MITRE ATT&CKsoftware (malware)
S0346 OceanSalt
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.1
- Created
- 2019-01-30
Description
OceanSalt is a Trojan that was used in a campaign targeting victims in South Korea, United States, and Canada. OceanSalt shares code similarity with SpyNote RAT, which has been linked to APT1.
Related
Uses · MITRE ATT&CK (8)
- T1132.002 Non-Standard Encoding sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1566.001 Spearphishing Attachment sub-technique
- T1070.004 File Deletion sub-technique
- T1016 System Network Configuration Discovery technique
- T1057 Process Discovery technique
- T1082 System Information Discovery technique
- T1083 File and Directory Discovery technique
References
- https://www.mcafee.com/enterprise/en-us/assets/reports/rp-operation-oceansalt.pdf McAfee Oceansalt Oct 2018