7a8fc48ce4df4448b91a1e6b66410cca6993ac072cb12860b9cfa6438b25ed8e
- SHA256 7a8fc48ce4df4448b91a1e6b66410cca6993ac072cb12860b9cfa6438b25ed8e
-
Detects Phexia AppleScript stage 1
General
- Target 7a8fc48ce4df4448b91a1e6b66410cca6993ac072cb12860b9cfa6438b25ed8e
- Size 99KB
- Sample260925-sn4edsfb35
- SHA256 7a8fc48ce4df4448b91a1e6b66410cca6993ac072cb12860b9cfa6438b25ed8e
Score
10/10
Malware Config
Signatures
- Family: Phexia
Phexia is a macOS AppleScript backdoor that resolves its C2 through a dead drop resolver and executes operator-supplied osascript modules.
- Detects Phexia AppleScript stage 1 1 IoCs
File Explorer
-
7a8fc48ce4df4448b91a1e6b66410cca6993ac072cb12860b9cfa6438b25ed8e