OceanSalt — Malware Profile

OceanSalt is a Trojan that was used in a campaign targeting victims in South Korea, United States, and Canada. OceanSalt shares code similarity with SpyNote RAT, which has been linked to APT1.

MITRE ATT&CK techniques (8)

• T1016 System Network Configuration Discovery
• T1057 Process Discovery
• T1059.003 Windows Command Shell
• T1070.004 File Deletion
• T1082 System Information Discovery
• T1083 File and Directory Discovery
• T1132.002 Non-Standard Encoding
• T1566.001 Spearphishing Attachment

Read the full analysis on IntelFusions