Overview

overview

5

Static

static

1

Swinsian 3...1).dmg

macos-10.15-amd64

5

Swinsian 3...T].dmg

macos-10.15-amd64

1

Swinsian 3.../rhash

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3....dylib

macos-10.15-amd64

1

Swinsian 3...reader

macos-10.15-amd64

1

Swinsian 3...sxfuse

macos-10.15-amd64

1

Swinsian 3...n.html

macos-10.15-amd64

4

Swinsian 3...s.html

macos-10.15-amd64

4

Swinsian 3...g.html

macos-10.15-amd64

4

Swinsian 3...g.html

macos-10.15-amd64

4

Swinsian 3...s.html

macos-10.15-amd64

4

Swinsian 3...k.html

macos-10.15-amd64

4

Analysis

  • max time kernel
    64s
  • max time network
    103s
  • platform
    macos-10.15_amd64
  • resource
    macos-20241106-en
  • resource tags

    arch:amd64arch:i386image:macos-20241106-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    28/03/2025, 15:47

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Swinsian 3.0 Preview 5/Swinsian.app/Contents/Resources/Swinsian.help/Contents/Resources/English.lproj/pgs/playback.html

  • Size

    2KB

  • MD5

    5a733167b40557eaeb1dea802021778a

  • SHA1

    791c404f4a660f6d58a0193dc1ab49670c36a0de

  • SHA256

    fca60ca24e6a05af95c180c34cc6690653e239a4bef22ce329c5aa0586ac70cb

  • SHA512

    bb3bcab6c44c00f0a80d535f64898bc80dd2d59f31a1e9907ce5135208ca40709ac9d15ca133b065475bbc06389e88a9cc8791e11da5fc3f3cc619251e11a6be

Score
4/10
defense_evasion

Malware Config

Signatures

  • Resource Forking 1 TTPs 4 IoCs

    Adversaries may abuse resource forks to hide malicious code or executables to evade detection and bypass security applications. A resource fork provides applications a structured way to store resources such as thumbnail images, menu definitions, icons, dialog boxes, and code.

    defense_evasion

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Swinsian 3.0 Preview 5/Swinsian.app/Contents/Resources/Swinsian.help/Contents/Resources/English.lproj/pgs/playback.html\""
    1⤵
      PID:488
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Swinsian 3.0 Preview 5/Swinsian.app/Contents/Resources/Swinsian.help/Contents/Resources/English.lproj/pgs/playback.html\""
      1⤵
        PID:488
      • /usr/bin/sudo
        sudo /bin/zsh -c "/Users/run/Swinsian 3.0 Preview 5/Swinsian.app/Contents/Resources/Swinsian.help/Contents/Resources/English.lproj/pgs/playback.html"
        1⤵
          PID:488
          • /bin/zsh
            /bin/zsh -c "/Users/run/Swinsian 3.0 Preview 5/Swinsian.app/Contents/Resources/Swinsian.help/Contents/Resources/English.lproj/pgs/playback.html"
            2⤵
              PID:489
            • /Users/run/Swinsian
              /Users/run/Swinsian 3.0 Preview 5/Swinsian.app/Contents/Resources/Swinsian.help/Contents/Resources/English.lproj/pgs/playback.html
              2⤵
                PID:489

            Network

            MITRE ATT&CK Enterprise v15

            Replay Monitor

            Loading Replay Monitor...

            Downloads