Skip to content

Loader

Octowave Loader

Octowave Loader is a malware loader used to run other families of malware.

Octowave Loader is a Windows loader.

Background

Octowave Loader is a loader employed to execute other malware families. It commonly takes the form of an MSI or Inno Setup installer for a genuine application that has been trojanized with several malicious DLLs, which in turn load and run malicious code frequently hidden inside a WAV file delivered alongside it to the endpoint. In the wild it has been observed arriving via fake software installers and ClickFix / Fake Captcha campaigns. The payloads it drops often include information stealers, NetSupport RAT, and possibly bots such as Danabot.


Source: Malpedia (Fraunhofer FKIE).