Overview

overview

10

Static

static

10

2024-10-12...ekoobe

macos-10.15-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-12_d80a6b0640a7e0a78b9779d43e9dc51b_adload_evilquest_rekoobe

  • Size

    168KB

  • Sample

    241012-qpy5ysxcmk

  • MD5

    d80a6b0640a7e0a78b9779d43e9dc51b

  • SHA1

    6cb8351de7ae5de2b087f29f984f5314d78e447b

  • SHA256

    0886e040529a5acc4f28ae5f90ebf3e5cf24416c04c6a9bc5093d5321f8a6ae0

  • SHA512

    a014c0b50d441f1261f07dd8b2020eb14e206827bf7dfe0c0caf777576426d05cc77c3b7439b975db35409a3ed502349a57d345e5ad0bb5e0f6571c5c33c04fb

  • SSDEEP

    3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9EBth0:5SeOQdaZNxtk8cqhSxvHY9EBt

Score
10/10
evilquestbackdoorevasionexecutionmacospersistence

Malware Config

Targets

    • Target

      2024-10-12_d80a6b0640a7e0a78b9779d43e9dc51b_adload_evilquest_rekoobe

    • Size

      168KB

    • MD5

      d80a6b0640a7e0a78b9779d43e9dc51b

    • SHA1

      6cb8351de7ae5de2b087f29f984f5314d78e447b

    • SHA256

      0886e040529a5acc4f28ae5f90ebf3e5cf24416c04c6a9bc5093d5321f8a6ae0

    • SHA512

      a014c0b50d441f1261f07dd8b2020eb14e206827bf7dfe0c0caf777576426d05cc77c3b7439b975db35409a3ed502349a57d345e5ad0bb5e0f6571c5c33c04fb

    • SSDEEP

      3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9EBth0:5SeOQdaZNxtk8cqhSxvHY9EBt

    Score
    10/10
    evilquestbackdoorevasionexecutionpersistence

    • EvilQuest

      EvilQuest family.

      backdoorevilquest

    • EvilQuest payload

    • Launch Agent

      Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks