Rule Info
Name
MAL_Bash_Downloader_Sep26
Author
AzizFarghly
Description
Detects a downloader written in bash used to download and execute malicious payloads on macOS systems
Score
75
Date
2026-09-07
Modified
2026-09-27
Minimum Yara
3.5.0
Rule Hash
a1b4e20dbe4f220b16b3279d40f89bbb
Tags
['MAL', 'MACOS', 'SCRIPT', 'T1105', 'T1059_004']
Required Modules
[]
Virustotal Matches
Antivirus Verdicts
Rating
Number of Samples
Malicious (>= 10 engines)
10
Suspicious (< 10 engines)
9
Clean (0 engines)
8
Rule Matches
Timestamp
Positives
Total
Hash
VT
Rule Matches per Month (last 24 months)
Scan your endpoints, forensic images or collected files with our portable scanner THOR