General
- Target 2025-04-24_53af6e4ededa43dfce388d15eed8a483_frostygoop_ghostlocker_knight_luca-stealer
- Size 2.8MB
- Sample250424-yc52qstsf1
- SHA256 010cefc5860f5442651b02193ebf9e8bce3d877547333e56d0b64b73f37ef805
- MD5 53af6e4ededa43dfce388d15eed8a483
- SHA1 717506a5f9c1fc90308c9fd89cfba1c6c0db774f
- SHA512 9f7c7326827e59bd990ba41c7e751792516549c910eec91a3e63f8786ba745c4fa1b3d79752cf87d864925d521063d3dd1edd6403d98597bfff406d92b8d7e63
- SSDEEP 49152:JTgar22Jcj7nFw2H18j9okCWNmo3kwCiJ:J5aKEGhKho3KiJ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
2025-04-24_53af6e4ededa43dfce388d15eed8a483_frostygoop_ghostlocker_knight_luca-stealer.exe
Resource
win10v2004-20250314-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2025-04-24_53af6e4ededa43dfce388d15eed8a483_frostygoop_ghostlocker_knight_luca-stealer.exe
Resource
win11-20250410-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
metasploit_stager
C2
-
0.0.0.1:1
Targets
-
- Target 2025-04-24_53af6e4ededa43dfce388d15eed8a483_frostygoop_ghostlocker_knight_luca-stealer
- Size 2.8MB
- SHA256 010cefc5860f5442651b02193ebf9e8bce3d877547333e56d0b64b73f37ef805
- MD5 53af6e4ededa43dfce388d15eed8a483
- SHA1 717506a5f9c1fc90308c9fd89cfba1c6c0db774f
- SHA512 9f7c7326827e59bd990ba41c7e751792516549c910eec91a3e63f8786ba745c4fa1b3d79752cf87d864925d521063d3dd1edd6403d98597bfff406d92b8d7e63
- SSDEEP 49152:JTgar22Jcj7nFw2H18j9okCWNmo3kwCiJ:J5aKEGhKho3KiJ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family