evilquest | 0a828d6ff2ce81c638b64bb8fc4b08a49f7c50a211f5a04b8cc1cf6cde92b12b | Triage

Submit
Reports

Overview

overview

Static

static

089a398c0d...kes118

macos-10.15-amd64

Sharing

General

Target

089a398c0d5b6f2d30c998d1c22b356b_JaffaCakes118
Size

168KB
Sample

240430-as4lvaeh39
MD5

089a398c0d5b6f2d30c998d1c22b356b
SHA1

6993aa9f257a77af5258f0f7271baa7d1407e7b5
SHA256

0a828d6ff2ce81c638b64bb8fc4b08a49f7c50a211f5a04b8cc1cf6cde92b12b
SHA512

0979ad7549e202205c25355a71033e14ae828f692f67b4d3f2bf59c900790c33d22c1f911989bf479e5b718f8261867885a385515972dc7a5ab49b254fb5029d
SSDEEP

3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9yf0:5SeOQdaZNxtk8cqhSxvHY9

Score

10^/10

evilquest backdoor evasion macos

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

089a398c0d5b6f2d30c998d1c22b356b_JaffaCakes118

Resource

macos-20240410-en

evilquest backdoor evasion

macos-10.15-amd64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  089a398c0d5b6f2d30c998d1c22b356b_JaffaCakes118
- Size
  
  168KB
- MD5
  
  089a398c0d5b6f2d30c998d1c22b356b
- SHA1
  
  6993aa9f257a77af5258f0f7271baa7d1407e7b5
- SHA256
  
  0a828d6ff2ce81c638b64bb8fc4b08a49f7c50a211f5a04b8cc1cf6cde92b12b
- SHA512
  
  0979ad7549e202205c25355a71033e14ae828f692f67b4d3f2bf59c900790c33d22c1f911989bf479e5b718f8261867885a385515972dc7a5ab49b254fb5029d
- SSDEEP
  
  3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9yf0:5SeOQdaZNxtk8cqhSxvHY9
Score

10^/10

evilquest backdoor evasion
- EvilQuest
  EvilQuest family.
  backdoor evilquest
- EvilQuest payload
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Resource Forking

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evilquestbackdoorevasion

© 2018-2024

Terms | Privacy