evilquest | 3d4120dfcc9cbd8ebad9d5bc0efff031042d40247354c040d365d9ea092ffcfe | Triage

Sharing

General

Target

2024-09-07_07e0f2e98ffc46f726d75b97c3ed1747_adload_evilquest_rekoobe
Size

337KB
Sample

240907-f3phkawhqn
MD5

07e0f2e98ffc46f726d75b97c3ed1747
SHA1

d4bf512e954a12fc998fd731e39054002d900371
SHA256

3d4120dfcc9cbd8ebad9d5bc0efff031042d40247354c040d365d9ea092ffcfe
SHA512

8655972ffbf7f9954c786c902f7ad518009d65d39ab8f3bcbe40d041043be0799b23383c929709fa0ea4d219e74e7ed1781dfc7fca461e9ea57eed44e529e715
SSDEEP

6144:5SeOQdaZNxtk8cqhSxvHY9jSeOQdaZNxtk8cqhSxvHY9ZuZf:5LOQdaDxq8cqavHYRLOQdaDxq8cqavHY

Score

10^/10

evilquest execution macos persistence

Malware Config

Targets

- Target
  
  2024-09-07_07e0f2e98ffc46f726d75b97c3ed1747_adload_evilquest_rekoobe
- Size
  
  337KB
- MD5
  
  07e0f2e98ffc46f726d75b97c3ed1747
- SHA1
  
  d4bf512e954a12fc998fd731e39054002d900371
- SHA256
  
  3d4120dfcc9cbd8ebad9d5bc0efff031042d40247354c040d365d9ea092ffcfe
- SHA512
  
  8655972ffbf7f9954c786c902f7ad518009d65d39ab8f3bcbe40d041043be0799b23383c929709fa0ea4d219e74e7ed1781dfc7fca461e9ea57eed44e529e715
- SSDEEP
  
  6144:5SeOQdaZNxtk8cqhSxvHY9jSeOQdaZNxtk8cqhSxvHY9ZuZf:5LOQdaDxq8cqavHYRLOQdaDxq8cqavHY
Score

5^/10

execution persistence
- Launch Agent
  Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

AppleScript

System Services

Launchctl

Persistence

Create or Modify System Process

Launch Agent

Privilege Escalation

Create or Modify System Process

Launch Agent

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

executionpersistence