Overview

overview

10

Static

static

10

006f61a5ed...kes118

macos-10.15-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    006f61a5ed52ec0d0b0142f972115f2d_JaffaCakes118

  • Size

    168KB

  • Sample

    240426-k2rzhsdc25

  • MD5

    006f61a5ed52ec0d0b0142f972115f2d

  • SHA1

    843aa34fde08df325eee931bfc660a2bfb423766

  • SHA256

    618d649a23f190e3426f738fa60feed48dd81549d913f173fcd4ff5c0f09fb5a

  • SHA512

    c3c4ee43707e6fd96f5f762c14cbaac5fcc6663c866fb5ed51e86046f882b0b31ca00c004a512c8228dcbb4bcecb3f6e70fce87a0012dcaec676b49cdbeb8c90

  • SSDEEP

    3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq95QD0:5SeOQdaZNxtk8cqhSxvHY95

Score
10/10
evilquestbackdoorexecutionmacospersistence

Malware Config

Targets

    • Target

      006f61a5ed52ec0d0b0142f972115f2d_JaffaCakes118

    • Size

      168KB

    • MD5

      006f61a5ed52ec0d0b0142f972115f2d

    • SHA1

      843aa34fde08df325eee931bfc660a2bfb423766

    • SHA256

      618d649a23f190e3426f738fa60feed48dd81549d913f173fcd4ff5c0f09fb5a

    • SHA512

      c3c4ee43707e6fd96f5f762c14cbaac5fcc6663c866fb5ed51e86046f882b0b31ca00c004a512c8228dcbb4bcecb3f6e70fce87a0012dcaec676b49cdbeb8c90

    • SSDEEP

      3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq95QD0:5SeOQdaZNxtk8cqhSxvHY95

    Score
    10/10
    evilquestbackdoorexecutionpersistence

    • EvilQuest

      EvilQuest family.

      backdoorevilquest

    • EvilQuest payload

    • Launch Agent

      Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.

      persistence
    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Command and Scripting Interpreter

1
T1059

AppleScript

1
T1059.002

System Services

1
T1569

Launchctl

1
T1569.001

Persistence

Create or Modify System Process

1
T1543

Launch Agent

1
T1543.001

Privilege Escalation

Create or Modify System Process

1
T1543

Launch Agent

1
T1543.001

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks