Overview

overview

5

Static

static

1

Swinsian 3...1).dmg

macos-10.15-amd64

5

Swinsian 3...T].dmg

macos-10.15-amd64

1

Swinsian 3.../rhash

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3...reader

macos-10.15-amd64

1

Swinsian 3...sxfuse

macos-10.15-amd64

1

Swinsian 3...n.html

macos-10.15-amd64

4

Swinsian 3...s.html

macos-10.15-amd64

4

Swinsian 3...g.html

macos-10.15-amd64

4

Swinsian 3...g.html

macos-10.15-amd64

4

Swinsian 3...s.html

macos-10.15-amd64

4

Swinsian 3...k.html

macos-10.15-amd64

4

Analysis

  • max time kernel
    77s
  • max time network
    104s
  • platform
    macos-10.15_amd64
  • resource
    macos-20241106-en
  • resource tags

    arch:amd64arch:i386image:macos-20241106-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    28/03/2025, 15:47

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Swinsian 3.0 Preview 5/Swinsian.app/Contents/Resources/Swinsian.help/Contents/Resources/English.lproj/Swinsian.html

  • Size

    2KB

  • MD5

    c323677f277bfa4e805a028003880eae

  • SHA1

    5254da7d059ef737c92550f41c802fde6989b249

  • SHA256

    3205a5a94c32d3d70cd71edf8ea156c0b2d23327e91cfbb387aa14c5a9f1b57e

  • SHA512

    01426681f122007f2113dfe701fccc6e5d0b036aaefccb049e914a7d61ea0dec77f6087fae22164e278f0a2617975086b6d43a59965f25505c652f76c53727c5

Score
4/10
defense_evasion

Malware Config

Signatures

  • Resource Forking 1 TTPs 4 IoCs

    Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications. A resource fork provides applications a structured way to store resources such as thumbnail images, menu definitions, icons, dialog boxes, and code.

    defense_evasion

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Swinsian 3.0 Preview 5/Swinsian.app/Contents/Resources/Swinsian.help/Contents/Resources/English.lproj/Swinsian.html\""
    1⤵
      PID:480
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Swinsian 3.0 Preview 5/Swinsian.app/Contents/Resources/Swinsian.help/Contents/Resources/English.lproj/Swinsian.html\""
      1⤵
        PID:480
      • /usr/bin/sudo
        sudo /bin/zsh -c "/Users/run/Swinsian 3.0 Preview 5/Swinsian.app/Contents/Resources/Swinsian.help/Contents/Resources/English.lproj/Swinsian.html"
        1⤵
          PID:480
          • /bin/zsh
            /bin/zsh -c "/Users/run/Swinsian 3.0 Preview 5/Swinsian.app/Contents/Resources/Swinsian.help/Contents/Resources/English.lproj/Swinsian.html"
            2⤵
              PID:481
            • /Users/run/Swinsian
              /Users/run/Swinsian 3.0 Preview 5/Swinsian.app/Contents/Resources/Swinsian.help/Contents/Resources/English.lproj/Swinsian.html
              2⤵
                PID:481

            Network

            MITRE ATT&CK Enterprise v15

            Replay Monitor

            Loading Replay Monitor...

            Downloads