General
- Target MasonClient.exe
- Size 53KB
- Sample261102-ddssksss4k
- SHA256 19284b894bed03187b61d74e48078ba5a441e58b3476eb86f4370fe4b5be230e
- MD5 3bbfce7e8f564e626a32f052636aa1fe
- SHA1 9636050754cec4b594fad645c42e31049c35c03d
- SHA512 27035276f9df9a8a4fc6b8678f2c640fb2187e20b5db6a4c3e550c79f7d5908dde139ed636d97b76a095a924f6687afd3496118d94467aa875adc4e7eb95c1fd
- SSDEEP 768:z1Bq8rzi6h9TZD6y3Yxp3RFoboFt51xf5t/X6P1PhJO3hEp4tQFx:TTni6jZ+DxuboFv3z/kbOaD
- TLSH T16633D699E7F54225D1FF6BF8187702018235B56B2C22C75F2AD841D92B23F899660BF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
MasonClient.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
MasonClient.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target MasonClient.exe
- Size 53KB
- SHA256 19284b894bed03187b61d74e48078ba5a441e58b3476eb86f4370fe4b5be230e
- MD5 3bbfce7e8f564e626a32f052636aa1fe
- SHA1 9636050754cec4b594fad645c42e31049c35c03d
- SHA512 27035276f9df9a8a4fc6b8678f2c640fb2187e20b5db6a4c3e550c79f7d5908dde139ed636d97b76a095a924f6687afd3496118d94467aa875adc4e7eb95c1fd
- SSDEEP 768:z1Bq8rzi6h9TZD6y3Yxp3RFoboFt51xf5t/X6P1PhJO3hEp4tQFx:TTni6jZ+DxuboFv3z/kbOaD
- TLSH T16633D699E7F54225D1FF6BF8187702018235B56B2C22C75F2AD841D92B23F899660BF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects NeptuneRAT stealer
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.