RMM
Site24x7
Site24x7 is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.
Tool overview
- Category
- RMM
- Research authors
- Not recorded
- Created
- 2024-08-02
- Last modified
- 2024-08-02
- Privileges
- Not recorded
- Free / availability
- Not recorded
- Verification required
- Not recorded
- Supported platforms
- Not recorded
Executables & installation paths
- Filename
- Not recorded
- OriginalFileName
- Not recorded
- Description
- Not recorded
Installation paths
MEAgentHelper.exe
MonitoringAgent.exe
Site24x7WindowsAgentTrayIcon.exe
Site24x7PluginAgent.exe
Code signing
- signer name
- ZOHO Corporation Private Limited
- certificate thumbprint
- 039B7B91AFEFDB68B36E6A2D246545D581D1BF0D
- src file sha256
- 66226654281414efabf4ba96151f1c8c8000f0fe68e6ca0346e3e50635560771
- src file path
- downloaded_files/site24x7/66226654281414efabf4ba96151f1c8c8000f0fe68e6ca0346e3e50635560771
- signer name
- ZOHO Corporation Private Limited
- certificate thumbprint
- 9CFE33A8A1FB933BEDF943EF4263D03B6A5F828E
- src file sha256
- d86a0059fb121516da482deec1e2a56abbb9befe929cd66ff76f9d58fdc17398
- src file path
- downloaded_files/site24x7/d86a0059fb121516da482deec1e2a56abbb9befe929cd66ff76f9d58fdc17398
- signer name
- ZOHO Corporation Private Limited
- certificate thumbprint
- 03498B4CC5B51DB6CE80699F23CAC1724BB36B69
- src file sha256
- b032de2cad86dcd97903552668f292e7ee07a2a6a2bf413ea5dac2f34ffda443
- src file path
- downloaded_files/site24x7/b032de2cad86dcd97903552668f292e7ee07a2a6a2bf413ea5dac2f34ffda443
- signer name
- ZOHO Corporation Private Limited
- certificate thumbprint
- 99869B5E06680A842469CC3DA2F2DFFFE75AC930
- src file sha256
- e9de4c481cdd5eae6f7c6e5b6275dab75f7a19550d878fc7c65671d24e8dea63
- src file path
- downloaded_files/site24x7/e9de4c481cdd5eae6f7c6e5b6275dab75f7a19550d878fc7c65671d24e8dea63
- signer name
- ZOHO Corporation Private Limited
- certificate thumbprint
- C70830D17ABB7119FCE1A1DD2DC9FD0E92E33241
- src file sha256
- 4d1a0fe967d379f6de9fbd8bec1760a1e83e6a4511efdf4238409ca4d60e94fe
- src file path
- downloaded_files/site24x7/4d1a0fe967d379f6de9fbd8bec1760a1e83e6a4511efdf4238409ca4d60e94fe
- signer name
- ZOHO Corporation Private Limited
- certificate thumbprint
- 1FFC1D0860B748F0E9D53297B716E497C81D687B
- src file sha256
- da9ca2544a4e3bfa7468605bfdb44098a07f05517f51c59fc9e98cd5abef4d62
- src file path
- downloaded_files/site24x7/da9ca2544a4e3bfa7468605bfdb44098a07f05517f51c59fc9e98cd5abef4d62
- src file company
- Zoho Corporation
FORENSIC EVIDENCE
Network artifacts
- Description
- Known remote domains
- Domains
- plus*.site24x7.com
- plus*.site24x7.eu
- plus*.site24x7.in
- plus*.site24x7.cn
- plus*.site24x7.net.au
- Ports
- Not recorded
Detections
- Sigma
- https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/site24x7_network_sigma.yml
- Description
- Detects potential network activity of Site24x7 RMM tool
- Sigma
- https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/site24x7_processes_sigma.yml
- Description
- Detects potential processes activity of Site24x7 RMM tool