MalwareBazaar Database
This page shows some basic information the YARA rule MAC_Loader_Osascript_ZipDropper including corresponding malware samples.
Database Entry
| YARA Rule: | MAC_Loader_Osascript_ZipDropper |
|---|---|
| Author: | Marjoriefort |
| Description: | Chargeur macOS par AppleScript : drop /tmp/osalogging.zip et /tmp/test.scpt, execute via osascript, C2 /gate et /dynamic?txd= |
| Firstseen: | 2026-09-25 23:33:41 UTC |
| Lastseen: | 2026-11-11 19:53:41 UTC |
| Sightings: | 2 |
Malware Samples
The table below shows all malware samples that matching this particular YARA rule (max 1000).
| Firstseen (UTC) | SHA256 hash | Tags | Signature | Reporter |
|---|