evilquest | d7cfceec26756f14de6c4d01337597ab33ea130bb9269652d553e5d29efdc486 | Triage

Sharing

General

Target

2024-02-05_51ad881b6ec43b1f95039b6b8e016ab6_adload_evilquest
Size

177KB
Sample

240205-1cfsysafdq
MD5

51ad881b6ec43b1f95039b6b8e016ab6
SHA1

a658537b911452835ce94c360542f919990976d3
SHA256

d7cfceec26756f14de6c4d01337597ab33ea130bb9269652d553e5d29efdc486
SHA512

0f94b61cdfcf2424700d96e41552ac17fec55ce251ebd1e6134081803ce4b317f6f383389e20fa78f71f65cfe5cee6e76027625471c85d688f3984e21032da34
SSDEEP

3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9F0t:5SeOQdaZNxtk8cqhSxvHY9a

Score

10^/10

evilquest execution macos persistence

Malware Config

Targets

- Target
  
  2024-02-05_51ad881b6ec43b1f95039b6b8e016ab6_adload_evilquest
- Size
  
  177KB
- MD5
  
  51ad881b6ec43b1f95039b6b8e016ab6
- SHA1
  
  a658537b911452835ce94c360542f919990976d3
- SHA256
  
  d7cfceec26756f14de6c4d01337597ab33ea130bb9269652d553e5d29efdc486
- SHA512
  
  0f94b61cdfcf2424700d96e41552ac17fec55ce251ebd1e6134081803ce4b317f6f383389e20fa78f71f65cfe5cee6e76027625471c85d688f3984e21032da34
- SSDEEP
  
  3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9F0t:5SeOQdaZNxtk8cqhSxvHY9a
Score

5^/10

execution persistence
- Launch Agent
  persistence
- Launch Daemon
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

AppleScript

System Services

Launchctl

Persistence

Create or Modify System Process

Launch Agent

Launch Daemon

Privilege Escalation

Create or Modify System Process

Launch Agent

Launch Daemon

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

executionpersistence