Update suspicious_ports_list.csv

mthcht · Jun 30, 2024 · 2868418 · 2868418
1 parent 3ce4e30
commit 2868418
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/Lists/suspicious_ports_list.csv b/Lists/suspicious_ports_list.csv
@@ -69,6 +69,8 @@ dest_port,metadata_comment,metadata_confidence,metatada_category,metadata_detect
 5556,AlanFramework C2 default port and H0rtiga trojan,high,C2,detection_rule
 5631,pcanywhere RMM default port,medium,RMM,hunting
 5632,pcanywhere RMM default port,medium,RMM,hunting
+5646,aweray RMM default port,medium,RMM,hunting
+5647,aweray RMM default port,medium,RMM,hunting
 5650,'pizza trojan' lite manager remote desktop and AeroAdmin and 'remote utilities - viewer (rutview.exe)',high,RMM,detection_rule
 5651,lite manager remote desktop,medium,RMM,hunting
 5655,AeroAdmin and some legit usages and 'remote utilities agent rutserv.exe',high,RMM,detection_rule