General
- Target 2026-07-29_5d83e8626b2149475316983dc459fcfc_adload_evilquest_rekoobe
- Size 168KB
- Sample260829-y6ermscn41
- SHA256 f9a142ab74828c5a0152e27b1e52c5eced2ebb6386adba0131e86bb0988bfa82
- MD5 5d83e8626b2149475316983dc459fcfc
- SHA1 9d698e9c9792ee2d7689b8f6e497f89f682b50bd
- SHA512 d36a29946f35afab40fc27b394162d16c20f7a5e7c0ca54879fe9428080bbb2fe0beaf3a08888ef8357f34f9ee4107519c4afc1e77bb063b9ebd367545ff637a
- SSDEEP 3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9nFI0:5SeOQdaZNxtk8cqhSxvHY9nF
- TLSH T161F393B35260D859C19FC4F036D98AF26D1078350BB4715E2BE14E7B6FB6CC056AE38A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_5d83e8626b2149475316983dc459fcfc_adload_evilquest_rekoobe
Resource
macos-20250619-en
6 signatures
900 seconds
Malware Config
Targets
-
- Target 2026-07-29_5d83e8626b2149475316983dc459fcfc_adload_evilquest_rekoobe
- Size 168KB
- SHA256 f9a142ab74828c5a0152e27b1e52c5eced2ebb6386adba0131e86bb0988bfa82
- MD5 5d83e8626b2149475316983dc459fcfc
- SHA1 9d698e9c9792ee2d7689b8f6e497f89f682b50bd
- SHA512 d36a29946f35afab40fc27b394162d16c20f7a5e7c0ca54879fe9428080bbb2fe0beaf3a08888ef8357f34f9ee4107519c4afc1e77bb063b9ebd367545ff637a
- SSDEEP 3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9nFI0:5SeOQdaZNxtk8cqhSxvHY9nF
- TLSH T161F393B35260D859C19FC4F036D98AF26D1078350BB4715E2BE14E7B6FB6CC056AE38A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File Permission
Adversaries may modify file permissions/attributes to evade access control lists (ACLs) and access protected files.
-
Launch Agent
Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2AppleScript
1Unix Shell
1System Services
1Launchctl
1