RAT
Insync
Insync is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.
Tool overview
- Category
- RAT
- Research authors
- Not recorded
- Created
- 2024-08-02
- Last modified
- 2024-08-02
- Privileges
- Not recorded
- Free / availability
- Not recorded
- Verification required
- Not recorded
- Supported platforms
- Not recorded
Executables & installation paths
- Filename
- Not recorded
- OriginalFileName
- Not recorded
- Description
- Not recorded
Installation paths
C:\Users\USERNAME\AppData\Roaming\Insync\App\Insync.exe
*Users\*\AppData\Roaming\Insync\App\Insync.exe
*\Insync.exe
Code signing
- signer name
- Druva Inc
- certificate thumbprint
- 69D87180D72B8E218BDBC28D21879BC136184929
- src file sha256
- 1f8d76ad0fcbe5fadd066b0a332a58ccd96438dff55c63d90d14dbd96ab7e98f
- src file path
- downloaded_files/insync/1f8d76ad0fcbe5fadd066b0a332a58ccd96438dff55c63d90d14dbd96ab7e98f
- src file company
- GitHub, Inc.
- signer name
- Druva Data Solutions Pvt. Ltd
- certificate thumbprint
- F6ED487C109762F9A3E91DBCEF6EA41AD1EC5B87
- src file sha256
- bcc7ed09d03e12c6e2e8889f08c5056ffc9eb1b5fe47bc199ae9e4965415b86b
- src file path
- downloaded_files/insync/bcc7ed09d03e12c6e2e8889f08c5056ffc9eb1b5fe47bc199ae9e4965415b86b
- src file company
- GitHub, Inc.
Detections
- Sigma
- https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/insync_processes_sigma.yml
- Description
- Detects potential processes activity of Insync RMM tool