evilquest | 89de80f56854848498d327699ebdf5778ef87e353b342b3f443d5aa8d9e0ae33 | Triage

Sharing

General

Target

2024-06-06_e69f2c7f3fb666740e328f2708bf3ae0_adload_evilquest_rekoobe
Size

168KB
Sample

240606-fd7ylshg68
MD5

e69f2c7f3fb666740e328f2708bf3ae0
SHA1

41ee5f33c64c458bc0183c3019aea7aaf1833239
SHA256

89de80f56854848498d327699ebdf5778ef87e353b342b3f443d5aa8d9e0ae33
SHA512

ba79c47571a31b7df383b9b9e4805a5ff9323d60a84b81120b2a240a8076cc5ee4b9bc5efd720f0acc4a5541eff8390638b382f4631f24a8fbc7c4ed28dbe69d
SSDEEP

3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq93ARe0:5SeOQdaZNxtk8cqhSxvHY9

Score

10^/10

evilquest evasion execution macos persistence

Malware Config

Targets

- Target
  
  2024-06-06_e69f2c7f3fb666740e328f2708bf3ae0_adload_evilquest_rekoobe
- Size
  
  168KB
- MD5
  
  e69f2c7f3fb666740e328f2708bf3ae0
- SHA1
  
  41ee5f33c64c458bc0183c3019aea7aaf1833239
- SHA256
  
  89de80f56854848498d327699ebdf5778ef87e353b342b3f443d5aa8d9e0ae33
- SHA512
  
  ba79c47571a31b7df383b9b9e4805a5ff9323d60a84b81120b2a240a8076cc5ee4b9bc5efd720f0acc4a5541eff8390638b382f4631f24a8fbc7c4ed28dbe69d
- SSDEEP
  
  3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq93ARe0:5SeOQdaZNxtk8cqhSxvHY9
Score

5^/10

evasion execution persistence
- Launch Agent
  Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

AppleScript

System Services

Launchctl

Persistence

Create or Modify System Process

Launch Agent

Privilege Escalation

Create or Modify System Process

Launch Agent

Defense Evasion

Hide Artifacts

Resource Forking

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionexecutionpersistence