Analysis
- user interaction
yes - max time kernel
148s - max time network
161s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 22:50
Static task
static1
Behavioral task
behavioral1
Sample
MasonRAT-SRC.rar
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target MasonRAT-SRC.rar
- Size 225.0MB
- Sample260809-2sgkvswhph
- SHA256 e7250d39385158a6d220528eb5b958356e34416cd2c5c6f25daf5a8aecbab26c
- MD5 ab85cbd39e38d8b5d1fa04a023a43408
- SHA1 45c059a0936b1793b0d771f997048a3a17266e41
- SHA512 fba13291fa5638812ae081d0173cd82e36736ff6b126e353ed838cea49b6194ec3b241a441bd5b4cded3cff2080bda4f551adafb653dcddece014f6f6cc5d8f0
- SSDEEP 6291456:uRrXLS2XQmLFidaZ6V7lZLls6V/fjddcC:uZ7S61FidakV7TdfrcC
- TLSH T1A0B833D58C60B6516E48596FEC2C547376F86703D8EEC0D5FD816B12E280A8FEE0DA87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5748 7zFM.exe - Suspicious use of AdjustPrivilegeToken 5 IoCs
description pid Process Token: SeRestorePrivilege 5748 7zFM.exe Token: 35 5748 7zFM.exe Token: SeSecurityPrivilege 5748 7zFM.exe Token: SeSecurityPrivilege 5748 7zFM.exe Token: SeSecurityPrivilege 5748 7zFM.exe - Suspicious use of FindShellTrayWindow 4 IoCs
pid Process 5748 7zFM.exe 5748 7zFM.exe 5748 7zFM.exe 5748 7zFM.exe