cef2e62993951b11b10aecd28d294e0426a7987058c4f1a49705712ea0402689 | Triage

Submit
Reports

Overview

overview

5

Static

static

1

Swinsian 3...1).dmg

macos-10.15-amd64

5

Swinsian 3...T].dmg

macos-10.15-amd64

1

Swinsian 3.../rhash

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3...reader

macos-10.15-amd64

1

Swinsian 3...sxfuse

macos-10.15-amd64

1

Swinsian 3...n.html

macos-10.15-amd64

4

Swinsian 3...s.html

macos-10.15-amd64

4

Swinsian 3...g.html

macos-10.15-amd64

4

Swinsian 3...g.html

macos-10.15-amd64

4

Swinsian 3...s.html

macos-10.15-amd64

4

Swinsian 3...k.html

macos-10.15-amd64

4

Analysis

max time kernel
67s
max time network
149s
platform
macos-10.15_amd64
resource
macos-20241101-en
resource tags

arch:amd64arch:i386image:macos-20241101-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
28/03/2025, 15:47

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

Swinsian 3.0 Preview 5 (1).dmg

Resource

macos-20241106-en

defense_evasion discovery

macos-10.15-amd64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

Swinsian 3.0 Preview 5/Manual install/Swinsian 3.0 Preview 5 [TNT].dmg

Resource

macos-20241106-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Swinsian 3.0 Preview 5/Extra/rhash

Resource

macos-20241101-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libFLAC.dylib

Resource

macos-20241106-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libGME.dylib

Resource

macos-20241101-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libavcodec.dylib

Resource

macos-20241106-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libavformat.dylib

Resource

macos-20241101-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libavutil.dylib

Resource

macos-20241101-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libexpat.dylib

Resource

macos-20241106-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libgcrypt.dylib

Resource

macos-20241106-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libgdk_pixbuf-2.0.dylib

Resource

macos-20241106-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libgio.dylib

Resource

macos-20241106-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libglib-2.0.dylib

Resource

macos-20241101-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libgmodule.dylib

Resource

macos-20241106-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libgmp.dylib

Resource

macos-20241106-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libgnutls.dylib

Resource

macos-20241101-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libgobject.dylib

Resource

macos-20241101-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libgpg-error.dylib

Resource

macos-20241106-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libgpod.dylib

Resource

macos-20241101-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libgthread.dylib

Resource

macos-20241106-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libhogweed.dylib

Resource

macos-20241106-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libimobiledevice.dylib

Resource

macos-20241101-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libintl.dylib

Resource

macos-20241101-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/MacOS/device_name_reader

Resource

macos-20241106-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/MacOS/ifuse-osxfuse

Resource

macos-20241106-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Resources/Swinsian.help/Contents/Resources/English.lproj/Swinsian.html

Resource

macos-20241106-en

defense_evasion

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Resources/Swinsian.help/Contents/Resources/English.lproj/pgs/airtunes.html

Resource

macos-20241101-en

defense_evasion

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Resources/Swinsian.help/Contents/Resources/English.lproj/pgs/folder_watching.html

Resource

macos-20241106-en

defense_evasion

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Resources/Swinsian.help/Contents/Resources/English.lproj/pgs/importing.html

Resource

macos-20241101-en

defense_evasion

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Resources/Swinsian.help/Contents/Resources/English.lproj/pgs/ipods.html

Resource

macos-20241101-en

defense_evasion

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Resources/Swinsian.help/Contents/Resources/English.lproj/pgs/playback.html

Resource

macos-20241106-en

defense_evasion

macos-10.15-amd64

1 signatures

150 seconds

Report Analysis Logs

General

Target

Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libglib-2.0.dylib
Size

1.2MB
MD5

75ced143a7b68a78eb7fa9d5fae805b9
SHA1

dd4f5c1fc76be37e2b0fca111d6a7734cc5a6847
SHA256

ced525e61d310648c287b6b01245543a95080f2ef792222231a9c3c8aed41d33
SHA512

67f72499ac3996d2d699b12203d77e35d68cf2d1a53b080ea61e397d27765b44ec9c3b80896f1622c30defe4ed91705841e07aecfb5d6ccdf3c378a98df32d19
SSDEEP

24576:UHiTxSgy9V2zj51TgibxMu1z1ijS9Y4+mILgZclR/18n8jW+4Q:8iTx+w51Eil3z1ijS9Y4rSCclRe1+4Q

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libglib-2.0.dylib\""
1⤵
PID:460

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libglib-2.0.dylib\""
1⤵
PID:460

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libglib-2.0.dylib"
1⤵
PID:460
- /bin/zsh
  /bin/zsh -c "/Users/run/Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libglib-2.0.dylib"
  2⤵
  PID:467
- /Users/run/Swinsian
  /Users/run/Swinsian 3.0 Preview 5/Swinsian.app/Contents/Frameworks/libglib-2.0.dylib
  2⤵
  PID:467

/usr/libexec/xpcproxy
xpcproxy com.apple.nsurlstoraged
1⤵
PID:484

/usr/libexec/nsurlstoraged
/usr/libexec/nsurlstoraged --privileged
1⤵
PID:484

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/var/db/nsurlstoraged/dafsaData.bin

Filesize
54KB

MD5
64f469698e53d0c828b7f90acd306082

SHA1
bcc041b3849e1b0b4104ffeb46002207eeac54f3

SHA256
d74d0e429343f5e1b3e0b9437e048917c4343a30cff068739ea898bad8e37ffd

SHA512
a8334d1304f2fbd32cfd0ca35c289a45c450746cf3be57170cbbe87b723b1910c2e950a73c1fb82de9dc5ed623166d339a05fec3d78b861a9254dc2cb51fab5f

Download Submit

© 2018-2025

Terms | Privacy