f474fd4b8b4b9ee3c91464aee756b9edaba71a42
- SHA512 1cb682ab4d74aef6697293bcbd6be8b5e89a5fd1412291caec35f7a320728ad8cb6b24f7b4b79ca9a1eb82b1ca9dc122c462c90e62ccf84915ed74744dc21315
- SSDEEP 768:MWXRxC7AWMsoKMJ0f/ZY9Z0QZWUb5ejGcogfEN/xhLO4OYr:MWr8V7bME/ZY9ZlRb5ejGif01OxYr
- TLSH T1CA23D54DFBE40129D5BF6AF16D73A24983B079979506C50FACD402CB2B27B884691EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MasonClient.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
MasonClient.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target MasonClient.exe
- Size 48KB
- SHA256 1d648a604865587f71166193ffbb87d69c9680792e90dfc7b183410b697f8277
- MD5 11d96ae820b84cc28eaed9ed9f0ea6f4
- SHA1 f474fd4b8b4b9ee3c91464aee756b9edaba71a42
- SHA512 1cb682ab4d74aef6697293bcbd6be8b5e89a5fd1412291caec35f7a320728ad8cb6b24f7b4b79ca9a1eb82b1ca9dc122c462c90e62ccf84915ed74744dc21315
- SSDEEP 768:MWXRxC7AWMsoKMJ0f/ZY9Z0QZWUb5ejGcogfEN/xhLO4OYr:MWr8V7bME/ZY9ZlRb5ejGif01OxYr
- TLSH T1CA23D54DFBE40129D5BF6AF16D73A24983B079979506C50FACD402CB2B27B884691EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE