Overview

overview

10

Static

static

10

2024-10-29...ekoobe

macos-10.15-amd64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-29_133328a2045926a25a7543519e128a7a_adload_evilquest_rekoobe

  • Size

    337KB

  • Sample

    241029-r3r48sxlgm

  • MD5

    133328a2045926a25a7543519e128a7a

  • SHA1

    e18a8877a1d50666cf7dd7191d42ddea2f3546d1

  • SHA256

    2b113d5e16249531d159cd960bee9e63bece5dcff62e3291aaf67549a64f9574

  • SHA512

    9e04a832684ceac93a7c31b5e86ccc2cad4e29a1a8adceada7f38291cf2daf0a49cd40337553cb565e74d5ddda639d411f9346f2e9b16f423539fa25b15bd2d7

  • SSDEEP

    6144:5SeOQdaZNxtk8cqhSxvHY9DSeOQdaZNxtk8cqhSxvHY9:5LOQdaDxq8cqavHYtLOQdaDxq8cqavHY

Score
10/10
evilquestexecutionmacospersistence

Malware Config

Targets

    • Target

      2024-10-29_133328a2045926a25a7543519e128a7a_adload_evilquest_rekoobe

    • Size

      337KB

    • MD5

      133328a2045926a25a7543519e128a7a

    • SHA1

      e18a8877a1d50666cf7dd7191d42ddea2f3546d1

    • SHA256

      2b113d5e16249531d159cd960bee9e63bece5dcff62e3291aaf67549a64f9574

    • SHA512

      9e04a832684ceac93a7c31b5e86ccc2cad4e29a1a8adceada7f38291cf2daf0a49cd40337553cb565e74d5ddda639d411f9346f2e9b16f423539fa25b15bd2d7

    • SSDEEP

      6144:5SeOQdaZNxtk8cqhSxvHY9DSeOQdaZNxtk8cqhSxvHY9:5LOQdaDxq8cqavHYtLOQdaDxq8cqavHY

    Score
    5/10
    executionpersistence

    • Launch Agent

      Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.

      persistence

    • Launch Daemon

      Adversaries may create or modify Launch Daemons to execute malicious payloads as part of persistence. Launch Daemons are plist files used to interact with Launchd, the service management framework used by macOS.

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks