Overview

overview

10

Static

static

10

07bee436d1...kes118

macos-10.15-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    07bee436d1680dfe9cee9186661f564d_JaffaCakes118

  • Size

    168KB

  • Sample

    240429-qgx8pabd39

  • MD5

    07bee436d1680dfe9cee9186661f564d

  • SHA1

    86b5e95c66ae1450826b35c19d359e3554edf558

  • SHA256

    39966df62b9a3df08f2d5912b4146c5a2c09a9ed44c0f50451993a20d1e883f3

  • SHA512

    bbff43d7134a23473d83b60d92f704e0571ce227fba5a590864d33c5cdcc55c045516c0571b05aa73bd217f97c788c3316f732fd6e8b06e7339f060bb57bf330

  • SSDEEP

    3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9E0:5SeOQdaZNxtk8cqhSxvHY9

Score
10/10
evilquestbackdoorevasionexecutionmacospersistence

Malware Config

Targets

    • Target

      07bee436d1680dfe9cee9186661f564d_JaffaCakes118

    • Size

      168KB

    • MD5

      07bee436d1680dfe9cee9186661f564d

    • SHA1

      86b5e95c66ae1450826b35c19d359e3554edf558

    • SHA256

      39966df62b9a3df08f2d5912b4146c5a2c09a9ed44c0f50451993a20d1e883f3

    • SHA512

      bbff43d7134a23473d83b60d92f704e0571ce227fba5a590864d33c5cdcc55c045516c0571b05aa73bd217f97c788c3316f732fd6e8b06e7339f060bb57bf330

    • SSDEEP

      3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9E0:5SeOQdaZNxtk8cqhSxvHY9

    Score
    10/10
    evilquestbackdoorevasionexecutionpersistence

    • EvilQuest

      EvilQuest family.

      backdoorevilquest

    • EvilQuest payload

    • Launch Agent

      Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks