S0669 KOCTOPUS

malwareEnterprise

platformsWindows

also known asKOCTOPUS

KOCTOPUS's batch variant is loader used by LazyScripter since 2018 to launch Octopus and Koadic and, in some cases, QuasarRAT. KOCTOPUS also has a VBA variant that has the same functionality as the batch version.

01

techniques used (20)

ATT&CK techniques this enables or maps to.

02

used by groups (1)

Threat groups associated with this.

03

source

Where this definition is published.

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan