2026-07-29_a2c3db6a055bba8862034173b6275dfc_adload_evilquest_rekoobe

Classification: Malicious

2026-07-29_a2c3db6a055bba8862034173b6275dfc_adload_evilquest_rekoobe is a ransomware. Detected by 41 antivirus engines. Linked to Thiefquest malware.

Detection summary

  • 41 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: THIEFQUEST (S0595)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Evilquest Triage 2026-07-30 01:46:50 2026-07-30 01:46:50 malicious-activity S0595 ThiefQuest

Tags

evilquest backdoor defense_evasion execution macos persistence

Sample information

Filenames
2026-07-29_a2c3db6a055bba8862034173b6275dfc_adload_evilquest_rekoobe
SHA-256
bbbb8de6c0dec3e674e270a352a7e94318779da6144bc02e980fc438e10a2208
First indexed
2026-07-30 01:46:50
Last updated
2026-10-11 00:44:01

Antivirus detections

EngineDetection
ALYacTrojan.Generic.40275112
AVGMacOS:Filecoder-V [Trj]
AhnLab-V3Ransomware/OSX.ThiefQuest.172792
Antiy-AVLTrojan[Ransom]/MacOS.EvilQuest.o
ArcabitTrojan.Generic.D2668CA8
AvastMacOS:Filecoder-V [Trj]
AviraTR/OSX.Filecoder.V
BitDefenderTrojan.Generic.40275112
CTXmacho.ransomware.evilquest
ClamAVUnix.Ransomware.Evilquest-9756519-0
CynetMalicious (score: 99)
DrWebMac.Encoder.1
ESET-NOD32OSX/Filecoder.EvilQuest.H trojan
ElasticMacOS.Trojan.Thiefquest
EmsisoftTrojan.Generic.40275112 (B)
F-SecureTrojan.TR/OSX.Filecoder.V
FortinetMAC/EvilQuest.O!tr
GDataTrojan.Generic.40275112
GoogleDetected
IkarusRansom.OSX.EvilQ
K7GWTrojan ( 3ac070e41 )
KasperskyVirus.OSX.ThifQseut.a
KingsoftOSX.Infected.Evilquest.5011898
LionicVirus.OSX.EvilQuest.n!c
McAfeeDti!BBBB8DE6C0DE
MicroWorld-eScanTrojan.Generic.40275112
MicrosoftRansom:MacOS/EvilQuest.A!MTB
RisingRansom.EvilQuest/OSX!1.CC33 (CLASSIC)
SangforMalware.MacOS-Script.Save.57547168
SentinelOneStatic AI - Malicious Mach-O
SkyhighOSX/ThiefQuest.a
SophosOSX/Filecode-S
SymantecOSX.RansomThiefQue!g1
TencentTrojan-Ransom.OSX.Evilquest.a.10000187
TrellixENSOSX/ThiefQuest.a
VIPRETrojan.Generic.40275112
VaristMacOS/EvilQuest.A
ZillyaTrojan.Filecoder.OSX.22
ZoneAlarmOSX/Filecode-S
alibabacloudRansomware:MacOS/EvilQuest.H
huorongRansom/OSX.EvilQuest.a