General
- Target build.rar
- Size 716KB
- Sample261023-rxyd3ada93
- SHA256 105f7f2b7db55afe2942f58bf0e1004460c75def6e7996c36dbc710f679d8c9e
- MD5 e5aa4be47ca4d8f978baa79724aba1ab
- SHA1 da1c0cd561604758602d61cc4aba3f6dfab070bb
- SHA512 bc8c9736701a27ffbac2d069ecb94060621fd7120af4c52a5006525d5a6665bfc8b0490d32d46912cb0162900985f401786f4f4224dc1efc110e0bbca26b5903
- SSDEEP 12288:WAUprkKdog8P7QnvrbX4mwAZIpUNhwVTmG6jmXE4xTGLUE4vZuyZ3CUd:WtJZdSQv/4mdupIwVr0mXDxTG6Z/dC2
- TLSH T149F42385EF3E331B837C523F40F1AF82236925017682AA2D55567C4DCF3A9421AB766F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MasonEAX/OctopusEAX.exe
Resource
win10ltsc2021-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
MasonEAX/OctopusEAX.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
MasonEAX/OctopusEAX.exe
Resource
win11-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
MasonEAX/OctopusEAX.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target MasonEAX/OctopusEAX.exe
- Size 1.4MB
- SHA256 6c1758ea8aff65a6f69bfab05752a343077bdffae6873ac1d83dbaa00dc1fc19
- MD5 97d1dacc80e013b370e0338c3ecc8782
- SHA1 8a5883f4cae22ba72496e6c7086a242c0792e605
- SHA512 70c89febda1d2a03f07774b9fb5c98a896e814210d1f3ab35c43de2cf82d87865ddcd014daff294473a6bf7a9dc6b091bfb3fbae92fcb2549267aef18ae927c4
- SSDEEP 24576:mWAZU7t1rtbc/7Ydld1asivY1EyVJIRTxNuEagobz32ORV:mT6ptMs1511+5aRz32O
- TLSH T116659E11A1E441EDD1BBE2B4CA762D07E772784103349AEB03D0996A1F277D54EBFB22
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory