RMM
NTR Remote
NTR Remote is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.
Tool overview
- Category
- RMM
- Research authors
- Not recorded
- Created
- 2024-08-02
- Last modified
- 2025-12-14
- Privileges
- Not recorded
- Free / availability
- Not recorded
- Verification required
- Not recorded
- Supported platforms
Windows
Executables & installation paths
- Filename
- Not recorded
- OriginalFileName
- Not recorded
- Description
- Not recorded
Installation paths
NTRsupportPro_EN.exe
Code signing
- signer name
- Net Transmit & Receive SL
- issuer
- CN=VeriSign Class 3 Code Signing 2009-2 CA
- certificate thumbprint
- 73F02A06F37D5CF65D1040FABE9EFE6188B29BEB
- tbs sha256
- C78E601CC64E39E0738B6889874052EBE0FD261B65491106E350AF0CFF3C086E
- tbs sha1
- CEA0DE18000EA92E942B8542864C3E0E917AA829
- valid from
- 2009-10-23T00:00:00+00:00
- valid to
- 2012-10-22T23:59:59+00:00
search names
ntrsupportpro_en.exe
company names
signer names
Net Transmit & Receive SL
File hashes
- authenticode
- file name
- NTRsupportPro_EN.exe
- sha256
- DC9D1CC5A6D90136D114B2BAF82DE0A8A35737FB3E9DF7E541099BE72C803D1B
- sha1
- E9D33FA96A65CD32C9FCA147AF02A8A3E06859AE
- page
- file name
- NTRsupportPro_EN.exe
- sha256
- 811849CBC486CDDB8AF253E329E822E40ADA561577FA0795111CF8772459CEF1
- sha1
- 1455B4007B9FBCD228050C8F30A9BFD7DA2FA217
FORENSIC EVIDENCE
Network artifacts
- Description
- Known remote domains
- Domains
- *.ntrsupport.com
- Ports
- Not recorded
Detections
- Sigma
- https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ntr_remote_network_sigma.yml
- Description
- Detects potential network activity of NTR Remote RMM tool
- Sigma
- https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ntr_remote_processes_sigma.yml
- Description
- Detects potential processes activity of NTR Remote RMM tool