MalwareBazaar Database
This page shows some basic information the YARA rule Seedhook_Stage3_AppleScript_Pipeline including corresponding malware samples.
Database Entry
| YARA Rule: | Seedhook_Stage3_AppleScript_Pipeline |
|---|---|
| Description: | Seedhook/MacSync stage-3 AppleScript stealer: /pipeline/event telemetry fields, fromCodes() ASCII-array string builder, AMOS-derived handler names |
| Firstseen: | 2026-09-25 23:33:41 UTC |
| Lastseen: | 2026-11-11 19:53:41 UTC |
| Sightings: | 2 |
Malware Samples
The table below shows all malware samples that matching this particular YARA rule (max 1000).
| Firstseen (UTC) | SHA256 hash | Tags | Signature | Reporter |
|---|