General
- Target dfsisw.exe
- Size 49KB
- Sample260724-cjb7cafj4x
- SHA256 457d3312f0a0f9358bcf27450a8876845a33002100c37227f7c2e6602532e9dd
- MD5 a2170a7046e9e3bc6b3803822cecb190
- SHA1 da0ef971d4ff31a306c93521181a7f84f795c1b8
- SHA512 dc99780112c238b8d8a194047426b21b570e8b3bc476f134d07c3067883d6b5d6533bc37e76b13a4b04741b5349d9bdea1ef9d3d9296e8d8fdee51de6d5877e7
- SSDEEP 1536:1sTe1t0viHFItTyEefZyvSfz67BTeeG3Ow89cbsTLoSrVDOtF21:1oeXCaFItTyEefZyvSfz67BTeeGC6bsp
- TLSH T19F33D79CB3D84131E4BF66B61D67124993B4AA938462D75F7CC401CA2B27B89CB41EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
dfsisw.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
dfsisw.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
neptunerat
C2
-
143.14.44.118:19345
Attributes
-
filename
USB.exe
-
group
MasonGroup
-
key
5GSpiIu970PVO2J7
-
rat_name
MasonRAT
Targets
-
- Target dfsisw.exe
- Size 49KB
- SHA256 457d3312f0a0f9358bcf27450a8876845a33002100c37227f7c2e6602532e9dd
- MD5 a2170a7046e9e3bc6b3803822cecb190
- SHA1 da0ef971d4ff31a306c93521181a7f84f795c1b8
- SHA512 dc99780112c238b8d8a194047426b21b570e8b3bc476f134d07c3067883d6b5d6533bc37e76b13a4b04741b5349d9bdea1ef9d3d9296e8d8fdee51de6d5877e7
- SSDEEP 1536:1sTe1t0viHFItTyEefZyvSfz67BTeeG3Ow89cbsTLoSrVDOtF21:1oeXCaFItTyEefZyvSfz67BTeeGC6bsp
- TLSH T19F33D79CB3D84131E4BF66B61D67124993B4AA938462D75F7CC401CA2B27B89CB41EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects NeptuneRAT stealer