{
  "Name": "TightVNC",
  "Category": "RAT",
  "Description": "TightVNC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.",
  "Author": "",
  "Created": "2024-08-02",
  "LastModified": "2024-08-02",
  "Details": {
    "Website": "https://www.tightvnc.com/",
    "PEMetadata": {
      "Filename": "",
      "OriginalFileName": "",
      "Description": ""
    },
    "Privileges": "",
    "Free": "",
    "Verification": "",
    "SupportedOS": [],
    "Capabilities": [],
    "Vulnerabilities": [],
    "InstallationPaths": [
      "tvnviewer.exe",
      "TightVNCViewerPortable*.exe",
      "tvnserver.exe"
    ]
  },
  "Artifacts": {
    "Disk": [],
    "EventLog": [],
    "Registry": [],
    "Network": [
      {
        "Description": "Known remote domains",
        "Domains": [
          "user_managed",
          "tightvnc.com"
        ],
        "Ports": []
      }
    ]
  },
  "Detections": [
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/tightvnc_network_sigma.yml",
      "Description": "Detects potential network activity of TightVNC RMM tool"
    },
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/tightvnc_processes_sigma.yml",
      "Description": "Detects potential processes activity of TightVNC RMM tool"
    }
  ],
  "References": [
    "https://www.tightvnc.com/doc/win/TightVNC_for_Windows-Installation_and_Getting_Started.pdf"
  ],
  "Acknowledgement": [],
  "CodeSigning": {
    "certificates": [
      {
        "signer_name": "深圳市玩物科技有限公司",
        "certificate_thumbprint": "2FDFB9DE3C87B8F4D9D4470DEF901FAE290E3CC1",
        "certificate_der_base64": "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",
        "src_file_sha256": "25cde88b8245866e45f2cb081a817aef1ec179d10030837ac19c3863088aeeeb",
        "src_file_path": "downloaded_files/tightvnc/25cde88b8245866e45f2cb081a817aef1ec179d10030837ac19c3863088aeeeb",
        "src_file_company": "GlavSoft LLC."
      }
    ]
  }
}