evilquest | 06fc4b695c222a575737a792792da711232521dd22919d9935ef9dd9881c3bf9 | Triage

Sharing

General

Target

078fe0d14147ceb5e52ca58d9ba909f7_JaffaCakes118
Size

168KB
Sample

240429-nl5r8ahe24
MD5

078fe0d14147ceb5e52ca58d9ba909f7
SHA1

08571e2acd8d6034471aa76f17047b9a5d4b20f9
SHA256

06fc4b695c222a575737a792792da711232521dd22919d9935ef9dd9881c3bf9
SHA512

0cd9a99c7d9e1bc8e67df605037aeb42502e67b7e584619dde8f1b14fa083253c8b5563542bed6aa9a782c2645d33e820b2006ba1b82b7c1b262c988fa3cbfc1
SSDEEP

3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9u0:5SeOQdaZNxtk8cqhSxvHY9

Score

10^/10

evilquest execution macos persistence

Malware Config

Targets

- Target
  
  078fe0d14147ceb5e52ca58d9ba909f7_JaffaCakes118
- Size
  
  168KB
- MD5
  
  078fe0d14147ceb5e52ca58d9ba909f7
- SHA1
  
  08571e2acd8d6034471aa76f17047b9a5d4b20f9
- SHA256
  
  06fc4b695c222a575737a792792da711232521dd22919d9935ef9dd9881c3bf9
- SHA512
  
  0cd9a99c7d9e1bc8e67df605037aeb42502e67b7e584619dde8f1b14fa083253c8b5563542bed6aa9a782c2645d33e820b2006ba1b82b7c1b262c988fa3cbfc1
- SSDEEP
  
  3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9u0:5SeOQdaZNxtk8cqhSxvHY9
Score

5^/10

execution persistence
- Launch Agent
  Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

AppleScript

System Services

Launchctl

Persistence

Create or Modify System Process

Launch Agent

Privilege Escalation

Create or Modify System Process

Launch Agent

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

executionpersistence