LOLRMMTHE REMOTE ACCESS CATALOG
GitHub
Catalog / Zabbix Agent
RMM

Zabbix Agent

Zabbix Agent is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.

Visit tool website ↗Download JSON ↓View source YAML ↗Suggest an update ↗

Tool overview

Category
RMM
Research authors
Not recorded
Created
2024-08-02
Last modified
2025-12-14
Privileges
Not recorded
Free / availability
Not recorded
Verification required
Not recorded
Supported platforms
Not recorded

Executables & installation paths

Filename
Not recorded
OriginalFileName
Not recorded
Description
Not recorded

Installation paths

zabbix_agent*.exe

Code signing

signer name
Zabbix SIA
certificate thumbprint
N/A
tbs sha256
6EA7E157D0630DEDEFA9A840B0BC5C48FA0A5E29AAF10F877AF01D348F5C695E
tbs sha1
Not recorded
signer name
Zabbix SIA
certificate thumbprint
1E158B87803F8F9B4189C62B762EA6E60340D65C
src file sha256
0b2070c42e42bfad0fb239a25696e4a734de487dd293135121fa3651cb9e826b
src file path
downloaded_files/zabbix_agent/0b2070c42e42bfad0fb239a25696e4a734de487dd293135121fa3651cb9e826b
src file company
Zabbix SIA

search names

aga.controls.dll
librehardwaremonitorlib.dll
openhardwaremonitorlib.dll
oxyplot.dll
oxyplot.windowsforms.dll
smartctl.exe
zabbix_agent2.exe

company names

signer names

Zabbix SIA

File hashes

authenticode
  • file name
    OxyPlot.WindowsForms.dll
    sha256
    AAC544630C825D295BFCED85667E967E823AA12544EB52522579B5A38DF342C0
    sha1
    89CB4FCA740429F4534E2FCB8E169647F9651167
  • file name
    OxyPlot.dll
    sha256
    6E08EE9F84C21270E37481982FED30520B09CEEAA7D55642ADCCE6766041178E
    sha1
    CE298F7684BA74A39C60DFDAC73E933356574DCF
  • file name
    LibreHardwareMonitorLib.dll
    sha256
    22414271105D103A14DD8AE009BEC293C5BFC575AA23174BDB5690DA08749748
    sha1
    0CC5A2BA08CD98DE9CCD23CFD2BB2F83851B31BF
  • file name
    OpenHardwareMonitorLib.dll
    sha256
    1053E55C0BCC4002F23B383AAB0A038110764104DE4B350CB91FDF88C785E237
    sha1
    2622288E737F1486465576E14405FB3333F7D583
  • file name
    Aga.Controls.dll
    sha256
    01662C51780F895E60CF6B984A3D5BF4BD60A03D7173EE96E486F5296C309248
    sha1
    611FFAA90BF81C22A3355D10F70E4C39D75AF7FC
  • file name
    smartctl.exe
    sha256
    01E17D55620DB645C69573A14E3B5C7E266620B718713C62FEBDC25927D08DD3
    sha1
    8541EB7070834867FEC7D08CC32A8E787D220341
  • file name
    OpenHardwareMonitorLib.dll
    sha256
    3572E4912214422865DA0FF2E120353A52668B7FC88103F574771FBECE2E20FA
    sha1
    7377A591EA9B5769E4C08FB52E8DCEBD6FD17667
  • file name
    zabbix_agent2.exe
    sha256
    25961B16B3486DB34EAB7168EC716C13FD212D6328F038A33F739622370D9E32
    sha1
    CD6ABD39A67C99A783BD53979E904AA089E2D0B7
page
  • file name
    OxyPlot.WindowsForms.dll
    sha256
    791C1FD12C47053AF8AE411FAA657E3E0CC2A1B224E8327E030549B95BADA291
    sha1
    83BEC1543EC304B9B252822503731A07CC9CA4B1
  • file name
    OxyPlot.dll
    sha256
    92DCDB288EA627FFE5C68BE5A9F06C87D9003DE3D01391F0FF08C887117F0FDF
    sha1
    BD33E6D8EE244397FECCFDCD3E227598BD674E66
  • file name
    LibreHardwareMonitorLib.dll
    sha256
    B8A575D65CE153E072F2162FF8CC522AF4018DE8BDAC133B56A7B823B48A5CC9
    sha1
    93AC73405441317D2ED2667BA83654692AC662B9
  • file name
    OpenHardwareMonitorLib.dll
    sha256
    BD2512F293B861F85B67EDF56AD39C47C5488983973DEA239DF2AFBBA0E1955A
    sha1
    C8A01D4466AAC998103ABA19A3EE8CE3D630F805
  • file name
    Aga.Controls.dll
    sha256
    BCCD11AEA8A80D912F8C400208E9451DEB2F881EBB581DF05ED79867865BD55C
    sha1
    7B3684B99259A5864D12D21EAE35444B9FF7AFD4
  • file name
    smartctl.exe
    sha256
    8FF105352772CD03FB1EAC780206097E045A2123D50BE2A92AACFCC081521085
    sha1
    EE9F07413020B5C0E8EDB73F1F5799520E10608C
  • file name
    OpenHardwareMonitorLib.dll
    sha256
    FB8C1A22E5E6FA0ADFEF0C55A576E439DE27AF5E7A1F4EFC75004F42B60E49D0
    sha1
    5B2B840A237C7EDC46255D94701F7D20750A6378
  • file name
    zabbix_agent2.exe
    sha256
    787F1315191CEC6E15A3697CA06295C7BCD7D9B05014F295DA9BE93F94098B54
    sha1
    1B78645786C5AB77AF255A2CE87A110BE7139DC5

FORENSIC EVIDENCE

Network artifacts

Description
Known remote domains
Domains
  • user_managed
  • zabbix.com
Ports
Not recorded

Detections

Sigma
https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/zabbix_agent_network_sigma.yml
Description
Detects potential network activity of Zabbix Agent RMM tool
Sigma
https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/zabbix_agent_processes_sigma.yml
Description
Detects potential processes activity of Zabbix Agent RMM tool

References