Overview

overview

10

Static

static

10

2024-11-11...ekoobe

macos-10.15-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-11_9f284764a70915898a897b4bcfc601c1_adload_evilquest_rekoobe

  • Size

    168KB

  • Sample

    241111-rf14mayqhy

  • MD5

    9f284764a70915898a897b4bcfc601c1

  • SHA1

    c0167c8921f939adb2dc920c3171c736fb8ddc22

  • SHA256

    ff39405eaf01003886993d999978cd5c44a6a2f3890f3e42887e8b6b4f9b1fc6

  • SHA512

    e15a78b37dac0d18873981a5b0d6d56e7e8218b1362570879c246ac4a6ca5dba01957aa08fa964f1ae38f191a6f00ca4e83c24decdcbfcc88db7580793baa32a

  • SSDEEP

    3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9M0:5SeOQdaZNxtk8cqhSxvHY9

Score
10/10
evilquestbackdoorexecutionmacospersistence

Malware Config

Targets

    • Target

      2024-11-11_9f284764a70915898a897b4bcfc601c1_adload_evilquest_rekoobe

    • Size

      168KB

    • MD5

      9f284764a70915898a897b4bcfc601c1

    • SHA1

      c0167c8921f939adb2dc920c3171c736fb8ddc22

    • SHA256

      ff39405eaf01003886993d999978cd5c44a6a2f3890f3e42887e8b6b4f9b1fc6

    • SHA512

      e15a78b37dac0d18873981a5b0d6d56e7e8218b1362570879c246ac4a6ca5dba01957aa08fa964f1ae38f191a6f00ca4e83c24decdcbfcc88db7580793baa32a

    • SSDEEP

      3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9M0:5SeOQdaZNxtk8cqhSxvHY9

    Score
    10/10
    evilquestbackdoorexecutionpersistence

    • EvilQuest

      EvilQuest family.

      backdoorevilquest

    • EvilQuest payload

    • Evilquest family

      evilquest

    • Launch Agent

      Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.

      persistence

    • Launch Daemon

      Adversaries may create or modify Launch Daemons to execute malicious payloads as part of persistence. Launch Daemons are plist files used to interact with Launchd, the service management framework used by macOS.

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks