General
-
Target
ir_agent.exe
-
Size
168KB
-
Sample
241219-znppkayrhy
-
MD5
cd4d0398199d42561ceb70c9e1ce76d7
-
SHA1
d87aa727958d5f94df0b31e88f131e359c2d9084
-
SHA256
7f9bfaa0b8f5ed6a9666c0a09ea9708dd6e555672edee3ac96fb424317a1aff2
-
SHA512
f79d4d93a984e7794ff7d95ecd6383cc4b3033fd6104fda54187b0d059ba2ffd75b26bfa7eb8fb25e1093060ecf495d96f76353e24ef5955f93d7781d7471cc4
-
SSDEEP
3072:1Z8wQQ1w7+NmlcEm0SK4gRFVNrtu/T64fL6WT9t:UwA+NTD0SK4gRFVBtu/GTkt
Static task
static1
Behavioral task
behavioral1
Sample
ir_agent.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
ir_agent.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
metasploit
metasploit_stager
157.230.10.115:443
Targets
-
-
Target
ir_agent.exe
-
Size
168KB
-
MD5
cd4d0398199d42561ceb70c9e1ce76d7
-
SHA1
d87aa727958d5f94df0b31e88f131e359c2d9084
-
SHA256
7f9bfaa0b8f5ed6a9666c0a09ea9708dd6e555672edee3ac96fb424317a1aff2
-
SHA512
f79d4d93a984e7794ff7d95ecd6383cc4b3033fd6104fda54187b0d059ba2ffd75b26bfa7eb8fb25e1093060ecf495d96f76353e24ef5955f93d7781d7471cc4
-
SSDEEP
3072:1Z8wQQ1w7+NmlcEm0SK4gRFVNrtu/T64fL6WT9t:UwA+NTD0SK4gRFVBtu/GTkt
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
-