Publishers

bin/spec/lolrmm.spec.json

@@ -126,6 +126,123 @@
         }
       }
     },
+    "FileHashes": {
+      "type": ["object", "null"],
+      "description": "WDAC-compatible file hashes (Authenticode and Page hashes)",
+      "properties": {
+        "authenticode": {
+          "type": "array",
+          "description": "Authenticode hashes of signed binaries",
+          "items": {
+            "type": "object",
+            "properties": {
+              "file_name": { "type": "string", "description": "Original filename" },
+              "sha256": { "type": ["string", "null"], "description": "Authenticode SHA256" },
+              "sha1": { "type": ["string", "null"], "description": "Authenticode SHA1" }
+            },
+            "required": ["file_name"]
+          }
+        },
+        "page": {
+          "type": "array",
+          "description": "Page hashes for fine-grained WDAC control",
+          "items": {
+            "type": "object",
+            "properties": {
+              "file_name": { "type": "string", "description": "Original filename" },
+              "sha256": { "type": ["string", "null"], "description": "Page hash SHA256" },
+              "sha1": { "type": ["string", "null"], "description": "Page hash SHA1" }
+            },
+            "required": ["file_name"]
+          }
+        }
+      }
+    },
+    "CodeSigning": {
+      "type": ["object", "null"],
+      "description": "Code signing certificate information for this RMM tool",
+      "properties": {
+        "search_names": {
+          "type": "array",
+          "description": "Filenames used to search for signed binaries",
+          "items": { "type": "string" }
+        },
+        "company_names": {
+          "type": "array",
+          "description": "Known company names from PE metadata",
+          "items": { "type": "string" }
+        },
+        "signer_names": {
+          "type": "array",
+          "description": "Known code signing certificate signer names",
+          "items": { "type": "string" }
+        },
+        "ignored_company_names": {
+          "type": ["array", "null"],
+          "description": "Company names to ignore (false positives)",
+          "items": { "type": "string" }
+        },
+        "ignored_signer_names": {
+          "type": ["array", "null"],
+          "description": "Signer names to ignore (false positives)",
+          "items": { "type": "string" }
+        },
+        "certificates": {
+          "type": "array",
+          "description": "List of code signing certificates found",
+          "items": {
+            "type": "object",
+            "properties": {
+              "src_file_path": { 
+                "type": ["string", "null"],
+                "description": "Path to the binary the certificate was extracted from"
+              },
+              "src_file_sha256": { 
+                "type": ["string", "null"],
+                "description": "SHA256 hash of the binary the certificate was extracted from"
+              },
+              "src_file_company": { 
+                "type": ["string", "null"],
+                "description": "Company name from PE metadata"
+              },
+              "signer_name": { 
+                "type": "string",
+                "description": "Certificate signer/subject name"
+              },
+              "issuer": {
+                "type": ["string", "null"],
+                "description": "Certificate issuer"
+              },
+              "certificate_thumbprint": { 
+                "type": "string",
+                "description": "Certificate SHA1 thumbprint"
+              },
+              "tbs_sha256": {
+                "type": ["string", "null"],
+                "description": "TBS (To Be Signed) SHA256 hash for WDAC policies"
+              },
+              "tbs_sha1": {
+                "type": ["string", "null"],
+                "description": "TBS (To Be Signed) SHA1 hash for WDAC policies"
+              },
+              "valid_from": {
+                "type": ["string", "null"],
+                "description": "Certificate validity start date"
+              },
+              "valid_to": {
+                "type": ["string", "null"],
+                "description": "Certificate validity end date"
+              },
+              "certificate_der_base64": { 
+                "type": ["string", "null"],
+                "description": "Certificate in DER format, base64 encoded"
+              }
+            },
+            "required": ["signer_name", "certificate_thumbprint"]
+          }
+        }
+      }
+    },
     "Detections": {
       "type": ["array", "null"],
       "items": {
@@ -151,4 +268,4 @@
     }
   },
   "required": ["Name", "Description"]
-}
+}

yaml/247ithelp.com_(connectwise).yaml

@@ -1,9 +1,9 @@
 Name: 247ithelp.com (ConnectWise)
-Category: 'RMM'
+Category: RMM
 Description: 247ithelp.com (ConnectWise) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.
 Author: ''
 Created: '2024-08-02'
-LastModified: '2024-08-02'
+LastModified: '2025-12-14'
 Details:
     Website: ''
     PEMetadata:
@@ -34,3 +34,79 @@ Detections:
       Description: Detects potential processes activity of 247ithelp.com (ConnectWise) RMM tool
 References: []
 Acknowledgement: []
+CodeSigning:
+    search_names:
+        - remote workforce client.exe
+        - remoteworkforceclientwpf.exe
+    company_names: []
+    signer_names: []
+    certificates: []
+FileHashes:
+    authenticode:
+        - file_name: RemoteWorkforceClientWpf.exe
+          sha256: 1DB81299210F602CDC21E32A68209B639392CF3714D6C4827C4FB81D8697CFF2
+          sha1: 975A38C110AE8D645F85E25EB89B1B3B5EF57145
+        - file_name: RemoteWorkforceClientWpf.exe
+          sha256: 13EE0322429E8A56BC563A0151A0FC2B45BC48DA76A3815A6F8CBE4AD0B4D543
+          sha1: E492C7EA0457064830A0005721199673BA843C2C
+        - file_name: RemoteWorkforceClientWpf.exe
+          sha256: A5F5EBC48211E71752125DE8072287E483FC9A31946F539A0299F234CE7D5E9D
+          sha1: 997F2508915A9503F58478FF5578A2A010586CA9
+        - file_name: RemoteWorkforceClientWpf.exe
+          sha256: 10A657260E0F6137622FECB2D9B87F1D81D7F5D8B0FE8EC8B9DDB9D97A1B74FA
+          sha1: 3AF53CBCB440E4C85D1D904C943F74C85C0E0887
+        - file_name: RemoteWorkforceClientWpf.exe
+          sha256: 3B8E603758F1DAF444A92769502FA1FE03EABF27B07DFB411F1D7B70D10CCBB4
+          sha1: F09A875363B8DE259BE5059E2ECFB87697B11A0E
+        - file_name: Remote Workforce Client.exe
+          sha256: 7A2457ADFE15ED2E8A4230339786FA88BE6F2DF31BA083C2BBF7179DF36D1859
+          sha1: BE495BBFD534B7E077AD42A4EEA957D98AEBF23D
+        - file_name: RemoteWorkforceClientWpf.exe
+          sha256: 183B5E1F0E7114426823E2B3543A250976E9D739EBC2FE81D502208DC197FBFF
+          sha1: BDC8A7AAA1099B590A3C38294BA52FCC419CF421
+        - file_name: RemoteWorkforceClientWpf.exe
+          sha256: 66C1E8EA6506739A1FFA7F7486D00B61F7126FF54C67E795255A333C86BC730A
+          sha1: FE2F243B92A51B11A5534A02EFC3F8CCF8DC26EB
+        - file_name: RemoteWorkforceClientWpf.exe
+          sha256: B04A9086B765468ED44B383D83334EF7935178C1A3856B57AE821123C08C2494
+          sha1: E858F6135F4AD5F1BA4FCE079E7C566B0EF3FD54
+        - file_name: RemoteWorkforceClientWpf.exe
+          sha256: 5F75A6E90C15FAADF18DC7581A65806154AE12DE851B7CA0185A64F2B93374A6
+          sha1: C59B8C3943BDEB5FE08CACA44F264B8501F0576D
+        - file_name: RemoteWorkforceClientWpf.exe
+          sha256: 306E6166EBB9A58EBE7BBE868AD7B41C3F0C49AAA7862B6D74C66B35E0F89BCB
+          sha1: F8C26C0970BBEBB19A0A0030CA1B0DAC5B5BD305
+        - file_name: RemoteWorkforceClientWpf.exe
+          sha256: 26225AC3BD32BDA82C170C7BFEFDBDB139887C01D0344C78D37B4B7183F9EFFF
+          sha1: 37D92EDFCD244B1C896E743571DF13F38EFC8F01
+        - file_name: RemoteWorkforceClientWpf.exe
+          sha256: 762FA7FA385D7848C3BE07A164B6BCF116FBE6D6636F82ED8E8CC3D43CB11A64
+          sha1: F87D5976D12DDAB1DF4C6BE621E10D3A8D641818
+        - file_name: RemoteWorkforceClientWpf.exe
+          sha256: B33107C5C51230CDF4F5845BDA4A41CCBDD77C7C907085D0AB0EE8E8D882D41A
+          sha1: CC632598B8C35132A4012DB9CAE217FA5D235468
+        - file_name: RemoteWorkforceClientWpf.exe
+          sha256: 3B9E7574E6A05B26F96A007E198145CDBFC6D89787B1F540528F9EC4398A27D5
+          sha1: D67D16B06EBA7E2AE34AC1CEA60F7479E7E8713C
+        - file_name: RemoteWorkforceClientWpf.exe
+          sha256: 38194ED130B15B33CB31ACEC9E6203EE6B2D4E1BF24FF201B2E0A3877BD51354
+          sha1: 2379D544AF83EB70FDA255031DC2DF7FE5EAC587
+        - file_name: RemoteWorkforceClientWpf.exe
+          sha256: 353176BD0B488388D1F20AAA3F377A4215511646B777586BB15F952999727172
+          sha1: 377CB8AB7E242BD0C05EFD1BCF0028C2500634D9
+        - file_name: RemoteWorkforceClientWpf.exe
+          sha256: 70C2279E3C1E015DF0F8222960C52DA370C88FEC450ECA64E2DB18C0E6A44A76
+          sha1: D5302B7E79A21E3529A1EF089BE6F25DC71D3F7B
+        - file_name: RemoteWorkforceClientWpf.exe
+          sha256: F819995BE08D96DF46227E12DE59F969B6635B496272418BC5F40BCB5771F85E
+          sha1: 36F57363A98FBCEDF00114889EC1879E7ABD1222
+        - file_name: RemoteWorkforceClientWpf.exe
+          sha256: 2B68153F8E7D3A3949AEA323F449C1381CA76FDD51262948FF7DF7DEDC1F2D2E
+          sha1: ED69344A0C38CA2EAE793E20750FC2E8F7082B65
+    page:
+        - file_name: RemoteWorkforceClientWpf.exe
+          sha256: FAAE529A9FCF82757E8371FF4A7349C53D6C92CC88D3A5885946585852C7975B
+          sha1: 0E6B57954C4AF2B0F11C1E075071A9A80A4FD023
+        - file_name: Remote Workforce Client.exe
+          sha256: 50E30025685A61E771332D280F7FBDB3CA896020B1DF9C807655CCC581EC69A2
+          sha1: 3C231A17DA5450AD5BB85F133F440D773ABF7F5D

yaml/absolute_(computrace).yaml

@@ -1,5 +1,5 @@
 Name: Absolute (Computrace)
-Category: 'RMM'
+Category: RMM
 Description: Absolute (Computrace) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.
 Author: ''
 Created: '2024-08-02'
@@ -40,3 +40,11 @@ Detections:
 References:
     - https://community.absolute.com/s/article/Understanding-Absolutes-Endpoint-Agents-Rpcnet-CTES-and-search-namequery-com
 Acknowledgement: []
+CodeSigning:
+    certificates:
+        - signer_name: Absolute Software Corp.
+          certificate_thumbprint: 7F15551E564615F929E65B19B1C695D78DB51810
+          certificate_der_base64: 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
+          src_file_sha256: 76a4272310b3f5151939eee0e63b61cee712d88af5b1606202360147082adbc1
+          src_file_path: downloaded_files/absolute_(computrace)/76a4272310b3f5151939eee0e63b61cee712d88af5b1606202360147082adbc1
+          src_file_company: Absolute Software Corporation

yaml/action1.yaml

@@ -1,8 +1,10 @@
 Name: Action1
-Category: 'RMM'
-Description: |
-    Action1 is a powerful Remote Monitoring and Management(RMM) tool that enables users to execute commands, scripts, and binaries.
+Category: RMM
+Description: 'Action1 is a powerful Remote Monitoring and Management(RMM) tool that enables users to execute commands, scripts, and binaries.
+
     Through the web interface of action1, the administrator must create a new policy or an app to establish remote execution and then points that the agent is installed.
+
+    '
 Author: '@kostastsale'
 Created: '2024-08-03'
 LastModified: '2024-08-03'
@@ -105,3 +107,11 @@ References:
 Acknowledgement:
     - Person: Kostas
       Handle: '@kostastsale'
+CodeSigning:
+    certificates:
+        - signer_name: Action1 Corporation
+          certificate_thumbprint: 59CE0A286FBDF3F600235A8B7513AE1DC2243A20
+          certificate_der_base64: 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
+          src_file_sha256: ab6804a23ab76fff5ab63d7be8c3f179fca4154b56759590c27e6fa203e5d1c4
+          src_file_path: downloaded_files/action1/ab6804a23ab76fff5ab63d7be8c3f179fca4154b56759590c27e6fa203e5d1c4
+          src_file_company: Action1 Corporation

yaml/adobe_connect.yaml

@@ -1,5 +1,5 @@
 Name: Adobe Connect
-Category: 'RMM'
+Category: RMM
 Description: Adobe Connect is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.
 Author: ''
 Created: '2024-08-02'
@@ -38,3 +38,11 @@ Detections:
 References:
     - https://helpx.adobe.com/adobe-connect/firewall-proxy-server-configuration-adobe-connect.html
 Acknowledgement: []
+CodeSigning:
+    certificates:
+        - signer_name: The Anti-Cloud Corporation
+          certificate_thumbprint: 013371A3E52D87E59DA1C93A305732B1501FFE5A
+          certificate_der_base64: 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
+          src_file_sha256: 4d5e55cb8cbeb6fc530c38ffd6413ce22b618e4e06fa5c3ebb7c24902aa4ae4d
+          src_file_path: downloaded_files/adobe_connect/4d5e55cb8cbeb6fc530c38ffd6413ce22b618e4e06fa5c3ebb7c24902aa4ae4d
+          src_file_company: WireSock Foundation