evilquest | d0722759ccbe2b98448b207f213e0f0202330ad9a06541867f29774ad8352abe | Triage

Sharing

General

Target

2024-02-05_752290a2936efb2675d19e3a85b94a5f_adload_evilquest
Size

389KB
Sample

240205-ps4zyahhhl
MD5

752290a2936efb2675d19e3a85b94a5f
SHA1

2290afaab37625eaac34a721a0f29c460cf09c57
SHA256

d0722759ccbe2b98448b207f213e0f0202330ad9a06541867f29774ad8352abe
SHA512

7e11dd88b31287192fc8deeaf139e583de0ae4983f712dacd9a96b6eb7b66e86acab431937a15f6650cba041c24ba22c1fcc344e3c6b55b0125081dd9d24cc2d
SSDEEP

6144:5SeOQdaZNxtk8cqhSxvHY9YnjCIQwa6QXbYRPuCnfL08Y/ok5XM7mM6QS7MkBh:5LOQdaDxq8cqavHY+WIDaJXcl/nfg801

Score

10^/10

evilquest backdoor execution macos persistence

Malware Config

Targets

- Target
  
  2024-02-05_752290a2936efb2675d19e3a85b94a5f_adload_evilquest
- Size
  
  389KB
- MD5
  
  752290a2936efb2675d19e3a85b94a5f
- SHA1
  
  2290afaab37625eaac34a721a0f29c460cf09c57
- SHA256
  
  d0722759ccbe2b98448b207f213e0f0202330ad9a06541867f29774ad8352abe
- SHA512
  
  7e11dd88b31287192fc8deeaf139e583de0ae4983f712dacd9a96b6eb7b66e86acab431937a15f6650cba041c24ba22c1fcc344e3c6b55b0125081dd9d24cc2d
- SSDEEP
  
  6144:5SeOQdaZNxtk8cqhSxvHY9YnjCIQwa6QXbYRPuCnfL08Y/ok5XM7mM6QS7MkBh:5LOQdaDxq8cqavHY+WIDaJXcl/nfg801
Score

10^/10

evilquest backdoor execution persistence
- EvilQuest
  EvilQuest family.
  backdoor evilquest
- EvilQuest payload
- Launch Agent
  persistence
- Launch Daemon
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

AppleScript

System Services

Launchctl

Persistence

Create or Modify System Process

Launch Agent

Launch Daemon

Privilege Escalation

Create or Modify System Process

Launch Agent

Launch Daemon

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evilquestbackdoorexecutionpersistence