9486186cc0030cbd955d19bd95103a74fe1b5fd71611ffff7e5d38189cb94b17

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/09/2026, 16:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
OctopusEAX.exe
Size 4.8MB
Sample260926-ts8eksxzcs
SHA256 9486186cc0030cbd955d19bd95103a74fe1b5fd71611ffff7e5d38189cb94b17
MD5 0cdddb666cf0d24fe8d7f4f464c02b32
SHA1 244e4a9e611210a871bbe5fdc8fbc5c2059e05f4
SHA512 add31d8948ac4a3baef0be3f134b0d00559a2a81baff3fa4dc139db57910e0a9438f453ea39fc7d136851fbb9bad6e95fae0ac1b22961bfc696853f86bbf965e
SSDEEP 98304:W3UnCwKji9R0Ceu3bz6ztQAk69CflrmwDRmytt+5N/S89OxCzXQfkGBpxIk:W3Uncjicu3bWWviWVE5N/KoQMkI
TLSH
T1F436224A79F6457DC436C3B6CA49E9BCF05BBF850D70899BAF4A2A005E32948CD74E34
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

defense_evasion

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 2 IoCs

defense_evasion

Debugger Evasion

T1622

pid	Process
4324	OctopusEAX.exe
4324	OctopusEAX.exe

C:\Users\Admin\AppData\Local\Temp\OctopusEAX.exe
"C:\Users\Admin\AppData\Local\Temp\OctopusEAX.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4324

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Debugger Evasion

T1622

Credential Access

Discovery

Debugger Evasion

T1622

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4324-0-0x00000001400F5000-0x0000000140453000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads