General
- Target wwa.exe
- Size 48KB
- Sample260815-wl9eeaer3s
- SHA256 fb4a3019b2db32d35a67b5f0117bcdea3bc9ac9dddae0d58741cf91bf195d6e8
- MD5 5f4a09b72f6742c59c3e27dacc896c57
- SHA1 90ed66b5e6bb611ab45d9d51b605901ee3921c82
- SHA512 8d04f16cc3790d05c9657e636671e9e8bd4dbf9dd4cd8fb631c7d68299a1caa2c5ada3c291a8ffe89bf57236a0943cfd4bcab4a4f57ccb79395863a4cf4666eb
- SSDEEP 768:1PRwSZzM8X7eEPCDKSE3C9qp8ou/hZ2Mfo9oxOAncIcxmhb/jC81mhLOZfnHZPb:1PRZZzM8X7vP3S2C9qp8ou5Z2MfbxrcC
- TLSH T1E323D59CA3D94021E4BF57B21D77424853B4BAA34466D79F7CC401CA2B26B99CB41EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
wwa.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
neptunerat
C2
-
mauritania-convex.tun.ply.gg:1
Attributes
-
filename
USB.exe
-
group
MasonGroup
-
key
CjJJ2BTGiMUm2aq0
-
rat_name
MasonRAT
Targets
-
- Target wwa.exe
- Size 48KB
- SHA256 fb4a3019b2db32d35a67b5f0117bcdea3bc9ac9dddae0d58741cf91bf195d6e8
- MD5 5f4a09b72f6742c59c3e27dacc896c57
- SHA1 90ed66b5e6bb611ab45d9d51b605901ee3921c82
- SHA512 8d04f16cc3790d05c9657e636671e9e8bd4dbf9dd4cd8fb631c7d68299a1caa2c5ada3c291a8ffe89bf57236a0943cfd4bcab4a4f57ccb79395863a4cf4666eb
- SSDEEP 768:1PRwSZzM8X7eEPCDKSE3C9qp8ou/hZ2Mfo9oxOAncIcxmhb/jC81mhLOZfnHZPb:1PRZZzM8X7vP3S2C9qp8ou5Z2MfbxrcC
- TLSH T1E323D59CA3D94021E4BF57B21D77424853B4BAA34466D79F7CC401CA2B26B99CB41EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects NeptuneRAT stealer