RMM

Itarian

Itarian is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.

Tool overview

Category
RMM
Research authors
Not recorded
Created
2024-08-02
Last modified
2025-12-14
Privileges
Not recorded
Free / availability
Not recorded
Verification required
Not recorded
Supported platforms
Not recorded

Executables & installation paths

Filename
Not recorded
OriginalFileName
Not recorded
Description
Not recorded

Installation paths

ITSMAgent.exe
RViewer.exe
ItsmRsp.exe
RAccess.exe
RmmService.exe
ITarianRemoteAccessSetup.exe
RDesktop.exe
ComodoRemoteControl.exe
ITSMService.exe
RHost.exe

Code signing

signer name
ITarian LLC
certificate thumbprint
9D4297D5CEBB398B79354FA98031FB577884078F
tbs sha256
2B3DE9FC259D3C485E40ED5B31E094B1EB24501EE25E9FCB9D02225E817F0DBE
tbs sha1
Not recorded
signer name
Comodo Security Solutions\
issuer
CN=Sectigo Public Code Signing CA R36
certificate thumbprint
6A2DD5420C34A602C048F8D79BE52690F101001B
tbs sha256
2E4765F85AE2822A8FAC2C12D791CCC86F74D8478B50D57B17E34B244D02DCC2
tbs sha1
A280740D90D992EBBF302AC397DC06ABBDFB348C
valid from
2023-03-17T00:00:00+00:00
valid to
2024-03-16T23:59:59+00:00
signer name
ITarian LLC
certificate thumbprint
83684997F1ACE5AE105E670E8094EDB2AD0879FD
src file sha256
aa7edf0e682942968173fd8904f01cae187262e6952c3c8e24dc1f8b4f2377ac
src file path
downloaded_files/itarian/aa7edf0e682942968173fd8904f01cae187262e6952c3c8e24dc1f8b4f2377ac
src file company
ITarian

search names

itsmagent.exe
raccess.exe
rhost.exe
rmmservice.exe
rviewer.exe

company names

signer names

Comodo Security Solutions\
ITarian LLC

FORENSIC EVIDENCE

Network artifacts

Description
Known remote domains
Domains
  • mdmsupport.comodo.com
  • *.itsm-us1.comodo.com
  • *.cmdm.comodo.com
  • remoteaccess.itarian.com
  • servicedesk.itarian.com
Ports
Not recorded

Detections

Sigma
https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/itarian_network_sigma.yml
Description
Detects potential network activity of Itarian RMM tool
Sigma
https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/itarian_processes_sigma.yml
Description
Detects potential processes activity of Itarian RMM tool

References