evilquest | c153122439dada4e7992ffabb3b1f135623ef21b51cba9f1fd3b06d81bcc1ce3 | Triage™

Login
Reports

Overview

overview

Static

static

2026-07-26...ekoobe

macos-10.15-amd64

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-26_f4cf4630fa00f5d59a7d64fc70220ee6_adload_evilquest_rekoobe
Size 168KB
Sample260726-jlbf6a1brc
SHA256 c153122439dada4e7992ffabb3b1f135623ef21b51cba9f1fd3b06d81bcc1ce3
MD5 f4cf4630fa00f5d59a7d64fc70220ee6
SHA1 c831e81ad42a9e65c95ec5da30c8f89a1ba515ca
SHA512 d68af0688dd01c3a5359bb0045ea2c4e8067a92a255138e5ffa226f1f3890aebbcd6f2e90c655add92fd468fbbe9995c0921247644228ed94fe101dd75bd7bfe
SSDEEP 3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9H0:5SeOQdaZNxtk8cqhSxvHY9
TLSH
T1BBF393F75260D46AC05FD4F036D98AF26D1078390BB0715E2BD14E7A6FB6CC056AE38A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

evilquest backdoor execution macos persistence

Static task

static1

2 signatures

backdoor evilquest

Behavioral task

behavioral1

Sample

2026-07-26_f4cf4630fa00f5d59a7d64fc70220ee6_adload_evilquest_rekoobe

Resource

macos-20250619-en

macos-10.15-amd64

5 signatures

150 seconds

backdoor execution evilquest persistence

Malware Config

Targets

- Target
  2026-07-26_f4cf4630fa00f5d59a7d64fc70220ee6_adload_evilquest_rekoobe
- Size 168KB
- SHA256 c153122439dada4e7992ffabb3b1f135623ef21b51cba9f1fd3b06d81bcc1ce3
- MD5 f4cf4630fa00f5d59a7d64fc70220ee6
- SHA1 c831e81ad42a9e65c95ec5da30c8f89a1ba515ca
- SHA512 d68af0688dd01c3a5359bb0045ea2c4e8067a92a255138e5ffa226f1f3890aebbcd6f2e90c655add92fd468fbbe9995c0921247644228ed94fe101dd75bd7bfe
- SSDEEP 3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9H0:5SeOQdaZNxtk8cqhSxvHY9
- TLSH
  T1BBF393F75260D46AC05FD4F036D98AF26D1078390BB0715E2BD14E7A6FB6CC056AE38A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor execution evilquest persistence
- EvilQuest payload
- Family: EvilQuest
  EvilQuest family.
  backdoor evilquest
- Launch Agent
  Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.
  persistence
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

AppleScript

System Services

Launchctl

Persistence

Create or Modify System Process

Launch Agent

Privilege Escalation

Create or Modify System Process

Launch Agent

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorevilquest

behavioral1

backdoorexecutionevilquestpersistence

© 2018-2026

Terms | Privacy