Analysis
-
max time kernel
147s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19-12-2024 20:52
General
-
Target
ir_agent.exe
-
Size
168KB
-
MD5
cd4d0398199d42561ceb70c9e1ce76d7
-
SHA1
d87aa727958d5f94df0b31e88f131e359c2d9084
-
SHA256
7f9bfaa0b8f5ed6a9666c0a09ea9708dd6e555672edee3ac96fb424317a1aff2
-
SHA512
f79d4d93a984e7794ff7d95ecd6383cc4b3033fd6104fda54187b0d059ba2ffd75b26bfa7eb8fb25e1093060ecf495d96f76353e24ef5955f93d7781d7471cc4
-
SSDEEP
3072:1Z8wQQ1w7+NmlcEm0SK4gRFVNrtu/T64fL6WT9t:UwA+NTD0SK4gRFVBtu/GTkt
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
metasploit_stager
C2
157.230.10.115:443
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Metasploit family
Processes
-
C:\Users\Admin\AppData\Local\Temp\ir_agent.exe"C:\Users\Admin\AppData\Local\Temp\ir_agent.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB