General
- Target DeadClient.exe
- Size 48KB
- Sample260824-mw6xlassfs
- SHA256 a523a1b586c0872bb2af2f706a27f440a17348b770eaff20c6d233f02a165cf3
- MD5 c747f8d900b9c68faf0deda6d7371758
- SHA1 851abbdd695bea25e08b56261cc68947d6cbf4ac
- SHA512 9657c1f75ff144dc17ee21fdfa322887e10e5e5d58151e01274a733c3dd5899a237d6b5c1846521761dc455e251ff158fc9bf0198fb16a38455137cfdd74db10
- SSDEEP 768:IZMBbsH0JeUCDyQIy8aRbx5HyOh9+vnRMoO94XdwBibakYqAAzhLOq21Ho:IZMBbsH0J/CmQIy8aRbx5HT+vnRMN9p0
- TLSH T1C423D59CA3D94131D4BF56B21DB7524883B4BA938463D79F7CC401CA2B26B95CA81EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
DeadClient.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
DeadClient.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
neptunerat
C2
-
21.tcp.cpolar.top:12609
Attributes
-
filename
USB.exe
-
group
MasonGroup
-
key
nJpm4o1XWEEVwlUZ
-
rat_name
MasonRAT
Targets
-
- Target DeadClient.exe
- Size 48KB
- SHA256 a523a1b586c0872bb2af2f706a27f440a17348b770eaff20c6d233f02a165cf3
- MD5 c747f8d900b9c68faf0deda6d7371758
- SHA1 851abbdd695bea25e08b56261cc68947d6cbf4ac
- SHA512 9657c1f75ff144dc17ee21fdfa322887e10e5e5d58151e01274a733c3dd5899a237d6b5c1846521761dc455e251ff158fc9bf0198fb16a38455137cfdd74db10
- SSDEEP 768:IZMBbsH0JeUCDyQIy8aRbx5HyOh9+vnRMoO94XdwBibakYqAAzhLOq21Ho:IZMBbsH0J/CmQIy8aRbx5HT+vnRMN9p0
- TLSH T1C423D59CA3D94131D4BF56B21DB7524883B4BA938463D79F7CC401CA2B26B95CA81EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects NeptuneRAT stealer