evilquest | 08b4b8467563994ac41de996242457246300e2eafc51309485f0c8eb00258725 | Triage™

Login
Reports

Overview

overview

Static

static

0fddec8738...kes118

macos-10.15-amd64

4

Sharing

Copy URL Twitter E-mail

General

Target
evilquest.zip
Size 72KB
Sample260831-b252pstarc
SHA256 08b4b8467563994ac41de996242457246300e2eafc51309485f0c8eb00258725
MD5 4be3ae61842750d5d1999d36bdfa5d7d
SHA1 86be929ac41fe24e260de9a7620da64d4376482f
SHA512 0260385725bf80ffb545341555217e7ed90505ca2d5840f78bf4ea1e9b2178bd0d6b82b1e5557a89d5c88bfb044962ff9f8f8054f4afaced2149217ca6273e90
SSDEEP 1536:ZcKfhVrIZiJ+Kl5TNYBYTrPNDMpB1MkVwQtYoyM713fqOmaVR:ZZfhV8ZiJZLRgYnND8B1jUoNYOmaVR
TLSH
T10073012306CD962AE7C7A0B47DCB1EB47517074681C1C91B12BED69AFC46EDE3B4281C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

evilquest backdoor defense_evasion macos

Static task

static1

2 signatures

backdoor evilquest

Behavioral task

behavioral1

Sample

0fddec87384531b719e78dee5f92dcc5_JaffaCakes118

Resource

macos-20250619-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Malware Config

Targets

- Target
  0fddec87384531b719e78dee5f92dcc5_JaffaCakes118
- Size 168KB
- SHA256 284685da23dcb7ed0efbfc9b3d678c5b69e0afcb9910b0eee3f5b1be40fd4e61
- MD5 0fddec87384531b719e78dee5f92dcc5
- SHA1 e9e2a9db3d756a5220fc0a681037cd490fc808fb
- SHA512 93e462a5c8e18d3218cf98f99a7e8f6f639e723d8a841997abebfba7437c5b24b47035c3271fab3224259e38b370476bf96c3b376b77f2edda672c5425557d4a
- SSDEEP 3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9Dv0:5SeOQdaZNxtk8cqhSxvHY9
- TLSH
  T198F393F35260D469C19BC4F036DA9AF26D00783507F0715E2BE14E7A6FB6CD056AE38A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Resource Forking

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorevilquest

behavioral1

defense_evasion

© 2018-2026

Terms | Privacy