MAL_FinFisher_MacOS_Oct20_2

Rule Info

Date
2020-10-05
Av Ratio
5.32
Rule Hash
afeb8bfb069a0d408f3c66ffb4483924
Score
75
Description
Detects FinSpy for MacOS
Name
MAL_FinFisher_MacOS_Oct20_2
Required Modules
[]
Tags
['MAL']
Author
Max Altgelt
Minimum Yara
1.7

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
5
Suspicious (< 10 engines)
0
Clean (0 engines)
47

Rule Matches

Hash
Total
Timestamp
Positives
VT
0c646bb87779a04efb0cc40284c59acc90d36084b9775b1a667ea6c44658dbb7
61
2020-10-09 16:32:39
0
e68334f6c551c16848974c84f3b3bbeb16d2d754d02f6a236c91b99e63cd2c94
61
2020-10-09 16:28:50
0
c47d39d790a645c4c755126ce68bd335121a4f4a4019e07107aa1493d51bea89
61
2020-10-09 16:28:28
0
19222eb07a80958e5240e23745e563e81572fb2eaf9d7c029b7b8fd9bf871e66
59
2020-10-09 16:28:04
0
473ba8881591f86f965ea2a8badb6ea4e21275b66c13382ae338d4ad0d98f7cd
60
2020-10-09 16:25:57
0
21c17e49728f104e7a874410c124ff4733f4560790873837c972dbcb0006d08b
56
2020-10-09 16:25:49
0
fee267d42a096ef77e38dd7fe34406a94e4be5d174200ea3ac55bc72e80a865a
59
2020-10-09 16:25:35
0
69b6585077b9c8103e89ccc3f06ef1d6be4eda2c3344f15665fb2d1700cb88fc
61
2020-10-09 16:24:04
0
f9a88d5e50074e510d699aad797db52e05cc192b67f108ea8dea1cc3811701c4
60
2020-10-09 16:23:38
0
1c7ffd37d5ba6631348c1065adc0713c4d2f13220c8504ec7b971828f4ac2026
59
2020-10-09 16:23:24
0
c420af7739f32873aaf64f4654a220044289a048556d6b4edc6d1ba4ecbc0c29
60
2020-10-09 16:23:23
0
28fa62c7ce4dd7b5733712717b9bea86baa11af9dc1544ca296d2381d5f9e880
61
2020-10-09 16:23:16
0
c4a5e38d272a7f709dec0d57c1a64c0903ebd22775be16a69e5c37fe51871676
61
2020-10-09 16:23:02
0
0b4a69c3434c3f2830cbb42f1653110ac1588b9f8d90f58678a48f4187c91f70
61
2020-10-09 16:22:35
0
ac86552463e42fbd33a745ac84f2b33287b24a2201f88b0bddf745f69519007d
58
2020-10-09 15:57:49
0
349abb9d96cbdf2528bb5ad1c55f3c5488e403d8e6b318530523dfb58b762f44
58
2020-10-09 15:57:42
0
f8aaac2821c4c58467116492d6137cf0ebcba3451ff5f7cbd6fca48e57b41f88
61
2020-10-09 15:56:34
0
24a5a9d97a8b5f2121a9461b33ed997110c0281ee668712ca676bcc280e0f3a6
60
2020-10-09 15:54:51
0
0a002f267e169faf06a96a93161b92f4a0a5bf768d7588eaf9260669fa30cc23
61
2020-10-09 15:54:45
0
0f22a627b18404046e6eb7fe40f5e88069a830c3640fe00d5a5e96b3c78fccbe
61
2020-10-09 15:54:04
0
a9ea8fa86dfacee8d5d39c4683b4eb999aee969fa50b6a9c518c2f7624c87bb1
61
2020-10-09 15:54:01
0
a18dd738a5c7fd7520eb72cd9fac251a13674a17b61ad1b759504da32b7ea3fc
60
2020-10-09 15:53:48
0
67e88b60dd54a0adfc738946c9dd7c3a095d1cfd89c9ddc90da3f062d11c904c
61
2020-10-09 15:52:34
0
675a1fd1c57d8345659ce273339cc0042067aba53fabd778b0086b9121d19b28
61
2020-10-09 15:51:25
0
5079874f6b3c0e6661b8aa8a8777860a36571f4e5df653f8e922f50e93499470
60
2020-10-09 15:50:59
0
53186cf3c94bf5487ad89f016640352ef52a2680b29252b37052506415f25995
59
2020-10-09 15:50:45
0
e90c6df5e6e09a2cd6db3fed7c425b734b9901ed6519ac680de8306626ad735d
59
2020-10-09 15:50:30
0
b0dfe15d6b0c4e76fa6948ddc1dbcbb5381215264b41610c18b29d3989fcfb10
59
2020-10-09 15:50:29
0
f14d91224a4bc8b9845989d24febaf17a47fbccc441b5b3a83594c6c83499653
59
2020-10-09 15:50:26
0
94cc24604197b33bbfafad8996915c92458c965de2fe5f55ac683df8982a3dcc
59
2020-10-09 15:50:12
0
f8cd057cf3f816435aa9ca8e88d03313e9ee6a640f3bf38711ad4579c5373531
61
2020-10-09 15:47:12
0
9ec9e731ef832f6c608f9caeb0073ffa48efca96c515da0c9d3abef5b358909c
60
2020-10-09 15:46:44
0
bbeff9c266ebe523c8a3ea0fd2d1e050c2804d19133ea95d0a9bb04c56f2c892
61
2020-10-09 15:46:24
0
ed0c5886a43a896f501e0b734695d51a9163bdd8bbe011bf21447f87b0436ee2
58
2020-10-09 15:45:42
32
46812b7b53308d38aa123d3d1fe0c2be332e2948cbb2a37fa66562fb44ed5e72
60
2020-10-09 15:44:13
33
c984afb4744b8c1cbc1e0f15a341d5ec126c9129b437d703581f7d0b801e434f
61
2020-10-09 15:43:57
34
9e86f0b1708b71f15f843cf945465a7be8620a883f74b875811e002d33de5267
62
2020-10-09 15:35:17
0
c347e849ee962322044e0c6b13d8d9e8abacf07877d18dd7f394df05e9b26c23
61
2020-10-09 15:28:31
34
cd898375591749d5a7a161e330ade855599dc3c27b43046a905c57c6471a3068
61
2020-10-09 15:27:14
0
1fb6f83f88b7b7f67d73e19af26f40882d2916cbab948ce4277192c8aa18febb
60
2020-10-09 15:19:09
33
54f5f5e56618fcb497410e961a4b93e2173a371cee84eb12a017cf762a3b83b2
61
2020-10-09 14:58:39
0
9958477d81dffa021159c5f836ce19d39c723a80e3f6808f03e939ae86db68fe
61
2020-10-09 14:52:06
0
52c683729905cd17e2241b83033671bccd1f6c61c7f2eef1f742612249f25ed6
58
2020-10-09 14:45:21
0
c8de0476dcb6a388ca0a59d6af157960794b27c74ed3d0324020446ac7a1b017
60
2020-10-09 14:44:39
0
9b9d5f31799e168ca0b5cc7ffec716a0efa65e08a42b2cc3a425ccdca9a70742
61
2020-10-09 14:43:27
0
3e69d5564d0a22cb43638be9a4b0736d5ac8f7f210edd7ea666a018f2ac4d964
60
2020-10-09 14:41:43
0
a65be8739651d2d89d0e0984e486446ed4cd2e6d8eeb482bd780c674d67c8670
61
2020-10-09 14:41:25
0
ffbe04f609911142ad3819a1cd19e6e08eb43992869dc54e4d6370cef34568d4
61
2020-10-09 14:37:47
0
88f7e902a6e3d223202fa7457d45dff1ef3e1d4312976349636e4f6f86b1b11e
60
2020-10-09 14:11:23
0
d876a46bca91356dcc87ff64fbfe5d0d27a8aebe5be98f9fdacccf4f2e7a2044
60
2020-10-09 13:42:54
0
0307d83a788f0b5243abbd6f7c8eb2e9c5522170a6e68f1de200e9b41c1dfbaf
60
2020-10-09 13:42:46
0
ee07051ad8c026bd81ff8a7aa8665e2a0837f2f1515ff67b55aec5cc83b6548f
60
2020-10-09 13:39:10
0

Rule Matches per Month (last 24 months)