General
- Target free delta.exe
- Size 48KB
- Sample260810-t1d6psysfv
- SHA256 c9487ae8832325c2842e92b6842bb6e7a1f2335a2e2a96aee244a779a8f81162
- MD5 6b54fe25cfc6ef21fe3944b157c80232
- SHA1 aa01c32e4a044f5ce22b078a1b597c535420ae4c
- SHA512 e02d9de30fcad6f5428d6cf638f1d4a21c67996098893923e4e7b5c3e53a674adc1585517603327ca61fbea452b683637571ec3a06cf34e8c60d4ac76c3b3dcb
- SSDEEP 768:Fdw+/Sx3kfLec9T5fRe2ejli8gOuAJHsiZO4fo9E0rUQaUdN/taEbPzEZnQIf1fb:Fdsx3kfLX9B02Kli8gOuAJMiZO4fZUL0
- TLSH T16923C69CA3D94121E0BF56B21D77124893B4BAA38467D79F7CC401CB2B26B95CA41EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
free delta.exe
Resource
win11ltsc2024-20260710-en
13 signatures
150 seconds
Malware Config
Extracted
Family
-
neptunerat
C2
-
c7edxnrmtg.localto.net:6540
Attributes
-
filename
USB.exe
-
group
MasonGroup
-
key
TNGX0BxolABqHnTg
-
rat_name
MasonRAT
Targets
-
- Target free delta.exe
- Size 48KB
- SHA256 c9487ae8832325c2842e92b6842bb6e7a1f2335a2e2a96aee244a779a8f81162
- MD5 6b54fe25cfc6ef21fe3944b157c80232
- SHA1 aa01c32e4a044f5ce22b078a1b597c535420ae4c
- SHA512 e02d9de30fcad6f5428d6cf638f1d4a21c67996098893923e4e7b5c3e53a674adc1585517603327ca61fbea452b683637571ec3a06cf34e8c60d4ac76c3b3dcb
- SSDEEP 768:Fdw+/Sx3kfLec9T5fRe2ejli8gOuAJHsiZO4fo9E0rUQaUdN/taEbPzEZnQIf1fb:Fdsx3kfLX9B02Kli8gOuAJMiZO4fZUL0
- TLSH T16923C69CA3D94121E0BF56B21D77124893B4BAA38467D79F7CC401CB2B26B95CA41EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects NeptuneRAT stealer
-
Executes dropped EXE
-
Drops file in System32 directory