RMM

Netop Remote Control (aka Impero Connect)

Netop Remote Control (aka Impero Connect) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.

Tool overview

Category
RMM
Research authors
Not recorded
Created
2024-08-02
Last modified
2024-08-02
Privileges
Not recorded
Free / availability
Not recorded
Verification required
Not recorded
Supported platforms
Not recorded

Executables & installation paths

Filename
Not recorded
OriginalFileName
Not recorded
Description
Not recorded

Installation paths

nhostsvc.exe
nhstw32.exe
nldrw32.exe
rmserverconsolemediator.exe

Code signing

signer name
NETOP TECH SRL
certificate thumbprint
311FD401E4AA27E856311EAE5D80C31CDE46A67C
src file sha256
c5b98ab84cb24ddcfd5e01928ea959b6af8bb4963a9d1ae10fef3734ba99657d
src file path
downloaded_files/netop_remote_control_(aka_impero_connect)/c5b98ab84cb24ddcfd5e01928ea959b6af8bb4963a9d1ae10fef3734ba99657d
src file company
Netop Solutions Limited

FORENSIC EVIDENCE

Network artifacts

Description
Known remote domains
Domains
Not recorded
Ports
Not recorded

Detections

Sigma
https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netop_remote_control__aka_impero_connect__processes_sigma.yml
Description
Detects potential processes activity of Netop Remote Control (aka Impero Connect) RMM tool

References

Not recorded