General
- Target MasonClient.exe
- Size 48KB
- Sample260719-kygdlsay4v
- SHA256 a2d85cc90148378686d5ab134f426c45edb0328449b63ae89fd6b0cd978909e2
- MD5 1a8b7e4822b81dd22f2642b7cc52a305
- SHA1 d61582efb4ec33319b78007022bfe929e3914082
- SHA512 f3c37b8f7f8c2706033900b4ea22a23f91dada27715c8c77921c6a054717b1b4ebdd8c64bd4e8498430b288382f39f4c6804ab657f7c868fa6439eff86cf57fe
- SSDEEP 1536:pAd+ObTOZWBlFnC4CY75/Sq2+rXRMbwXRb+jZJUv1Oz9:pA0ObTmclFnC4CY75/Sr+rXRMEhb+jg+
- TLSH T12523E69CA7D84131E4BF57B21DA7120993B4AA938463D79F7CC401CA2B27B95CA41EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
MasonClient.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
MasonClient.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
neptunerat
C2
-
143.14.44.118:19345
Attributes
-
filename
USB.exe
-
group
MasonGroup
-
key
8c01fHwVJVrUb2Zh
-
rat_name
MasonRAT
Targets
-
- Target MasonClient.exe
- Size 48KB
- SHA256 a2d85cc90148378686d5ab134f426c45edb0328449b63ae89fd6b0cd978909e2
- MD5 1a8b7e4822b81dd22f2642b7cc52a305
- SHA1 d61582efb4ec33319b78007022bfe929e3914082
- SHA512 f3c37b8f7f8c2706033900b4ea22a23f91dada27715c8c77921c6a054717b1b4ebdd8c64bd4e8498430b288382f39f4c6804ab657f7c868fa6439eff86cf57fe
- SSDEEP 1536:pAd+ObTOZWBlFnC4CY75/Sq2+rXRMbwXRb+jZJUv1Oz9:pA0ObTmclFnC4CY75/Sr+rXRMEhb+jg+
- TLSH T12523E69CA7D84131E4BF57B21DA7120993B4AA938463D79F7CC401CA2B27B95CA41EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects NeptuneRAT stealer
-
Sets desktop wallpaper using registry