General
- Target MasonClient.exe
- Size 48KB
- Sample260804-xsxvmaxhpb
- SHA256 6f3761a0f51d66a26e170ac9dfef3bc95e4bf364d7b0f47b6d1b3e1205b1b059
- MD5 accf11234c33dd849b9d22301d21a4c4
- SHA1 aece3bee14f72ee8506ee25abe0510e5750ded20
- SHA512 f1a0b761e23290f9f50cac9708a1683bb065cd3e4cd42d7c538cf1368ab5482737614c074b7bb58849e7685bff062097c6ad58fb6e23c6f4c5b943c9fbf3ac3c
- SSDEEP 1536:LS+72u5WhA+3niYivA+4fCL+pqRMSg1bQN3H9J431Oz6:Ll72m8A+3niYivA+4fCL+pqRMScbQNsx
- TLSH T19923D59CA3D84131D4BF5BB21D67120893B4AAA39467D79F7CC401CA2B26B95CA41EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
MasonClient.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
MasonClient.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
neptunerat
C2
-
sl1111-33125.portmap.host:33125
Attributes
-
filename
USB.exe
-
group
MasonGroup
-
key
t9jEnYpgbvchQIYk
-
rat_name
MasonRAT
Targets
-
- Target MasonClient.exe
- Size 48KB
- SHA256 6f3761a0f51d66a26e170ac9dfef3bc95e4bf364d7b0f47b6d1b3e1205b1b059
- MD5 accf11234c33dd849b9d22301d21a4c4
- SHA1 aece3bee14f72ee8506ee25abe0510e5750ded20
- SHA512 f1a0b761e23290f9f50cac9708a1683bb065cd3e4cd42d7c538cf1368ab5482737614c074b7bb58849e7685bff062097c6ad58fb6e23c6f4c5b943c9fbf3ac3c
- SSDEEP 1536:LS+72u5WhA+3niYivA+4fCL+pqRMSg1bQN3H9J431Oz6:Ll72m8A+3niYivA+4fCL+pqRMScbQNsx
- TLSH T19923D59CA3D84131D4BF5BB21D67120893B4AAA39467D79F7CC401CA2B26B95CA41EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects NeptuneRAT stealer