evilquest | 3d768fd059c7983419dc8adec579214f5163aaaad6335d46fb16cbe53f087206 | Triage

Submit
Reports

Overview

overview

Static

static

0a8f51ca92...kes118

macos-10.15-amd64

Sharing

General

Target

0a8f51ca92f1bac5304a4c351dd834c4_JaffaCakes118
Size

168KB
Sample

240430-2a9tpahc7w
MD5

0a8f51ca92f1bac5304a4c351dd834c4
SHA1

1b5ac3294fb6d1f28aba9f9a353664f8ef787531
SHA256

3d768fd059c7983419dc8adec579214f5163aaaad6335d46fb16cbe53f087206
SHA512

1f2b7abc2c25a67de49ca62a86161821bc0e73f93bb111c53b00c8840b0a72e482504831aeefbc0297a53516463e0526253359095178aa710f82460889300fdb
SSDEEP

3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq99Qo0:5SeOQdaZNxtk8cqhSxvHY9

Score

10^/10

evilquest backdoor execution macos persistence

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

0a8f51ca92f1bac5304a4c351dd834c4_JaffaCakes118

Resource

macos-20240410-en

evilquest backdoor execution persistence

macos-10.15-amd64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  0a8f51ca92f1bac5304a4c351dd834c4_JaffaCakes118
- Size
  
  168KB
- MD5
  
  0a8f51ca92f1bac5304a4c351dd834c4
- SHA1
  
  1b5ac3294fb6d1f28aba9f9a353664f8ef787531
- SHA256
  
  3d768fd059c7983419dc8adec579214f5163aaaad6335d46fb16cbe53f087206
- SHA512
  
  1f2b7abc2c25a67de49ca62a86161821bc0e73f93bb111c53b00c8840b0a72e482504831aeefbc0297a53516463e0526253359095178aa710f82460889300fdb
- SSDEEP
  
  3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq99Qo0:5SeOQdaZNxtk8cqhSxvHY9
Score

10^/10

evilquest backdoor execution persistence
- EvilQuest
  EvilQuest family.
  backdoor evilquest
- EvilQuest payload
- Launch Agent
  Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.
  persistence
- Launch Daemon
  Adversaries may create or modify Launch Daemons to execute malicious payloads as part of persistence. Launch Daemons are plist files used to interact with Launchd, the service management framework used by macOS.
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

AppleScript

System Services

Launchctl

Persistence

Create or Modify System Process

Launch Agent

Launch Daemon

Privilege Escalation

Create or Modify System Process

Launch Agent

Launch Daemon

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evilquestbackdoorexecutionpersistence

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.