evilquest | afbd6a9f13ad7c68c0f6726201daa85137786d9cb1f6282e58de05879c8a8e34 | Triage™

Login
Reports

Overview

overview

Static

static

2026-07-29...ekoobe

macos-10.15-amd64

5

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-29_3e652f9d70e35a3cce7ba24eb238c150_adload_evilquest_rekoobe
Size 168KB
Sample260730-cc3qqazzht
SHA256 afbd6a9f13ad7c68c0f6726201daa85137786d9cb1f6282e58de05879c8a8e34
MD5 3e652f9d70e35a3cce7ba24eb238c150
SHA1 4409f38fc4cd27bbd7eaf4229eb943c5a207888c
SHA512 0f48d447e408cab5732f3a45b4851c46532f9bb7ac5dca812ebc623aae3775d0546628bb524dec98faf7a1e80621e9eb2a8b60f5d57d513925bc6ad66f5c2272
SSDEEP 3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9R0:5SeOQdaZNxtk8cqhSxvHY9
TLSH
T122F3A3B31260D46AC15FC4F036DA9AF26C1078354AF0715E2BD14E7B6FB6CD056AE38A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

evilquest backdoor execution macos persistence

Static task

static1

2 signatures

backdoor evilquest

Behavioral task

behavioral1

Sample

2026-07-29_3e652f9d70e35a3cce7ba24eb238c150_adload_evilquest_rekoobe

Resource

macos-20250619-en

macos-10.15-amd64

3 signatures

150 seconds

execution persistence

Malware Config

Targets

- Target
  2026-07-29_3e652f9d70e35a3cce7ba24eb238c150_adload_evilquest_rekoobe
- Size 168KB
- SHA256 afbd6a9f13ad7c68c0f6726201daa85137786d9cb1f6282e58de05879c8a8e34
- MD5 3e652f9d70e35a3cce7ba24eb238c150
- SHA1 4409f38fc4cd27bbd7eaf4229eb943c5a207888c
- SHA512 0f48d447e408cab5732f3a45b4851c46532f9bb7ac5dca812ebc623aae3775d0546628bb524dec98faf7a1e80621e9eb2a8b60f5d57d513925bc6ad66f5c2272
- SSDEEP 3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9R0:5SeOQdaZNxtk8cqhSxvHY9
- TLSH
  T122F3A3B31260D46AC15FC4F036DA9AF26C1078354AF0715E2BD14E7B6FB6CD056AE38A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution persistence
- Launch Agent
  Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.
  persistence
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

AppleScript

System Services

Launchctl

Persistence

Create or Modify System Process

Launch Agent

Privilege Escalation

Create or Modify System Process

Launch Agent

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorevilquest

behavioral1

executionpersistence

© 2018-2026

Terms | Privacy