All Detections

FlexibleFerret Payload Extraction Detection

Effy Elden@ineffyble
updated Nov 26, 20251045

Detects extraction of FlexibleFerret malware payload archive to the CDrivers directory on macOS systems.

Sigma