16 lines
461 B
Go
16 lines
461 B
Go
|
package common
|
||
|
|
|
||
|
|
// CommonRMMHashes contains known SHA256 hashes of RMM executables
|
||
|
|
// These are high-confidence indicators - a hash match is a strong signal
|
||
|
|
// Sources: VirusTotal, LOLRMM, threat intelligence reports
|
||
|
|
var CommonRMMHashes = []string{
|
||
|
|
// TODO: Add hashes here
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
// CommonRMMHashesSHA1 contains known SHA1 hashes of RMM executables
|
||
|
|
var CommonRMMHashesSHA1 = []string{
|
||
|
|
// TODO: Add hashes here
|
||
|
|
// SHA256 is preferred for collision resistance
|
||
|
|
}
|