RMM

Mikogo

Mikogo is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.

Tool overview

Category
RMM
Research authors
Not recorded
Created
2024-08-02
Last modified
2024-08-02
Privileges
Not recorded
Free / availability
Not recorded
Verification required
Not recorded
Supported platforms
Not recorded

Executables & installation paths

Filename
Not recorded
OriginalFileName
Not recorded
Description
Not recorded

Installation paths

mikogo.exe
mikogo-starter.exe
mikogo-service.exe
mikogolauncher.exe
C:\Users\*\AppData\Roaming\Mikogo\*
*Users\*\AppData\Roaming\Mikogo\*
*\Mikogo-Service.exe
*\Mikogo-Screen-Service.exe

FORENSIC EVIDENCE

Network artifacts

Description
Known remote domains
Domains
  • *.real-time-collaboration.com
  • *.mikogo4.com
  • *.mikogo.com
  • mikogo.com
Ports
Not recorded

Detections

Sigma
https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/mikogo_network_sigma.yml
Description
Detects potential network activity of Mikogo RMM tool
Sigma
https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/mikogo_processes_sigma.yml
Description
Detects potential processes activity of Mikogo RMM tool

References