Rule Info
Name
SUSP_MacOS_Stealer_Jun26
Author
Pezier Pierre-Henri
Description
Detects suspicious path that may indicate a macOS stealer. Further investigation is advised.
Score
65
Date
2026-06-26
Minimum Yara
4.0.0
Rule Hash
e7315af0207001eab59532de601d0c6c
Tags
['MACOS', 'SUSP']
Required Modules
[]
Virustotal Matches
Antivirus Verdicts
Rating
Number of Samples
Malicious (>= 10 engines)
5
Suspicious (< 10 engines)
17
Clean (0 engines)
0
Rule Matches
Timestamp
Positives
Total
Hash
VT
Rule Matches per Month (last 24 months)
Scan your endpoints, forensic images or collected files with our portable scanner THOR