Effy Elden
@ineffyble3 followers309 downloads105 copies6 likes2,561 views
27 detections
Filters
Last updated
All Time
Detection languages
21
4
2
Categories
12
3
3
3
3
Platforms
19
4
3
2
1
Products / Services
2
1
1
1
MITRE Techniques
14
9
6
6
5
CVEs
1
Detects command line creation or loading of suspicious LaunchAgent plists related to FlexibleFerret malware on macOS.
Detects queries to IP lookup services used by FlexibleFerret for victim identification.
Detects execution of MediaPatcher.app decoy application used for credential harvesting.
Detects HTTP/HTTPS communication to known FlexibleFerret payload hosting domains.
Detects DNS or HTTP communication to known FlexibleFerret malware infrastructure domains.
Detects network communication to known FlexibleFerret C2 infrastructure. The rule is valid.
Detects execution of known FlexibleFerret shell scripts used for staging and persistence.
Page 3 of 3