Salat Stealer PowerShell WebClient download of websalat GitHub binaries

ills3c Intel&Coffee@Ills3C

•updated yesterday•0•0•2

Detects PowerShell using System.Net.WebClient DownloadFile or related commands to fetch tool dependencies (such as 7z, MSTSCLib, ffmpeg) from GitHub repositories associated with the 'websalat' naming convention, indicative of Salat Stealer or similar tool-loading activity.