Overview

overview

10

Static

static

10

20240906b9...ekoobe

macos-10.15-amd64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20240906b9d9c640ae8635c41645f69d838daccfadloadevilquestrekoobe

  • Size

    168KB

  • Sample

    240906-g86jps1fma

  • MD5

    b9d9c640ae8635c41645f69d838daccf

  • SHA1

    bdc6fe45198c9de57278a40e95116deb3438a024

  • SHA256

    eaff00bb9a60ca15c4ffcce8139badc707c6ee2a67aefad584fdeb0ae32291eb

  • SHA512

    4ed8dd17f8ff94ff7cb67e2dc8818cc7840f252e094a2863dd0b8500868147d2fc600d3d9c97c8e1f43b9195c5ce47c5039b8f980b0e9e8c821160f733be354f

  • SSDEEP

    3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9W0:5SeOQdaZNxtk8cqhSxvHY9

Score
10/10
evilquestexecutionmacospersistence

Malware Config

Targets

    • Target

      20240906b9d9c640ae8635c41645f69d838daccfadloadevilquestrekoobe

    • Size

      168KB

    • MD5

      b9d9c640ae8635c41645f69d838daccf

    • SHA1

      bdc6fe45198c9de57278a40e95116deb3438a024

    • SHA256

      eaff00bb9a60ca15c4ffcce8139badc707c6ee2a67aefad584fdeb0ae32291eb

    • SHA512

      4ed8dd17f8ff94ff7cb67e2dc8818cc7840f252e094a2863dd0b8500868147d2fc600d3d9c97c8e1f43b9195c5ce47c5039b8f980b0e9e8c821160f733be354f

    • SSDEEP

      3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9W0:5SeOQdaZNxtk8cqhSxvHY9

    Score
    5/10
    executionpersistence

    • Launch Agent

      Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.

      persistence

    • Launch Daemon

      Adversaries may create or modify Launch Daemons to execute malicious payloads as part of persistence. Launch Daemons are plist files used to interact with Launchd, the service management framework used by macOS.

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks