General
- Target MasonClient.exe
- Size 48KB
- Sample260712-dak9bsb16r
- SHA256 cb7851674a95efdc8f3129f44880467e1a315743fdd4bc3ea3539efd794860d6
- MD5 d6a2fec2ac32fda27351f133ae6052c1
- SHA1 8767962755cb7c71e2ec8cd0d97bab064236f508
- SHA512 9e9f20c7e5203eeed4f9deef4a376482500da93e0ea665828f698acd540a10bb9724990634ccdde993cd14af60f240531bb3bff9ad912400a8890a5b88fa1449
- SSDEEP 1536:7wUcpbvtUaX3UtUme+UTj+RkGnXOcUXOcvXOcBXOcAXOcmdy2UOyUk+XmNPmp7Xz:7wUcpbvtUaX3UtUme+Uv+RkGnXOcUXOy
- TLSH T1AE23E78DE7D55121CABF5EB119B35248C3B066D38816D66F7CD801CB2B2BB984681FE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MasonClient.exe
Resource
win10ltsc2021-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
MasonClient.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
MasonClient.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
MasonClient.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target MasonClient.exe
- Size 48KB
- SHA256 cb7851674a95efdc8f3129f44880467e1a315743fdd4bc3ea3539efd794860d6
- MD5 d6a2fec2ac32fda27351f133ae6052c1
- SHA1 8767962755cb7c71e2ec8cd0d97bab064236f508
- SHA512 9e9f20c7e5203eeed4f9deef4a376482500da93e0ea665828f698acd540a10bb9724990634ccdde993cd14af60f240531bb3bff9ad912400a8890a5b88fa1449
- SSDEEP 1536:7wUcpbvtUaX3UtUme+UTj+RkGnXOcUXOcvXOcBXOcAXOcmdy2UOyUk+XmNPmp7Xz:7wUcpbvtUaX3UtUme+Uv+RkGnXOcUXOy
- TLSH T1AE23E78DE7D55121CABF5EB119B35248C3B066D38816D66F7CD801CB2B2BB984681FE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1