Skip to content

Hide Navigation Hide TOC

Network Communication Initiated To Portmap.IO Domain (07837ab9-60e1-481f-a74d-c31fb496a94c)

Detects an executable accessing the portmap.io domain, which could be a sign of forbidden C2 traffic or data exfiltration by malicious actors

Cluster A Galaxy A Cluster B Galaxy B Level
External Proxy - T1090.002 (69b8fd78-40e8-4600-ae4d-662c9d7afdb3) Attack Pattern Network Communication Initiated To Portmap.IO Domain (07837ab9-60e1-481f-a74d-c31fb496a94c) Sigma-Rules 1
Exfiltration Over C2 Channel - T1041 (92d7da27-2d91-488e-a00c-059dc162766d) Attack Pattern Network Communication Initiated To Portmap.IO Domain (07837ab9-60e1-481f-a74d-c31fb496a94c) Sigma-Rules 1
External Proxy - T1090.002 (69b8fd78-40e8-4600-ae4d-662c9d7afdb3) Attack Pattern Proxy - T1090 (731f4f55-b6d0-41d1-a7a9-072a66389aea) Attack Pattern 2