evilquest | 0c3acb4842905c92d03bb169db53cc9a2e8022eae4ae918d04f006dd9bc80d14 | Triage

Submit
Reports

Overview

overview

Static

static

02b19345e7...kes118

macos-10.15-amd64

Sharing

General

Target

02b19345e7658857a755861547b40123_JaffaCakes118
Size

168KB
Sample

240427-hzceyade72
MD5

02b19345e7658857a755861547b40123
SHA1

c73331670d3e957a8cb0afc876668d74c5677e11
SHA256

0c3acb4842905c92d03bb169db53cc9a2e8022eae4ae918d04f006dd9bc80d14
SHA512

68827e195a53b47a71650f15cebcd5a6ec053a0d1601211e67b2bffde55f7fa52fc19cee3f212f06a158a0f117c1977182cbd48f53c526c0ccca9a96885ecfcb
SSDEEP

3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9O0:5SeOQdaZNxtk8cqhSxvHY9

Score

10^/10

evilquest backdoor evasion execution macos persistence

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

02b19345e7658857a755861547b40123_JaffaCakes118

Resource

macos-20240410-en

evilquest backdoor evasion execution persistence

macos-10.15-amd64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  02b19345e7658857a755861547b40123_JaffaCakes118
- Size
  
  168KB
- MD5
  
  02b19345e7658857a755861547b40123
- SHA1
  
  c73331670d3e957a8cb0afc876668d74c5677e11
- SHA256
  
  0c3acb4842905c92d03bb169db53cc9a2e8022eae4ae918d04f006dd9bc80d14
- SHA512
  
  68827e195a53b47a71650f15cebcd5a6ec053a0d1601211e67b2bffde55f7fa52fc19cee3f212f06a158a0f117c1977182cbd48f53c526c0ccca9a96885ecfcb
- SSDEEP
  
  3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9O0:5SeOQdaZNxtk8cqhSxvHY9
Score

10^/10

evilquest backdoor evasion execution persistence
- EvilQuest
  EvilQuest family.
  backdoor evilquest
- EvilQuest payload
- Launch Agent
  Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

AppleScript

System Services

Launchctl

Persistence

Create or Modify System Process

Launch Agent

Privilege Escalation

Create or Modify System Process

Launch Agent

Defense Evasion

Hide Artifacts

Resource Forking

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evilquestbackdoorevasionexecutionpersistence

© 2018-2024

Terms | Privacy