General
- Target MasonNuker.exe
- Size 79KB
- Sample260930-wdevtsed24
- SHA256 cb52006d498b8ba741a048c3dfb16cb3f6a578250d98d91d83a9b50bc156194f
- MD5 4f5a89c9c8e6e815eeec8f6ea19e7761
- SHA1 29681081091d1b020d9d76f698bb13f8072c6893
- SHA512 717ee7122bfa2d272daa8e2848fdde0e1ac35b0d34f3e17e269109bc535ba4b9c9f98d58ebe4265d8cc3864b676fc3e4af51dd39a9eec690faeafbf705e2a492
- SSDEEP 1536:PVhUQqxFCBNrWtZCT3gvVWm48bO2U62Wff1gs6YVLDeFlrE8bBHQ0:PfGnk2U6FfAGLQEiZ
- TLSH T1D283F788269E6931F4BE07BE84FD110587BABA13E431E38D5DE9A0D547F77C04A50BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MasonNuker.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
MasonNuker.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target MasonNuker.exe
- Size 79KB
- SHA256 cb52006d498b8ba741a048c3dfb16cb3f6a578250d98d91d83a9b50bc156194f
- MD5 4f5a89c9c8e6e815eeec8f6ea19e7761
- SHA1 29681081091d1b020d9d76f698bb13f8072c6893
- SHA512 717ee7122bfa2d272daa8e2848fdde0e1ac35b0d34f3e17e269109bc535ba4b9c9f98d58ebe4265d8cc3864b676fc3e4af51dd39a9eec690faeafbf705e2a492
- SSDEEP 1536:PVhUQqxFCBNrWtZCT3gvVWm48bO2U62Wff1gs6YVLDeFlrE8bBHQ0:PfGnk2U6FfAGLQEiZ
- TLSH T1D283F788269E6931F4BE07BE84FD110587BABA13E431E38D5DE9A0D547F77C04A50BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.