MAL_FinFisher_MacOS_Oct20_2

Rule Info

Name
MAL_FinFisher_MacOS_Oct20_2
Author
Max Altgelt
Description
Detects FinSpy for MacOS
Score
75
Date
2020-10-05
Minimum Yara
1.7
Rule Hash
afeb8bfb069a0d408f3c66ffb4483924
Tags
['MAL', 'MACOS']
Required Modules
[]

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
5
Suspicious (< 10 engines)
0
Clean (0 engines)
48

Rule Matches

Timestamp
Positives
Total
Hash
VT
2021-08-10 12:09:58
0
58
37e749b79f4a24ead2868dffdb22c5034053615fed1166fdea05b4ca43b65c83
2020-10-09 16:32:39
0
61
0c646bb87779a04efb0cc40284c59acc90d36084b9775b1a667ea6c44658dbb7
2020-10-09 16:28:50
0
61
e68334f6c551c16848974c84f3b3bbeb16d2d754d02f6a236c91b99e63cd2c94
2020-10-09 16:28:28
0
61
c47d39d790a645c4c755126ce68bd335121a4f4a4019e07107aa1493d51bea89
2020-10-09 16:28:04
0
59
19222eb07a80958e5240e23745e563e81572fb2eaf9d7c029b7b8fd9bf871e66
2020-10-09 16:25:57
0
60
473ba8881591f86f965ea2a8badb6ea4e21275b66c13382ae338d4ad0d98f7cd
2020-10-09 16:25:49
0
56
21c17e49728f104e7a874410c124ff4733f4560790873837c972dbcb0006d08b
2020-10-09 16:25:35
0
59
fee267d42a096ef77e38dd7fe34406a94e4be5d174200ea3ac55bc72e80a865a
2020-10-09 16:24:04
0
61
69b6585077b9c8103e89ccc3f06ef1d6be4eda2c3344f15665fb2d1700cb88fc
2020-10-09 16:23:38
0
60
f9a88d5e50074e510d699aad797db52e05cc192b67f108ea8dea1cc3811701c4
2020-10-09 16:23:24
0
59
1c7ffd37d5ba6631348c1065adc0713c4d2f13220c8504ec7b971828f4ac2026
2020-10-09 16:23:23
0
60
c420af7739f32873aaf64f4654a220044289a048556d6b4edc6d1ba4ecbc0c29
2020-10-09 16:23:16
0
61
28fa62c7ce4dd7b5733712717b9bea86baa11af9dc1544ca296d2381d5f9e880
2020-10-09 16:23:02
0
61
c4a5e38d272a7f709dec0d57c1a64c0903ebd22775be16a69e5c37fe51871676
2020-10-09 16:22:35
0
61
0b4a69c3434c3f2830cbb42f1653110ac1588b9f8d90f58678a48f4187c91f70
2020-10-09 15:57:49
0
58
ac86552463e42fbd33a745ac84f2b33287b24a2201f88b0bddf745f69519007d
2020-10-09 15:57:42
0
58
349abb9d96cbdf2528bb5ad1c55f3c5488e403d8e6b318530523dfb58b762f44
2020-10-09 15:56:34
0
61
f8aaac2821c4c58467116492d6137cf0ebcba3451ff5f7cbd6fca48e57b41f88
2020-10-09 15:54:51
0
60
24a5a9d97a8b5f2121a9461b33ed997110c0281ee668712ca676bcc280e0f3a6
2020-10-09 15:54:45
0
61
0a002f267e169faf06a96a93161b92f4a0a5bf768d7588eaf9260669fa30cc23
2020-10-09 15:54:04
0
61
0f22a627b18404046e6eb7fe40f5e88069a830c3640fe00d5a5e96b3c78fccbe
2020-10-09 15:54:01
0
61
a9ea8fa86dfacee8d5d39c4683b4eb999aee969fa50b6a9c518c2f7624c87bb1
2020-10-09 15:53:48
0
60
a18dd738a5c7fd7520eb72cd9fac251a13674a17b61ad1b759504da32b7ea3fc
2020-10-09 15:52:34
0
61
67e88b60dd54a0adfc738946c9dd7c3a095d1cfd89c9ddc90da3f062d11c904c
2020-10-09 15:51:25
0
61
675a1fd1c57d8345659ce273339cc0042067aba53fabd778b0086b9121d19b28
2020-10-09 15:50:59
0
60
5079874f6b3c0e6661b8aa8a8777860a36571f4e5df653f8e922f50e93499470
2020-10-09 15:50:45
0
59
53186cf3c94bf5487ad89f016640352ef52a2680b29252b37052506415f25995
2020-10-09 15:50:30
0
59
e90c6df5e6e09a2cd6db3fed7c425b734b9901ed6519ac680de8306626ad735d
2020-10-09 15:50:29
0
59
b0dfe15d6b0c4e76fa6948ddc1dbcbb5381215264b41610c18b29d3989fcfb10
2020-10-09 15:50:26
0
59
f14d91224a4bc8b9845989d24febaf17a47fbccc441b5b3a83594c6c83499653
2020-10-09 15:50:12
0
59
94cc24604197b33bbfafad8996915c92458c965de2fe5f55ac683df8982a3dcc
2020-10-09 15:47:12
0
61
f8cd057cf3f816435aa9ca8e88d03313e9ee6a640f3bf38711ad4579c5373531
2020-10-09 15:46:44
0
60
9ec9e731ef832f6c608f9caeb0073ffa48efca96c515da0c9d3abef5b358909c
2020-10-09 15:46:24
0
61
bbeff9c266ebe523c8a3ea0fd2d1e050c2804d19133ea95d0a9bb04c56f2c892
2020-10-09 15:45:42
32
58
ed0c5886a43a896f501e0b734695d51a9163bdd8bbe011bf21447f87b0436ee2
2020-10-09 15:44:13
33
60
46812b7b53308d38aa123d3d1fe0c2be332e2948cbb2a37fa66562fb44ed5e72
2020-10-09 15:43:57
34
61
c984afb4744b8c1cbc1e0f15a341d5ec126c9129b437d703581f7d0b801e434f
2020-10-09 15:35:17
0
62
9e86f0b1708b71f15f843cf945465a7be8620a883f74b875811e002d33de5267
2020-10-09 15:28:31
34
61
c347e849ee962322044e0c6b13d8d9e8abacf07877d18dd7f394df05e9b26c23
2020-10-09 15:27:14
0
61
cd898375591749d5a7a161e330ade855599dc3c27b43046a905c57c6471a3068
2020-10-09 15:19:09
33
60
1fb6f83f88b7b7f67d73e19af26f40882d2916cbab948ce4277192c8aa18febb
2020-10-09 14:58:39
0
61
54f5f5e56618fcb497410e961a4b93e2173a371cee84eb12a017cf762a3b83b2
2020-10-09 14:52:06
0
61
9958477d81dffa021159c5f836ce19d39c723a80e3f6808f03e939ae86db68fe
2020-10-09 14:45:21
0
58
52c683729905cd17e2241b83033671bccd1f6c61c7f2eef1f742612249f25ed6
2020-10-09 14:44:39
0
60
c8de0476dcb6a388ca0a59d6af157960794b27c74ed3d0324020446ac7a1b017
2020-10-09 14:43:27
0
61
9b9d5f31799e168ca0b5cc7ffec716a0efa65e08a42b2cc3a425ccdca9a70742
2020-10-09 14:41:43
0
60
3e69d5564d0a22cb43638be9a4b0736d5ac8f7f210edd7ea666a018f2ac4d964
2020-10-09 14:41:25
0
61
a65be8739651d2d89d0e0984e486446ed4cd2e6d8eeb482bd780c674d67c8670
2020-10-09 14:37:47
0
61
ffbe04f609911142ad3819a1cd19e6e08eb43992869dc54e4d6370cef34568d4
2020-10-09 14:11:23
0
60
88f7e902a6e3d223202fa7457d45dff1ef3e1d4312976349636e4f6f86b1b11e
2020-10-09 13:42:54
0
60
d876a46bca91356dcc87ff64fbfe5d0d27a8aebe5be98f9fdacccf4f2e7a2044
2020-10-09 13:42:46
0
60
0307d83a788f0b5243abbd6f7c8eb2e9c5522170a6e68f1de200e9b41c1dfbaf
2020-10-09 13:39:10
0
60
ee07051ad8c026bd81ff8a7aa8665e2a0837f2f1515ff67b55aec5cc83b6548f

Rule Matches per Month (last 24 months)