evilquest | 627da6780b5dbbc16b1f69a0b940547725164e16f6be4d2125c801ba2c25b06e | Triage

Submit
Reports

Overview

overview

Static

static

tzsFs.tar

windows7-x64

tzsFs.tar

windows10-2004-x64

1

tzsFs.tar

macos-10.15-amd64

1

Sharing

General

Target

tzsFs.tar
Size

375.8MB
Sample

241013-hsrw2stgqg
MD5

53e51f17a1e04f3554f6c09e06c55680
SHA1

5fd012c451680bf869b3225a4b467fdfe0bdc85d
SHA256

627da6780b5dbbc16b1f69a0b940547725164e16f6be4d2125c801ba2c25b06e
SHA512

abc831c1c3cde5d81441f8fa992b50af891491291afa7b7a28bb27ae286b6451916d71110567b7d2f8e939cd150e312b1b6296106c80c5ac6b22a183dfd69230
SSDEEP

6291456:/isWaTTn6TtmT/FvMD4Buy+dIfpP4smZmTZK0XU+5eDmwaz9winVinYjmhGxlInB:/isrTkmzlM0BumP3mSUqMWz9FViYICIB

Score

10^/10

evilquest xmrig backdoor discovery macos miner upx

Static task

static1

upx miner xmrig

3 signatures

Behavioral task

behavioral1

Sample

tzsFs.tar

Resource

win7-20240903-en

evilquest backdoor discovery

windows7-x64

16 signatures

1800 seconds

Behavioral task

behavioral2

Sample

tzsFs.tar

Resource

win10v2004-20241007-en

windows10-2004-x64

8 signatures

1800 seconds

Behavioral task

behavioral3

Sample

tzsFs.tar

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

1800 seconds

Malware Config

Targets

- Target
  
  tzsFs.tar
- Size
  
  375.8MB
- MD5
  
  53e51f17a1e04f3554f6c09e06c55680
- SHA1
  
  5fd012c451680bf869b3225a4b467fdfe0bdc85d
- SHA256
  
  627da6780b5dbbc16b1f69a0b940547725164e16f6be4d2125c801ba2c25b06e
- SHA512
  
  abc831c1c3cde5d81441f8fa992b50af891491291afa7b7a28bb27ae286b6451916d71110567b7d2f8e939cd150e312b1b6296106c80c5ac6b22a183dfd69230
- SSDEEP
  
  6291456:/isWaTTn6TtmT/FvMD4Buy+dIfpP4smZmTZK0XU+5eDmwaz9winVinYjmhGxlInB:/isrTkmzlM0BumP3mSUqMWz9FViYICIB
Score

10^/10

evilquest backdoor discovery
- EvilQuest
  EvilQuest family.
  backdoor evilquest
- EvilQuest payload
- Loads dropped DLL
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evilquestbackdoordiscovery

behavioral2

behavioral3

© 2018-2025

Terms | Privacy