evilquest | 718abf1e52ea28d7e6c09d879f4d730a13c9a038c83b8f7a8c3b46b825e23705 | Triage™

Login
Reports

Overview

overview

Static

static

2026-10-29...ekoobe

macos-10.15-amd64

5

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-29_860fa33d24beb4312da3adef33a0a5cc_adload_evilquest_rekoobe
Size 168KB
Sample261029-nd61babt5x
SHA256 718abf1e52ea28d7e6c09d879f4d730a13c9a038c83b8f7a8c3b46b825e23705
MD5 860fa33d24beb4312da3adef33a0a5cc
SHA1 242850864bdc166745187fcbf5066c3f8d140a0e
SHA512 4f10b5b17c583887717a08c12fe5d58709d9137c130c152a308dc3558ba17169f8cc96a20d7aef6d1cc9b47ad054ce512ef6e3e434b27e1726079e1824e03d0f
SSDEEP 3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq990:5SeOQdaZNxtk8cqhSxvHY9
TLSH
T18DF3A3B35260D46AC15FC4F036DA8AF26D1078750BB0715E2BD14E7B6FB6CC056AE38A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

evilquest backdoor execution macos persistence

Static task

static1

2 signatures

backdoor evilquest

Behavioral task

behavioral1

Sample

2026-10-29_860fa33d24beb4312da3adef33a0a5cc_adload_evilquest_rekoobe

Resource

macos-20260915-en

macos-10.15-amd64

3 signatures

150 seconds

execution persistence

Malware Config

Targets

- Target
  2026-10-29_860fa33d24beb4312da3adef33a0a5cc_adload_evilquest_rekoobe
- Size 168KB
- SHA256 718abf1e52ea28d7e6c09d879f4d730a13c9a038c83b8f7a8c3b46b825e23705
- MD5 860fa33d24beb4312da3adef33a0a5cc
- SHA1 242850864bdc166745187fcbf5066c3f8d140a0e
- SHA512 4f10b5b17c583887717a08c12fe5d58709d9137c130c152a308dc3558ba17169f8cc96a20d7aef6d1cc9b47ad054ce512ef6e3e434b27e1726079e1824e03d0f
- SSDEEP 3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq990:5SeOQdaZNxtk8cqhSxvHY9
- TLSH
  T18DF3A3B35260D46AC15FC4F036DA8AF26D1078750BB0715E2BD14E7B6FB6CC056AE38A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution persistence
- Launch Agent
  Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.
  persistence
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

AppleScript

System Services

Launchctl

Persistence

Create or Modify System Process

Launch Agent

Privilege Escalation

Create or Modify System Process

Launch Agent

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorevilquest

behavioral1

executionpersistence

© 2018-2026

Terms | Privacy