Overview

overview

10

Static

static

10

39azkl.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    39azkl.exe
  • Size 50KB
  • Sample261009-3enmpawsa1
  • SHA256 12e6bbf9cd38613f83ed93011bd2a6f482337616d23b361e39b6348e0da240dd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
neptuneratdefense_evasiondiscoveryexecutionpersistencetrojan

Malware Config

Extracted

Family

  • neptunerat

C2

  • 20.tcp.vip.cpolar.cn:11930

Attributes
  • filename

    iex.exe

  • group

    MasonGroup

  • key

    3E5BHEd5jruyBlWU

  • rat_name

    MasonRAT

Targets

    • Target
      39azkl.exe
    • Size 50KB
    • SHA256 12e6bbf9cd38613f83ed93011bd2a6f482337616d23b361e39b6348e0da240dd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    defense_evasiondiscoveryexecutionneptuneratpersistencetrojan

    • Detects NeptuneRAT stealer

    • Family: NeptuneRAT, MasonRAT

      NeptuneRAT aka MasonRAT is a trojan written in C#.

      trojanneptunerat

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks