1c2b09417c1a34bbbcb8366c2c184cf31353acda0180c92f99828554abf65823

Analysis

max time kernel
0s
max time network
57s
platform
linux_mipsel
resource
debian9-mipsel
submitted
23/06/2021, 08:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
DarkRadiation
Size 19KB
Sample210623-p8a17a9qb6
SHA256 1c2b09417c1a34bbbcb8366c2c184cf31353acda0180c92f99828554abf65823
MD5 b018520ecac7ce6a3640a7a13d0549f0
SHA1 8afaeacd1e9cf91ad68f6444070a5024861b984d
SHA512 18b9061d22b53df70ada550fcc8c1a2b4c1247d3a497a4ab7b71937a5301983414257a2a83dad98c30156174c5b23fee1b5ea5b1081ab32cbc13888f996c2a29
MD5 SHA1 SHA512

Score

9^/10

Malware Config

Signatures

Deletes system logs 1 TTPs 5 IoCs

Indicator Removal on Host

T1070

description	ioc	Process
/var/log/apt/eipp.log.xz	/var/log/apt/eipp.log.xz	apt-get
/var/log/apt/term.log	/var/log/apt/term.log	apt-get
/var/log/apt/history.log	/var/log/apt/history.log	apt-get
/var/log/dpkg.log	/var/log/dpkg.log	dpkg
/var/log/dpkg.log	/var/log/dpkg.log	dpkg

Modifies hosts file 1 IoCs

Adds to hosts file used for mapping hosts to IP addresses.

description	ioc	Process
/etc/hosts	/etc/hosts	http

Writes DNS configuration 1 TTPs 1 IoCs

Writes data to DNS resolver config file.

Dynamic Resolution

T1568

description	ioc	Process
/etc/resolv.conf	/etc/resolv.conf	http

Write file to user bin folder 1 TTPs 5 IoCs

Hijack Execution Flow

T1574

description	ioc	Process
/usr/sbin/update-ca-certificates.dpkg-new	/usr/sbin/update-ca-certificates.dpkg-new	dpkg
/usr/bin/curl.dpkg-new	/usr/bin/curl.dpkg-new	dpkg
/usr/sbin/dpkg-preconfigure	/usr/sbin/dpkg-preconfigure	dpkg-preconfigure
/usr/bin/c_rehash.dpkg-new	/usr/bin/c_rehash.dpkg-new	dpkg
/usr/bin/openssl.dpkg-new	/usr/bin/openssl.dpkg-new	dpkg

Reads runtime system information 28 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
/proc/filesystems	/proc/filesystems	dpkg
/proc/filesystems	/proc/filesystems	dpkg
/proc/filesystems	/proc/filesystems	tar
/proc/filesystems	/proc/filesystems	tar
/proc/filesystems	/proc/filesystems	tar
/proc/filesystems	/proc/filesystems	find
/proc/filesystems	/proc/filesystems	dpkg
/proc/filesystems	/proc/filesystems	tar
/proc/filesystems	/proc/filesystems	stat
/proc/filesystems	/proc/filesystems	tar
/proc/filesystems	/proc/filesystems	dpkg
/proc/filesystems	/proc/filesystems	sed
/proc/filesystems	/proc/filesystems	tar
/proc/filesystems	/proc/filesystems	mkdir
/proc/filesystems	/proc/filesystems	sed
/proc/filesystems	/proc/filesystems	sed
/proc/self/fd	/proc/self/fd	Process not Found
/proc/filesystems	/proc/filesystems	dpkg
/proc/sys/kernel/ngroups_max	/proc/sys/kernel/ngroups_max	apt-get
/proc/filesystems	/proc/filesystems	tar
/proc/filesystems	/proc/filesystems	tar
/proc/filesystems	/proc/filesystems	tar
/proc/filesystems	/proc/filesystems	tar
/proc/filesystems	/proc/filesystems	tar
/proc/filesystems	/proc/filesystems	dpkg
/proc/filesystems	/proc/filesystems	sed
/proc/filesystems	/proc/filesystems	tar
/proc/filesystems	/proc/filesystems	stat

Writes file to tmp directory 55 IoCs

Malware often drops required files in the /tmp directory.

./DarkRadiation
./DarkRadiation
1⤵
PID:344
- /usr/bin/apt-get
  apt-get install curl --yes
  2⤵
  - Deletes system logs
  - Reads runtime system information
  - Writes file to tmp directory
  PID:349
- - /usr/bin/dpkg
    /usr/bin/dpkg --print-foreign-architectures
    3⤵
    - Reads runtime system information
    PID:353
- - /usr/bin/dpkg
    /usr/bin/dpkg --print-foreign-architectures
    3⤵
    - Reads runtime system information
    PID:358
- - /usr/lib/apt/methods/http
    /usr/lib/apt/methods/http
    3⤵
    PID:374
- - /usr/lib/apt/methods/http
    /usr/lib/apt/methods/http
    3⤵
    - Modifies hosts file
    - Writes DNS configuration
    PID:375
- - /bin/sh
    /bin/sh -c "/usr/sbin/dpkg-preconfigure --apt || true"
    3⤵
    PID:376
  - - /usr/sbin/dpkg-preconfigure
      /usr/sbin/dpkg-preconfigure --apt
      4⤵
      Write file to user bin folder
      PID:377
    - - /usr/local/sbin/locale
        
        locale charmap
        5⤵
        
        PID:378
    - - /usr/local/bin/locale
        
        locale charmap
        5⤵
        
        PID:378
    - - /usr/sbin/locale
        
        locale charmap
        5⤵
        
        PID:378
    - - /usr/bin/locale
        
        locale charmap
        5⤵
        
        PID:378
    - - /bin/sh
        
        sh -c "stty -a 2>/dev/null"
        5⤵
        
        PID:379
      - /bin/stty
        
        stty -a
        6⤵
        
        PID:380
    - - /bin/sh
        
        sh -c "stty -a 2>/dev/null"
        5⤵
        
        PID:381
      - /bin/stty
        
        stty -a
        6⤵
        
        PID:382
    - - /bin/sh
        
        sh -c "stty -a 2>/dev/null"
        5⤵
        
        PID:383
      - /bin/stty
        
        stty -a
        6⤵
        
        PID:384
    - - /bin/sh
        
        sh -c "stty -a 2>/dev/null"
        5⤵
        
        PID:385
      - /bin/stty
        
        stty -a
        6⤵
        
        PID:386
- - /usr/bin/dpkg
    /usr/bin/dpkg --assert-multi-arch
    3⤵
    - Reads runtime system information
    PID:387
- - /usr/bin/dpkg
    /usr/bin/dpkg --status-fd 14 --no-triggers --unpack --auto-deconfigure --recursive /tmp/apt-dpkg-install-gO8hq8
    3⤵
    - Deletes system logs
    - Write file to user bin folder
    - Reads runtime system information
    - Writes file to tmp directory
    PID:388
  - - /usr/local/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/tmp/apt-dpkg-install-gO8hq8/00-libsasl2-modules-db_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb"
      4⤵
      PID:389
  - - /usr/local/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/tmp/apt-dpkg-install-gO8hq8/00-libsasl2-modules-db_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb"
      4⤵
      PID:389
  - - /usr/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/tmp/apt-dpkg-install-gO8hq8/00-libsasl2-modules-db_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb"
      4⤵
      PID:389
  - - /usr/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/tmp/apt-dpkg-install-gO8hq8/00-libsasl2-modules-db_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb"
      4⤵
      Writes file to tmp directory
      PID:389
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --control "/tmp/apt-dpkg-install-gO8hq8/00-libsasl2-modules-db_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb" /var/lib/dpkg/tmp.ci
      4⤵
      PID:390
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --control "/tmp/apt-dpkg-install-gO8hq8/00-libsasl2-modules-db_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb" /var/lib/dpkg/tmp.ci
      4⤵
      PID:390
  - - /usr/sbin/dpkg-deb
      dpkg-deb --control "/tmp/apt-dpkg-install-gO8hq8/00-libsasl2-modules-db_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb" /var/lib/dpkg/tmp.ci
      4⤵
      PID:390
  - - /usr/bin/dpkg-deb
      dpkg-deb --control "/tmp/apt-dpkg-install-gO8hq8/00-libsasl2-modules-db_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb" /var/lib/dpkg/tmp.ci
      4⤵
      Writes file to tmp directory
      PID:390
    - - /usr/local/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:393
    - - /usr/local/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:393
    - - /usr/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:393
    - - /usr/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:393
    - - /sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:393
    - - /bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        Reads runtime system information
        
        PID:393
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile "/tmp/apt-dpkg-install-gO8hq8/00-libsasl2-modules-db_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb"
      4⤵
      PID:394
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --fsys-tarfile "/tmp/apt-dpkg-install-gO8hq8/00-libsasl2-modules-db_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb"
      4⤵
      PID:394
  - - /usr/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile "/tmp/apt-dpkg-install-gO8hq8/00-libsasl2-modules-db_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb"
      4⤵
      PID:394
  - - /usr/bin/dpkg-deb
      dpkg-deb --fsys-tarfile "/tmp/apt-dpkg-install-gO8hq8/00-libsasl2-modules-db_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb"
      4⤵
      Writes file to tmp directory
      PID:394
  - - /usr/local/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:397
  - - /usr/local/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:397
  - - /usr/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:397
  - - /usr/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:397
  - - /sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:397
  - - /bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:397
  - - /usr/local/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/tmp/apt-dpkg-install-gO8hq8/01-libsasl2-2_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb"
      4⤵
      PID:398
  - - /usr/local/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/tmp/apt-dpkg-install-gO8hq8/01-libsasl2-2_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb"
      4⤵
      PID:398
  - - /usr/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/tmp/apt-dpkg-install-gO8hq8/01-libsasl2-2_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb"
      4⤵
      PID:398
  - - /usr/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/tmp/apt-dpkg-install-gO8hq8/01-libsasl2-2_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb"
      4⤵
      Writes file to tmp directory
      PID:398
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --control "/tmp/apt-dpkg-install-gO8hq8/01-libsasl2-2_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb" /var/lib/dpkg/tmp.ci
      4⤵
      PID:399
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --control "/tmp/apt-dpkg-install-gO8hq8/01-libsasl2-2_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb" /var/lib/dpkg/tmp.ci
      4⤵
      PID:399
  - - /usr/sbin/dpkg-deb
      dpkg-deb --control "/tmp/apt-dpkg-install-gO8hq8/01-libsasl2-2_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb" /var/lib/dpkg/tmp.ci
      4⤵
      PID:399
  - - /usr/bin/dpkg-deb
      dpkg-deb --control "/tmp/apt-dpkg-install-gO8hq8/01-libsasl2-2_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb" /var/lib/dpkg/tmp.ci
      4⤵
      Writes file to tmp directory
      PID:399
    - - /usr/local/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:402
    - - /usr/local/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:402
    - - /usr/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:402
    - - /usr/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:402
    - - /sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:402
    - - /bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        Reads runtime system information
        
        PID:402
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile "/tmp/apt-dpkg-install-gO8hq8/01-libsasl2-2_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb"
      4⤵
      PID:403
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --fsys-tarfile "/tmp/apt-dpkg-install-gO8hq8/01-libsasl2-2_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb"
      4⤵
      PID:403
  - - /usr/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile "/tmp/apt-dpkg-install-gO8hq8/01-libsasl2-2_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb"
      4⤵
      PID:403
  - - /usr/bin/dpkg-deb
      dpkg-deb --fsys-tarfile "/tmp/apt-dpkg-install-gO8hq8/01-libsasl2-2_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb"
      4⤵
      Writes file to tmp directory
      PID:403
  - - /usr/local/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:406
  - - /usr/local/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:406
  - - /usr/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:406
  - - /usr/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:406
  - - /sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:406
  - - /bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:406
  - - /usr/local/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/02-libldap-common_2.4.44+dfsg-5+deb9u4_all.deb
      4⤵
      PID:407
  - - /usr/local/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/02-libldap-common_2.4.44+dfsg-5+deb9u4_all.deb
      4⤵
      PID:407
  - - /usr/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/02-libldap-common_2.4.44+dfsg-5+deb9u4_all.deb
      4⤵
      PID:407
  - - /usr/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/02-libldap-common_2.4.44+dfsg-5+deb9u4_all.deb
      4⤵
      Writes file to tmp directory
      PID:407
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/02-libldap-common_2.4.44+dfsg-5+deb9u4_all.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:408
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/02-libldap-common_2.4.44+dfsg-5+deb9u4_all.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:408
  - - /usr/sbin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/02-libldap-common_2.4.44+dfsg-5+deb9u4_all.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:408
  - - /usr/bin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/02-libldap-common_2.4.44+dfsg-5+deb9u4_all.deb /var/lib/dpkg/tmp.ci
      4⤵
      Writes file to tmp directory
      PID:408
    - - /usr/local/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:411
    - - /usr/local/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:411
    - - /usr/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:411
    - - /usr/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:411
    - - /sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:411
    - - /bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        Reads runtime system information
        
        PID:411
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/02-libldap-common_2.4.44+dfsg-5+deb9u4_all.deb
      4⤵
      PID:412
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/02-libldap-common_2.4.44+dfsg-5+deb9u4_all.deb
      4⤵
      PID:412
  - - /usr/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/02-libldap-common_2.4.44+dfsg-5+deb9u4_all.deb
      4⤵
      PID:412
  - - /usr/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/02-libldap-common_2.4.44+dfsg-5+deb9u4_all.deb
      4⤵
      Writes file to tmp directory
      PID:412
  - - /usr/local/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:415
  - - /usr/local/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:415
  - - /usr/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:415
  - - /usr/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:415
  - - /sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:415
  - - /bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:415
  - - /usr/local/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/03-libldap-2.4-2_2.4.44+dfsg-5+deb9u4_mipsel.deb
      4⤵
      PID:416
  - - /usr/local/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/03-libldap-2.4-2_2.4.44+dfsg-5+deb9u4_mipsel.deb
      4⤵
      PID:416
  - - /usr/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/03-libldap-2.4-2_2.4.44+dfsg-5+deb9u4_mipsel.deb
      4⤵
      PID:416
  - - /usr/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/03-libldap-2.4-2_2.4.44+dfsg-5+deb9u4_mipsel.deb
      4⤵
      Writes file to tmp directory
      PID:416
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/03-libldap-2.4-2_2.4.44+dfsg-5+deb9u4_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:417
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/03-libldap-2.4-2_2.4.44+dfsg-5+deb9u4_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:417
  - - /usr/sbin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/03-libldap-2.4-2_2.4.44+dfsg-5+deb9u4_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:417
  - - /usr/bin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/03-libldap-2.4-2_2.4.44+dfsg-5+deb9u4_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      Writes file to tmp directory
      PID:417
    - - /usr/local/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:420
    - - /usr/local/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:420
    - - /usr/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:420
    - - /usr/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:420
    - - /sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:420
    - - /bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        Reads runtime system information
        
        PID:420
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/03-libldap-2.4-2_2.4.44+dfsg-5+deb9u4_mipsel.deb
      4⤵
      PID:421
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/03-libldap-2.4-2_2.4.44+dfsg-5+deb9u4_mipsel.deb
      4⤵
      PID:421
  - - /usr/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/03-libldap-2.4-2_2.4.44+dfsg-5+deb9u4_mipsel.deb
      4⤵
      PID:421
  - - /usr/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/03-libldap-2.4-2_2.4.44+dfsg-5+deb9u4_mipsel.deb
      4⤵
      Writes file to tmp directory
      PID:421
  - - /usr/local/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:424
  - - /usr/local/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:424
  - - /usr/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:424
  - - /usr/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:424
  - - /sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:424
  - - /bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:424
  - - /usr/local/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/tmp/apt-dpkg-install-gO8hq8/04-openssl_1.1.0l-1~deb9u1_mipsel.deb"
      4⤵
      PID:425
  - - /usr/local/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/tmp/apt-dpkg-install-gO8hq8/04-openssl_1.1.0l-1~deb9u1_mipsel.deb"
      4⤵
      PID:425
  - - /usr/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/tmp/apt-dpkg-install-gO8hq8/04-openssl_1.1.0l-1~deb9u1_mipsel.deb"
      4⤵
      PID:425
  - - /usr/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/tmp/apt-dpkg-install-gO8hq8/04-openssl_1.1.0l-1~deb9u1_mipsel.deb"
      4⤵
      Writes file to tmp directory
      PID:425
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --control "/tmp/apt-dpkg-install-gO8hq8/04-openssl_1.1.0l-1~deb9u1_mipsel.deb" /var/lib/dpkg/tmp.ci
      4⤵
      PID:426
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --control "/tmp/apt-dpkg-install-gO8hq8/04-openssl_1.1.0l-1~deb9u1_mipsel.deb" /var/lib/dpkg/tmp.ci
      4⤵
      PID:426
  - - /usr/sbin/dpkg-deb
      dpkg-deb --control "/tmp/apt-dpkg-install-gO8hq8/04-openssl_1.1.0l-1~deb9u1_mipsel.deb" /var/lib/dpkg/tmp.ci
      4⤵
      PID:426
  - - /usr/bin/dpkg-deb
      dpkg-deb --control "/tmp/apt-dpkg-install-gO8hq8/04-openssl_1.1.0l-1~deb9u1_mipsel.deb" /var/lib/dpkg/tmp.ci
      4⤵
      Writes file to tmp directory
      PID:426
    - - /usr/local/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:429
    - - /usr/local/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:429
    - - /usr/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:429
    - - /usr/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:429
    - - /sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:429
    - - /bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        Reads runtime system information
        
        PID:429
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile "/tmp/apt-dpkg-install-gO8hq8/04-openssl_1.1.0l-1~deb9u1_mipsel.deb"
      4⤵
      PID:430
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --fsys-tarfile "/tmp/apt-dpkg-install-gO8hq8/04-openssl_1.1.0l-1~deb9u1_mipsel.deb"
      4⤵
      PID:430
  - - /usr/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile "/tmp/apt-dpkg-install-gO8hq8/04-openssl_1.1.0l-1~deb9u1_mipsel.deb"
      4⤵
      PID:430
  - - /usr/bin/dpkg-deb
      dpkg-deb --fsys-tarfile "/tmp/apt-dpkg-install-gO8hq8/04-openssl_1.1.0l-1~deb9u1_mipsel.deb"
      4⤵
      Writes file to tmp directory
      PID:430
  - - /usr/local/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:433
  - - /usr/local/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:433
  - - /usr/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:433
  - - /usr/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:433
  - - /sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:433
  - - /bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:433
  - - /usr/local/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/tmp/apt-dpkg-install-gO8hq8/05-ca-certificates_20200601~deb9u1_all.deb"
      4⤵
      PID:434
  - - /usr/local/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/tmp/apt-dpkg-install-gO8hq8/05-ca-certificates_20200601~deb9u1_all.deb"
      4⤵
      PID:434
  - - /usr/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/tmp/apt-dpkg-install-gO8hq8/05-ca-certificates_20200601~deb9u1_all.deb"
      4⤵
      PID:434
  - - /usr/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/tmp/apt-dpkg-install-gO8hq8/05-ca-certificates_20200601~deb9u1_all.deb"
      4⤵
      Writes file to tmp directory
      PID:434
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --control "/tmp/apt-dpkg-install-gO8hq8/05-ca-certificates_20200601~deb9u1_all.deb" /var/lib/dpkg/tmp.ci
      4⤵
      PID:435
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --control "/tmp/apt-dpkg-install-gO8hq8/05-ca-certificates_20200601~deb9u1_all.deb" /var/lib/dpkg/tmp.ci
      4⤵
      PID:435
  - - /usr/sbin/dpkg-deb
      dpkg-deb --control "/tmp/apt-dpkg-install-gO8hq8/05-ca-certificates_20200601~deb9u1_all.deb" /var/lib/dpkg/tmp.ci
      4⤵
      PID:435
  - - /usr/bin/dpkg-deb
      dpkg-deb --control "/tmp/apt-dpkg-install-gO8hq8/05-ca-certificates_20200601~deb9u1_all.deb" /var/lib/dpkg/tmp.ci
      4⤵
      Writes file to tmp directory
      PID:435
    - - /usr/local/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:438
    - - /usr/local/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:438
    - - /usr/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:438
    - - /usr/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:438
    - - /sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:438
    - - /bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        Reads runtime system information
        
        PID:438
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile "/tmp/apt-dpkg-install-gO8hq8/05-ca-certificates_20200601~deb9u1_all.deb"
      4⤵
      PID:439
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --fsys-tarfile "/tmp/apt-dpkg-install-gO8hq8/05-ca-certificates_20200601~deb9u1_all.deb"
      4⤵
      PID:439
  - - /usr/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile "/tmp/apt-dpkg-install-gO8hq8/05-ca-certificates_20200601~deb9u1_all.deb"
      4⤵
      PID:439
  - - /usr/bin/dpkg-deb
      dpkg-deb --fsys-tarfile "/tmp/apt-dpkg-install-gO8hq8/05-ca-certificates_20200601~deb9u1_all.deb"
      4⤵
      Writes file to tmp directory
      PID:439
  - - /usr/local/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:442
  - - /usr/local/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:442
  - - /usr/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:442
  - - /usr/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:442
  - - /sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:442
  - - /bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:442
  - - /usr/local/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/06-libnghttp2-14_1.18.1-1+deb9u1_mipsel.deb
      4⤵
      PID:443
  - - /usr/local/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/06-libnghttp2-14_1.18.1-1+deb9u1_mipsel.deb
      4⤵
      PID:443
  - - /usr/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/06-libnghttp2-14_1.18.1-1+deb9u1_mipsel.deb
      4⤵
      PID:443
  - - /usr/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/06-libnghttp2-14_1.18.1-1+deb9u1_mipsel.deb
      4⤵
      Writes file to tmp directory
      PID:443
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/06-libnghttp2-14_1.18.1-1+deb9u1_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:444
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/06-libnghttp2-14_1.18.1-1+deb9u1_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:444
  - - /usr/sbin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/06-libnghttp2-14_1.18.1-1+deb9u1_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:444
  - - /usr/bin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/06-libnghttp2-14_1.18.1-1+deb9u1_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      Writes file to tmp directory
      PID:444
    - - /usr/local/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:447
    - - /usr/local/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:447
    - - /usr/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:447
    - - /usr/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:447
    - - /sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:447
    - - /bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        Reads runtime system information
        
        PID:447
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/06-libnghttp2-14_1.18.1-1+deb9u1_mipsel.deb
      4⤵
      PID:448
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/06-libnghttp2-14_1.18.1-1+deb9u1_mipsel.deb
      4⤵
      PID:448
  - - /usr/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/06-libnghttp2-14_1.18.1-1+deb9u1_mipsel.deb
      4⤵
      PID:448
  - - /usr/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/06-libnghttp2-14_1.18.1-1+deb9u1_mipsel.deb
      4⤵
      Writes file to tmp directory
      PID:448
  - - /usr/local/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:451
  - - /usr/local/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:451
  - - /usr/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:451
  - - /usr/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:451
  - - /sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:451
  - - /bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:451
  - - /usr/local/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/07-librtmp1_2.4+20151223.gitfa8646d.1-1+b1_mipsel.deb
      4⤵
      PID:452
  - - /usr/local/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/07-librtmp1_2.4+20151223.gitfa8646d.1-1+b1_mipsel.deb
      4⤵
      PID:452
  - - /usr/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/07-librtmp1_2.4+20151223.gitfa8646d.1-1+b1_mipsel.deb
      4⤵
      PID:452
  - - /usr/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/07-librtmp1_2.4+20151223.gitfa8646d.1-1+b1_mipsel.deb
      4⤵
      Writes file to tmp directory
      PID:452
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/07-librtmp1_2.4+20151223.gitfa8646d.1-1+b1_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:453
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/07-librtmp1_2.4+20151223.gitfa8646d.1-1+b1_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:453
  - - /usr/sbin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/07-librtmp1_2.4+20151223.gitfa8646d.1-1+b1_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:453
  - - /usr/bin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/07-librtmp1_2.4+20151223.gitfa8646d.1-1+b1_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      Writes file to tmp directory
      PID:453
    - - /usr/local/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:456
    - - /usr/local/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:456
    - - /usr/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:456
    - - /usr/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:456
    - - /sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:456
    - - /bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        Reads runtime system information
        
        PID:456
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/07-librtmp1_2.4+20151223.gitfa8646d.1-1+b1_mipsel.deb
      4⤵
      PID:457
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/07-librtmp1_2.4+20151223.gitfa8646d.1-1+b1_mipsel.deb
      4⤵
      PID:457
  - - /usr/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/07-librtmp1_2.4+20151223.gitfa8646d.1-1+b1_mipsel.deb
      4⤵
      PID:457
  - - /usr/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/07-librtmp1_2.4+20151223.gitfa8646d.1-1+b1_mipsel.deb
      4⤵
      Writes file to tmp directory
      PID:457
  - - /usr/local/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:460
  - - /usr/local/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:460
  - - /usr/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:460
  - - /usr/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:460
  - - /sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:460
  - - /bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:460
  - - /usr/local/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/08-libssh2-1_1.7.0-1+deb9u1_mipsel.deb
      4⤵
      PID:461
  - - /usr/local/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/08-libssh2-1_1.7.0-1+deb9u1_mipsel.deb
      4⤵
      PID:461
  - - /usr/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/08-libssh2-1_1.7.0-1+deb9u1_mipsel.deb
      4⤵
      PID:461
  - - /usr/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/08-libssh2-1_1.7.0-1+deb9u1_mipsel.deb
      4⤵
      Writes file to tmp directory
      PID:461
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/08-libssh2-1_1.7.0-1+deb9u1_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:462
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/08-libssh2-1_1.7.0-1+deb9u1_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:462
  - - /usr/sbin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/08-libssh2-1_1.7.0-1+deb9u1_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:462
  - - /usr/bin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/08-libssh2-1_1.7.0-1+deb9u1_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      Writes file to tmp directory
      PID:462
    - - /usr/local/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:465
    - - /usr/local/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:465
    - - /usr/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:465
    - - /usr/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:465
    - - /sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:465
    - - /bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        Reads runtime system information
        
        PID:465
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/08-libssh2-1_1.7.0-1+deb9u1_mipsel.deb
      4⤵
      PID:466
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/08-libssh2-1_1.7.0-1+deb9u1_mipsel.deb
      4⤵
      PID:466
  - - /usr/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/08-libssh2-1_1.7.0-1+deb9u1_mipsel.deb
      4⤵
      PID:466
  - - /usr/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/08-libssh2-1_1.7.0-1+deb9u1_mipsel.deb
      4⤵
      Writes file to tmp directory
      PID:466
  - - /usr/local/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:469
  - - /usr/local/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:469
  - - /usr/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:469
  - - /usr/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:469
  - - /sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:469
  - - /bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:469
  - - /usr/local/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/09-libcurl3_7.52.1-5+deb9u10_mipsel.deb
      4⤵
      PID:470
  - - /usr/local/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/09-libcurl3_7.52.1-5+deb9u10_mipsel.deb
      4⤵
      PID:470
  - - /usr/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/09-libcurl3_7.52.1-5+deb9u10_mipsel.deb
      4⤵
      PID:470
  - - /usr/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/09-libcurl3_7.52.1-5+deb9u10_mipsel.deb
      4⤵
      Writes file to tmp directory
      PID:470
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/09-libcurl3_7.52.1-5+deb9u10_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:471
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/09-libcurl3_7.52.1-5+deb9u10_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:471
  - - /usr/sbin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/09-libcurl3_7.52.1-5+deb9u10_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:471
  - - /usr/bin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/09-libcurl3_7.52.1-5+deb9u10_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      Writes file to tmp directory
      PID:471
    - - /usr/local/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:474
    - - /usr/local/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:474
    - - /usr/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:474
    - - /usr/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:474
    - - /sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:474
    - - /bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        Reads runtime system information
        
        PID:474
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/09-libcurl3_7.52.1-5+deb9u10_mipsel.deb
      4⤵
      PID:475
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/09-libcurl3_7.52.1-5+deb9u10_mipsel.deb
      4⤵
      PID:475
  - - /usr/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/09-libcurl3_7.52.1-5+deb9u10_mipsel.deb
      4⤵
      PID:475
  - - /usr/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/09-libcurl3_7.52.1-5+deb9u10_mipsel.deb
      4⤵
      Writes file to tmp directory
      PID:475
  - - /usr/local/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:478
  - - /usr/local/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:478
  - - /usr/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:478
  - - /usr/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:478
  - - /sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:478
  - - /bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:478
  - - /usr/local/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/10-curl_7.52.1-5+deb9u10_mipsel.deb
      4⤵
      PID:479
  - - /usr/local/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/10-curl_7.52.1-5+deb9u10_mipsel.deb
      4⤵
      PID:479
  - - /usr/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/10-curl_7.52.1-5+deb9u10_mipsel.deb
      4⤵
      PID:479
  - - /usr/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-gO8hq8/10-curl_7.52.1-5+deb9u10_mipsel.deb
      4⤵
      Writes file to tmp directory
      PID:479
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/10-curl_7.52.1-5+deb9u10_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:480
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/10-curl_7.52.1-5+deb9u10_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:480
  - - /usr/sbin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/10-curl_7.52.1-5+deb9u10_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:480
  - - /usr/bin/dpkg-deb
      dpkg-deb --control /tmp/apt-dpkg-install-gO8hq8/10-curl_7.52.1-5+deb9u10_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      Writes file to tmp directory
      PID:480
    - - /usr/local/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:483
    - - /usr/local/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:483
    - - /usr/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:483
    - - /usr/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:483
    - - /sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:483
    - - /bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        Reads runtime system information
        
        PID:483
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/10-curl_7.52.1-5+deb9u10_mipsel.deb
      4⤵
      PID:484
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/10-curl_7.52.1-5+deb9u10_mipsel.deb
      4⤵
      PID:484
  - - /usr/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/10-curl_7.52.1-5+deb9u10_mipsel.deb
      4⤵
      PID:484
  - - /usr/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-gO8hq8/10-curl_7.52.1-5+deb9u10_mipsel.deb
      4⤵
      Writes file to tmp directory
      PID:484
  - - /usr/local/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:487
  - - /usr/local/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:487
  - - /usr/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:487
  - - /usr/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:487
  - - /sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:487
  - - /bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:487
  - - /usr/local/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/tmp/apt-dpkg-install-gO8hq8/11-libsasl2-modules_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb"
      4⤵
      PID:488
  - - /usr/local/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/tmp/apt-dpkg-install-gO8hq8/11-libsasl2-modules_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb"
      4⤵
      PID:488
  - - /usr/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/tmp/apt-dpkg-install-gO8hq8/11-libsasl2-modules_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb"
      4⤵
      PID:488
  - - /usr/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/tmp/apt-dpkg-install-gO8hq8/11-libsasl2-modules_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb"
      4⤵
      Writes file to tmp directory
      PID:488
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --control "/tmp/apt-dpkg-install-gO8hq8/11-libsasl2-modules_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb" /var/lib/dpkg/tmp.ci
      4⤵
      PID:489
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --control "/tmp/apt-dpkg-install-gO8hq8/11-libsasl2-modules_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb" /var/lib/dpkg/tmp.ci
      4⤵
      PID:489
  - - /usr/sbin/dpkg-deb
      dpkg-deb --control "/tmp/apt-dpkg-install-gO8hq8/11-libsasl2-modules_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb" /var/lib/dpkg/tmp.ci
      4⤵
      PID:489
  - - /usr/bin/dpkg-deb
      dpkg-deb --control "/tmp/apt-dpkg-install-gO8hq8/11-libsasl2-modules_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb" /var/lib/dpkg/tmp.ci
      4⤵
      Writes file to tmp directory
      PID:489
    - - /usr/local/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:492
    - - /usr/local/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:492
    - - /usr/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:492
    - - /usr/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:492
    - - /sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:492
    - - /bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        Reads runtime system information
        
        PID:492
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile "/tmp/apt-dpkg-install-gO8hq8/11-libsasl2-modules_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb"
      4⤵
      PID:493
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --fsys-tarfile "/tmp/apt-dpkg-install-gO8hq8/11-libsasl2-modules_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb"
      4⤵
      PID:493
  - - /usr/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile "/tmp/apt-dpkg-install-gO8hq8/11-libsasl2-modules_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb"
      4⤵
      PID:493
  - - /usr/bin/dpkg-deb
      dpkg-deb --fsys-tarfile "/tmp/apt-dpkg-install-gO8hq8/11-libsasl2-modules_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb"
      4⤵
      Writes file to tmp directory
      PID:493
  - - /usr/local/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:496
  - - /usr/local/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:496
  - - /usr/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:496
  - - /usr/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:496
  - - /sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:496
  - - /bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:496
- - /usr/bin/dpkg
    /usr/bin/dpkg --status-fd 14 --configure --pending
    3⤵
    - Deletes system logs
    - Reads runtime system information
    PID:497
  - - /var/lib/dpkg/info/libc-bin.postinst
      /var/lib/dpkg/info/libc-bin.postinst triggered ldconfig
      4⤵
      PID:498
    - - /sbin/ldconfig
        
        ldconfig
        5⤵
        
        PID:499
  - - /var/lib/dpkg/info/openssl.postinst
      /var/lib/dpkg/info/openssl.postinst configure
      4⤵
      PID:500
  - - /var/lib/dpkg/info/libsasl2-modules:mipsel.postinst
      /var/lib/dpkg/info/libsasl2-modules:mipsel.postinst configure
      4⤵
      PID:501
    - - /usr/bin/dpkg
        
        dpkg --compare-versions lt-nl "2.1.27~101-g0780600+dfsg-3~"
        5⤵
        Reads runtime system information
        
        PID:502
  - - /var/lib/dpkg/info/ca-certificates.postinst
      /var/lib/dpkg/info/ca-certificates.postinst configure
      4⤵
      PID:503
    - - /usr/bin/stat
        
        stat -L -c "%a" /usr/local
        5⤵
        Reads runtime system information
        
        PID:504
    - - /bin/mkdir
        
        mkdir -m 2775 /usr/local/share/ca-certificates
        5⤵
        Reads runtime system information
        
        PID:505
    - - /usr/bin/stat
        
        stat -L -c "%g" /usr/local
        5⤵
        Reads runtime system information
        
        PID:506
    - - /bin/chgrp
        
        chgrp 50 /usr/local/share/ca-certificates
        5⤵
        
        PID:507
  - - /usr/share/debconf/frontend
      /usr/share/debconf/frontend /var/lib/dpkg/info/ca-certificates.postinst configure
      4⤵
      PID:503
    - - /usr/local/sbin/locale
        
        locale charmap
        5⤵
        
        PID:508
    - - /usr/local/bin/locale
        
        locale charmap
        5⤵
        
        PID:508
    - - /usr/sbin/locale
        
        locale charmap
        5⤵
        
        PID:508
    - - /usr/bin/locale
        
        locale charmap
        5⤵
        
        PID:508
    - - /bin/sh
        
        sh -c "stty -a 2>/dev/null"
        5⤵
        
        PID:509
      - /bin/stty
        
        stty -a
        6⤵
        
        PID:510
    - - /bin/sh
        
        sh -c "stty -a 2>/dev/null"
        5⤵
        
        PID:511
      - /bin/stty
        
        stty -a
        6⤵
        
        PID:512
    - - /bin/sh
        
        sh -c "stty -a 2>/dev/null"
        5⤵
        
        PID:513
      - /bin/stty
        
        stty -a
        6⤵
        
        PID:514
    - - /bin/sh
        
        sh -c "stty -a 2>/dev/null"
        5⤵
        
        PID:515
      - /bin/stty
        
        stty -a
        6⤵
        
        PID:516
    - - /var/lib/dpkg/info/ca-certificates.config
        
        /var/lib/dpkg/info/ca-certificates.config configure
        5⤵
        
        PID:517
      - /bin/sed
        
        sed -ne "s/^!\\(.*\\)/\\1/p" /dev/null
        6⤵
        Reads runtime system information
        
        PID:518
      - /bin/sed
        
        sed -e "/^#/d" -e "/^!/d" /dev/null
        6⤵
        Reads runtime system information
        
        PID:519

/usr/bin/sort
sort
1⤵
PID:522

/bin/sed
sed -e "s/^\\.\\///"
1⤵
- Reads runtime system information
PID:525

/usr/bin/uniq
uniq
1⤵
PID:523

/usr/bin/find
find . -type f -name "*.crt" -print
1⤵
- Reads runtime system information
PID:524

/usr/bin/tr
tr "," "\\n"
1⤵
PID:527

/bin/sed
sed -e "s/^[[:space:]]*//"
1⤵
- Reads runtime system information
PID:528

/bin/grep
grep -F -q -x mozilla/ACCVRAIZ1.crt
1⤵
PID:531

/bin/grep
grep -F -q -x mozilla/ACCVRAIZ1.crt
1⤵
PID:534

/bin/grep
grep -F -q -x mozilla/AC_RAIZ_FNMT-RCM.crt
1⤵
PID:537

/bin/grep
grep -F -q -x mozilla/AC_RAIZ_FNMT-RCM.crt
1⤵
PID:540

/bin/grep
grep -F -q -x mozilla/Actalis_Authentication_Root_CA.crt
1⤵
PID:543

/bin/grep
grep -F -q -x mozilla/Actalis_Authentication_Root_CA.crt
1⤵
PID:546

/bin/grep
grep -F -q -x mozilla/AffirmTrust_Commercial.crt
1⤵
PID:549

/bin/grep
grep -F -q -x mozilla/AffirmTrust_Commercial.crt
1⤵
PID:552

/bin/grep
grep -F -q -x mozilla/AffirmTrust_Networking.crt
1⤵
PID:555

/bin/grep
grep -F -q -x mozilla/AffirmTrust_Networking.crt
1⤵
PID:558

/bin/grep
grep -F -q -x mozilla/AffirmTrust_Premium.crt
1⤵
PID:561

/bin/grep
grep -F -q -x mozilla/AffirmTrust_Premium.crt
1⤵
PID:564

/bin/grep
grep -F -q -x mozilla/AffirmTrust_Premium_ECC.crt
1⤵
PID:567

/bin/grep
grep -F -q -x mozilla/AffirmTrust_Premium_ECC.crt
1⤵
PID:570

/bin/grep
grep -F -q -x mozilla/Amazon_Root_CA_1.crt
1⤵
PID:573

/bin/grep
grep -F -q -x mozilla/Amazon_Root_CA_1.crt
1⤵
PID:576

/bin/grep
grep -F -q -x mozilla/Amazon_Root_CA_2.crt
1⤵
PID:579

/bin/grep
grep -F -q -x mozilla/Amazon_Root_CA_2.crt
1⤵
PID:582

/bin/grep
grep -F -q -x mozilla/Amazon_Root_CA_3.crt
1⤵
PID:585

/bin/grep
grep -F -q -x mozilla/Amazon_Root_CA_3.crt
1⤵
PID:588

/bin/grep
grep -F -q -x mozilla/Amazon_Root_CA_4.crt
1⤵
PID:591

/bin/grep
grep -F -q -x mozilla/Amazon_Root_CA_4.crt
1⤵
PID:594

/bin/grep
grep -F -q -x mozilla/Atos_TrustedRoot_2011.crt
1⤵
PID:597

/bin/grep
grep -F -q -x mozilla/Atos_TrustedRoot_2011.crt
1⤵
PID:600

/bin/grep
grep -F -q -x mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt
1⤵
PID:603

/bin/grep
grep -F -q -x mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt
1⤵
PID:606

/bin/grep
grep -F -q -x mozilla/Baltimore_CyberTrust_Root.crt
1⤵
PID:609

/bin/grep
grep -F -q -x mozilla/Baltimore_CyberTrust_Root.crt
1⤵
PID:612

/bin/grep
grep -F -q -x mozilla/Buypass_Class_2_Root_CA.crt
1⤵
PID:615

/bin/grep
grep -F -q -x mozilla/Buypass_Class_2_Root_CA.crt
1⤵
PID:618

/bin/grep
grep -F -q -x mozilla/Buypass_Class_3_Root_CA.crt
1⤵
PID:621

/bin/grep
grep -F -q -x mozilla/Buypass_Class_3_Root_CA.crt
1⤵
PID:624

/bin/grep
grep -F -q -x mozilla/CA_Disig_Root_R2.crt
1⤵
PID:627

/bin/grep
grep -F -q -x mozilla/CA_Disig_Root_R2.crt
1⤵
PID:630

/bin/grep
grep -F -q -x mozilla/Certigna.crt
1⤵
PID:633

/bin/grep
grep -F -q -x mozilla/Certigna.crt
1⤵
PID:636

/bin/grep
grep -F -q -x mozilla/Certigna_Root_CA.crt
1⤵
PID:639

/bin/grep
grep -F -q -x mozilla/Certigna_Root_CA.crt
1⤵
PID:642

/bin/grep
grep -F -q -x mozilla/certSIGN_ROOT_CA.crt
1⤵
PID:645

/bin/grep
grep -F -q -x mozilla/certSIGN_ROOT_CA.crt
1⤵
PID:648

/bin/grep
grep -F -q -x mozilla/Certum_Trusted_Network_CA_2.crt
1⤵
PID:651

/bin/grep
grep -F -q -x mozilla/Certum_Trusted_Network_CA_2.crt
1⤵
PID:654

/bin/grep
grep -F -q -x mozilla/Certum_Trusted_Network_CA.crt
1⤵
PID:657

/bin/grep
grep -F -q -x mozilla/Certum_Trusted_Network_CA.crt
1⤵
PID:660

/bin/grep
grep -F -q -x mozilla/CFCA_EV_ROOT.crt
1⤵
PID:663

/bin/grep
grep -F -q -x mozilla/CFCA_EV_ROOT.crt
1⤵
PID:666

/bin/grep
grep -F -q -x mozilla/Chambers_of_Commerce_Root_-_2008.crt
1⤵
PID:669

/bin/grep
grep -F -q -x mozilla/Chambers_of_Commerce_Root_-_2008.crt
1⤵
PID:672

/bin/grep
grep -F -q -x mozilla/Comodo_AAA_Services_root.crt
1⤵
PID:675

/bin/grep
grep -F -q -x mozilla/Comodo_AAA_Services_root.crt
1⤵
PID:678

/bin/grep
grep -F -q -x mozilla/COMODO_Certification_Authority.crt
1⤵
PID:681

/bin/grep
grep -F -q -x mozilla/COMODO_Certification_Authority.crt
1⤵
PID:684

/bin/grep
grep -F -q -x mozilla/COMODO_ECC_Certification_Authority.crt
1⤵
PID:687

/bin/grep
grep -F -q -x mozilla/COMODO_ECC_Certification_Authority.crt
1⤵
PID:690

/bin/grep
grep -F -q -x mozilla/COMODO_RSA_Certification_Authority.crt
1⤵
PID:693

/bin/grep
grep -F -q -x mozilla/COMODO_RSA_Certification_Authority.crt
1⤵
PID:696

/bin/grep
grep -F -q -x mozilla/Cybertrust_Global_Root.crt
1⤵
PID:699

/bin/grep
grep -F -q -x mozilla/Cybertrust_Global_Root.crt
1⤵
PID:702

/bin/grep
grep -F -q -x mozilla/DigiCert_Assured_ID_Root_CA.crt
1⤵
PID:705

/bin/grep
grep -F -q -x mozilla/DigiCert_Assured_ID_Root_CA.crt
1⤵
PID:708

/bin/grep
grep -F -q -x mozilla/DigiCert_Assured_ID_Root_G2.crt
1⤵
PID:711

/bin/grep
grep -F -q -x mozilla/DigiCert_Assured_ID_Root_G2.crt
1⤵
PID:714

/bin/grep
grep -F -q -x mozilla/DigiCert_Assured_ID_Root_G3.crt
1⤵
PID:717

/bin/grep
grep -F -q -x mozilla/DigiCert_Assured_ID_Root_G3.crt
1⤵
PID:720

/bin/grep
grep -F -q -x mozilla/DigiCert_Global_Root_CA.crt
1⤵
PID:723

/bin/grep
grep -F -q -x mozilla/DigiCert_Global_Root_CA.crt
1⤵
PID:726

/bin/grep
grep -F -q -x mozilla/DigiCert_Global_Root_G2.crt
1⤵
PID:729

/bin/grep
grep -F -q -x mozilla/DigiCert_Global_Root_G2.crt
1⤵
PID:732

/bin/grep
grep -F -q -x mozilla/DigiCert_Global_Root_G3.crt
1⤵
PID:735

/bin/grep
grep -F -q -x mozilla/DigiCert_Global_Root_G3.crt
1⤵
PID:738

/bin/grep
grep -F -q -x mozilla/DigiCert_High_Assurance_EV_Root_CA.crt
1⤵
PID:741

/bin/grep
grep -F -q -x mozilla/DigiCert_High_Assurance_EV_Root_CA.crt
1⤵
PID:744

/bin/grep
grep -F -q -x mozilla/DigiCert_Trusted_Root_G4.crt
1⤵
PID:747

/bin/grep
grep -F -q -x mozilla/DigiCert_Trusted_Root_G4.crt
1⤵
PID:750

/bin/grep
grep -F -q -x mozilla/DST_Root_CA_X3.crt
1⤵
PID:753

/bin/grep
grep -F -q -x mozilla/DST_Root_CA_X3.crt
1⤵
PID:756

/bin/grep
grep -F -q -x mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt
1⤵
PID:759

/bin/grep
grep -F -q -x mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt
1⤵
PID:762

/bin/grep
grep -F -q -x mozilla/D-TRUST_Root_Class_3_CA_2_EV_2009.crt
1⤵
PID:765

/bin/grep
grep -F -q -x mozilla/D-TRUST_Root_Class_3_CA_2_EV_2009.crt
1⤵
PID:768

/bin/grep
grep -F -q -x mozilla/EC-ACC.crt
1⤵
PID:771

/bin/grep
grep -F -q -x mozilla/EC-ACC.crt
1⤵
PID:774

/bin/grep
grep -F -q -x mozilla/EE_Certification_Centre_Root_CA.crt
1⤵
PID:777

/bin/grep
grep -F -q -x mozilla/EE_Certification_Centre_Root_CA.crt
1⤵
PID:780

/bin/grep
grep -F -q -x mozilla/emSign_ECC_Root_CA_-_C3.crt
1⤵
PID:783

/bin/grep
grep -F -q -x mozilla/emSign_ECC_Root_CA_-_C3.crt
1⤵
PID:786

/bin/grep
grep -F -q -x mozilla/emSign_ECC_Root_CA_-_G3.crt
1⤵
PID:789

/bin/grep
grep -F -q -x mozilla/emSign_ECC_Root_CA_-_G3.crt
1⤵
PID:792

/bin/grep
grep -F -q -x mozilla/emSign_Root_CA_-_C1.crt
1⤵
PID:795

/bin/grep
grep -F -q -x mozilla/emSign_Root_CA_-_C1.crt
1⤵
PID:798

/bin/grep
grep -F -q -x mozilla/emSign_Root_CA_-_G1.crt
1⤵
PID:801

/bin/grep
grep -F -q -x mozilla/emSign_Root_CA_-_G1.crt
1⤵
PID:804

/bin/grep
grep -F -q -x mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt
1⤵
PID:807

/bin/grep
grep -F -q -x mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt
1⤵
PID:810

/bin/grep
grep -F -q -x mozilla/Entrust_Root_Certification_Authority.crt
1⤵
PID:813

/bin/grep
grep -F -q -x mozilla/Entrust_Root_Certification_Authority.crt
1⤵
PID:816

/bin/grep
grep -F -q -x mozilla/Entrust_Root_Certification_Authority_-_EC1.crt
1⤵
PID:819

/bin/grep
grep -F -q -x mozilla/Entrust_Root_Certification_Authority_-_EC1.crt
1⤵
PID:822

/bin/grep
grep -F -q -x mozilla/Entrust_Root_Certification_Authority_-_G2.crt
1⤵
PID:825

/bin/grep
grep -F -q -x mozilla/Entrust_Root_Certification_Authority_-_G2.crt
1⤵
PID:828

/bin/grep
grep -F -q -x mozilla/Entrust_Root_Certification_Authority_-_G4.crt
1⤵
PID:831

/bin/grep
grep -F -q -x mozilla/Entrust_Root_Certification_Authority_-_G4.crt
1⤵
PID:834

/bin/grep
grep -F -q -x mozilla/ePKI_Root_Certification_Authority.crt
1⤵
PID:837

/bin/grep
grep -F -q -x mozilla/ePKI_Root_Certification_Authority.crt
1⤵
PID:840

/bin/grep
grep -F -q -x mozilla/E-Tugra_Certification_Authority.crt
1⤵
PID:843

/bin/grep
grep -F -q -x mozilla/E-Tugra_Certification_Authority.crt
1⤵
PID:846

/bin/grep
grep -F -q -x mozilla/GDCA_TrustAUTH_R5_ROOT.crt
1⤵
PID:849

/bin/grep
grep -F -q -x mozilla/GDCA_TrustAUTH_R5_ROOT.crt
1⤵
PID:852

/bin/grep
grep -F -q -x mozilla/GeoTrust_Universal_CA_2.crt
1⤵
PID:855

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hijack Execution Flow

T1574

Privilege Escalation

Hijack Execution Flow

T1574

Defense Evasion

Hijack Execution Flow

T1574

Indicator Removal on Host

T1070

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Dynamic Resolution

T1568

Exfiltration

Impact

description	ioc	Process
/tmp/apt-dpkg-install-gO8hq8/05-ca-certificates_20200601~deb9u1_all.deb	/tmp/apt-dpkg-install-gO8hq8/05-ca-certificates_20200601~deb9u1_all.deb	dpkg-deb
/tmp/apt-dpkg-install-gO8hq8/09-libcurl3_7.52.1-5+deb9u10_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/09-libcurl3_7.52.1-5+deb9u10_mipsel.deb	dpkg-deb
/tmp/apt-dpkg-install-gO8hq8/10-curl_7.52.1-5+deb9u10_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/10-curl_7.52.1-5+deb9u10_mipsel.deb	dpkg-deb
/tmp/apt-dpkg-install-gO8hq8/05-ca-certificates_20200601~deb9u1_all.deb	/tmp/apt-dpkg-install-gO8hq8/05-ca-certificates_20200601~deb9u1_all.deb	dpkg-deb
/tmp/apt-dpkg-install-gO8hq8/10-curl_7.52.1-5+deb9u10_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/10-curl_7.52.1-5+deb9u10_mipsel.deb	dpkg-deb
/tmp/apt-dpkg-install-gO8hq8/05-ca-certificates_20200601~deb9u1_all.deb	/tmp/apt-dpkg-install-gO8hq8/05-ca-certificates_20200601~deb9u1_all.deb	apt-get
/tmp/apt-dpkg-install-gO8hq8/11-libsasl2-modules_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/11-libsasl2-modules_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb	dpkg-deb
/tmp/apt-dpkg-install-gO8hq8/08-libssh2-1_1.7.0-1+deb9u1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/08-libssh2-1_1.7.0-1+deb9u1_mipsel.deb	apt-get
/tmp/apt-dpkg-install-gO8hq8/00-libsasl2-modules-db_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/00-libsasl2-modules-db_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb	dpkg-split
/tmp/apt-dpkg-install-gO8hq8/02-libldap-common_2.4.44+dfsg-5+deb9u4_all.deb	/tmp/apt-dpkg-install-gO8hq8/02-libldap-common_2.4.44+dfsg-5+deb9u4_all.deb	dpkg-deb
/tmp/apt-dpkg-install-gO8hq8/09-libcurl3_7.52.1-5+deb9u10_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/09-libcurl3_7.52.1-5+deb9u10_mipsel.deb	dpkg-deb
/tmp/apt-dpkg-install-gO8hq8/06-libnghttp2-14_1.18.1-1+deb9u1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/06-libnghttp2-14_1.18.1-1+deb9u1_mipsel.deb	apt-get
/tmp/apt-dpkg-install-gO8hq8/01-libsasl2-2_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/01-libsasl2-2_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb	dpkg-deb
/tmp/apt-dpkg-install-gO8hq8/03-libldap-2.4-2_2.4.44+dfsg-5+deb9u4_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/03-libldap-2.4-2_2.4.44+dfsg-5+deb9u4_mipsel.deb	dpkg-split
/tmp/apt-dpkg-install-gO8hq8/06-libnghttp2-14_1.18.1-1+deb9u1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/06-libnghttp2-14_1.18.1-1+deb9u1_mipsel.deb	dpkg-deb
/tmp/fileutl.message.r8Y10a	/tmp/fileutl.message.r8Y10a	apt-get
/tmp/apt-dpkg-install-gO8hq8/01-libsasl2-2_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/01-libsasl2-2_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb	dpkg-split
/tmp/apt-dpkg-install-gO8hq8/04-openssl_1.1.0l-1~deb9u1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/04-openssl_1.1.0l-1~deb9u1_mipsel.deb	dpkg-deb
/tmp/apt-dpkg-install-gO8hq8/01-libsasl2-2_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/01-libsasl2-2_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb	apt-get
/tmp/apt-dpkg-install-gO8hq8/02-libldap-common_2.4.44+dfsg-5+deb9u4_all.deb	/tmp/apt-dpkg-install-gO8hq8/02-libldap-common_2.4.44+dfsg-5+deb9u4_all.deb	apt-get
/tmp/apt-dpkg-install-gO8hq8/11-libsasl2-modules_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/11-libsasl2-modules_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb	apt-get
/tmp/apt-dpkg-install-gO8hq8/08-libssh2-1_1.7.0-1+deb9u1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/08-libssh2-1_1.7.0-1+deb9u1_mipsel.deb	dpkg-deb
/tmp/apt-dpkg-install-gO8hq8/00-libsasl2-modules-db_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/00-libsasl2-modules-db_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb	dpkg-deb
/tmp/apt-dpkg-install-gO8hq8/03-libldap-2.4-2_2.4.44+dfsg-5+deb9u4_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/03-libldap-2.4-2_2.4.44+dfsg-5+deb9u4_mipsel.deb	dpkg-deb
/tmp/apt-dpkg-install-gO8hq8/05-ca-certificates_20200601~deb9u1_all.deb	/tmp/apt-dpkg-install-gO8hq8/05-ca-certificates_20200601~deb9u1_all.deb	dpkg-split
/tmp/apt-dpkg-install-gO8hq8/06-libnghttp2-14_1.18.1-1+deb9u1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/06-libnghttp2-14_1.18.1-1+deb9u1_mipsel.deb	dpkg-deb
/tmp/apt-dpkg-install-gO8hq8/08-libssh2-1_1.7.0-1+deb9u1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/08-libssh2-1_1.7.0-1+deb9u1_mipsel.deb	dpkg-split
/tmp/fileutl.message.lFD2tb	/tmp/fileutl.message.lFD2tb	apt-get
/tmp/apt-dpkg-install-gO8hq8/00-libsasl2-modules-db_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/00-libsasl2-modules-db_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb	dpkg-deb
/tmp/apt-dpkg-install-gO8hq8/04-openssl_1.1.0l-1~deb9u1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/04-openssl_1.1.0l-1~deb9u1_mipsel.deb	dpkg-deb
/tmp/apt-dpkg-install-gO8hq8/09-libcurl3_7.52.1-5+deb9u10_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/09-libcurl3_7.52.1-5+deb9u10_mipsel.deb	apt-get
/tmp/apt-dpkg-install-gO8hq8	/tmp/apt-dpkg-install-gO8hq8	dpkg
/tmp/apt-dpkg-install-gO8hq8/06-libnghttp2-14_1.18.1-1+deb9u1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/06-libnghttp2-14_1.18.1-1+deb9u1_mipsel.deb	dpkg-split
/tmp/apt-dpkg-install-gO8hq8/07-librtmp1_2.4+20151223.gitfa8646d.1-1+b1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/07-librtmp1_2.4+20151223.gitfa8646d.1-1+b1_mipsel.deb	dpkg-deb
/tmp/apt-dpkg-install-gO8hq8/03-libldap-2.4-2_2.4.44+dfsg-5+deb9u4_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/03-libldap-2.4-2_2.4.44+dfsg-5+deb9u4_mipsel.deb	apt-get
/tmp/apt-dpkg-install-gO8hq8/03-libldap-2.4-2_2.4.44+dfsg-5+deb9u4_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/03-libldap-2.4-2_2.4.44+dfsg-5+deb9u4_mipsel.deb	dpkg-deb
/tmp/apt-dpkg-install-gO8hq8/04-openssl_1.1.0l-1~deb9u1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/04-openssl_1.1.0l-1~deb9u1_mipsel.deb	dpkg-split
/tmp/apt-dpkg-install-gO8hq8	/tmp/apt-dpkg-install-gO8hq8	apt-get
/tmp/apt-dpkg-install-gO8hq8/10-curl_7.52.1-5+deb9u10_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/10-curl_7.52.1-5+deb9u10_mipsel.deb	apt-get
/tmp/apt-dpkg-install-gO8hq8/10-curl_7.52.1-5+deb9u10_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/10-curl_7.52.1-5+deb9u10_mipsel.deb	dpkg-split
/tmp/apt-dpkg-install-gO8hq8/11-libsasl2-modules_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/11-libsasl2-modules_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb	dpkg-deb
/tmp/fileutl.message.Z9iEIF	/tmp/fileutl.message.Z9iEIF	apt-get
/tmp/apt-dpkg-install-gO8hq8/01-libsasl2-2_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/01-libsasl2-2_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb	dpkg-deb
/tmp/apt-dpkg-install-gO8hq8/07-librtmp1_2.4+20151223.gitfa8646d.1-1+b1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/07-librtmp1_2.4+20151223.gitfa8646d.1-1+b1_mipsel.deb	dpkg-split
/tmp/apt-dpkg-install-gO8hq8/07-librtmp1_2.4+20151223.gitfa8646d.1-1+b1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/07-librtmp1_2.4+20151223.gitfa8646d.1-1+b1_mipsel.deb	dpkg-deb
/tmp/apt-dpkg-install-gO8hq8/09-libcurl3_7.52.1-5+deb9u10_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/09-libcurl3_7.52.1-5+deb9u10_mipsel.deb	dpkg-split
/tmp/apt-dpkg-install-gO8hq8/04-openssl_1.1.0l-1~deb9u1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/04-openssl_1.1.0l-1~deb9u1_mipsel.deb	apt-get
/tmp/apt-dpkg-install-gO8hq8/00-libsasl2-modules-db_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/00-libsasl2-modules-db_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb	apt-get
/tmp/apt-dpkg-install-gO8hq8/02-libldap-common_2.4.44+dfsg-5+deb9u4_all.deb	/tmp/apt-dpkg-install-gO8hq8/02-libldap-common_2.4.44+dfsg-5+deb9u4_all.deb	dpkg-deb
/tmp/apt-dpkg-install-gO8hq8/07-librtmp1_2.4+20151223.gitfa8646d.1-1+b1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/07-librtmp1_2.4+20151223.gitfa8646d.1-1+b1_mipsel.deb	apt-get
/tmp/sh-thd.IvWoTb	/tmp/sh-thd.IvWoTb	Process not Found
/tmp/fileutl.message.1ge5Mj	/tmp/fileutl.message.1ge5Mj	apt-get
/tmp/apt-dpkg-install-gO8hq8/02-libldap-common_2.4.44+dfsg-5+deb9u4_all.deb	/tmp/apt-dpkg-install-gO8hq8/02-libldap-common_2.4.44+dfsg-5+deb9u4_all.deb	dpkg-split
/tmp/apt-dpkg-install-gO8hq8/08-libssh2-1_1.7.0-1+deb9u1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/08-libssh2-1_1.7.0-1+deb9u1_mipsel.deb	dpkg-deb
/tmp/apt-dpkg-install-gO8hq8/11-libsasl2-modules_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb	/tmp/apt-dpkg-install-gO8hq8/11-libsasl2-modules_2.1.27~101-g0780600+dfsg-3+deb9u1_mipsel.deb	dpkg-split

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads