General
- Target DeadClient.exe
- Size 48KB
- Sample260721-tv38mscd38
- SHA256 3fa7bb9d15d664796f73891864cc59f5eeb0e7cb76976a954b9d7fd2450cddf6
- MD5 67e03cfd0761972f4342323f0657111a
- SHA1 f8e5efb55975432c6e5c1cccc3838d521597b0ba
- SHA512 7c6d9d62cb01e49f03361d6a76170d239ecd0bdc59bb53301f1ad212035ac3ff2ab33435a5f8d634f977ef319a789206249be5ec4ca8d1edf1233b5f246d93b6
- SSDEEP 768:HqOinUt1QoDreYeD+Ky2pe1AUGDG8Zvsfo9uwEHN4Fyk19YSbrtRh21AhLOMHXPL:HqOine1QoDrLeiKy2pe1AUGi8Zvsf/wl
- TLSH T1B823C59CA3D94031D4BF66B21D77524893B4BAA38466D79F7CC401CA2B22B95C741EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
DeadClient.exe
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
DeadClient.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
neptunerat
C2
-
12.tcp.cpolar.top:1193
Attributes
-
filename
USB.exe
-
group
MasonGroup
-
key
9Lpx8uaJcSj2i6hW
-
rat_name
MasonRAT
Targets
-
- Target DeadClient.exe
- Size 48KB
- SHA256 3fa7bb9d15d664796f73891864cc59f5eeb0e7cb76976a954b9d7fd2450cddf6
- MD5 67e03cfd0761972f4342323f0657111a
- SHA1 f8e5efb55975432c6e5c1cccc3838d521597b0ba
- SHA512 7c6d9d62cb01e49f03361d6a76170d239ecd0bdc59bb53301f1ad212035ac3ff2ab33435a5f8d634f977ef319a789206249be5ec4ca8d1edf1233b5f246d93b6
- SSDEEP 768:HqOinUt1QoDreYeD+Ky2pe1AUGDG8Zvsfo9uwEHN4Fyk19YSbrtRh21AhLOMHXPL:HqOine1QoDrLeiKy2pe1AUGi8Zvsf/wl
- TLSH T1B823C59CA3D94031D4BF66B21D77524893B4BAA38466D79F7CC401CA2B22B95C741EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects NeptuneRAT stealer