General

  • Target
    MasonClient.exe
  • Size 53KB
  • Sample261102-ddssksss4k
  • SHA256 19284b894bed03187b61d74e48078ba5a441e58b3476eb86f4370fe4b5be230e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      MasonClient.exe
    • Size 53KB
    • SHA256 19284b894bed03187b61d74e48078ba5a441e58b3476eb86f4370fe4b5be230e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects NeptuneRAT stealer

    • Family: NeptuneRAT, MasonRAT

      NeptuneRAT aka MasonRAT is a trojan written in C#.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks