{
  "Name": "SecureCRT",
  "Category": "RAT",
  "Description": "SecureCRT is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.",
  "Author": "",
  "Created": "2024-08-02",
  "LastModified": "2024-08-02",
  "Details": {
    "Website": "https://www.vandyke.com/products/securecrt/",
    "PEMetadata": {
      "Filename": "",
      "OriginalFileName": "",
      "Description": ""
    },
    "Privileges": "",
    "Free": "",
    "Verification": "",
    "SupportedOS": [],
    "Capabilities": [],
    "Vulnerabilities": [],
    "InstallationPaths": [
      "C:\\*\\SecureCRT.EXE",
      "*\\SecureCRT.EXE",
      "*\\VanDyke Software\\ClientPack\\*"
    ]
  },
  "Artifacts": {
    "Disk": [],
    "EventLog": [],
    "Registry": [],
    "Network": []
  },
  "Detections": [
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/securecrt_processes_sigma.yml",
      "Description": "Detects potential processes activity of SecureCRT RMM tool"
    }
  ],
  "References": [],
  "Acknowledgement": [],
  "CodeSigning": {
    "certificates": [
      {
        "signer_name": "VanDyke Software, Inc.",
        "certificate_thumbprint": "57B434C5862F60520A2934E386666DF726CE6284",
        "certificate_der_base64": "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",
        "src_file_sha256": "85d2ff4ab6928f08dc2295affbf9ba3c125a5071c4d3c8c522bff357d7a2ff77",
        "src_file_path": "downloaded_files/securecrt/85d2ff4ab6928f08dc2295affbf9ba3c125a5071c4d3c8c522bff357d7a2ff77",
        "src_file_company": "VanDyke Software, Inc."
      }
    ]
  }
}