Overview

overview

10

Static

static

10

2024-04-12...lquest

macos-10.15-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-12_4bed399926a462b879ba40ef06d95699_adload_evilquest

  • Size

    177KB

  • Sample

    240412-3gp9asba7t

  • MD5

    4bed399926a462b879ba40ef06d95699

  • SHA1

    d0cfdf9551487a4de2cbf48db4667acf26038a12

  • SHA256

    19556126af28bbd7744b61ca28f95241bbdec5e07932f60aee55faf8feb6e395

  • SHA512

    976ff74f22c20bd37fb1bf6d2866a63186b5a7a31401cabe4b9401a7577d863187fd9b4f49dce6068f14b88408757d9fc93a155ede1e2471047aed43e4d9d051

  • SSDEEP

    3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9WX0t:5SeOQdaZNxtk8cqhSxvHY9b

Score
10/10
evilquestbackdoorevasionexecutionmacospersistence

Malware Config

Targets

    • Target

      2024-04-12_4bed399926a462b879ba40ef06d95699_adload_evilquest

    • Size

      177KB

    • MD5

      4bed399926a462b879ba40ef06d95699

    • SHA1

      d0cfdf9551487a4de2cbf48db4667acf26038a12

    • SHA256

      19556126af28bbd7744b61ca28f95241bbdec5e07932f60aee55faf8feb6e395

    • SHA512

      976ff74f22c20bd37fb1bf6d2866a63186b5a7a31401cabe4b9401a7577d863187fd9b4f49dce6068f14b88408757d9fc93a155ede1e2471047aed43e4d9d051

    • SSDEEP

      3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9WX0t:5SeOQdaZNxtk8cqhSxvHY9b

    Score
    10/10
    evilquestbackdoorevasionexecutionpersistence

    • EvilQuest

      EvilQuest family.

      backdoorevilquest

    • EvilQuest payload

    • Launch Agent

      Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.

      persistence

    • Launch Daemon

      Adversaries may create or modify Launch Daemons to execute malicious payloads as part of persistence. Launch Daemons are plist files used to interact with Launchd, the service management framework used by macOS.

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks