Overview

overview

10

Static

static

10

2024-04-12...lquest

macos-10.15-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-12_a6b63d09b247dabab53bb3e43a2b5f87_adload_evilquest

  • Size

    337KB

  • Sample

    240412-3kkszsgc97

  • MD5

    a6b63d09b247dabab53bb3e43a2b5f87

  • SHA1

    77005cb57642e15ed782775a6d2b6dcc435b48c6

  • SHA256

    d001c33ab7391e2c99904661df1a7f98388fe67cde162c7654a5d3dae892318c

  • SHA512

    447fda51aae25dd6fede9dfcc3cd6c88b8a4ca753bf87a014dabbd9dbad3c29582922e2738a611ee006f5565bbcd99892bb5d2228075501f16eb73a08cf2a5ce

  • SSDEEP

    6144:5SeOQdaZNxtk8cqhSxvHY9dSeOQdaZNxtk8cqhSxvHY9:5LOQdaDxq8cqavHY3LOQdaDxq8cqavHY

Score
10/10
evilquestbackdoorevasionexecutionmacospersistence

Malware Config

Targets

    • Target

      2024-04-12_a6b63d09b247dabab53bb3e43a2b5f87_adload_evilquest

    • Size

      337KB

    • MD5

      a6b63d09b247dabab53bb3e43a2b5f87

    • SHA1

      77005cb57642e15ed782775a6d2b6dcc435b48c6

    • SHA256

      d001c33ab7391e2c99904661df1a7f98388fe67cde162c7654a5d3dae892318c

    • SHA512

      447fda51aae25dd6fede9dfcc3cd6c88b8a4ca753bf87a014dabbd9dbad3c29582922e2738a611ee006f5565bbcd99892bb5d2228075501f16eb73a08cf2a5ce

    • SSDEEP

      6144:5SeOQdaZNxtk8cqhSxvHY9dSeOQdaZNxtk8cqhSxvHY9:5LOQdaDxq8cqavHY3LOQdaDxq8cqavHY

    Score
    10/10
    evilquestbackdoorevasionexecutionpersistence

    • EvilQuest

      EvilQuest family.

      backdoorevilquest

    • EvilQuest payload

    • Launch Agent

      Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.

      persistence

    • Launch Daemon

      Adversaries may create or modify Launch Daemons to execute malicious payloads as part of persistence. Launch Daemons are plist files used to interact with Launchd, the service management framework used by macOS.

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks