FlexibleFerret Malware Execution Chain Detection

Detects curl downloading a file, making it executable with chmod, and executing it in the background, common in FlexibleFerret malware delivery on macOS systems.