{
  "Name": "Impero Connect",
  "Category": "RMM",
  "Description": "Impero Connect is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.",
  "Author": "",
  "Created": "2024-08-02",
  "LastModified": "2024-08-02",
  "Details": {
    "Website": "",
    "PEMetadata": {
      "Filename": "",
      "OriginalFileName": "",
      "Description": ""
    },
    "Privileges": "",
    "Free": "",
    "Verification": "",
    "SupportedOS": [],
    "Capabilities": [],
    "Vulnerabilities": [],
    "InstallationPaths": [
      "ImperoClientSVC.exe"
    ]
  },
  "Artifacts": {
    "Disk": [],
    "EventLog": [],
    "Registry": [],
    "Network": [
      {
        "Description": "Known remote domains",
        "Domains": [
          "imperosoftware.com"
        ],
        "Ports": []
      }
    ]
  },
  "Detections": [
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/impero_connect_network_sigma.yml",
      "Description": "Detects potential network activity of Impero Connect RMM tool"
    },
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/impero_connect_processes_sigma.yml",
      "Description": "Detects potential processes activity of Impero Connect RMM tool"
    }
  ],
  "References": [],
  "Acknowledgement": [],
  "CodeSigning": {
    "certificates": [
      {
        "signer_name": "Impero Solutions Limited",
        "certificate_thumbprint": "E1A00BFD8338A6C9EADC315BF89568DB43DD2220",
        "certificate_der_base64": "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",
        "src_file_sha256": "2ef170a512ba3763050cca4f64055f658ff1df5bdf45784dae8b51256bd3c07c",
        "src_file_path": "downloaded_files/impero_connect/2ef170a512ba3763050cca4f64055f658ff1df5bdf45784dae8b51256bd3c07c",
        "src_file_company": "Impero Solutions ltd"
      }
    ]
  }
}