bfe7e3a5842cbe2aa9b883fee30ab1517020556e249a18788ef191b46f083cb0

Sharing

Copy URL Twitter E-mail

General

Target
MasonProtector.rar
Size 276KB
Sample260827-bp71jacp8z
SHA256 bfe7e3a5842cbe2aa9b883fee30ab1517020556e249a18788ef191b46f083cb0
MD5 e928ae5bac531e0380fb656781ab2cf8
SHA1 1ead1c564d46e2708ab0a0b3fed00d4dbcfbec91
SHA512 d5229c3b80f2c9034e43b16d57a65c72c5346bd6bf6e269469c874bdcd0c27982ebce0cedbd006f01b52443963297db93005906eb0f26aecb3924c17511fbfe6
SSDEEP 6144:UyBz2EGw859IE8ovMAJq1xZtJp5nRKmLD9bWCAyaSA6p41Y2zkhnb0mQ:1zv859I2hJ2xZtJLNLACAcSuh5Q
TLSH
T18C54128636A6FE1E54EF59E1B053DDDD3428838789F2B014A8F92E864F7211C1B0B91F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  MasonProtector/Core/Protections/Encryption/MutationEncoding.cs
- Size 15KB
- SHA256 e099143b6abb7db13e5c57c4fedd1218c83e1d4ecaa9f234738c941771e4b41c
- MD5 0709e4890d7d3c7e865b7f528beb16a7
- SHA1 c85d1b251ca37c7cb6fb4a7bdba6dce28382eb13
- SHA512 8a952e52c02d3bef9e503a3838eaf6f96cf25379d52af4a37003b4aee220bad95c59725390eddf9bcfb75cdb2cd9165f8825659b843a4a2806d41cad303259dd
- SSDEEP 192:JjDeWUcd6+8CSCSPhmMlX3/hmBlkFN7l3rnOq6AyKwepSoslFQv:JjDeWUcd6+DSlhlthQC8uivQv
- TLSH
  T1E062879AA5BAD8595237B2285F734400DE68046F69896721FD7EC8F47FF802483FAB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1
- Target
  MasonProtector/Core/Protections/Encryption/PolymorphicEncryption.cs
- Size 38KB
- SHA256 69f6d22c633badc8eecd24c9d45dc018a682bec564099a897f578f44c4d60206
- MD5 bdbc014882801a0f4c2c965a32add5b7
- SHA1 39c22b0247790056b0b780cefc3f42dd0055e538
- SHA512 499d39d7288c39ce9728d83e0b2d9edf5fea5ff6ca232dac012efadd1ee2dd4aaf9fc2245dd8e3937e8178bc21942ab15510167804751cf553bc00cac6843856
- SSDEEP 384:Y6jbchpJxyhLwNMgzKZ2j4owLGWRRKq1WRdIWOb8:RMD4owLrRRXURdlz
- TLSH
  T11803CC8E28B5D0D20D775588EF321210EE90226B58095733FF7ED8E91FBA18992FD794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral2
- Target
  MasonProtector/Core/Protections/Encryption/ResourceVaultRuntime.cs
- Size 11KB
- SHA256 0d4633a0a5525961df321f047ec1a9e714b8c60c70b26cd67019267667ecd959
- MD5 fa4b7b316eef8212948aab14a106be82
- SHA1 7f45e6c60789028bc6a88c8b730db19bac56fd74
- SHA512 eab4e2e0f88de146db747d45dda6bcf49bdac7555c1bd32ec1180da394b73bc619b8b9d9e95f790fba7e35d7e80b41eaab7b4e8afdb5b4e6f2c0f623db59a5b4
- SSDEEP 192:YFiU3jnoj8XsO+DDdK0lGlqfY859shgCNg:Yg4sLP300EN4shLNg
- TLSH
  T1C64241851AA6EB760AF3D12D8FB0050DFB56912702ADDA28FD8E8D441F7441183B9FE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  MasonProtector/Core/Protections/Encryption/RuntimeEncryption.cs
- Size 52KB
- SHA256 3ea4615c976a58684d19869749c9619f344124fadc5ade64307363b3948cdac0
- MD5 6291168ac94490505433c86ea36572e4
- SHA1 efb05d70f72c21dae91df95bec7017c68d3a2949
- SHA512 08decafba5241fd7d4b8bb621ea69bb98e609d6d53b813d584b69654bf9471b6b2e52a6b93e1dc271cfec120a096863cf6afd72a532367d18cab2f84acb12268
- SSDEEP 768:ZOjO1lvimMmSqVdmWHQU3YlXAuu6AnKyBb:u0vB3/y+Kyh
- TLSH
  T11E33FF8E287A90D25D775564BF320100EFA0526B45099723FEBDD8EC1FFE15A42FAB84
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  MasonProtector/Core/Protections/Encryption/StringComposition.cs
- Size 27KB
- SHA256 b91dcca85cd785f1e0ee4403b950f708928f1455529c6342e52bfd5962f4d7ab
- MD5 d7490bc6eb21da6773bc9264a642c9ef
- SHA1 c2a63220de97a1481bc628b95e1c714503bc04f0
- SHA512 59cefda6202128785fb8cf7d5ddeed272f7bce2d0e1295070c4fa4ceae4cc751a259b37f84c872c15bc361305c428c8cda60355dd594a1d1bb60443f05578e8e
- SSDEEP 384:Yy5jWgcPUlpl+SMYfhLhXeggUWrqRKWDmj:jVpPj5A5+Rny
- TLSH
  T1F7C2001D287590D30D7B9258FF621100EFA0126B15065B32FFBDC8AA1F7A159A2FDBE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  MasonProtector/Core/Protections/Encryption/StringEncryption.cs
- Size 50KB
- SHA256 00a22758ac821bb3f72b49cb8f3a518f39bc625db6d6204bfddfcbcabd798990
- MD5 ad9ca9474e18115a977f33841f4c9a23
- SHA1 b61d9aa279e08936c93614c4462fac8ed35fd30c
- SHA512 628009068755dfa644108a1faa378a517b266000ef78f80eac9b2c2a329327d964b4a262b3bc703b716374740d4a7e46b4046a1d8990f4fe8642d76dff717f74
- SSDEEP 384:Y9tjQnw33AzuniRBunzTnud7MMR+3VZ9wkbdXxeFx+SyALmJyrZuR32RRRpRm4zx:ERQ0ZLGh+Kkx2b9oR32RRRpRm4t
- TLSH
  T1B7338B8E28B5D0C24DB765986F720610EE50417F58091732FE7ED8B82FFA18A92FD794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  MasonProtector/Core/Protections/Obfuscation/BranchConfusion.cs
- Size 26KB
- SHA256 58d291acdca971a809fd25d6c2ab170737b536715cd42e3a96a20d17566b8e48
- MD5 f24fdba085f9859f491503dafff4c49a
- SHA1 f0a9e15767f3c1f5fd63171952a0f2d7b633f254
- SHA512 8af4197999f52707a9b4221faf1f40dd742d30e3d487704c4533f7b1f060ca5727b64bd5bf1860e7c640b852042c8eae72834f65f6846652f41ce90a169bc877
- SSDEEP 384:YCaWRRRiqqRRmyEaOOWXWRRRR1vWRRRRp3x:9RRRi3RRmyEaOOWmRRRR1eRRRRz
- TLSH
  T1E6C2D58E24B6D0D25DB755847F721505EE60026F48095332FE3ED9E82FBE25A82FDB48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  MasonProtector/Core/Protections/Obfuscation/CallHiding.cs
- Size 10KB
- SHA256 f832d484b5d2e06975e2145974307fb3b111cc8fc780054da3ccc9af4e4d5e91
- MD5 4fc2e94e3a4eddcee3e6e0032bfe0b53
- SHA1 e112a48e9a7f75acc2f9fdcee412b65d700398c7
- SHA512 50276f91998eb457bd0e4d7c6a6915db5f5d871aec155fcafef36808690524a43d30bbbddd467ba9cef836ef79b1d27d9decfc1f2bed9525d6a697b2de590c0c
- SSDEEP 192:YUZCDz1DvCI+gjFLzHElBFcbrlUc3wVkinbCZi:YM6jFL7T6c3wVkiOZi
- TLSH
  T1DA32E89D28BA90D30E77921CAE330146EFA0515719071E32FEBDC9D42FBA11662FDB94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  MasonProtector/Core/Protections/Obfuscation/CalliConversion.cs
- Size 3KB
- SHA256 3ad93aa81950912a4bb276d5a4947dae6d3cc866f1f7d68016d398b5f7a0d137
- MD5 856443498b0bd2ade91309f6d8854395
- SHA1 f9a5470f0fceb386a29b3e237664bcbd03ee1a61
- SHA512 31be76bd7387eefdbeb0f4f1c7174e46fca753627830b919141ca88fb76c074ec0bb5ff3947be19503d6797014d706e24537ecb1d4350ddb2180900c83b5d1a3
- TLSH
  T14D61ADA949CA42CA2676876DAFD70128DBB148631643AB107DAC86D41FB4438637FF98
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral9
- Target
  MasonProtector/Core/Protections/Obfuscation/CodeVirtualization.cs
- Size 92KB
- SHA256 5c5167c8cf6d805be31ac3151f1cdb6c6d1ef2d09581312400872fe01d4b606f
- MD5 ba6079daa106b4b22cd851dbfa5d05c8
- SHA1 0efd46c06be82afba2fe831094f77c5e768018ef
- SHA512 d7a83f68f76cf6a7f8b655a6136a3b74cf4b8c066d6311112b429496f90b98a53adfa34fb04cbe8b8ac44605aa76d20016089b31e9efd7121bba3cf5d4ebca39
- SSDEEP 768:R1MAfVVRRRlR4zRRciROXRRDRBtR0R+2plR+dWRtlRIgZ+RTecRH23RZ:R1MAzk
- TLSH
  T1EE93569E24B690E29DB79544BE711601EF60229B08054B73FE7ED8D90FBE21A52FD3C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  MasonProtector/Core/Protections/Obfuscation/ControlFlow.cs
- Size 16KB
- SHA256 696331e0a4cecd8314428f5f833e4b8db6d7f6b0dbcbee94cd28a78b88112c6e
- MD5 f9e9ee68b73dd1eab05749d24a6d04de
- SHA1 d8093fd336242b56cc99657ed1d26af87108162f
- SHA512 cf6536b630511730b6c8fa34995e95dcf421a8cc71af583496f7868e95f5eb72a960f6660f526d1cc1042e66b8d50b15dedb08e95a1030030c4ee66f47995ea3
- SSDEEP 96:Co4h2MximPTvfyr8QvD71NEL1Af+KG8jIdHSSMzixyBD0YB0Dy+0yDBrRgzfRH8K:YUMjK9NEL1FKGsIdezDve8ojJzwjKxzy
- TLSH
  T14672A98E6CB581C29CB39618BF720110EF14425F69451373FE6DC4E81FFA15A82FAB99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  MasonProtector/Core/Protections/Obfuscation/ControlFlowFlattening2.cs
- Size 25KB
- SHA256 ef70127a4d4ebc0bc0e7bfa81cf4386456c9831f54fd8209b1225d2bb9d00f15
- MD5 2dbd2bc9454a48f8c4482746d7edf6c9
- SHA1 e177cd93f1b3a5ef9927647612ef8ee6b541dbb8
- SHA512 99e0e72c5e34e82a99bd3a9765998d53e09ba1b597847e8aec969c054d29ffba9ea25fa6e518942a908d8643d2e25f0f3c7f54476e3019e09b4b2745af3aa1f7
- SSDEEP 384:Y9KKk6r/Nk/MebO3nUWRRR+WRsWRRdL9x:nNZERRRjRxRRdX
- TLSH
  T13BC2978D28B5D0E20D775584FF221501EEA0225B4A095723FF7EC8D91FBA25A82FDB94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  MasonProtector/Core/Protections/Obfuscation/Dynamic.cs
- Size 6KB
- SHA256 7ef8e204044c56a424c838d24f980243062b15b9bdc0ef572bc8289f4a0d5ec9
- MD5 02de9c95d947dd68d31de588b244d8c7
- SHA1 91fcd174f682f71938dfde1a4970aabcde35ebcc
- SHA512 be56d43beba24235059b1c443e2ccb5f108ebe545b14e6e4401da1740fb25ce748ca63a08cee9ad0f24ddcf9ef4725893762f2b65bd40dadeb394edc35827b3e
- SSDEEP 96:Co4h2l1u/xy0RrPPnUvftXH87iz3XN7B2dKXaQpVz:YUOI0p3nuftXHLzHzGKXaQXz
- TLSH
  T194E1EF9828B6D1E64F7B5258EF631254DF60546701075A20FEFCC6C42FB8429A2FEF90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  MasonProtector/Core/Protections/Obfuscation/EntryWrapper.cs
- Size 3KB
- SHA256 c1c2c637cfdc1deded890068f5bc69849a2305326292bcb8c5f2d214e4a1b38f
- MD5 9615a9a449fcfa57e29dd52019a5d12e
- SHA1 30552df4a30919a5ea0094f1a6fd3d1707a7ebbe
- SHA512 2cf29834823ba32e362b2b874f5596753e064d80a8bcda4b551661cb322ca9d77455dbcf7359b4672186847446585206522fca1e8d1d21c0d49c3eb60ae6b52e
- TLSH
  T11C61C396283763E60BB6923D9F524188CF21897302572B10BDEC96D90FB482163FAF95
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral14
- Target
  MasonProtector/Core/Protections/Obfuscation/Local2Field.cs
- Size 5KB
- SHA256 1cd117b9a9f8592cb150d81ea67fa52602b9eed2b01b68ad43e3a4237b0d3681
- MD5 4f4d63063b4c509019714213f8dba403
- SHA1 fba5995d2a41acd5e356f205e68759c85c24520c
- SHA512 4c020285bca4bafe3572c369db5ecdc12b517e6001b63d7e84a2dcda2c8d9319f5294806de6b29322232b653352d30865197960fe9d0a0d6a711c18dee8bf42d
- SSDEEP 96:Co4gRyCnPTvFNyrBTfl7nlBRfsRBIBmDpFUrpt58s:YYnjFEj7nndkrUr58s
- TLSH
  T10DC1CD5D2497615A5CB69AB8AE734408DF5254AF094A2B71FF7E80C22FF007853B8FD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  MasonProtector/Core/Protections/Obfuscation/MethodInliner.cs
- Size 17KB
- SHA256 f0654c01bfe816c2c8c28119d60b66e7fdcd12912d99626ddc07355126b4eb68
- MD5 fe78d7687fb6eb594e80691d1e5d4de2
- SHA1 ef65f413a0939ed8e2c875a6ecae9894a2b8cd70
- SHA512 31dd7490b43c163731bc27210ebffcbd991b3eacd4fafd70dc7ec76b84f598cfe6bd79913ad3276f29dc32e3e828dd01e2a0297436b3c1c95fd78707a7bc5d86
- SSDEEP 384:YkVmwX0yT7IA45Qkjo/f7T7yPmwRRIR/5Y5Bw4o:5mwX0UiSf
- TLSH
  T11782DE496866A6BA1A37637C8F63416CEF21D823016E1974FEEC86413FF443493B5FA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16
- Target
  MasonProtector/Core/Protections/Obfuscation/MethodScattering.cs
- Size 27KB
- SHA256 4d3526a4af646961538be533e0676254b82f578288a8c7c9f6509373f4dddc58
- MD5 fe376a8cc8cfb92c7ed3198c511fc677
- SHA1 52ccda37ac2a1682d1eef50e40d6d7650a002d86
- SHA512 82381d853c8aa8c785ca08b179520a9bab2a73026cb804365f6a220728f23867c3f661b58cc69a74982b54bd8a49a70f659a55734c56a8919d57049a5dee8fec
- SSDEEP 384:YZFV30yUf48+BC46lYlUToEm1ObzFSnq9YlQerWRRdZkR7dWRRRDt:fRTRRdWR78RRRDt
- TLSH
  T18DD2DD8E2876D0D31D7B966CEF620144EF60016B490A1B22FEBDD8D41FFA15982FDB94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  MasonProtector/Core/Protections/Obfuscation/MutationIndirection.cs
- Size 3KB
- SHA256 5ff038a51f8d1e9e7379749757b8ceded8d5a972ca6ad9217073804dd4539d12
- MD5 5544a20321e0dfc28be4ded175b7f36d
- SHA1 b700bc2983943b062c842d4b28d1144bf06ce200
- SHA512 bc76cc2133254df004c1a1fbc8dbb6b19f53eb8e350e5169ebe8561ccbe119f9b6c68e040f3d6b712fa0655a5fee4aba780ede58cc140d61cad56b135e19f6ef
- TLSH
  T1D881BC65287792AB0BB6922DDFA31154DF60847306472E307EFC81990F78428A3FAF94
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral18
- Target
  MasonProtector/Core/Protections/Obfuscation/NumericObfuscation.cs
- Size 30KB
- SHA256 a07df455787d0191d05848cac0de10a564ba217521680d02a00edfcecb4f3231
- MD5 d3bc9e18c7c602811236d2e8bab43f47
- SHA1 c67f9839705ec7b5f56646d29a81977930bea6e5
- SHA512 2b606924b3e74b9fa34d85e42944660293c836787b47f4a543bfcde9ca2d9edb5fac2b91bb96b661fd6355736f21c04129942defb4ee15afe41eb3fd80b0e5ff
- SSDEEP 192:YUO6TIjmKcWLxyFkMNXvcJVEjW89C5rShoNZ9EX:Y1VcMIFkMJvM6jW89CtShoNZ9EX
- TLSH
  T197E29A8E2475A0D30D73A558FF221111FE90526B49095733FE7EC8F81FBA28A92F9794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19
- Target
  MasonProtector/Core/Protections/Obfuscation/OpaquePredicate.cs
- Size 39KB
- SHA256 2926316f40ca4f688a8285ebcaa2c2ae9ad152015dd3040c98e49e5a791af939
- MD5 f88f2f14c113538e50c3a50ca4e87297
- SHA1 a82e81a0e8c81a859fcbce6c1612e77534169e3b
- SHA512 6e69dd56456aa44c333157285cd61718012e5438495ca02df235afbcc9dacba476db81889ceec3ebab150484e670afed15254a378816f2b542021bbbc1257f8e
- SSDEEP 384:Y8TVE+PjFOthN6ZOdIEh5UXK7jwc0ClNX0uds4I1f4OFVv:t2u1OaG2xd
- TLSH
  T12903274E787595C25C7360986BB20141FE50017BA8055B63FE7ED8B81FFA1C692FE7A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20
- Target
  MasonProtector/Core/Protections/Obfuscation/ProxyCalls.cs
- Size 9KB
- SHA256 23d4bff8bbe8856553562d7063d6aa2e2a589493886897aceeedbf54db91ac78
- MD5 b6ad81ac68f1a9cbc54e29c64e0e6037
- SHA1 41a534b85e4debd3abffef2c460f04d7c6358838
- SHA512 12b5a112f1d0e376678ce4e2858b307c3d9820c96b1e5f0f16681b9fda671361c600c0bdceed8f429b78fd8a92a1e78d073b856bb669550840485aa6d86e145b
- SSDEEP 96:Co4h2khVXJV8Ld0iaQJdTPTvr81tmSbpEapz3XetM+SS0jw+16Blc0h/xlFFr:YUkbcdZn7Tjr81tmy24zHDO6N16Blc09
- TLSH
  T1341200592C7691E21A7BA36CDF231180DF6084A703035E20BEECE5851F7942993FAFE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21
- Target
  MasonProtector/Core/Protections/Obfuscation/ReferenceProxy.cs
- Size 6KB
- SHA256 e3e2faf15db67b586f77298f18fcb1ad45715c6281dad22f6c20fd9bc16af6d4
- MD5 d625abdfc1ce12ad768363a114d7934a
- SHA1 2ad769249498cc59d8014a8d0ffd85e43f9f1625
- SHA512 d7f3ee42e55ee1e7cbf09ee836749309b0b1fd0ca0d2dc698de9dca511311f787c695af1eb541693239a101d0d3a88d904ddfb242f9074754db853cefb1e7fcc
- SSDEEP 96:Co4h2uGamNmdig5RCYz5NPTvFPz3XdtY/WsCggDagX5jmggh71a:YUXvm898jFPzHkes8
- TLSH
  T17CE1FBAD2CB650D25A3B821CEF634280DF50826B060B5B21BEBCC6C91FB951583FAF54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22
- Target
  MasonProtector/Core/Protections/Obfuscation/StackUnderflow.cs
- Size 9KB
- SHA256 7c9eab595c69b3d25c32fc02f1c07be9a587fbc6397df768768ae8f0d9b3bdcf
- MD5 30e67246cc70c1a3a61304656d1d6b4d
- SHA1 5d41e3e019d3aaffef1d6bebb1bd626d20ba326a
- SHA512 b89a6d6264b39c9a5bf171d20459237959ff732c4bd0d9a89e94d30a17191a8fc5f61dfe66207df2f33bc2f4b2f0077625f83fdd9237291ac47af03ed0001c1a
- SSDEEP 96:Co4h2uuX6U5oXLF4iYH2dLFoS2Itu3vrMLup63gzx3HC3gxB3OrUb/7mUwb/UBOZ:YUTPiKRpvrML82knIjkYBeygi
- TLSH
  T1FF12FD9E687690E35E7B925CEF324505DFA0406B09065722BFBDC6980FB911C93FDB84
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23
- Target
  MasonProtector/Core/Protections/Obfuscation/VMObfuscation.cs
- Size 117KB
- SHA256 06543a590ee2fa0a92b8aef4130f154162559a8f408d8b25d6524b5e0dea8419
- MD5 1095fffdf2a49c5ac7e95f1bcb494a27
- SHA1 e5b43c051dc1a038552d6480448258b77e86a50f
- SHA512 e305ce0dcf49b9a452e861fb3f005b0138d612a123f4efe1672809c9ebee4a94adbe457a7050fe4483072bfb00cdf3c87e90455abe33ea4b9e434647f2ca5931
- SSDEEP 1536:0VuTsaCb81+mob9senlOQzGOyXVfZq8bHVVwObIS1Uk:0aCb81+mob9senlqOMZq8bIOz
- TLSH
  T1F4C3578E20B5A5C25DB756A86FB20509EE50014F4C099736BE3DC9EC1FFE29A41FDB84
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24
- Target
  MasonProtector/Core/Protections/Stealth/CctorScrambler.cs
- Size 11KB
- SHA256 6a4adf8d81841d08f55727323500b9592bfae17793bc20026e3a191981132d49
- MD5 43defc29f2cce77b24e8f67162f53844
- SHA1 813b9823697703b73bbdfc0303663f4c7be321f8
- SHA512 11d8e82f1d2f8ca4d567604f1ea736472db6f86b4a4169180863e869176c2f73cbb5c95ac2cefa1b0742dc7a0671dc35c40bc7dffcd19149b98afa271c406c35
- SSDEEP 192:YwBKcM6aDEFrwhw8jhwGjhL1ArkqKDN1XRlUXY:YwDM6aDEFrwhw8jhwGjhL1ArkqKN1XR3
- TLSH
  T1A142BF19793266D32C729229DFB30211DF25686F008D2713FF7E92A15FB605622B6E7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25
- Target
  MasonProtector/Core/Protections/Stealth/DecompilerPoison.cs
- Size 9KB
- SHA256 00a547e41b633b3bc5bcc05202d19c8e3f4246cec1351d452a3c7fc3164a8670
- MD5 dc337c4dbecf1fa1339c86de6a3ca822
- SHA1 ead1b4c2b52282773945cf4119101ea4d6d11d2e
- SHA512 07774a95754dc3f3f4563314af9124597aac8ff0b2854f67eefc56ec081a72cd9d261bc6f4b6b738916beecfca7bfbba4059017c9a965324fa17e7b026adb4ab
- SSDEEP 96:Co4rsbBiA6SvgHJnRRRBCr0xBZw8sZgXnSjOpKOOp03Znol2UYJwnYewnYXwndWS:YXA6BnRRRclHy
- TLSH
  T16A22898E3872D0D25DB79188BF321501EEA0426B49055733BE7ED9E80FBE15A82FD794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral26
- Target
  MasonProtector/Core/Protections/Stealth/DecoyInjector.cs
- Size 18KB
- SHA256 dbcae460d4bd9e5f06f7c8ee13510974acd1804ee19510d7dfe5e49b4167897d
- MD5 36f81cfbad7a4c72385b1381a42addf2
- SHA1 7c7acaaf1013a1e3a5eb857b2c3e7446157cbba1
- SHA512 f7ee3701c594529e4b3ba71da021a92b95c3b05a8c5020592750c15a0172f7be9f059a1994adc76f564ae0016ef6279219cde7078da481640924249e1eb927a6
- SSDEEP 384:YqJjtRN2xeh4Fl1+vS2m1IJRyhn8CJWUVoyDvX+MLYi:hO1QSZx
- TLSH
  T17A82BB6A2875C2F34E7B9504EF221241EF50629716024B73FEBDC49A0F7A11A63F97E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27
- Target
  MasonProtector/Core/Protections/Stealth/DesignerHider.cs
- Size 2KB
- SHA256 92ea6cff266f96a4e1165ec0fd9297068a79a22d4c54ebb986accef3dd7802c1
- MD5 601dea43ccc72ba229bce8349e284f8e
- SHA1 ac497da1d6af0ee4d693f2908c3bd654d834f5f3
- SHA512 5cafd3d4e749b8e6c47fe7abdc09cd3c640a15a495de6e8f10ccd4fd1741593e118b3f54ff8bbedee28066719d272984ca3ce17edf1c8f61af6d27f96259a889
- TLSH
  T12E51B0792D9A17730FB75139DF829089DF9588270197BA203EDD96824F7443453BAF0E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral28
- Target
  MasonProtector/Core/Protections/Stealth/DesignerSplit.cs
- Size 16KB
- SHA256 7cde0707442fac86ff8f0f44cd37b1b7676e7e751eb747ad53bc9ea62712a63b
- MD5 e3e13d9ed0bb545117a74d336ae21704
- SHA1 eeab96ebf95bb5a1c4e48f92acfdb77570b499d6
- SHA512 58756eb3f6d507fa6c8955044d9e712d11415ccf9b3e1e4d9a46b41fb831928cf5db3a772c9ca6c325f3fcb2f9d11c6fb802b1dc4818b37727bf8799621bbda2
- SSDEEP 384:YjgEIJ3Hanso99devGXbb7cHttHtcobsn:T3aL99deun7CbHon
- TLSH
  T1B772561EA83762E219336338DFE34209EF21987715992A32BFAC91940FB502953F5FD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29
- Target
  MasonProtector/Core/Protections/Stealth/DnSpyCrasher.cs
- Size 5KB
- SHA256 6151f41c759179cbba0fbc02ab218395c2fbd4947d8362f970192ed6d3ab87b4
- MD5 ad4c3d54cb64e5e51f033a9fe01563bc
- SHA1 165c513f9c76e094521d0bfbd75142c2827954f8
- SHA512 fff49b1b75ff799e687c188b166366b3f8c62df5efa989e9f2dcd61e9c386474de51e48ef6746fd8bc2daef5dbdd606928aedf8026eceb77bef10415838d91c1
- SSDEEP 48:Co0eko/wwJiyFW+1auOBNwm7o7Pc7D2uOBNVL+2VPaIk7l7L71s7ukqm4fpvK7D+:Co0Xo/5Jiyk+1anU42LidRnyKkJo2bG
- TLSH
  T15CB1AB6A2836D3E39EBB9108DF321685CFA091A719078B31BEFCC5450F3941592FDAD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral30
- Target
  MasonProtector/Core/Protections/Stealth/EntryPointMover.cs
- Size 10KB
- SHA256 f3a44fa7c103ac7d744aad7a1ba3b9b666428090d4e28bfae56f7b8f8a7fe762
- MD5 865d183367072f55711380c72c52be8b
- SHA1 3c58ecab751e3d4dc4f9d5c9b61b3bd1d3b822b8
- SHA512 314e794b9c2ac3d55750857ae67f95e48ab256c6355fb7226fe07d184914c914b8f388eb7400f905a3792ba11dc52760b4ce21bd643ca466c9cd00df1894732d
- SSDEEP 96:Co4h2uD4N59h9FPwjCIlpubEjyeIfqoonlb8Ddp9b9mKmAZvpCAX9qgdgQobyDMx:YUBI/2e6qhlijZtzY
- TLSH
  T1BA22EDAE287A82F30D775268DF226542EF20521B16875A31FE7DC5C50FBA12613F9F90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31
- Target
  MasonProtector/packages.config
- Size 62B
- SHA256 4bf37c7a8c8b1fd88ecef80455c2d56652b80ffd347cece87c4799280a85b0fe
- MD5 c18c4ee94e8659fa305407bc717fa0a3
- SHA1 99816da8296fde30eb0c664fb1f964ab4d9d0596
- SHA512 fe950a8c05c3ada2cdcd6d0efe472542e9e405f023b9ac2bf72a31f96886f0253343c5c1159d8d79a1ca62ee2bc0ec784170f4c58888315deb6c0c26ef9cfca9
- TLSH
  T11FA0020C620096238E505D2867AA8418536D723E347008CC7A519EE64B5D097064E579
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32