General
- Target MasonClient.exe
- Size 51KB
- Sample260815-temwqazbma
- SHA256 a78af77ef1c6e8f47d830ac7d1ed529e36ccda52d117ad081380f4e34753b625
- MD5 d6fb66a8937cc8d0dd4ef298795a4dd0
- SHA1 feac48efb5d19b83aec1cf21b400d567eb792226
- SHA512 c104c49578352961019335877dd1bae45d48ab5fdf8dcca9e13537892eb1a04c9044dfbe931a6b1b1a03a75503f8beab9684d04c1607bd5fe6885253edb99a44
- SSDEEP 1536:1VzzeNDPdxlCVQus8btFu/opVfw1Om2he:MXCVQuDb/SopZw1Omoe
- TLSH T17633E7D8F3E64120C1FF6BB559B323054B30B5579906D61F68C88AD9273ABCC46926F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
MasonClient.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
neptunerat
C2
-
euezbqytds.localto.net:5183:5183
Attributes
-
filename
USB.exe
-
group
MasonGroup
-
key
1gSvcn0VSlgPWhEc
-
rat_name
MasonRAT
Targets
-
- Target MasonClient.exe
- Size 51KB
- SHA256 a78af77ef1c6e8f47d830ac7d1ed529e36ccda52d117ad081380f4e34753b625
- MD5 d6fb66a8937cc8d0dd4ef298795a4dd0
- SHA1 feac48efb5d19b83aec1cf21b400d567eb792226
- SHA512 c104c49578352961019335877dd1bae45d48ab5fdf8dcca9e13537892eb1a04c9044dfbe931a6b1b1a03a75503f8beab9684d04c1607bd5fe6885253edb99a44
- SSDEEP 1536:1VzzeNDPdxlCVQus8btFu/opVfw1Om2he:MXCVQuDb/SopZw1Omoe
- TLSH T17633E7D8F3E64120C1FF6BB559B323054B30B5579906D61F68C88AD9273ABCC46926F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects NeptuneRAT stealer
-
Executes dropped EXE