build.rar
- SHA256 105f7f2b7db55afe2942f58bf0e1004460c75def6e7996c36dbc710f679d8c9e
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MasonEAX/OctopusEAX.exe
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
MasonEAX/OctopusEAX.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
MasonEAX/OctopusEAX.exe
Resource
win11-20260911-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
MasonEAX/OctopusEAX.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
General
- Target build.rar
- Size 716KB
- Sample261023-rxyd3ada93
- SHA256 105f7f2b7db55afe2942f58bf0e1004460c75def6e7996c36dbc710f679d8c9e
- MD5 e5aa4be47ca4d8f978baa79724aba1ab
- SHA1 da1c0cd561604758602d61cc4aba3f6dfab070bb
- SHA512 bc8c9736701a27ffbac2d069ecb94060621fd7120af4c52a5006525d5a6665bfc8b0490d32d46912cb0162900985f401786f4f4224dc1efc110e0bbca26b5903
- SSDEEP 12288:WAUprkKdog8P7QnvrbX4mwAZIpUNhwVTmG6jmXE4xTGLUE4vZuyZ3CUd:WtJZdSQv/4mdupIwVr0mXDxTG6Z/dC2
- TLSH T149F42385EF3E331B837C523F40F1AF82236925017682AA2D55567C4DCF3A9421AB766F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/MasonEAX/OctopusEAX.exe
File Explorer
-
build.rar.rar 716KB
-
MasonEAX/OctopusEAX.exe.exe 1.4MB
MasonEAX/OctopusEAX.exe
- IMPHASH 46b62684f7f3dcab90428bd01f5b50e3
- SHA256 6c1758ea8aff65a6f69bfab05752a343077bdffae6873ac1d83dbaa00dc1fc19
- MD5 97d1dacc80e013b370e0338c3ecc8782
- SHA1 8a5883f4cae22ba72496e6c7086a242c0792e605
- SHA512 70c89febda1d2a03f07774b9fb5c98a896e814210d1f3ab35c43de2cf82d87865ddcd014daff294473a6bf7a9dc6b091bfb3fbae92fcb2549267aef18ae927c4
- SSDEEP 24576:mWAZU7t1rtbc/7Ydld1asivY1EyVJIRTxNuEagobz32ORV:mT6ptMs1511+5aRz32O
- TLSH T116659E11A1E441EDD1BBE2B4CA762D07E772784103349AEB03D0996A1F277D54EBFB22
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
860768
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
ole32
CoUninitialize
PropVariantClear
CoInitializeEx
CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance
comctl32
ord410
ord412
InitCommonControlsEx
ord413
shell32
ShellExecuteExW
SHCreateItemFromParsingName
ShellExecuteW
CommandLineToArgvW
SHGetKnownFolderPath
SHCreateDirectoryExW
advapi32
RegQueryValueExW
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueW
ConvertStringSidToSidW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
SetEntriesInAclW
RegGetValueW
RegDeleteKeyValueW
RegSetValueExW
GetTokenInformation
RegOpenKeyExW
RegEnumValueW
RegDeleteValueW
RegCreateKeyExW
RegCloseKey
gdi32
GetTextFaceW
SetBrushOrgEx
TextOutW
GdiFlush
MoveToEx
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontW
CreatePen
CreateSolidBrush
DeleteDC
DeleteObject
Ellipse
EnumFontFamiliesExW
ExcludeClipRect
GetCurrentObject
GetDeviceCaps
GetGlyphOutlineW
GetStockObject
GetTextExtentPoint32W
AddFontResourceExW
RemoveFontResourceExW
IntersectClipRect
LineTo
RectVisible
Rectangle
RestoreDC
SaveDC
SelectClipRgn
SelectObject
SetBkColor
SetBkMode
SetGraphicsMode
StretchBlt
SetStretchBltMode
SetTextColor
GetTextMetricsW
GetWorldTransform
SetWorldTransform
ModifyWorldTransform
CreateDIBSection
GetObjectW
gdiplus
GdipFillPolygon
GdipFillRectangle
GdipGraphicsClear
GdipDrawPath
GdipDrawPolygon
GdipDrawEllipse
GdipDrawRectangle
GdipDrawArc
GdipDrawLines
GdipDrawLine
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipSetInterpolationMode
GdipSetPixelOffsetMode
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipFillEllipse
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipSetPenLineJoin
GdipSetPenEndCap
GdipSetPenStartCap
GdipDeletePen
GdipCreatePen1
GdipGetPathGradientPointCount
GdipSetPathGradientSurroundColorsWithCount
GdipSetPathGradientCenterColor
GdipCreatePathGradientFromPath
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipAddPathEllipse
GdipAddPathBezier
GdipAddPathArc
GdipClosePathFigure
GdipDeletePath
GdipCreatePath
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
GdipFillPie
GdipFillPath
GdipImageRotateFlip
GdipDrawImageRectI
msimg32
AlphaBlend
uxtheme
SetWindowTheme
urlmon
URLDownloadToFileW
wininet
DeleteUrlCacheEntryW
winmm
timeBeginPeriod
comdlg32
GetOpenFileNameW
GetSaveFileNameW
avrt
AvRevertMmThreadCharacteristics
AvSetMmThreadPriority
AvSetMmThreadCharacteristicsW
kernel32
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
LCMapStringW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetFileType
HeapAlloc
HeapFree
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
GetStdHandle
IsProcessorFeaturePresent
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
EncodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetLastError
RtlUnwindEx
RtlLookupFunctionEntry
RtlPcToFileHeader
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
SetUnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetLogicalProcessorInformationEx
GetExitCodeThread
GetCurrentThreadId
WaitForSingleObjectEx
SetStdHandle
GetStringTypeW
LoadLibraryExA
FreeLibrary
FlushFileBuffers
GetConsoleOutputCP
HeapSize
HeapReAlloc
SetEndOfFile
WriteConsoleW
SizeofResource
GetCommandLineW
GetEnvironmentVariableW
CompareFileTime
CreateDirectoryW
CreateFileW
DeleteFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesW
GetFileAttributesExW
GetFileSizeEx
ReadFile
WriteFile
CloseHandle
DuplicateHandle
SetHandleInformation
GetLastError
CreatePipe
QueryPerformanceCounter
QueryPerformanceFrequency
SetEvent
WaitForSingleObject
CreateMutexW
CreateEventW
Sleep
GetProcessTimes
GetCurrentProcess
GetCurrentProcessId
ExitProcess
TerminateProcess
GetExitCodeProcess
GetCurrentThread
SetThreadPriority
ResumeThread
CreateProcessW
OpenProcess
GetLocalTime
GetTickCount64
GetSystemDirectoryW
CreateJobObjectW
AssignProcessToJobObject
TerminateJobObject
SetInformationJobObject
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadLibraryExW
LoadResource
LockResource
FindResourceW
LoadLibraryW
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
LocalFree
QueryFullProcessImageNameW
CopyFileW
MoveFileExW
MultiByteToWideChar
WideCharToMultiByte
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
user32
RegisterClassW
GetClassInfoW
CreateWindowExW
IsWindow
IsChild
DestroyWindow
ShowWindow
AnimateWindow
UpdateLayeredWindow
GetLayeredWindowAttributes
PrintWindow
SetLayeredWindowAttributes
SetWindowPos
IsWindowVisible
IsIconic
GetDlgCtrlID
SetFocus
GetFocus
GetKeyState
GetAsyncKeyState
GetKeyNameTextW
GetLastInputInfo
MapVirtualKeyW
GetCapture
SetCapture
ReleaseCapture
SetTimer
KillTimer
EnableWindow
IsWindowEnabled
GetSystemMetrics
DrawTextExW
UpdateWindow
GetForegroundWindow
SetForegroundWindow
GetDC
GetWindowDC
ReleaseDC
BeginPaint
EndPaint
PostQuitMessage
InvalidateRect
RedrawWindow
SetPropW
GetPropW
RemovePropW
SetWindowTextW
GetWindowTextW
GetClientRect
GetWindowRect
MessageBoxW
SetCursor
GetCursorPos
ClientToScreen
ScreenToClient
WindowFromPoint
FillRect
SetRectEmpty
InflateRect
IntersectRect
UnionRect
OffsetRect
IsRectEmpty
EqualRect
PtInRect
GetWindowLongPtrA
GetWindowLongPtrW
SetWindowLongPtrA
SetWindowLongPtrW
GetParent
FindWindowW
FindWindowExW
EnumWindows
GetClassNameW
GetWindowThreadProcessId
GetWindow
LoadCursorA
LoadCursorW
LoadImageW
SystemParametersInfoW
DefWindowProcW
MonitorFromWindow
GetMonitorInfoW
GetComboBoxInfo
GetAncestor
PostMessageW
SendMessageW
ExitWindowsEx
UnregisterHotKey
RegisterHotKey
DispatchMessageW
TranslateMessage
GetMessageW
TrackMouseEvent
GetUpdateRect
MonitorFromPoint
oleaut32
VariantInit
VariantClear
SysAllocString
wintrust
WTHelperGetProvSignerFromChain
WinVerifyTrust
WTHelperProvDataFromStateData
crypt32
CertGetNameStringW
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
231KB
Virtual Size
231KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
21KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
34KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
152KB
Virtual Size
152KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=161, id=261, version=35215,
count=8, id=259, version=35721,
count=15, id=260, version=35721,
count=35, id=259, version=35215,
count=67, id=261, version=35721,
count=54, id=260, version=35215,
count=37, id=257, version=35215,
count=408, id=1, productName=Unmarked objects,
count=1, id=261, version=36256,
count=1, id=255, version=36256,
count=1, id=258, version=36256,