Seasalt

Malware & Tools · Seasalt

· MalwareS0345 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

Seasalt is malware that has been linked to APT1's 2010 operations. It shares some code similarities with OceanSalt.(Citation: Mandiant APT1 Appendix)(Citation: McAfee Oceansalt Oct 2018)

Tactic Coverage

stealth (3)discovery (2)command and control (2)persistence (2)privilege escalation (2)execution (1)

Used By (1 groups)

G0006APT1Comment Crew, Comment Group

Techniques (10)

T1027.013Encrypted/Encoded File

stealth

T1036.004Masquerade Task or Service

stealth

T1057Process Discovery

discovery

T1059.003Windows Command Shell

execution

T1070.004File Deletion

stealth

T1071.001Web Protocols

command and control

T1083File and Directory Discovery

References

https://attack.mitre.org/software/S0345 https://www.mandiant.com/sites/default/files/2021-09/mandiant-apt1-report.pdf https://www.mcafee.com/enterprise/en-us/assets/reports/rp-operation-oceansalt.pdf