CmdID

CmdID / Files

agent.exe

Monitic (monitic.com) is an EU/Turkey-based SaaS Remote Monitoring and Management (RMM) platform marketed at MSPs and IT departments. LOLRMM

Program on Windows LOLRMM Monitic 1 Sigma rule names it

Opens CmdID with your command. It is read in your browser and sent nowhere.

A file of Monitic

a remote management tool, from LOLRMM

LOLRMM lists a file named agent.exe as Monitic’s.

Its sitehttps://www.monitic.com/

From LOLRMM (Apache 2.0), which lists the remote management tools intruders are known to use as well as administrators. It goes by the file’s name.

What detects it

Sigma process creation rules that name agent.exe
criticalREvil Kaseya Incident Malware PatternsFlorian Roth (Nextron Systems)