S0346 OceanSalt

malwareEnterprise

platformsWindows

also known asOceanSalt

OceanSalt is a Trojan that was used in a campaign targeting victims in South Korea, United States, and Canada. OceanSalt shares code similarity with SpyNote RAT, which has been linked to APT1.

techniques used (8)

ATT&CK techniques this enables or maps to.

T1016System Network Configuration Discovery
T1057Process Discovery
T1059.003Windows Command Shell
T1070.004File Deletion
T1082System Information Discovery
T1083File and Directory Discovery
T1132.002Non-Standard Encoding
T1566.001Spearphishing Attachment

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan