{
  "Name": "RDCMan",
  "Category": "RAT",
  "Description": "Remote Desktop Connection Manager (RDCMan) is a free Microsoft tool developed by Julian Burger for managing multiple remote desktop connections from a single interface. Part of the Sysinternals suite, RDCMan enables IT administrators, system administrators, server lab managers, developers, and testers to organize, group, and control numerous RDP sessions efficiently.\n\n**IMPORTANT**: This tool is signed with legitimate Microsoft Corporation certificates that are also used to sign numerous other Microsoft products and Windows components. Do NOT blindly block these certificate thumbprints as doing so will likely break essential Windows functionality and other Microsoft applications in your environment. Use certificate data for detection, hunting, and analysis purposes only.\n",
  "Author": "Daniel Koifman (KoifSec)",
  "Created": "2025-11-12",
  "LastModified": "2025-11-12",
  "Details": {
    "Website": "https://learn.microsoft.com/en-us/sysinternals/downloads/rdcman",
    "Privileges": "User",
    "Free": true,
    "Verification": true,
    "SupportedOS": [
      "Windows"
    ],
    "Capabilities": [
      "Remote Desktop Management",
      "Multiple RDP Sessions"
    ],
    "Vulnerabilities": [
      "CVE-2020-0765"
    ],
    "InstallationPaths": [
      "*\\RDCMan.exe",
      "*\\RDCMan-x86.exe"
    ]
  },
  "Artifacts": {
    "Disk": [],
    "EventLog": [],
    "Registry": [],
    "Network": []
  },
  "Detections": [
    {
      "KQL": "https://github.com/Koifman/Deathcon25/blob/main/rmm_rodeo/rdcman/kql.kql",
      "Description": "KQL query for detecting RDCMan activity in Microsoft Sentinel"
    }
  ],
  "References": [
    "https://learn.microsoft.com/en-us/sysinternals/downloads/rdcman",
    "https://dirteam.com/sander/2021/06/24/remote-desktop-connection-manager-rdcman-is-back/",
    "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-0765"
  ],
  "Acknowledgement": [],
  "CodeSigning": {
    "search_names": [
      "nmk092kb9.exe",
      "rdcman-x86.dll",
      "rdcman-x86.exe",
      "rdcman.exe",
      "v8yka5.exe"
    ],
    "company_names": [],
    "signer_names": [
      "Microsoft Corporation"
    ],
    "certificates": [
      {
        "signer_name": "Microsoft Corporation",
        "issuer": "CN=Microsoft Code Signing PCA 2011",
        "certificate_thumbprint": "3F56A45111684D454E231CFDC4DA5C8D370F9816",
        "tbs_sha256": "21DC4A8B9890842E51963CE36D3A614C716D2D794AFCF606F73CE12B525F9E6B",
        "tbs_sha1": "1D04935E420A06C650CB71FB762C0F0E8F90D17C",
        "valid_from": "2025-06-19T18:21:37+00:00",
        "valid_to": "2026-06-17T18:21:37+00:00",
        "certificate_der_base64": "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",
        "src_file_path": "downloaded_files/rdcman/e6067c98e8ffc586d689d1ddb5376f26e1657c15ddafe4eff7b4d231de15770a",
        "src_file_company": "Microsoft"
      },
      {
        "signer_name": "Microsoft Corporation",
        "issuer": "CN=Microsoft Code Signing PCA",
        "certificate_thumbprint": "67B1757863E3EFF760EA9EBB02849AF07D3A8080",
        "tbs_sha256": "B4D5162BFE8B7E38196E3C394D21AC408EA0E31A050560AF2909B066526B7207",
        "tbs_sha1": "85959A020005CF379188739F02E24D0B6031DBC4",
        "valid_from": "2014-04-22T17:39:00+00:00",
        "valid_to": "2015-07-22T17:39:00+00:00",
        "certificate_der_base64": "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"
      },
      {
        "signer_name": "Microsoft Corporation",
        "certificate_thumbprint": "F5877012FBD62FABCBDC8D8CEE9C9585BA30DF79",
        "certificate_der_base64": "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",
        "src_file_sha256": "966952d678a8eb7254cf7c024ece8bc47e05a89c760f994db92f5a4309688b25",
        "src_file_path": "downloaded_files/rdcman/966952d678a8eb7254cf7c024ece8bc47e05a89c760f994db92f5a4309688b25",
        "src_file_company": "Microsoft"
      }
    ]
  },
  "FileHashes": {
    "authenticode": [
      {
        "file_name": "RDCMan-x86.exe",
        "sha256": "5BC272A208BF66991CD5970D394F1E54525EE641B3FD9371ADA17026E75378A5",
        "sha1": "9B0422A36C73BF7FE2564420DD90D545231DAEE3"
      },
      {
        "file_name": "RDCMan-x86.exe",
        "sha256": "D3E586562037D1639E0A70D6C5AB31F40408B805C8C969857E8BDEC53410C342",
        "sha1": "DD13B79EDC779927A728799DC74FD5B06BD0CE43"
      },
      {
        "file_name": "RDCMan-x86.exe",
        "sha256": "5841E09FB6E2B8EEB453D177A5E56053CA252714A2BCB484A4481A36BC33F47A",
        "sha1": "9FD7AA70A0AD609907EFA546E3AD7CF7A418BE51"
      },
      {
        "file_name": "RDCMan.exe",
        "sha256": "1618E995C25C9E881FD50D349BA3D2749BC4E4A133975431D71B6A6EB4FDCFF4",
        "sha1": "4C90CB51AE90E54A34446A1581288A05FF45EDEC"
      },
      {
        "file_name": "RDCMan-x86.exe",
        "sha256": "D1C67E6934E650D574AD56DB18D1CB09618D9F09C9E4313CA7C9650C1C6AB83D",
        "sha1": "5CA8A51931D39B29E4CC161526E1681DED42C114"
      },
      {
        "file_name": "RDCMan-x86.exe",
        "sha256": "3CF37A92143E9EAE3223CB9622F951A854D3C46F2D5F024C06DC916953889691",
        "sha1": "2E53240995E4A45BCC5A809BD87DD94FE6DAB463"
      },
      {
        "file_name": "RDCMan-x86.exe",
        "sha256": "9BA6CF75FC5295BE0E5F92A1A44D6CA6FB9572C5CFE0BE2CD0E2E8AA6C34E432",
        "sha1": "EA0A90B7EA86FB3B7F9961B0FB83DFE2E3437932"
      },
      {
        "file_name": "RDCMan-x86.exe",
        "sha256": "06E4CB94B7745B10BB2BE17653B13F54CD0F1C3559025208457571EFEC214016",
        "sha1": "C071EE8ED4EEBC8C4A84D39C14CB12770234E9F1"
      },
      {
        "file_name": "RDCMan-x86.exe",
        "sha256": "74B4F499BF43EFDA77D854D4A36C190DF762DA9D6192BBE8316CD93023FD47CC",
        "sha1": "5FE86B3293596EC73840D72EABA258FD0900C9E1"
      },
      {
        "file_name": "RDCMan-x86.dll",
        "sha256": "CEAB7C913A68FE70EFE4644B86DA6FCE81D2B9AC2CD597AF5C2A16E181C85F26",
        "sha1": "C9AC5C1348942C9D68774733469DD84AF625B71B"
      },
      {
        "file_name": "v8yka5.exe",
        "sha256": "ED38AF28E6937AF2BE25FA0BB36FA5FCB227160A813534AEC2ABA00A044864C0",
        "sha1": "F1517300A63B03EA966D76356FCE9601ED792781"
      },
      {
        "file_name": "RDCMan.exe",
        "sha256": "B0988D2187A02C1E27BA8E2D184A153BA61769B7926D979635A84FD0196CC366",
        "sha1": "F1735B0D0FA6CC585C0FA7693511211223511499"
      },
      {
        "file_name": "RDCMan-x86.exe",
        "sha256": "7D490021979B3D345C12BC63297D0CC0777FDFBB9B1B6EEC0EA37A344F8762C8",
        "sha1": "B3BDCD54D11D6350964537AC409AEBAD16251991"
      },
      {
        "file_name": "nmk092kb9.exe",
        "sha256": "C4671732EF6F299C723490AA305BF4439226C79A9107530674AAAA204C436016",
        "sha1": "EE8650A59EC911CBAA03C20D5FC9B799D8090309"
      },
      {
        "file_name": "RDCMan-x86.exe",
        "sha256": "F865B64E287A090C8C90CC38B447C8169F5FA33F7D0FB713167FEC837E476732",
        "sha1": "08A683875545D77768DC26B2C8D0DB67A2CDDC1E"
      },
      {
        "file_name": "RDCMan-x86.exe",
        "sha256": "C757873F983503D5FE0DC47DDAAA177DFDD63B40EC255FCC94DF53992F0E5192",
        "sha1": "16BAFB5E70A6267129C7EC5E1A5AC792DFAFC58E"
      },
      {
        "file_name": "RDCMan-x86.exe",
        "sha256": "301D12BA963F4BB7EFC0C5183F8F405DA29E5BB10D8C6806FFD772E0AB60C54D",
        "sha1": "5A75F5E03F19676DC8BACB8C527EBF2B80E9ACE1"
      }
    ],
    "page": [
      {
        "file_name": "RDCMan-x86.exe",
        "sha256": "4C7DF8D957FE411B1C7CFF76E942B5FD599BDDF8615F0CBC6DFC0A1B1FE6F46F",
        "sha1": "DD0B27369D0E1716E4C958B625F334A82352BF4A"
      },
      {
        "file_name": "RDCMan-x86.exe",
        "sha256": "FC99BFF6CF077C5A1D5CA87A0FFDCCF39E21E14D775FAADAA1B90DD01463BB7C",
        "sha1": "20A8A0C93661FFE8FCE83968E17C68890CCA4637"
      },
      {
        "file_name": "RDCMan-x86.exe",
        "sha256": "56E852B40B0652CC3180DFC9AEEEFBE309A35B283B6DD29B8578B5E86D782063",
        "sha1": "2406CA75D570279F64D088912232A6F9BBD6A353"
      },
      {
        "file_name": "RDCMan-x86.exe",
        "sha256": "63DB9F738188336426FA928386B5B5B9EA721833BB1EEE2471C48BF5731A25C7",
        "sha1": "FCE68D8735341AF594242E42566AE2450AC42A1B"
      },
      {
        "file_name": "RDCMan-x86.exe",
        "sha256": "5C02F32FF21647F9CF6E70DC25CACC6AE2599B56A62E7E78CDDD8C599A5B5C88",
        "sha1": "D602CBDDD19BF061D967E54356427E58E729A635"
      },
      {
        "file_name": "RDCMan-x86.exe",
        "sha256": "C77F9266F297C5590F2F41F6659D4A65E1976D10D3DE16EECCC9AF338EEFC875",
        "sha1": "8907AF5497348368F091D9BB3A8CFF42B0242CBD"
      },
      {
        "file_name": "RDCMan-x86.exe",
        "sha256": "0AC5F63C1F78EDCAF629D949CAFFA2E15715FD4EE381758284DD4BDC3B4F5532",
        "sha1": "417E0C15A9BF212627B1EE09D110F056813A931A"
      },
      {
        "file_name": "RDCMan-x86.exe",
        "sha256": "5289255473627ACEFB589EB9DB5C22C4B3329997B502E2F6BC30AFBE6FA07AC4",
        "sha1": "DA44E04CD6DEA5670984184C70A1D42594AFE6BE"
      },
      {
        "file_name": "RDCMan-x86.dll",
        "sha256": "1BACD80487828AC1F9E8A15E38951C66C90CC0E9AA6A9529A91CE53796E69C4B",
        "sha1": "4E99889F7C52328C383743EDF3F7D0D6AA999B1E"
      },
      {
        "file_name": "v8yka5.exe",
        "sha256": "F1AD9038A11E8FCAA328F6FB9E444386081005B5C7A5E7C4CF94C89EF97E7768",
        "sha1": "385A49F68B86AF4490521873728B5283B67EB6FA"
      },
      {
        "file_name": "RDCMan-x86.exe",
        "sha256": "05ED894B82B84256900F02BD440A283A845BF3BD984AB99F67EA385AEB898D40",
        "sha1": "1A8F55ECE08544DE8D4FF97A0F82AF41A10073B6"
      },
      {
        "file_name": "RDCMan-x86.exe",
        "sha256": "0C6535084571ED5AB1775F49D8CBB85C3F864D9444DD8A3B6B88D7B5F79358CD",
        "sha1": "11FFBF5C42DD29F658773A9A7FF0A84F3ADBE2C2"
      },
      {
        "file_name": "RDCMan-x86.exe",
        "sha256": "BD09703AD68D3A3FD2F9D779838600662515C50E535F68B23600DE67574CACBD",
        "sha1": "D7911C5D4506211CED7D494DA6B159E38ECDB025"
      },
      {
        "file_name": "RDCMan-x86.exe",
        "sha256": "E85E05372FF2A191D1353E5D2A83BFB82C7EC17540142725C99AFB0886F7DE2A",
        "sha1": "F92CB8B3EDE30EDC70F497CDCFFAC789BB6E096A"
      }
    ]
  }
}