Analysis
- user interaction
yes - max time kernel
1s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
04/08/2026, 10:11
General
- Target masonclient.exe
- Size 375KB
- Sample260804-l8brjsszhy
- SHA256 fa810de277e10d2e363ecc96eb78a89d3dea575c8d77e4defaccae9a02024037
Malware Config
Signatures
- .NET Reactor proctector 64 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\masonclient.exe"C:\Users\Admin\AppData\Local\Temp\masonclient.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5876-0-0x0000000074282000-0x0000000074283000-memory.dmp
memory/5876-1-0x0000000002CE0000-0x0000000002D64000-memory.dmp
memory/5876-2-0x0000000074270000-0x0000000074A2C000-memory.dmp
memory/5876-3-0x0000000074270000-0x0000000074A2C000-memory.dmp
memory/5876-5-0x0000000002EA0000-0x0000000002F24000-memory.dmp
memory/5876-4-0x0000000005B80000-0x000000000613A000-memory.dmp
memory/5876-125-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-116-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-113-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-109-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-99-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-87-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-77-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-72-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-6-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-65-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-61-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-9-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-17-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-63-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-132-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-129-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-123-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-121-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-119-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-117-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-111-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-107-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-105-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-103-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-101-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-97-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-95-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-93-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-91-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-89-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-85-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-83-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-81-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-79-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-75-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-73-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-70-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-67-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-60-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-57-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-53-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-51-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-49-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-45-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-41-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-39-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-37-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-35-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-33-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-31-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-29-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-27-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-25-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-23-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-21-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-19-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-15-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-13-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-11-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-7-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-55-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-47-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-43-0x0000000002EA0000-0x0000000002F1D000-memory.dmp
memory/5876-127-0x0000000002EA0000-0x0000000002F1D000-memory.dmp