RMM
RuDesktop
RuDesktop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.
Tool overview
- Category
- RMM
- Research authors
- Not recorded
- Created
- 2024-08-02
- Last modified
- 2025-12-14
- Privileges
- Not recorded
- Free / availability
- Not recorded
- Verification required
- Not recorded
- Supported platforms
- Not recorded
Executables & installation paths
- Filename
- Not recorded
- OriginalFileName
- Not recorded
- Description
- Not recorded
Installation paths
rd.exe
rudesktop*.exe
Code signing
- signer name
- Oculus VR, LLC
- certificate thumbprint
- BC09BF25378AD0D469F6B4D2C96EE56F467A9B5B
- tbs sha256
- 5C2E037072A01071AF8F9809143B1B90ADB6063D67497ABECEBEB815E7844D64
- tbs sha1
- Not recorded
- signer name
- Unity Technologies ApS
- certificate thumbprint
- F7F8A6FE44B74576FE35176685405E0D058A7271
- tbs sha256
- 275E28FDBCB9B0DB2E4C498D07906C09061A77BDB8F6E86A7F085F26F92D93B0
- tbs sha1
- Not recorded
- signer name
- Unity Technologies SF
- certificate thumbprint
- BFFD800651947878FCD0DC749C16D57B0D5E397D
- tbs sha256
- BE51932815952B391A497BFE3B782E7990EE050A27744763D0EEBDCC9A0A9380
- tbs sha1
- Not recorded
- signer name
- Advanced Technologies LLC
- certificate thumbprint
- 8365B69A1A2077E392A98F3513DDD5795EF8B5FC
- src file sha256
- 3f8795be3197df823b599d8bc96ecbf9c7d94079d490c9d94c3239e635332fdd
- src file path
- downloaded_files/rudesktop/3f8795be3197df823b599d8bc96ecbf9c7d94079d490c9d94c3239e635332fdd
- src file company
- Advanced Technologies, LLC
search names
iastoriconlaunch.exe
company names
signer names
Oculus VR, LLC
Unity Technologies ApS
Unity Technologies SF
File hashes
- authenticode
- file name
- IAStorIconLaunch.exe
- sha256
- F6F53A49D39810874B56D66DABC85537FB1B514BA52416582DC570AE26A0D8DE
- sha1
- B83F77E1F13B6AA5211EC8F3C383594C583FB311
- page
- file name
- IAStorIconLaunch.exe
- sha256
- E5BF1F8524D39085F8F01C2F0135B7CBA8AEAB93B3395E5758FF8113425D69B8
- sha1
- EB19FBF0ECE7F4F29282680A98046728CA52A09A
FORENSIC EVIDENCE
Network artifacts
- Description
- Known remote domains
- Domains
- *.rudesktop.ru
- rudesktop.ru
- Ports
- Not recorded
Detections
- Sigma
- https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rudesktop_network_sigma.yml
- Description
- Detects potential network activity of RuDesktop RMM tool
- Sigma
- https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rudesktop_processes_sigma.yml
- Description
- Detects potential processes activity of RuDesktop RMM tool