RMM
AweRay
AweRay is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.
Tool overview
- Category
- RMM
- Research authors
- Not recorded
- Created
- 2024-08-02
- Last modified
- 2025-12-14
- Privileges
- Not recorded
- Free / availability
- Not recorded
- Verification required
- Not recorded
- Supported platforms
- Not recorded
Executables & installation paths
- Filename
- Not recorded
- OriginalFileName
- Not recorded
- Description
- Not recorded
Installation paths
aweray_remote*.exe
AweSun.exe
Code signing
- signer name
- DUC FABULOUS CO.,LTD
- certificate thumbprint
- 2C1D12F8BBE0827400A8440AF74FFFA8DCC8097C
- tbs sha256
- E745D44D154427FA248F601B5C094ACFF07D4D3AB678D5EDB26899FD9114AD46
- tbs sha1
- Not recorded
- signer name
- DUC FABULOUS CO.,LTD
- certificate thumbprint
- 1C8854BCA4E9E8249979957000414E9BBB8DBBEC
- tbs sha256
- 8D5708904EE6AA475A0928A7043E0E0D2B0DC31F559A3DF4FA345763831DC70C
- tbs sha1
- Not recorded
- signer name
- 上海贝锐信息科技股份有限公司
- certificate thumbprint
- CD22D7228E666132008B90BB8D2D143BFD36D4EF
- src file sha256
- 995cdb276cd21557532b0b73c0ada53415f223400103177be9dd47e42a54e940
- src file path
- downloaded_files/aweray/995cdb276cd21557532b0b73c0ada53415f223400103177be9dd47e42a54e940
- src file company
- 上海貝銳信息科技股份有限公司
search names
company names
signer names
DUC FABULOUS CO.,LTD
FORENSIC EVIDENCE
Network artifacts
- Description
- Known remote domains
- Domains
- asapi*.aweray.net
- client-api.aweray.com
- Ports
- Not recorded
Detections
- Sigma
- https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aweray_network_sigma.yml
- Description
- Detects potential network activity of AweRay RMM tool
- Sigma
- https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aweray_processes_sigma.yml
- Description
- Detects potential processes activity of AweRay RMM tool