General
- Target MasonClient.exe
- Size 48KB
- Sample260909-c8j89a1sa1
- SHA256 43cc08aca48880f14350605bb260175ab9a8161f430f00dd6093d446d7294fcf
- MD5 f0892e0bed7eaeaa892832d73596623c
- SHA1 e6ce1088f84130ae28d53e12b73416a93e9ca411
- SHA512 a429467078d9e38d3a3d454c0f19871eca5de845908598ffcc319d71475d80448edf702a8e1d074321c7dabed89fca1ab3657ca71a329ce7915b5463b33cb08d
- SSDEEP 768:gjaw7AWcuodoGean5Pvuy02jWQbRBB97gp0ZpoN+hLOUQOYn:gj17VHkn5P5tbRBPcp0ZV1OuYn
- TLSH T16B23D54CBBE41129D4BE1BB16D736209C7B079D79517C61FACD402CB2B26B888691EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
MasonClient.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
neptunerat
C2
-
6.tcp.cpolar.top:13688
Attributes
-
filename
USB.exe
-
group
MasonGroup
-
key
bWc5ktu6UuZpBjtw
-
rat_name
MasonRAT
Targets
-
- Target MasonClient.exe
- Size 48KB
- SHA256 43cc08aca48880f14350605bb260175ab9a8161f430f00dd6093d446d7294fcf
- MD5 f0892e0bed7eaeaa892832d73596623c
- SHA1 e6ce1088f84130ae28d53e12b73416a93e9ca411
- SHA512 a429467078d9e38d3a3d454c0f19871eca5de845908598ffcc319d71475d80448edf702a8e1d074321c7dabed89fca1ab3657ca71a329ce7915b5463b33cb08d
- SSDEEP 768:gjaw7AWcuodoGean5Pvuy02jWQbRBB97gp0ZpoN+hLOUQOYn:gj17VHkn5P5tbRBPcp0ZV1OuYn
- TLSH T16B23D54CBBE41129D4BE1BB16D736209C7B079D79517C61FACD402CB2B26B888691EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects NeptuneRAT stealer
-
Executes dropped EXE