Extracted

Extracted

• • Target
    https://www.mediafire.com/file/0cwhpnxnuyj71ls/MasonRAT-SRC.rar/file

  Score

  10^/10

  discoveryexecutionneptuneratumbralpersistencestealertrojan

  • Detects NeptuneRAT stealer

  • Detects Umbral payload

  • Family: NeptuneRAT, MasonRAT

    NeptuneRAT aka MasonRAT is a trojan written in C#.

    trojanneptunerat

  • Family: Umbral

    Umbral stealer is an open-source modular stealer written in C#.

    stealerumbral

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Uses the VBS compiler for execution

  behavioral1