{
  "Name": "NoteOn-desktop sharing",
  "Category": "RAT",
  "Description": "NoteOn-desktop sharing is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.",
  "Author": "",
  "Created": "2024-08-02",
  "LastModified": "2024-08-02",
  "Details": {
    "Website": "",
    "PEMetadata": {
      "Filename": "",
      "OriginalFileName": "",
      "Description": ""
    },
    "Privileges": "",
    "Free": "",
    "Verification": "",
    "SupportedOS": [],
    "Capabilities": [],
    "Vulnerabilities": [],
    "InstallationPaths": [
      "nateon*.exe",
      "nateon.exe",
      "nateonmain.exe"
    ]
  },
  "Artifacts": {
    "Disk": [],
    "EventLog": [],
    "Registry": [],
    "Network": []
  },
  "Detections": [
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/noteon-desktop_sharing_processes_sigma.yml",
      "Description": "Detects potential processes activity of NoteOn-desktop sharing RMM tool"
    }
  ],
  "References": [],
  "Acknowledgement": [],
  "CodeSigning": {
    "certificates": [
      {
        "signer_name": "NATE Communications Corporation",
        "certificate_thumbprint": "37620F2004EDE612CC3BC49AAA80493FBF908482",
        "certificate_der_base64": "MIIH5jCCBc6gAwIBAgIQC6WpjL29f6+0Vba5Rhs3BTANBgkqhkiG9w0BAQsFADBpMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xQTA/BgNVBAMTOERpZ2lDZXJ0IFRydXN0ZWQgRzQgQ29kZSBTaWduaW5nIFJTQTQwOTYgU0hBMzg0IDIwMjEgQ0ExMB4XDTI1MDMxMTAwMDAwMFoXDTI4MDMxMjIzNTk1OVowge4xEzARBgsrBgEEAYI3PAIBAxMCS1IxFjAUBgsrBgEEAYI3PAIBAhMFU2VvdWwxHTAbBgNVBA8MFFByaXZhdGUgT3JnYW5pemF0aW9uMRcwFQYDVQQFEw4xMTAxMTEtMTMyMjg4NTELMAkGA1UEBhMCS1IxDjAMBgNVBAgTBVNlb3VsMRYwFAYDVQQHEw1KdW5nIERpc3RyaWN0MSgwJgYDVQQKEx9OQVRFIENvbW11bmljYXRpb25zIENvcnBvcmF0aW9uMSgwJgYDVQQDEx9OQVRFIENvbW11bmljYXRpb25zIENvcnBvcmF0aW9uMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtYNvnAddRFB84JgyXQ4b9dLQ60/Slu98k/51H/fdMG2njcyhw9xL4RF/99JVNJiKfYkW7dE9kQj7dFThE8zZRgXigUF+/pXby0/t9E18cvHTwHIwNTzwoZGyREodZFqQwuISc2H9hZTAnWwJRvIPxZlXvnwuod5re1aZ4utk/QArMZaBhrqnoYVuOVpQ2sqe5S0D+e0fSGKFjVYR7PREMUSDQ7GMqJMaFdMMwb/WpsZzyWNcOM7WUVZXwry+tAfQjUj03bxys1HJZC2HPn91GUwJXvOCfNwA8EQ5MLNBto4L/2Ne6i711wdKUN1DblI5/oNO0yaAx1su/7B0bKSv2Wxs90pMIrMpqWYZiJV4JFabvydeiNdwDO6P6GrIghmC98wYuSLkMJGMDgl3dIKnlMtWptt0GkLgq4OUsb+aZGaDABQcGSfwnSEP95boSWctVEafXCYQ7bnv2pmXzrWuWzSrIYSmnu4oK2VaogtDd8yq2kbyBCa1AE6Ga8Kv4HmUmCHPO9LjRncezD+MBN8s0VuhY01rsD/X9eKRBIKY7jEdC+uU2APmCKssaXjFtv89TFuXQzwEFU+v8cNfmeSoNvW4zqFg3oUxjcI9nBhx+EXzLulFxymFw/xKFFUMXZh0Hb2vMU8hgO9K7Y3e31Pud0gz++D0aZDR0tX/nQv7TZUCAwEAAaOCAgIwggH+MB8GA1UdIwQYMBaAFGg34Ou2O/hfEYb7/mF7CIhl9E5CMB0GA1UdDgQWBBRgrNsEZTj86yNO1UmidxHfGInwDDA9BgNVHSAENjA0MDIGBWeBDAEDMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwMwgbUGA1UdHwSBrTCBqjBToFGgT4ZNaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0Q29kZVNpZ25pbmdSU0E0MDk2U0hBMzg0MjAyMUNBMS5jcmwwU6BRoE+GTWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRHNENvZGVTaWduaW5nUlNBNDA5NlNIQTM4NDIwMjFDQTEuY3JsMIGUBggrBgEFBQcBAQSBhzCBhDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFwGCCsGAQUFBzAChlBodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkRzRDb2RlU2lnbmluZ1JTQTQwOTZTSEEzODQyMDIxQ0ExLmNydDAJBgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQB1PxGf4oYj4+AjNSIxLg6u76F49Ye7TLknlbyBXEZ2rSmib6whyzqMr8lpCkK1OuL3oL4zm/Vt1ZWOgnkf/PhWg1K14b1wmb2WU8SLt/zlz1Ya0urObk1e02IcrNtdfrbsi8h1+ZPQR6+NBAgJB2Ah9PPfh/lbpuhy8Q79qv3T28gJBU/LdIxIpkHsrhFGyGWZk8ZypuKm4NqHkVJQ9ToqrC6V6R09fm3j7IijZdFU25zyEzeWW4yL1+9cyNd+/adR288dn3HalLl/syEVAkeaE4CO/b72jEzdG6YG4uL4m0Xsa5+6IXu4MtXa+jsFqe0XKitM9NEjVN29pkTU15VjSc3lLJd8CSWm8NPI3niizWQf5NDZy1hzZ02n+LqyBFndB+pgtE4wgt/3JCiL2XdovtudbE7+PpIYLcWUq5/pDShydX5pqS/PU/hbnyKNC3Fi+4JSEu8W0kndvr76HC3w7fnjtIEaQK7Be8+JH9cct+vzHCQnm3RzUn5jBtvBTfz355eoH7DfIlYF1FQJjyjNc0EPAw+Hdu8U7LUJcyhM+l6X4xkSWo0n6R3lTnZn7ZzPoqphCm0nVYqMQsxJCUG0r6Fo+b6W8PDXg6MDJvxkHFuvdYy4U1a6vVB13P1pjPisn+Jfz5f8WV3NQV3SC+sad/J/qBWPJiMlm6HuqXGT7A==",
        "src_file_sha256": "dd6cae30fa01137e95bc035020663bd43077affe942be4624e57bb3ac2922756",
        "src_file_path": "downloaded_files/noteon-desktop_sharing/dd6cae30fa01137e95bc035020663bd43077affe942be4624e57bb3ac2922756",
        "src_file_company": "NATE Communications Corporation"
      },
      {
        "signer_name": "SK COMMUNICATIONS CO.,LTD",
        "certificate_thumbprint": "40750B075A5704CD382DAF3EC75C720E9F2FF3FA",
        "certificate_der_base64": "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",
        "src_file_sha256": "fcbd2b2c27c1f53007b16f63b7f611b9cf1499362426b08c26f7a924675dfc5c",
        "src_file_path": "downloaded_files/noteon-desktop_sharing/fcbd2b2c27c1f53007b16f63b7f611b9cf1499362426b08c26f7a924675dfc5c",
        "src_file_company": "SK Communications"
      }
    ]
  }
}