RMMProject Module Download Endpoint
Detects network connections to the '/avast_update' endpoint, which is associated with the RMMProject malware for fetching secondary DLL payloads.
Microsoft Sentinel (KQL)

Detects network connections to the '/avast_update' endpoint, which is associated with the RMMProject malware for fetching secondary DLL payloads.

Already have an account?