Overview

overview

10

Static

static

10

039f64e06d...kes118

macos-10.15-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    039f64e06d1616b39906b3f9553e505c_JaffaCakes118

  • Size

    337KB

  • Sample

    240427-zxekysgg8y

  • MD5

    039f64e06d1616b39906b3f9553e505c

  • SHA1

    3c4d56cea29e7b50c5031112655f2bae2171d16b

  • SHA256

    329bb3786014dfd6f268bcc6fdfe5efd7a61601262dcc18414a87718555f881c

  • SHA512

    4da6c98aab772ac1923dbcf1c2818e02b48d644e3e65cf4cbdb46da8e1ed7e137e5fefa06f2690e7319eab525fdbda7b7aa47c9eaa734238964db5acf17bdaf5

  • SSDEEP

    6144:5SeOQdaZNxtk8cqhSxvHY9ShASeOQdaZNxtk8cqhSxvHY9:5LOQdaDxq8cqavHYhLOQdaDxq8cqavHY

Score
10/10
evilquestbackdoorexecutionmacospersistence

Malware Config

Targets

    • Target

      039f64e06d1616b39906b3f9553e505c_JaffaCakes118

    • Size

      337KB

    • MD5

      039f64e06d1616b39906b3f9553e505c

    • SHA1

      3c4d56cea29e7b50c5031112655f2bae2171d16b

    • SHA256

      329bb3786014dfd6f268bcc6fdfe5efd7a61601262dcc18414a87718555f881c

    • SHA512

      4da6c98aab772ac1923dbcf1c2818e02b48d644e3e65cf4cbdb46da8e1ed7e137e5fefa06f2690e7319eab525fdbda7b7aa47c9eaa734238964db5acf17bdaf5

    • SSDEEP

      6144:5SeOQdaZNxtk8cqhSxvHY9ShASeOQdaZNxtk8cqhSxvHY9:5LOQdaDxq8cqavHYhLOQdaDxq8cqavHY

    Score
    10/10
    evilquestbackdoorexecutionpersistence

    • EvilQuest

      EvilQuest family.

      backdoorevilquest

    • EvilQuest payload

    • Launch Agent

      Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.

      persistence

    • Launch Daemon

      Adversaries may create or modify Launch Daemons to execute malicious payloads as part of persistence. Launch Daemons are plist files used to interact with Launchd, the service management framework used by macOS.

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks