Snake, also known as Turla, Uroburos and Agent.BTZ, is a relatively complex malware framework used for targeted attacks. Fox-IT has been involved in multiple incident response cases where Snake was used to steal sensitive information. The OS X version of Snake is a port of the Windows version. References to explorer, Internet Explorer and Named Pipes are still present in the binary. Snake binary comes inside of a ZIP archive named Adobe Flash Player.app which is a backdoored version of Adobes Flash Player installer.”]
Source: https://blog.fox-it.com/2017/05/03/snake-coming-soon-in-mac-os-x-flavour/