evilquest | 83e627d9733e2fee8e731c0cea1b03243cc57497316128fcbeb19722334fa3b5 | Triage

Submit
Reports

Overview

overview

Static

static

04d03a0372...kes118

macos-10.15-amd64

Sharing

General

Target

04d03a037290f88a44ef97de0717c985_JaffaCakes118
Size

168KB
Sample

240428-krvmnacc3y
MD5

04d03a037290f88a44ef97de0717c985
SHA1

aa4296e0f9c133380481e9540f119a3d53131c78
SHA256

83e627d9733e2fee8e731c0cea1b03243cc57497316128fcbeb19722334fa3b5
SHA512

4a536fd3a86dd3c9c2b1509f7347ffa11df60fbda02038f024f1339c4f93626c85c06f6992e75d473c162adbe19fe86a6dd35538022811cd09fe56bac16092cb
SSDEEP

3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9g0:5SeOQdaZNxtk8cqhSxvHY9

Score

10^/10

evilquest backdoor execution macos persistence

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

04d03a037290f88a44ef97de0717c985_JaffaCakes118

Resource

macos-20240410-en

evilquest backdoor execution persistence

macos-10.15-amd64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  04d03a037290f88a44ef97de0717c985_JaffaCakes118
- Size
  
  168KB
- MD5
  
  04d03a037290f88a44ef97de0717c985
- SHA1
  
  aa4296e0f9c133380481e9540f119a3d53131c78
- SHA256
  
  83e627d9733e2fee8e731c0cea1b03243cc57497316128fcbeb19722334fa3b5
- SHA512
  
  4a536fd3a86dd3c9c2b1509f7347ffa11df60fbda02038f024f1339c4f93626c85c06f6992e75d473c162adbe19fe86a6dd35538022811cd09fe56bac16092cb
- SSDEEP
  
  3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9g0:5SeOQdaZNxtk8cqhSxvHY9
Score

10^/10

evilquest backdoor execution persistence
- EvilQuest
  EvilQuest family.
  backdoor evilquest
- EvilQuest payload
- Launch Agent
  Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

AppleScript

System Services

Launchctl

Persistence

Create or Modify System Process

Launch Agent

Privilege Escalation

Create or Modify System Process

Launch Agent

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evilquestbackdoorexecutionpersistence

© 2018-2024

Terms | Privacy