Octopus Scanner Malware File Creation

SigmaHQ Detections@sigmaHQ

•updated Jun 4, 2025•1•0•25

This rule detects the creation of specific files associated with the Octopus Scanner malware. The malware creates files named 'Cache134.dat' and 'ExplorerSync.db' within the user's local AppData\Microsoft directory. This activity is indicative of the malware's presence and operation.