evilquest | bce3b751920caaae8f5ea88535156f230daf35c02c87ef57405f648441c32664 | Triage

Sharing

General

Target

2024-03-04_42e95c6e8b2c7dbd21eddf77be752c49_adload_evilquest
Size

305KB
Sample

240304-pll6jsab5z
MD5

42e95c6e8b2c7dbd21eddf77be752c49
SHA1

6e7e2430b1d2922d65062e9423b6e9ef5c322573
SHA256

bce3b751920caaae8f5ea88535156f230daf35c02c87ef57405f648441c32664
SHA512

018e0581d006ae09e888afb5d386a858e0fe46cae6c2db81d61a697b850bc7fe268890833b7c1797ef63c929e03e7e6dd749b6eff954f2391203a56a28bf1110
SSDEEP

6144:5SeOQdaZNxtk8cqhSxvHY9u755Sx8GpdlXmVkO:5LOQdaDxq8cqavHYk75kxkj

Score

10^/10

evilquest execution macos persistence

Malware Config

Targets

- Target
  
  2024-03-04_42e95c6e8b2c7dbd21eddf77be752c49_adload_evilquest
- Size
  
  305KB
- MD5
  
  42e95c6e8b2c7dbd21eddf77be752c49
- SHA1
  
  6e7e2430b1d2922d65062e9423b6e9ef5c322573
- SHA256
  
  bce3b751920caaae8f5ea88535156f230daf35c02c87ef57405f648441c32664
- SHA512
  
  018e0581d006ae09e888afb5d386a858e0fe46cae6c2db81d61a697b850bc7fe268890833b7c1797ef63c929e03e7e6dd749b6eff954f2391203a56a28bf1110
- SSDEEP
  
  6144:5SeOQdaZNxtk8cqhSxvHY9u755Sx8GpdlXmVkO:5LOQdaDxq8cqavHYk75kxkj
Score

5^/10

execution persistence
- Launch Agent
  persistence
- Launch Daemon
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

AppleScript

System Services

Launchctl

Persistence

Create or Modify System Process

Launch Agent

Launch Daemon

Privilege Escalation

Create or Modify System Process

Launch Agent

Launch Daemon

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

executionpersistence