evilquest | 00504eabaf94e7357fccd31d5b023120531972da3f0ac5e44d52cd32b6a1ccee | Triage

Sharing

General

Target

2024-08-24_23b356e8fcd1de2e56104c8e8c8874ac_adload_evilquest_rekoobe
Size

168KB
Sample

240824-ezqe1ssgpg
MD5

23b356e8fcd1de2e56104c8e8c8874ac
SHA1

a264b99b0d8a547feffe3c04ce0197154d079d2d
SHA256

00504eabaf94e7357fccd31d5b023120531972da3f0ac5e44d52cd32b6a1ccee
SHA512

1462f10e64492ba69ad163240a5ed9b5f2644596e82b821f80d27baa161649824faca2a558fc6cb7eb57ecde74f70d9141cb6141b905ff647afa6a4f7c934251
SSDEEP

3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9PSl0:5SeOQdaZNxtk8cqhSxvHY9

Score

10^/10

evilquest execution macos persistence

Malware Config

Targets

- Target
  
  2024-08-24_23b356e8fcd1de2e56104c8e8c8874ac_adload_evilquest_rekoobe
- Size
  
  168KB
- MD5
  
  23b356e8fcd1de2e56104c8e8c8874ac
- SHA1
  
  a264b99b0d8a547feffe3c04ce0197154d079d2d
- SHA256
  
  00504eabaf94e7357fccd31d5b023120531972da3f0ac5e44d52cd32b6a1ccee
- SHA512
  
  1462f10e64492ba69ad163240a5ed9b5f2644596e82b821f80d27baa161649824faca2a558fc6cb7eb57ecde74f70d9141cb6141b905ff647afa6a4f7c934251
- SSDEEP
  
  3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9PSl0:5SeOQdaZNxtk8cqhSxvHY9
Score

5^/10

execution persistence
- Launch Agent
  Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

AppleScript

System Services

Launchctl

Persistence

Create or Modify System Process

Launch Agent

Privilege Escalation

Create or Modify System Process

Launch Agent

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

executionpersistence