evilquest | 2cfa9591522d8c86d3c94c9d631c5b254a56f6e2815163704411c634d0be477a | Triage

Sharing

General

Target

2024-11-21_85f9a391923065501b6da37e482db905_adload_evilquest_rekoobe
Size

168KB
Sample

241121-txnwqsshrg
MD5

85f9a391923065501b6da37e482db905
SHA1

18960aec9997f2d69be30e87b7ba8ecfc080dd78
SHA256

2cfa9591522d8c86d3c94c9d631c5b254a56f6e2815163704411c634d0be477a
SHA512

b936ed18771891a5452509916c124eefdd265863c8d8b505d470a400d3291a7929f8907755dc0779bc2ad25f90099d8116150c8cb387b461bb9af252c0fa150e
SSDEEP

3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9n0:5SeOQdaZNxtk8cqhSxvHY9

Score

10^/10

evilquest execution macos persistence

Malware Config

Targets

- Target
  
  2024-11-21_85f9a391923065501b6da37e482db905_adload_evilquest_rekoobe
- Size
  
  168KB
- MD5
  
  85f9a391923065501b6da37e482db905
- SHA1
  
  18960aec9997f2d69be30e87b7ba8ecfc080dd78
- SHA256
  
  2cfa9591522d8c86d3c94c9d631c5b254a56f6e2815163704411c634d0be477a
- SHA512
  
  b936ed18771891a5452509916c124eefdd265863c8d8b505d470a400d3291a7929f8907755dc0779bc2ad25f90099d8116150c8cb387b461bb9af252c0fa150e
- SSDEEP
  
  3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9n0:5SeOQdaZNxtk8cqhSxvHY9
Score

5^/10

execution persistence
- Launch Agent
  Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

AppleScript

System Services

Launchctl

Persistence

Create or Modify System Process

Launch Agent

Privilege Escalation

Create or Modify System Process

Launch Agent

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

executionpersistence