KOCTOPUS (3e13d07d-d9e1-4456-bec3-b2375e404753)
KOCTOPUS's batch variant is loader used by LazyScripter since 2018 to launch Octopus and Koadic and, in some cases, QuasarRAT. KOCTOPUS also has a VBA variant that has the same functionality as the batch version.[MalwareBytes LazyScripter Feb 2021]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| KOCTOPUS (3e13d07d-d9e1-4456-bec3-b2375e404753) | Tidal Software | LazyScripter (12279b62-289e-49ee-97cb-c780edd3d091) | Tidal Groups | 1 |