Resubmissions

18/08/2026, 11:21

260818-ngfyas1ela

18/08/2026, 11:19

260818-ne3dhshr5w10

General

  • Target
    https://gofile.io/d/u57zQ2nb
  • Sample260818-ne3dhshr5w

Malware Config

Extracted

Family
  • neptunerat

C2
  • 138.201.140.196:311

Attributes
  • filename

    USB.exe

  • group

    MasonGroup

  • key

    BSbdHxLQEwC5iMVf

  • rat_name

    MasonRAT

Targets

    • Target
      https://gofile.io/d/u57zQ2nb
    • Detects NeptuneRAT stealer

    • Family: NeptuneRAT, MasonRAT

      NeptuneRAT aka MasonRAT is a trojan written in C#.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

MITRE ATT&CK Enterprise v16

Tasks