LOLRMMTHE REMOTE ACCESS CATALOG
GitHub
Catalog / Duplicati
RAT

Duplicati

Duplicati is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.

Visit tool website ↗Download JSON ↓View source YAML ↗Suggest an update ↗

Tool overview

Category
RAT
Research authors
Not recorded
Created
2024-08-02
Last modified
2024-08-02
Privileges
Not recorded
Free / availability
Not recorded
Verification required
Not recorded
Supported platforms
Windows

Executables & installation paths

Filename
Not recorded
OriginalFileName
Not recorded
Description
Not recorded

Installation paths

c:\Program Files\*\Duplicati.Server.exe
*\*\Duplicati.Server.exe

Code signing

signer name
Duplicati Inc.
certificate thumbprint
7812DFC61915A4BFC049834D63DBD2E9340D82FC
tbs sha256
437C2E9C10A4C6176D49821EB04EA42E3AA33A1562071306529B8A5F9620DBF6
tbs sha1
Not recorded

search names

duplicati.server.dll
duplicati.server.implementation.dll
duplicati.server.serialization.dll

company names

signer names

Duplicati Inc.

File hashes

authenticode
  • file name
    Duplicati.Server.dll
    sha256
    2547A6F8A0C31719CC8D2202547FF00D446A2400F6BCA11F3A7DCBB071FBEB57
    sha1
    FD602EC1C5098A4A21B587A3029510DB40FD2FF7
  • file name
    Duplicati.Server.dll
    sha256
    B11ED82E95C15D709C08A31EFB38F2B4E92B98F99710FAB3DD7E3C4D99EAB6C2
    sha1
    40ABED77FDBF060BA7D77B22C7069B940C2FB9D1
  • file name
    Duplicati.Server.Implementation.dll
    sha256
    43988D047C1940A40453746B55F5A725F2243DA4BEFD1A4B45670B26DBB30EF0
    sha1
    5A1DC12993FB1D73A15D717B94544C89388D6282
  • file name
    Duplicati.Server.Serialization.dll
    sha256
    14781D33797B0802037AD4F2A73646082AF535B8473E322CCC96F33E0CC5ECBA
    sha1
    244230F2649B1A73F352AAB242BE6F46C62AAE31
page
  • file name
    Duplicati.Server.dll
    sha256
    194BBDA8F9E081C1941910B4500BD0EC7DEBF08E7DE4F7BE12FCE228EEDC600D
    sha1
    A426713EE6CC6E24D2D8A17319590CD47FC4F7C6
  • file name
    Duplicati.Server.dll
    sha256
    17D244EE5C8D3D04ECF58E941D74867BFCFC2116F780B4CCAD9387744F36F586
    sha1
    D713473A24B07488CB120EDC6B3E3C88601BC09D
  • file name
    Duplicati.Server.Implementation.dll
    sha256
    97FFA4D85D49A7370496544CD6F840B8E112B2FD24BFF251BBDBF260E929C267
    sha1
    EC8AFF5C5DB11F27C803182D36C3D03ABE283779
  • file name
    Duplicati.Server.Serialization.dll
    sha256
    169368BB3D8E3DF1DCA70D0C00C5D3BC8C47B2AC201FE2B22D019929AA815EB7
    sha1
    2D52248DE6CEBA14E03EBE4E4604C537D798448D

Detections

Sigma
https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/duplicati_processes_sigma.yml
Description
Detects potential processes activity of Duplicati RMM tool

References

Not recorded