Seasalt — Malware Profile

Seasalt is malware that has been linked to APT1's 2010 operations. It shares some code similarities with OceanSalt.

MITRE ATT&CK techniques (10)

• T1027.013 Encrypted/Encoded File
• T1036.004 Masquerade Task or Service
• T1057 Process Discovery
• T1059.003 Windows Command Shell
• T1070.004 File Deletion
• T1071.001 Web Protocols
• T1083 File and Directory Discovery
• T1105 Ingress Tool Transfer
• T1543.003 Windows Service
• T1547.001 Registry Run Keys / Startup Folder

Attributed threat actors

• APT1

Read the full analysis on IntelFusions