General
- Target DeadClient.exe
- Size 48KB
- Sample260820-3x7hhsgd73
- SHA256 d8f0e7c89adfcf1dbba72c6a9afb73d806b29bacdb9022400f0e88c69ac63a25
- MD5 fc5f38ac9f86bc74d92aef81f3355120
- SHA1 f5171efb5e2f534d9e02d0a10e04091bfb3df93a
- SHA512 8bdb0a5e5633b8d76dc90bd5f18a2c8961a25cf0e9c8faa8ac16f9f1fbadd0ad5216b9b0471cfe5344e18c58434143fd103b9972c3e7edc3535e3debee018cdb
- SSDEEP 1536:AyM7Mu5WhzSSlmYi4bdfT/v+zYRMae8oEU5Lyq+mbTJ51O/L:Ah7Mm8zXlmYi4bdfT/v+zYRMaJ+5V1bU
- TLSH T16E23E69CA3D94131E0BF56B21D77124883B4AA939562D79F7CC401CF2B16B96CA42EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
DeadClient.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
DeadClient.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
neptunerat
Attributes
-
filename
USB.exe
-
group
MasonGroup
-
key
Q8FPpOrNZxqMAJbh
-
private_ip
192.168.10.21:8080
-
rat_name
MasonRAT
Targets
-
- Target DeadClient.exe
- Size 48KB
- SHA256 d8f0e7c89adfcf1dbba72c6a9afb73d806b29bacdb9022400f0e88c69ac63a25
- MD5 fc5f38ac9f86bc74d92aef81f3355120
- SHA1 f5171efb5e2f534d9e02d0a10e04091bfb3df93a
- SHA512 8bdb0a5e5633b8d76dc90bd5f18a2c8961a25cf0e9c8faa8ac16f9f1fbadd0ad5216b9b0471cfe5344e18c58434143fd103b9972c3e7edc3535e3debee018cdb
- SSDEEP 1536:AyM7Mu5WhzSSlmYi4bdfT/v+zYRMae8oEU5Lyq+mbTJ51O/L:Ah7Mm8zXlmYi4bdfT/v+zYRMaJ+5V1bU
- TLSH T16E23E69CA3D94131E0BF56B21D77124883B4AA939562D79F7CC401CF2B16B96CA42EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects NeptuneRAT stealer