SystemBC Malware socks5 Registry Run Key Persistence
Detects the creation or modification of a Windows Registry Run key containing the value name 'socks5', which is indicative of SystemBC malware establishing persistence.
Microsoft Sentinel (KQL)

Detects the creation or modification of a Windows Registry Run key containing the value name 'socks5', which is indicative of SystemBC malware establishing persistence.

Already have an account?