General
- Target DeadClient.exe
- Size 48KB
- Sample260821-aax2cagd93
- SHA256 2f123ab05c41a3b211c5eaa8cbb94f3edff481bea1b03d17c978511149c589cc
- MD5 314fa41ff260b6441aab710aba62bd87
- SHA1 dff742c2a932b582e86a5861cbe05c80f830e707
- SHA512 688799d6bf119f1830baf98f065115175256d8031e48361b5746eddbbc080125bdb36590f47b7a96a8a3d2990b428a2a62eec1e84b1d69ab3e2a513f946abcda
- SSDEEP 1536:sZSZAE/u33ipdpAKUiJz5l9+v/RMUIcnaycybezxqbS1O/X:s8ZACqipdpAKUiJz5l9+v/RMUgyHbez
- TLSH T12F23E79CA3D84131D0BF56B21D67524893B4BAA38466D79F7CC404CA3B16B99CA42EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
DeadClient.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
neptunerat
Attributes
-
filename
USB.exe
-
group
MasonGroup
-
key
FPvY9dpvdAvDREh9
-
private_ip
192.168.10.21:19211
-
rat_name
MasonRAT
Targets
-
- Target DeadClient.exe
- Size 48KB
- SHA256 2f123ab05c41a3b211c5eaa8cbb94f3edff481bea1b03d17c978511149c589cc
- MD5 314fa41ff260b6441aab710aba62bd87
- SHA1 dff742c2a932b582e86a5861cbe05c80f830e707
- SHA512 688799d6bf119f1830baf98f065115175256d8031e48361b5746eddbbc080125bdb36590f47b7a96a8a3d2990b428a2a62eec1e84b1d69ab3e2a513f946abcda
- SSDEEP 1536:sZSZAE/u33ipdpAKUiJz5l9+v/RMUIcnaycybezxqbS1O/X:s8ZACqipdpAKUiJz5l9+v/RMUgyHbez
- TLSH T12F23E79CA3D84131D0BF56B21D67524893B4BAA38466D79F7CC404CA3B16B99CA42EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects NeptuneRAT stealer