{
  "Name": "Ultra VNC",
  "Category": "RAT",
  "Description": "Ultra VNC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.",
  "Author": "",
  "Created": "2024-08-02",
  "LastModified": "2024-08-02",
  "Details": {
    "Website": "https://uvnc.com/",
    "PEMetadata": {
      "Filename": "",
      "OriginalFileName": "",
      "Description": ""
    },
    "Privileges": "",
    "Free": "",
    "Verification": "",
    "SupportedOS": [],
    "Capabilities": [],
    "Vulnerabilities": [],
    "InstallationPaths": [
      "C:\\Program Files\\uvnc bvba\\UltraVNC\\*",
      "*\\uvnc bvba\\UltraVNC\\*",
      "*\\UVNC_Launch.exe",
      "*\\winvnc.exe",
      "*\\vncviewer.exe"
    ]
  },
  "Artifacts": {
    "Disk": [],
    "EventLog": [],
    "Registry": [],
    "Network": []
  },
  "Detections": [
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ultra_vnc_processes_sigma.yml",
      "Description": "Detects potential processes activity of Ultra VNC RMM tool"
    }
  ],
  "References": [],
  "Acknowledgement": [],
  "CodeSigning": {
    "search_names": [],
    "company_names": [],
    "signer_names": [
      "uvnc bvba"
    ],
    "certificates": [
      {
        "signer_name": "uvnc bvba",
        "certificate_thumbprint": "N/A",
        "tbs_sha256": "",
        "tbs_sha1": "",
        "tbs_sha384": "0841701E5F698337DDA293B925112D3B1CF5A17DEDB90743B52379310184840C2B1E377BCF6AC4B1008D38D248920BD9"
      },
      {
        "signer_name": "RealVNC Ltd",
        "certificate_thumbprint": "787E284FC93F1F03001F0F9F54467D580B7B7B57",
        "certificate_der_base64": "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",
        "src_file_sha256": "39195c0abe53dc8fc2a57beeb6df9accf72226d46688845bf864c4d639030d84",
        "src_file_path": "downloaded_files/ultra_vnc/39195c0abe53dc8fc2a57beeb6df9accf72226d46688845bf864c4d639030d84",
        "src_file_company": "RealVNC"
      }
    ]
  }
}