Overview

overview

10

Static

static

10

014562ea7d...kes118

macos-10.15-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    014562ea7d1a33c613065cbdd99d0d03_JaffaCakes118

  • Size

    168KB

  • Sample

    240426-vwahdsgd45

  • MD5

    014562ea7d1a33c613065cbdd99d0d03

  • SHA1

    4753b3894cc22c40907585b0b7a03e0a04439cce

  • SHA256

    5385de0af0b89d685ccaeaa3977ae3d43b6508a6120184d71be17af8b39fee07

  • SHA512

    d728f56fcee613c4c1d2040048384e53019e88d31ab0953477f8cd966b08fc849c77adb0fead11877c466e465a2a4eee25074a065e971b3472e50c8cd5cb4752

  • SSDEEP

    3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9o0:5SeOQdaZNxtk8cqhSxvHY9

Score
10/10
evilquestbackdoorexecutionmacospersistence

Malware Config

Targets

    • Target

      014562ea7d1a33c613065cbdd99d0d03_JaffaCakes118

    • Size

      168KB

    • MD5

      014562ea7d1a33c613065cbdd99d0d03

    • SHA1

      4753b3894cc22c40907585b0b7a03e0a04439cce

    • SHA256

      5385de0af0b89d685ccaeaa3977ae3d43b6508a6120184d71be17af8b39fee07

    • SHA512

      d728f56fcee613c4c1d2040048384e53019e88d31ab0953477f8cd966b08fc849c77adb0fead11877c466e465a2a4eee25074a065e971b3472e50c8cd5cb4752

    • SSDEEP

      3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9o0:5SeOQdaZNxtk8cqhSxvHY9

    Score
    10/10
    evilquestbackdoorexecutionpersistence

    • EvilQuest

      EvilQuest family.

      backdoorevilquest

    • EvilQuest payload

    • Launch Agent

      Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.

      persistence
    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Command and Scripting Interpreter

1
T1059

AppleScript

1
T1059.002

System Services

1
T1569

Launchctl

1
T1569.001

Persistence

Create or Modify System Process

1
T1543

Launch Agent

1
T1543.001

Privilege Escalation

Create or Modify System Process

1
T1543

Launch Agent

1
T1543.001

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks