Effy Elden
@ineffyble3 followers309 downloads101 copies6 likes2,540 views
27 detections
Filters
Last updated
All Time
Detection languages
21
4
2
Categories
12
3
3
3
3
Platforms
19
4
3
2
1
Products / Services
2
1
1
1
MITRE Techniques
14
9
6
6
5
CVEs
1
Detects command line creation or loading of suspicious LaunchAgent plists related to FlexibleFerret malware on macOS.
Detects queries to IP lookup services used by FlexibleFerret for victim identification.
Detects execution of MediaPatcher.app decoy application used for credential harvesting.
Detects HTTP/HTTPS communication to known FlexibleFerret payload hosting domains.
Detects network communication to known FlexibleFerret C2 infrastructure. The rule is valid.
Detects DNS or HTTP communication to known FlexibleFerret malware infrastructure domains.
Detects execution of known FlexibleFerret shell scripts used for staging and persistence.
Page 3 of 3