Overview

overview

10

Static

static

10

1858a95fb0...66713b

macos-10.15-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1858a95fb0b28fa302e4f1c14f6c4e4e83e774336c5fbe978ae61d992766713b

  • Size

    305KB

  • Sample

    250203-mz55gaypgz

  • MD5

    286644900a93734366c1e74db154940c

  • SHA1

    4201b08c38f1fdb65bd004b254d7a389aaeae47a

  • SHA256

    1858a95fb0b28fa302e4f1c14f6c4e4e83e774336c5fbe978ae61d992766713b

  • SHA512

    a03e0293f1a19fea5c0a0f205795404e1fe9421f8c76bc4ce238e1ea70d3ac2153c2c7d22844e68e6d483c072682e8f7df9a33a4b5388e03d3344918e19a9333

  • SSDEEP

    6144:5SeOQdaZNxtk8cqhSxvHY9U755Sx8GpdlXmVkO:5LOQdaDxq8cqavHYe75kxkj

Score
10/10
evilquestbackdoorexecutionmacospersistence

Malware Config

Targets

    • Target

      1858a95fb0b28fa302e4f1c14f6c4e4e83e774336c5fbe978ae61d992766713b

    • Size

      305KB

    • MD5

      286644900a93734366c1e74db154940c

    • SHA1

      4201b08c38f1fdb65bd004b254d7a389aaeae47a

    • SHA256

      1858a95fb0b28fa302e4f1c14f6c4e4e83e774336c5fbe978ae61d992766713b

    • SHA512

      a03e0293f1a19fea5c0a0f205795404e1fe9421f8c76bc4ce238e1ea70d3ac2153c2c7d22844e68e6d483c072682e8f7df9a33a4b5388e03d3344918e19a9333

    • SSDEEP

      6144:5SeOQdaZNxtk8cqhSxvHY9U755Sx8GpdlXmVkO:5LOQdaDxq8cqavHYe75kxkj

    Score
    10/10
    evilquestbackdoorexecutionpersistence

    • EvilQuest

      EvilQuest family.

      backdoorevilquest

    • EvilQuest payload

    • Evilquest family

      evilquest

    • Launch Agent

      Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.

      persistence

    • Launch Daemon

      Adversaries may create or modify Launch Daemons to execute malicious payloads as part of persistence. Launch Daemons are plist files used to interact with Launchd, the service management framework used by macOS.

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks