evilquest | de5f2822ee4ac2a1b2cd8a88d4083321f72e42f44959d751d5f00f52aba42188 | Triage

Sharing

General

Target

2024-02-15_7846daca8966e9df74647c001103be85_adload_evilquest
Size

9.0MB
Sample

240215-feaphagh2z
MD5

7846daca8966e9df74647c001103be85
SHA1

5a65631fd4ec3a2ec06c041fb41dc14cf5affcde
SHA256

de5f2822ee4ac2a1b2cd8a88d4083321f72e42f44959d751d5f00f52aba42188
SHA512

c704572412ff7eae4cd1b76d333f47779595b0440b34fa51be8ae1971698a61b978e79c0c98e09a708e10c1ddf2a08fccd1e4d241fad91fe6b106b9f002a262c
SSDEEP

49152:U33dQ333dQ333dQ333dQ3C33d/33dq33dQ333dQ333V33F33dQ333dQ33i33dQ33:o

Score

10^/10

evilquest backdoor evasion execution macos persistence

Malware Config

Targets

- Target
  
  2024-02-15_7846daca8966e9df74647c001103be85_adload_evilquest
- Size
  
  9.0MB
- MD5
  
  7846daca8966e9df74647c001103be85
- SHA1
  
  5a65631fd4ec3a2ec06c041fb41dc14cf5affcde
- SHA256
  
  de5f2822ee4ac2a1b2cd8a88d4083321f72e42f44959d751d5f00f52aba42188
- SHA512
  
  c704572412ff7eae4cd1b76d333f47779595b0440b34fa51be8ae1971698a61b978e79c0c98e09a708e10c1ddf2a08fccd1e4d241fad91fe6b106b9f002a262c
- SSDEEP
  
  49152:U33dQ333dQ333dQ333dQ3C33d/33dq33dQ333dQ333V33F33dQ333dQ33i33dQ33:o
Score

10^/10

evilquest backdoor evasion execution persistence
- EvilQuest
  EvilQuest family.
  backdoor evilquest
- EvilQuest payload
- Launch Daemon
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

AppleScript

System Services

Launchctl

Persistence

Create or Modify System Process

Launch Daemon

Privilege Escalation

Create or Modify System Process

Launch Daemon

Defense Evasion

Hide Artifacts

Resource Forking

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evilquestbackdoorevasionexecutionpersistence