evilquest | b1947e6823956d3b8dd30254a2b5280665ceb243ee7586e5188f4a09c6b3fd58 | Triage™

Login
Reports

Overview

overview

Static

static

2026-10-30...ekoobe

macos-10.15-amd64

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-30_781f74080d5a5c2f49b23f9a9d53b29b_adload_evilquest_rekoobe
Size 168KB
Sample261101-aps1ya1xhw
SHA256 b1947e6823956d3b8dd30254a2b5280665ceb243ee7586e5188f4a09c6b3fd58
MD5 781f74080d5a5c2f49b23f9a9d53b29b
SHA1 fdb890e8110487dd8ec90809bbd67c9bada2bd55
SHA512 1e851015e8ced9a16eac3d045d308d074c2055ac310eec236f41d70b49c23630db2fb46f2bfbe83994be405b72165619032988d7371046700faa23f2fa49900b
SSDEEP 3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9i0:5SeOQdaZNxtk8cqhSxvHY9
TLSH
T160F393F35264D469C05FC4F036DA8AF26D5078360BB0715E2BD14E7A6FB6CC056AE38A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

evilquest backdoor defense_evasion execution macos persistence

Static task

static1

2 signatures

backdoor evilquest

Behavioral task

behavioral1

Sample

2026-10-30_781f74080d5a5c2f49b23f9a9d53b29b_adload_evilquest_rekoobe

Resource

macos-20260915-en

macos-10.15-amd64

6 signatures

150 seconds

backdoor defense_evasion execution evilquest persistence

Malware Config

Targets

- Target
  2026-10-30_781f74080d5a5c2f49b23f9a9d53b29b_adload_evilquest_rekoobe
- Size 168KB
- SHA256 b1947e6823956d3b8dd30254a2b5280665ceb243ee7586e5188f4a09c6b3fd58
- MD5 781f74080d5a5c2f49b23f9a9d53b29b
- SHA1 fdb890e8110487dd8ec90809bbd67c9bada2bd55
- SHA512 1e851015e8ced9a16eac3d045d308d074c2055ac310eec236f41d70b49c23630db2fb46f2bfbe83994be405b72165619032988d7371046700faa23f2fa49900b
- SSDEEP 3072:cx6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9i0:5SeOQdaZNxtk8cqhSxvHY9
- TLSH
  T160F393F35264D469C05FC4F036DA8AF26D5078360BB0715E2BD14E7A6FB6CC056AE38A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor defense_evasion execution evilquest persistence
- EvilQuest payload
- Family: EvilQuest
  EvilQuest family.
  backdoor evilquest
- Launch Agent
  Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.
  persistence
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

AppleScript

System Services

Launchctl

Persistence

Create or Modify System Process

Launch Agent

Privilege Escalation

Create or Modify System Process

Launch Agent

Defense Evasion

Hide Artifacts

Resource Forking

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdoorevilquest

behavioral1

backdoordefense_evasionexecutionevilquestpersistence

© 2018-2026

Terms | Privacy