General

  • Target

    2025-04-17_829b23998e2e363fbdf62899e56b93fa_frostygoop_ghostlocker_knight_luca-stealer

  • Size

    2.8MB

  • Sample

    250417-rv83sa1jv5

  • MD5

    829b23998e2e363fbdf62899e56b93fa

  • SHA1

    d648ed8e96285dc7b38265ffd4f8a0b40cb151d2

  • SHA256

    7a286c84b6ed0e75b68d9bd2318516edd2c156df8374ac6394e8fdd34bd4e10d

  • SHA512

    2694edbdb320e94dfb90390e9a6ac680a24cb668223e9e1b67e8a32f610fb0175d7f09f7e7e1dffc598a7bd7f9cea74bf8b06e27d5bc91d648c1145bc80b3649

  • SSDEEP

    49152:t61woRhtyGPTOjMjImaDRZLHNryL3eUzCa1Ci1Cz2Uo:t65tE3ByL3/9Ci1y2N

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.0.107:4444

Targets

    • Target

      2025-04-17_829b23998e2e363fbdf62899e56b93fa_frostygoop_ghostlocker_knight_luca-stealer

    • Size

      2.8MB

    • MD5

      829b23998e2e363fbdf62899e56b93fa

    • SHA1

      d648ed8e96285dc7b38265ffd4f8a0b40cb151d2

    • SHA256

      7a286c84b6ed0e75b68d9bd2318516edd2c156df8374ac6394e8fdd34bd4e10d

    • SHA512

      2694edbdb320e94dfb90390e9a6ac680a24cb668223e9e1b67e8a32f610fb0175d7f09f7e7e1dffc598a7bd7f9cea74bf8b06e27d5bc91d648c1145bc80b3649

    • SSDEEP

      49152:t61woRhtyGPTOjMjImaDRZLHNryL3eUzCa1Ci1Cz2Uo:t65tE3ByL3/9Ci1y2N

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks