General
- Target MasonClient.protected.exe
- Size 2.0MB
- Sample261029-1ncwfae161
- SHA256 75c2220d69a457b0dfc0760d9e46fa9c802bd54c5cc40a24e13ea3568b2dbb94
- MD5 85fd646cb624a40fd4edf64db62e704f
- SHA1 04777cceec8ce0f18caab3cea47249fd4a332421
- SHA512 ab7f20716f7348a126d48a7ac741d2dbd26fa7d3a3cc8dbc60d35f7ef969232d761e67bee072f5d869752503ae09874d49a9cd5cf037f41d545ebe85698f62aa
- SSDEEP 6144:X5LZ5wc++jwFVrtYb4ZDdz96Br8Cj1Xjjvn4aRO:tQcTjwFptNZDdz96Br8CpXvvn4aRO
- TLSH T1DBA59A32236ABE08FA5D399F99453D35732887F67E36DAD750C4B8F238A19788C01356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MasonClient.protected.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
MasonClient.protected.exe
Resource
win10ltsc2021-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
MasonClient.protected.exe
Resource
win11-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
MasonClient.protected.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target MasonClient.protected.exe
- Size 2.0MB
- SHA256 75c2220d69a457b0dfc0760d9e46fa9c802bd54c5cc40a24e13ea3568b2dbb94
- MD5 85fd646cb624a40fd4edf64db62e704f
- SHA1 04777cceec8ce0f18caab3cea47249fd4a332421
- SHA512 ab7f20716f7348a126d48a7ac741d2dbd26fa7d3a3cc8dbc60d35f7ef969232d761e67bee072f5d869752503ae09874d49a9cd5cf037f41d545ebe85698f62aa
- SSDEEP 6144:X5LZ5wc++jwFVrtYb4ZDdz96Br8Cj1Xjjvn4aRO:tQcTjwFptNZDdz96Br8CpXvvn4aRO
- TLSH T1DBA59A32236ABE08FA5D399F99453D35732887F67E36DAD750C4B8F238A19788C01356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.