General
- Target MasonChess.exe
- Size 1.3MB
- Sample260720-a131aacy8z
- SHA256 d6769672dc09ad17d83e20da0c8d0f939ee8eaaa984dcbf5cb4e04a235ae208f
- MD5 f84c1d239d67924c4e70e0b7f9926373
- SHA1 10362e850fffade1c56813c76f68f1f440b14a57
- SHA512 e1e767b5b2581378963b86276aa0c0964e492f17948d804c3e5789a340f6bee8bce7ea278751daa4cadb2582be0b6e023d9a8eca6725ab2d995fbe81e0f70650
- SSDEEP 24576:C/wtzYx3PgYWwocek/r2+AAYNh3tBULAkS7Le8:YwtkoA/qhlL3rmzS7
- TLSH T11955C622A687D9A3C40E1270DDD7D32977B2E0B46B368787BA4C9BEF7D213A11CC5146
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MasonChess.exe
Resource
win10v2004-20260513-en
11 signatures
300 seconds
Behavioral task
behavioral2
Sample
MasonChess.exe
Resource
win11ltsc2024-20260710-en
9 signatures
300 seconds
Malware Config
Targets
-
- Target MasonChess.exe
- Size 1.3MB
- SHA256 d6769672dc09ad17d83e20da0c8d0f939ee8eaaa984dcbf5cb4e04a235ae208f
- MD5 f84c1d239d67924c4e70e0b7f9926373
- SHA1 10362e850fffade1c56813c76f68f1f440b14a57
- SHA512 e1e767b5b2581378963b86276aa0c0964e492f17948d804c3e5789a340f6bee8bce7ea278751daa4cadb2582be0b6e023d9a8eca6725ab2d995fbe81e0f70650
- SSDEEP 24576:C/wtzYx3PgYWwocek/r2+AAYNh3tBULAkS7Le8:YwtkoA/qhlL3rmzS7
- TLSH T11955C622A687D9A3C40E1270DDD7D32977B2E0B46B368787BA4C9BEF7D213A11CC5146
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.