Analysis
- max time kernel
65s - max time network
150s - platform
macos-10.15_amd64 - resource
macos-20260915-en - resource tags
arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
13/11/2026, 04:25
Behavioral task
behavioral1
Sample
2026-11-12_4295e57a777e6e5797e253ba3d5c44f0_adload_evilquest_rekoobe
Resource
macos-20260915-en
0 signatures
150 seconds
General
- Target 2026-11-12_4295e57a777e6e5797e253ba3d5c44f0_adload_evilquest_rekoobe
- Size 171KB
- Sample261113-e19kaazx3l
- SHA256 3fd9059f3af60193ed5818a7b657cd9a47f79e5372574b89ca19724edabc5885
- MD5 4295e57a777e6e5797e253ba3d5c44f0
- SHA1 aea77cb6763eb86a172a133c5024d4b1f3e57708
- SHA512 827d4511c4b2f7bdd846baf7f53fce7ccd95287fc31c8bb763cf31a7bd6aaab1b8f1f9f8c3fcfecb82add6d218bc0a9016237b52355d6b6fe82aecff44c85878
- SSDEEP 3072:wY6SZwEgOQtbap1jZNFnYo6w68cqhS2iJvHLzxq9f/:eSeOQdaZNxtk8cqhSxvHY9
- TLSH T19E04B4B75260D469C05FC4F036DA9AF26D1078350BF0725E2BD14E7A6FB6CC056AE38A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/2026-11-12_4295e57a777e6e5797e253ba3d5c44f0_adload_evilquest_rekoobe\""1⤵PID:462
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/2026-11-12_4295e57a777e6e5797e253ba3d5c44f0_adload_evilquest_rekoobe\""1⤵PID:462
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/2026-11-12_4295e57a777e6e5797e253ba3d5c44f0_adload_evilquest_rekoobe1⤵PID:462
-
/bin/zsh/bin/zsh -c /Users/run/2026-11-12_4295e57a777e6e5797e253ba3d5c44f0_adload_evilquest_rekoobe2⤵PID:463
-
-
/Users/run/2026-11-12_4295e57a777e6e5797e253ba3d5c44f0_adload_evilquest_rekoobe/Users/run/2026-11-12_4295e57a777e6e5797e253ba3d5c44f0_adload_evilquest_rekoobe2⤵PID:463
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:495
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:495