evilquest | 58aa653db454059372683dfe9f3277cb9560f2dd2fa1d8875935ca05b827333e | Triage

Submit
Reports

Overview

overview

Static

static

05ea93247c...kes118

macos-10.15-amd64

Sharing

General

Target

05ea93247c310efd580eef8a05f4fbab_JaffaCakes118
Size

168KB
Sample

240428-x9xk7aff3t
MD5

05ea93247c310efd580eef8a05f4fbab
SHA1

b42b316a3c939fc24a1d273fea251511d683fdd8
SHA256

58aa653db454059372683dfe9f3277cb9560f2dd2fa1d8875935ca05b827333e
SHA512

9781ccb4563fa2ba5160afcf65206580475a46b6678b426dd14d7a01c08acb52120e511749d8c5c91569e9333c50038a57339dae353b0b6f61834b2d88a16e1d
SSDEEP

3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq92KI0:5SeOQdaZNxtk8cqhSxvHY92

Score

10^/10

evilquest backdoor execution macos persistence

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

05ea93247c310efd580eef8a05f4fbab_JaffaCakes118

Resource

macos-20240410-en

evilquest backdoor execution persistence

macos-10.15-amd64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  05ea93247c310efd580eef8a05f4fbab_JaffaCakes118
- Size
  
  168KB
- MD5
  
  05ea93247c310efd580eef8a05f4fbab
- SHA1
  
  b42b316a3c939fc24a1d273fea251511d683fdd8
- SHA256
  
  58aa653db454059372683dfe9f3277cb9560f2dd2fa1d8875935ca05b827333e
- SHA512
  
  9781ccb4563fa2ba5160afcf65206580475a46b6678b426dd14d7a01c08acb52120e511749d8c5c91569e9333c50038a57339dae353b0b6f61834b2d88a16e1d
- SSDEEP
  
  3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq92KI0:5SeOQdaZNxtk8cqhSxvHY92
Score

10^/10

evilquest backdoor execution persistence
- EvilQuest
  EvilQuest family.
  backdoor evilquest
- EvilQuest payload
- Launch Agent
  Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

AppleScript

System Services

Launchctl

Persistence

Create or Modify System Process

Launch Agent

Privilege Escalation

Create or Modify System Process

Launch Agent

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evilquestbackdoorexecutionpersistence

© 2018-2024

Terms | Privacy