{
  "Name": "AeroAdmin",
  "Category": "RMM",
  "Description": "AeroAdmin is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.",
  "Author": "",
  "Created": "2024-08-02",
  "LastModified": "2024-08-02",
  "Details": {
    "Website": "http://aeroadmin.com/",
    "PEMetadata": {
      "Filename": "",
      "OriginalFileName": "",
      "Description": ""
    },
    "Privileges": "",
    "Free": "",
    "Verification": "",
    "SupportedOS": [],
    "Capabilities": [],
    "Vulnerabilities": [],
    "InstallationPaths": [
      "aeroadmin.exe",
      "AeroAdmin.exe"
    ]
  },
  "Artifacts": {
    "Disk": [],
    "EventLog": [],
    "Registry": [],
    "Network": [
      {
        "Description": "Known remote domains",
        "Domains": [
          "auth*.aeroadmin.com",
          "aeroadmin.com"
        ],
        "Ports": []
      }
    ]
  },
  "Detections": [
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aeroadmin_network_sigma.yml",
      "Description": "Detects potential network activity of AeroAdmin RMM tool"
    },
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aeroadmin_processes_sigma.yml",
      "Description": "Detects potential processes activity of AeroAdmin RMM tool"
    }
  ],
  "References": [
    "https://support.aeroadmin.com/kb/faq.php?id=58"
  ],
  "Acknowledgement": [],
  "CodeSigning": {
    "certificates": [
      {
        "signer_name": "Aeroadmin LLC",
        "certificate_thumbprint": "3D359801E29FCAFAF08983A0FDEA20798CC451A3",
        "certificate_der_base64": "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",
        "src_file_sha256": "00611ecd71f1db02006e287854f9cb09830d5f06513b7f5964cccd27e4fb81e7",
        "src_file_path": "downloaded_files/aeroadmin/00611ecd71f1db02006e287854f9cb09830d5f06513b7f5964cccd27e4fb81e7",
        "src_file_company": "AeroAdmin LLC"
      }
    ]
  }
}