evilquest | 46b43aa95776a134ada5f245040d35025dbe19ad9b788348695d7eccf59b9031 | Triage™

Login
Reports

Overview

overview

Static

static

2026-10-28...ekoobe

macos-10.15-amd64

5

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-28_f6db62cf7b0ae0464dd2a9e0caa0ef39_adload_evilquest_rekoobe
Size 168KB
Sample261028-f783rsxt8p
SHA256 46b43aa95776a134ada5f245040d35025dbe19ad9b788348695d7eccf59b9031
MD5 f6db62cf7b0ae0464dd2a9e0caa0ef39
SHA1 a6ff6a334f56bb0081e7e8f6532e24163d3679d5
SHA512 5f5ff2592c93daa6503a827dfbfb0320c7c580898a6522d0feadb973ef5b45de5587e26a4dfa382e1eea901696b348a01644bb2c0cd167568b7dc080bac70d07
SSDEEP 3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9D0:5SeOQdaZNxtk8cqhSxvHY9
TLSH
T1C3F3A2B35260D46AC05FD4F076DA8AF26D0078350BB4715E2BD14E7B6FB6CC056AE38A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

evilquest backdoor defense_evasion execution macos persistence

Static task

static1

2 signatures

backdoor evilquest

Behavioral task

behavioral1

Sample

2026-10-28_f6db62cf7b0ae0464dd2a9e0caa0ef39_adload_evilquest_rekoobe

Resource

macos-20260915-en

macos-10.15-amd64

4 signatures

150 seconds

defense_evasion execution persistence

Malware Config

Targets

- Target
  2026-10-28_f6db62cf7b0ae0464dd2a9e0caa0ef39_adload_evilquest_rekoobe
- Size 168KB
- SHA256 46b43aa95776a134ada5f245040d35025dbe19ad9b788348695d7eccf59b9031
- MD5 f6db62cf7b0ae0464dd2a9e0caa0ef39
- SHA1 a6ff6a334f56bb0081e7e8f6532e24163d3679d5
- SHA512 5f5ff2592c93daa6503a827dfbfb0320c7c580898a6522d0feadb973ef5b45de5587e26a4dfa382e1eea901696b348a01644bb2c0cd167568b7dc080bac70d07
- SSDEEP 3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9D0:5SeOQdaZNxtk8cqhSxvHY9
- TLSH
  T1C3F3A2B35260D46AC05FD4F076DA8AF26D0078350BB4715E2BD14E7B6FB6CC056AE38A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

defense_evasion execution persistence
- Launch Agent
  Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.
  persistence
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

AppleScript

System Services

Launchctl

Persistence

Create or Modify System Process

Launch Agent

Privilege Escalation

Create or Modify System Process

Launch Agent

Defense Evasion

Hide Artifacts

Resource Forking

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorevilquest

behavioral1

defense_evasionexecutionpersistence

© 2018-2026

Terms | Privacy