Overview

overview

10

Static

static

10

2024-12-23...ekoobe

macos-10.15-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-23_3c196715f4a0d48df49ed6641bfb9f4b_adload_evilquest_rekoobe

  • Size

    168KB

  • Sample

    241223-1m3qgaslht

  • MD5

    3c196715f4a0d48df49ed6641bfb9f4b

  • SHA1

    800e97b0ddeed06a54e8a5e1b9147656f22ab76e

  • SHA256

    ff47b3d1273e384159e70eebaab382084e7671d2517fe0bdd108e3f9c44d60ce

  • SHA512

    81f172ef75fdad7084767c8cb1295f5ab70a6e5a15d63605e13393c897f8fec6a1115a351dd2cb9f824bc49637531e99547115d213eef950c472e4af08c75dcd

  • SSDEEP

    3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9h50:5SeOQdaZNxtk8cqhSxvHY9h

Score
10/10
evilquestbackdoorexecutionmacospersistence

Malware Config

Targets

    • Target

      2024-12-23_3c196715f4a0d48df49ed6641bfb9f4b_adload_evilquest_rekoobe

    • Size

      168KB

    • MD5

      3c196715f4a0d48df49ed6641bfb9f4b

    • SHA1

      800e97b0ddeed06a54e8a5e1b9147656f22ab76e

    • SHA256

      ff47b3d1273e384159e70eebaab382084e7671d2517fe0bdd108e3f9c44d60ce

    • SHA512

      81f172ef75fdad7084767c8cb1295f5ab70a6e5a15d63605e13393c897f8fec6a1115a351dd2cb9f824bc49637531e99547115d213eef950c472e4af08c75dcd

    • SSDEEP

      3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9h50:5SeOQdaZNxtk8cqhSxvHY9h

    Score
    10/10
    evilquestbackdoorexecutionpersistence

    • EvilQuest

      EvilQuest family.

      backdoorevilquest

    • EvilQuest payload

    • Evilquest family

      evilquest

    • Launch Agent

      Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.

      persistence

    • Launch Daemon

      Adversaries may create or modify Launch Daemons to execute malicious payloads as part of persistence. Launch Daemons are plist files used to interact with Launchd, the service management framework used by macOS.

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks