Analysis

  • max time kernel
    68s
  • max time network
    109s
  • platform
    macos-10.15_amd64
  • resource
    macos-20241106-en
  • resource tags

    arch:amd64arch:i386image:macos-20241106-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    28/03/2025, 15:47

General

  • Target

    Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libgio.dylib

  • Size

    1.4MB

  • MD5

    232d4c89858b99b6d64af8ef54ffbd1d

  • SHA1

    7b5e03b524d49ba6e4a9db8d4c305e701052089e

  • SHA256

    a27509ac2a242684c0344ea782c7a27c0195e189cd8ab71a7d98fa1dc2ef747b

  • SHA512

    f05dababa2bf0d754bd8105300cb7f264f64175fed197a44c929310d0234aaf03a23c5c593b29ea5f1584a58e12c4aadf6c91f3a8978b22d23350c3551f8e88e

  • SSDEEP

    24576:+FVa0N/DcNcVJBp/zjn7BkaTqReDpzgkWRjvrd6uWbqSg:G7N/D8cJBprnBkaqgNzUjdeXg

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libgio.dylib\""
    1⤵
      PID:469
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libgio.dylib\""
      1⤵
        PID:469
      • /usr/bin/sudo
        sudo /bin/zsh -c "/Users/run/Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libgio.dylib"
        1⤵
          PID:469
          • /bin/zsh
            /bin/zsh -c "/Users/run/Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libgio.dylib"
            2⤵
              PID:470
            • /Users/run/Swinsian
              /Users/run/Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libgio.dylib
              2⤵
                PID:470

            Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads