Skip to content

Hide Navigation Hide TOC

Potential In-Memory Download And Compile Of Payloads (13db8d2e-7723-4c2c-93c1-a4d36994f7ef)

Detects potential in-memory downloading and compiling of applets using curl and osacompile as seen used by XCSSET malware

Cluster A Galaxy A Cluster B Galaxy B Level
JavaScript - T1059.007 (0f4a0c76-ab2d-4cb0-85d3-3f0efb8cba0d) Attack Pattern Potential In-Memory Download And Compile Of Payloads (13db8d2e-7723-4c2c-93c1-a4d36994f7ef) Sigma-Rules 1
Potential In-Memory Download And Compile Of Payloads (13db8d2e-7723-4c2c-93c1-a4d36994f7ef) Sigma-Rules Ingress Tool Transfer - T1105 (e6919abc-99f9-4c6c-95a5-14761e7b2add) Attack Pattern 1
JavaScript - T1059.007 (0f4a0c76-ab2d-4cb0-85d3-3f0efb8cba0d) Attack Pattern Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830) Attack Pattern 2