General
- Target MasonClient.exe
- Size 49KB
- Sample260827-dds4caygla
- SHA256 0976d830dee3ea9505a1671895efeb27dbc85644d9aaee5f6604884c7030f6b6
- MD5 2da307bc51b90ec28b19d7f39c149139
- SHA1 4abf5e31057ded2e5c3ef098f09244b0aad34022
- SHA512 fbf7866fe71da59aa66ec6fff980f82553a0fd63eb41a8996a9a074f2444cca5c50f775932b9346c3bba7dc62c998f30135f5b7081ac1974dfee36ec25a58fb2
- SSDEEP 1536:iyVsPGStmF/bUnGUO1iUjAwUoO1vghDdlblOORbO4E:iisPGOIDUnGUO1iUjAwUoO1vcXblHbOz
- TLSH T1D633C79CA3D84131E4FF56B61D77024893B0BA939462D79F7CC441CA2B16B95CA42EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
MasonClient.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
MasonClient.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
neptunerat
C2
-
woaytvfc6n.localto.net:1971
Attributes
-
filename
USB.exe
-
group
MasonGroup
-
key
fJbkNkXkqOA8juXW
-
rat_name
MasonRAT
Targets
-
- Target MasonClient.exe
- Size 49KB
- SHA256 0976d830dee3ea9505a1671895efeb27dbc85644d9aaee5f6604884c7030f6b6
- MD5 2da307bc51b90ec28b19d7f39c149139
- SHA1 4abf5e31057ded2e5c3ef098f09244b0aad34022
- SHA512 fbf7866fe71da59aa66ec6fff980f82553a0fd63eb41a8996a9a074f2444cca5c50f775932b9346c3bba7dc62c998f30135f5b7081ac1974dfee36ec25a58fb2
- SSDEEP 1536:iyVsPGStmF/bUnGUO1iUjAwUoO1vghDdlblOORbO4E:iisPGOIDUnGUO1iUjAwUoO1vcXblHbOz
- TLSH T1D633C79CA3D84131E4FF56B61D77024893B0BA939462D79F7CC441CA2B16B95CA42EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects NeptuneRAT stealer