evilquest | 0147be463b38338fb60ae4709a39d267dcd90f480596d7dfa29d87e63b3d3c5c | Triage

Submit
Reports

Overview

overview

Static

static

0874e31508...kes118

macos-10.15-amd64

Sharing

General

Target

0874e3150817385b7d554f3505d864c3_JaffaCakes118
Size

168KB
Sample

240429-25k4tadf91
MD5

0874e3150817385b7d554f3505d864c3
SHA1

e7afd8637be2346d3bf4e5248b908fea5bdbf925
SHA256

0147be463b38338fb60ae4709a39d267dcd90f480596d7dfa29d87e63b3d3c5c
SHA512

aac745103f0f0230ea3d4e10cf2a1573ea6bd364cc4e4f43f3070e71d8dbce009eb5ef09c573a3c1d635441c3e136cd95d53eff39b38ea545dd849901200bc6b
SSDEEP

3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9r9d0:5SeOQdaZNxtk8cqhSxvHY9r9

Score

10^/10

evilquest backdoor evasion execution macos persistence

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

0874e3150817385b7d554f3505d864c3_JaffaCakes118

Resource

macos-20240410-en

evilquest backdoor evasion execution persistence

macos-10.15-amd64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  0874e3150817385b7d554f3505d864c3_JaffaCakes118
- Size
  
  168KB
- MD5
  
  0874e3150817385b7d554f3505d864c3
- SHA1
  
  e7afd8637be2346d3bf4e5248b908fea5bdbf925
- SHA256
  
  0147be463b38338fb60ae4709a39d267dcd90f480596d7dfa29d87e63b3d3c5c
- SHA512
  
  aac745103f0f0230ea3d4e10cf2a1573ea6bd364cc4e4f43f3070e71d8dbce009eb5ef09c573a3c1d635441c3e136cd95d53eff39b38ea545dd849901200bc6b
- SSDEEP
  
  3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9r9d0:5SeOQdaZNxtk8cqhSxvHY9r9
Score

10^/10

evilquest backdoor evasion execution persistence
- EvilQuest
  EvilQuest family.
  backdoor evilquest
- EvilQuest payload
- Launch Agent
  Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

AppleScript

System Services

Launchctl

Persistence

Create or Modify System Process

Launch Agent

Privilege Escalation

Create or Modify System Process

Launch Agent

Defense Evasion

Hide Artifacts

Resource Forking

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evilquestbackdoorevasionexecutionpersistence

© 2018-2024

Terms | Privacy