MAL OSX Shamos Installer Script v1

Detects the SHAMOS installer Bash script used to download and execute the main Mach-O payload. This script is often delivered via malvertising campaigns.

YARA