General
- Target MasonClient.exe
- Size 47KB
- Sample260813-d3qdrage95
- SHA256 0dbad4c665dbe4ef00fd7d42131ab5634f75ff75631b1a458d80492af16807b0
- MD5 a444010e010e1416b7988d17cc408aa6
- SHA1 82e3353b5c8865cd2a9d082d39b4cc4ab121df74
- SHA512 a99c71213be6f477a824e6ea9fd188813910ee19b4ffe1a90ca52c80e71b65af920d29bf1c38b72f43050aa7b81e42143fbdbc1469862c118b890ba253e9bf85
- SSDEEP 768:o8XFnqmrOZWeeDH+n3QWc/7KKyycYBmkbKEjotwvgLnGYbshi0HmADA8hLOJ0bMm:oMFnqmrOZWBDenAWc/7KKyq8kbKEjOwR
- TLSH T11A23C69CA3D84131E4BF5AB21D77024893B4BA938462D79F7CD405CA2B26B85C741EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
MasonClient.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
MasonClient.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
neptunerat
C2
-
lildarkweb.ddns.net:6666
Attributes
-
filename
USB.exe
-
group
MasonGroup
-
key
sgDYmv2d8qpPEqdp
-
rat_name
MasonRAT
Targets
-
- Target MasonClient.exe
- Size 47KB
- SHA256 0dbad4c665dbe4ef00fd7d42131ab5634f75ff75631b1a458d80492af16807b0
- MD5 a444010e010e1416b7988d17cc408aa6
- SHA1 82e3353b5c8865cd2a9d082d39b4cc4ab121df74
- SHA512 a99c71213be6f477a824e6ea9fd188813910ee19b4ffe1a90ca52c80e71b65af920d29bf1c38b72f43050aa7b81e42143fbdbc1469862c118b890ba253e9bf85
- SSDEEP 768:o8XFnqmrOZWeeDH+n3QWc/7KKyycYBmkbKEjotwvgLnGYbshi0HmADA8hLOJ0bMm:oMFnqmrOZWBDenAWc/7KKyq8kbKEjOwR
- TLSH T11A23C69CA3D84131E4BF5AB21D77024893B4BA938462D79F7CD405CA2B26B85C741EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects NeptuneRAT stealer