evilquest | f9a142ab74828c5a0152e27b1e52c5eced2ebb6386adba0131e86bb0988bfa82 | Triage™

Login
Reports

Overview

overview

Static

static

2026-07-29...ekoobe

macos-10.15-amd64

5

Resubmissions

05/09/2026, 21:05

260905-zxntmay1gz10

29/08/2026, 20:23

260829-y6ermscn4110

21/08/2026, 07:43

260821-jkjq5sztf110

30/07/2026, 01:53

260730-cbacsazzev10

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-29_5d83e8626b2149475316983dc459fcfc_adload_evilquest_rekoobe
Size 168KB
Sample260730-cbacsazzev
SHA256 f9a142ab74828c5a0152e27b1e52c5eced2ebb6386adba0131e86bb0988bfa82
MD5 5d83e8626b2149475316983dc459fcfc
SHA1 9d698e9c9792ee2d7689b8f6e497f89f682b50bd
SHA512 d36a29946f35afab40fc27b394162d16c20f7a5e7c0ca54879fe9428080bbb2fe0beaf3a08888ef8357f34f9ee4107519c4afc1e77bb063b9ebd367545ff637a
SSDEEP 3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9nFI0:5SeOQdaZNxtk8cqhSxvHY9nF
TLSH
T161F393B35260D859C19FC4F036D98AF26D1078350BB4715E2BE14E7B6FB6CC056AE38A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

evilquest backdoor defense_evasion execution macos persistence

Static task

static1

2 signatures

backdoor evilquest

Behavioral task

behavioral1

Sample

2026-07-29_5d83e8626b2149475316983dc459fcfc_adload_evilquest_rekoobe

Resource

macos-20250619-en

macos-10.15-amd64

4 signatures

150 seconds

defense_evasion execution persistence

Malware Config

Targets

- Target
  2026-07-29_5d83e8626b2149475316983dc459fcfc_adload_evilquest_rekoobe
- Size 168KB
- SHA256 f9a142ab74828c5a0152e27b1e52c5eced2ebb6386adba0131e86bb0988bfa82
- MD5 5d83e8626b2149475316983dc459fcfc
- SHA1 9d698e9c9792ee2d7689b8f6e497f89f682b50bd
- SHA512 d36a29946f35afab40fc27b394162d16c20f7a5e7c0ca54879fe9428080bbb2fe0beaf3a08888ef8357f34f9ee4107519c4afc1e77bb063b9ebd367545ff637a
- SSDEEP 3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9nFI0:5SeOQdaZNxtk8cqhSxvHY9nF
- TLSH
  T161F393B35260D859C19FC4F036D98AF26D1078350BB4715E2BE14E7B6FB6CC056AE38A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

defense_evasion execution persistence
- Launch Agent
  Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.
  persistence
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

AppleScript

System Services

Launchctl

Persistence

Create or Modify System Process

Launch Agent

Privilege Escalation

Create or Modify System Process

Launch Agent

Defense Evasion

Hide Artifacts

Resource Forking

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorevilquest

behavioral1

defense_evasionexecutionpersistence

© 2018-2026

Terms | Privacy