evilquest | 0bcba0b94b8cfb286626b2778d12c6204f93cff8de1ccd5be313e45321b63db3 | Triage

Sharing

General

Target

034c094d650aa051d62d1f5deb0c9c15_JaffaCakes118
Size

168KB
Sample

240427-p5a8dsah53
MD5

034c094d650aa051d62d1f5deb0c9c15
SHA1

7082d304a0d143d3a6e39a8699684a11c52169c9
SHA256

0bcba0b94b8cfb286626b2778d12c6204f93cff8de1ccd5be313e45321b63db3
SHA512

486cc4e9d8083421b02ec38735a306dfdaf0c321770b09583c2c4244e01b6917e3ef8367667c5ddbf2afc5fcd8b85acbe65203e123ee61ad97b5995dd88e1f44
SSDEEP

3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9D0:5SeOQdaZNxtk8cqhSxvHY9

Score

10^/10

evilquest execution macos persistence

Malware Config

Targets

- Target
  
  034c094d650aa051d62d1f5deb0c9c15_JaffaCakes118
- Size
  
  168KB
- MD5
  
  034c094d650aa051d62d1f5deb0c9c15
- SHA1
  
  7082d304a0d143d3a6e39a8699684a11c52169c9
- SHA256
  
  0bcba0b94b8cfb286626b2778d12c6204f93cff8de1ccd5be313e45321b63db3
- SHA512
  
  486cc4e9d8083421b02ec38735a306dfdaf0c321770b09583c2c4244e01b6917e3ef8367667c5ddbf2afc5fcd8b85acbe65203e123ee61ad97b5995dd88e1f44
- SSDEEP
  
  3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9D0:5SeOQdaZNxtk8cqhSxvHY9
Score

5^/10

execution persistence
- Launch Agent
  Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

AppleScript

System Services

Launchctl

Persistence

Create or Modify System Process

Launch Agent

Privilege Escalation

Create or Modify System Process

Launch Agent

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

executionpersistence