Socksbot — Malware Profile

Socksbot is a backdoor that abuses Socket Secure (SOCKS) proxies.

MITRE ATT&CK techniques (5)

• T1055.001 Dynamic-link Library Injection
• T1057 Process Discovery
• T1059.001 PowerShell
• T1090 Proxy
• T1113 Screen Capture

Read the full analysis on IntelFusions