Analysis
-
max time kernel
0s -
max time network
159s -
platform
linux_armhf -
resource
debian9-armhf-en-20211208 -
submitted
21-01-2022 23:02
Static task
static1
Behavioral task
behavioral1
Sample
e05f4529165e5a0d406449333cbb6de9d9af290005b34f8657c7ecd5f4867a7a
Resource
debian9-armhf-en-20211208
0 signatures
0 seconds
General
-
Target
e05f4529165e5a0d406449333cbb6de9d9af290005b34f8657c7ecd5f4867a7a
-
Size
179KB
-
MD5
6695cd4257065b9a160a67e17e4dbb4d
-
SHA1
ecf457ff120331bb52cf53f00717acefd84bdbe3
-
SHA256
e05f4529165e5a0d406449333cbb6de9d9af290005b34f8657c7ecd5f4867a7a
-
SHA512
212db9ca96f4a86a2a1e9662fc40ff2459d0038c8a557c6c55caefdb221dfa678427d029982e4f11c0de4e410f52ec020316b9455cd33e174d915007897db3c5
Score
7/10
Malware Config
Signatures
-
Modifies rc script 1 TTPs 1 IoCs
Adding/modifying system rc scripts is a common persistence mechanism.
Processes:
description ioc /etc/rc.d/rc.local /etc/rc.d/rc.local -
Reads CPU attributes 1 TTPs 64 IoCs
Processes:
pkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkilldescription ioc Process /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill -
Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
Processes:
pkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkilldescription ioc Process /proc/101/status /proc/101/status pkill /proc/359/status /proc/359/status pkill /proc/16/status /proc/16/status pkill /proc/308/status /proc/308/status pkill /proc/17/cmdline /proc/17/cmdline pkill /proc/362/cmdline /proc/362/cmdline pkill /proc/101/cmdline /proc/101/cmdline pkill /proc/525/status /proc/525/status pkill /proc/110/status /proc/110/status pkill /proc/6/cmdline /proc/6/cmdline pkill /proc/113/status /proc/113/status pkill /proc/7/cmdline /proc/7/cmdline pkill /proc/29/cmdline /proc/29/cmdline pkill /proc/169/status /proc/169/status pkill /proc/112/cmdline /proc/112/cmdline pkill /proc/291/status /proc/291/status pkill /proc/19/cmdline /proc/19/cmdline pkill /proc/101/status /proc/101/status pkill /proc/676/status /proc/676/status pkill /proc/312/cmdline /proc/312/cmdline pkill /proc/525/status /proc/525/status pkill /proc/3/cmdline /proc/3/cmdline pkill /proc/359/cmdline /proc/359/cmdline pkill /proc/507/status /proc/507/status pkill /proc/8/status /proc/8/status pkill /proc/217/status /proc/217/status pkill /proc/15/status /proc/15/status pkill /proc/110/status /proc/110/status pkill /proc/280/status /proc/280/status pkill /proc/42/status /proc/42/status pkill /proc/17/cmdline /proc/17/cmdline pkill /proc/23/status /proc/23/status pkill /proc/112/status /proc/112/status pkill /proc/279/status /proc/279/status pkill /proc/4/cmdline /proc/4/cmdline pkill /proc/279/status /proc/279/status pkill /proc/4/status /proc/4/status pkill /proc/18/cmdline /proc/18/cmdline pkill /proc/7/status /proc/7/status pkill /proc/169/status /proc/169/status pkill /proc/238/cmdline /proc/238/cmdline pkill /proc/585/status /proc/585/status pkill /proc/112/status /proc/112/status pkill /proc/139/cmdline /proc/139/cmdline pkill /proc/29/status /proc/29/status pkill /proc/17/status /proc/17/status pkill /proc/548/cmdline /proc/548/cmdline pkill /proc/13/status /proc/13/status pkill /proc/24/status /proc/24/status pkill /proc/19/cmdline /proc/19/cmdline pkill /proc/16/cmdline /proc/16/cmdline pkill /proc/1/cmdline /proc/1/cmdline pkill /proc/291/cmdline /proc/291/cmdline pkill /proc/43/status /proc/43/status pkill /proc/22/status /proc/22/status pkill /proc/359/status /proc/359/status pkill /proc/283/status /proc/283/status pkill /proc/15/cmdline /proc/15/cmdline pkill /proc/20/status /proc/20/status pkill /proc/23/cmdline /proc/23/cmdline pkill /proc/4/cmdline /proc/4/cmdline pkill /proc/24/cmdline /proc/24/cmdline pkill /proc/24/cmdline /proc/24/cmdline pkill /proc/525/status /proc/525/status pkill
Processes
-
./e05f4529165e5a0d406449333cbb6de9d9af290005b34f8657c7ecd5f4867a7a./e05f4529165e5a0d406449333cbb6de9d9af290005b34f8657c7ecd5f4867a7a1⤵PID:356
-
/bin/shsh -c "pkill -9 mirai.* || busybox pkill -9 mirai.*"1⤵PID:360
-
/usr/bin/pkillpkill -9 "mirai.*"2⤵PID:361
-
-
/bin/busyboxbusybox pkill -9 "mirai.*"2⤵PID:367
-
-
/bin/shsh -c "pkill -9 dlr.*mips || busybox pkill -9 dlr.*mips"1⤵PID:368
-
/usr/bin/pkillpkill -9 "dlr.*mips"2⤵
- Reads CPU attributes
PID:369
-
-
/bin/busyboxbusybox pkill -9 "dlr.*mips"2⤵PID:370
-
-
/bin/shsh -c "pkill -9 mips64 || busybox pkill -9 mips64"1⤵PID:371
-
/usr/bin/pkillpkill -9 mips642⤵
- Reads CPU attributes
PID:372
-
-
/bin/busyboxbusybox pkill -9 mips642⤵PID:373
-
-
/bin/shsh -c "pkill -9 mipsel || busybox pkill -9 mipsel"1⤵PID:374
-
/usr/bin/pkillpkill -9 mipsel2⤵
- Reads CPU attributes
PID:375
-
-
/bin/busyboxbusybox pkill -9 mipsel2⤵PID:376
-
-
/bin/shsh -c "pkill -9 sh2eb || busybox pkill -9 sh2eb"1⤵PID:377
-
/usr/bin/pkillpkill -9 sh2eb2⤵
- Reads CPU attributes
PID:378
-
-
/bin/busyboxbusybox pkill -9 sh2eb2⤵PID:379
-
-
/bin/shsh -c "pkill -9 sh2elf || busybox pkill -9 sh2elf"1⤵PID:380
-
/usr/bin/pkillpkill -9 sh2elf2⤵PID:381
-
-
/bin/busyboxbusybox pkill -9 sh2elf2⤵PID:382
-
-
/bin/shsh -c "pkill -9 sh4 || busybox pkill -9 sh4"1⤵PID:383
-
/usr/bin/pkillpkill -9 sh42⤵
- Reads CPU attributes
PID:384
-
-
/bin/busyboxbusybox pkill -9 sh42⤵PID:385
-
-
/bin/shsh -c "pkill -9 x86 || busybox pkill -9 x86"1⤵PID:386
-
/usr/bin/pkillpkill -9 x862⤵
- Reads runtime system information
PID:387
-
-
/bin/busyboxbusybox pkill -9 x862⤵PID:388
-
-
/bin/shsh -c "pkill -9 arm || busybox pkill -9 arm"1⤵PID:391
-
/usr/bin/pkillpkill -9 arm2⤵
- Reads CPU attributes
PID:392
-
-
/bin/busyboxbusybox pkill -9 arm2⤵PID:393
-
-
/bin/shsh -c "pkill -9 armv5 || busybox pkill -9 armv5"1⤵PID:394
-
/usr/bin/pkillpkill -9 armv52⤵
- Reads CPU attributes
- Reads runtime system information
PID:395
-
-
/bin/busyboxbusybox pkill -9 armv52⤵PID:396
-
-
/bin/shsh -c "pkill -9 armv4tl || busybox pkill -9 armv4tl"1⤵PID:397
-
/usr/bin/pkillpkill -9 armv4tl2⤵PID:398
-
-
/bin/busyboxbusybox pkill -9 armv4tl2⤵PID:399
-
-
/bin/shsh -c "pkill -9 armv4 || busybox pkill -9 armv4"1⤵PID:400
-
/usr/bin/pkillpkill -9 armv42⤵PID:401
-
-
/bin/busyboxbusybox pkill -9 armv42⤵PID:402
-
-
/bin/shsh -c "pkill -9 armv6 || busybox pkill -9 armv6"1⤵PID:403
-
/usr/bin/pkillpkill -9 armv62⤵
- Reads CPU attributes
- Reads runtime system information
PID:404
-
-
/bin/busyboxbusybox pkill -9 armv62⤵PID:405
-
-
/bin/shsh -c "pkill -9 i686 || busybox pkill -9 i686"1⤵PID:406
-
/usr/bin/pkillpkill -9 i6862⤵
- Reads CPU attributes
- Reads runtime system information
PID:407
-
-
/bin/busyboxbusybox pkill -9 i6862⤵PID:408
-
-
/bin/shsh -c "pkill -9 powerpc || busybox pkill -9 powerpc"1⤵PID:409
-
/usr/bin/pkillpkill -9 powerpc2⤵PID:410
-
-
/bin/busyboxbusybox pkill -9 powerpc2⤵PID:411
-
-
/bin/shsh -c "pkill -9 powerpc440fp || busybox pkill -9 powerpc440fp"1⤵PID:413
-
/usr/bin/pkillpkill -9 powerpc440fp2⤵
- Reads CPU attributes
PID:414
-
-
/bin/busyboxbusybox pkill -9 powerpc440fp2⤵PID:416
-
-
/bin/shsh -c "pkill -9 i586 || busybox pkill -9 i586"1⤵PID:417
-
/usr/bin/pkillpkill -9 i5862⤵
- Reads runtime system information
PID:418
-
-
/bin/busyboxbusybox pkill -9 i5862⤵PID:419
-
-
/bin/shsh -c "pkill -9 m68k || busybox pkill -9 m68k"1⤵PID:420
-
/usr/bin/pkillpkill -9 m68k2⤵
- Reads CPU attributes
PID:421
-
-
/bin/busyboxbusybox pkill -9 m68k2⤵PID:422
-
-
/bin/shsh -c "pkill -9 sparc || busybox pkill -9 sparc"1⤵PID:423
-
/usr/bin/pkillpkill -9 sparc2⤵
- Reads runtime system information
PID:424
-
-
/bin/busyboxbusybox pkill -9 sparc2⤵PID:425
-
-
/bin/shsh -c "pkill -9 x86_64 || busybox pkill -9 x86_64"1⤵PID:426
-
/usr/bin/pkillpkill -9 x86_642⤵
- Reads CPU attributes
PID:427
-
-
/bin/busyboxbusybox pkill -9 x86_642⤵PID:428
-
-
/bin/shsh -c "pkill -9 jackmy* || busybox pkill -9 jackmy*"1⤵PID:429
-
/usr/bin/pkillpkill -9 "jackmy*"2⤵PID:430
-
-
/bin/busyboxbusybox pkill -9 "jackmy*"2⤵PID:431
-
-
/bin/shsh -c "pkill -9 hackmy* || busybox pkill -9 hackmy*"1⤵PID:432
-
/usr/bin/pkillpkill -9 "hackmy*"2⤵
- Reads CPU attributes
PID:433
-
-
/bin/busyboxbusybox pkill -9 "hackmy*"2⤵PID:434
-
-
/bin/shsh -c "pkill -9 b1 || busybox pkill -9 b1"1⤵PID:435
-
/usr/bin/pkillpkill -9 b12⤵
- Reads CPU attributes
- Reads runtime system information
PID:436
-
-
/bin/busyboxbusybox pkill -9 b12⤵PID:437
-
-
/bin/shsh -c "pkill -9 b2 || busybox pkill -9 b2"1⤵PID:440
-
/usr/bin/pkillpkill -9 b22⤵
- Reads CPU attributes
- Reads runtime system information
PID:441
-
-
/bin/busyboxbusybox pkill -9 b22⤵PID:442
-
-
/bin/shsh -c "pkill -9 b3 || busybox pkill -9 b3"1⤵PID:443
-
/usr/bin/pkillpkill -9 b32⤵
- Reads CPU attributes
PID:444
-
-
/bin/busyboxbusybox pkill -9 b32⤵PID:445
-
-
/bin/shsh -c "pkill -9 b4 || busybox pkill -9 b4"1⤵PID:446
-
/usr/bin/pkillpkill -9 b42⤵
- Reads runtime system information
PID:447
-
-
/bin/busyboxbusybox pkill -9 b42⤵PID:448
-
-
/bin/shsh -c "pkill -9 b5 || busybox pkill -9 b5"1⤵PID:449
-
/usr/bin/pkillpkill -9 b52⤵PID:450
-
-
/bin/busyboxbusybox pkill -9 b52⤵PID:451
-
-
/bin/shsh -c "pkill -9 b6 || busybox pkill -9 b6"1⤵PID:452
-
/usr/bin/pkillpkill -9 b62⤵
- Reads CPU attributes
PID:453
-
-
/bin/busyboxbusybox pkill -9 b62⤵PID:454
-
-
/bin/shsh -c "pkill -9 b7 || busybox pkill -9 b7"1⤵PID:455
-
/usr/bin/pkillpkill -9 b72⤵PID:456
-
-
/bin/busyboxbusybox pkill -9 b72⤵PID:457
-
-
/bin/shsh -c "pkill -9 b8 || busybox pkill -9 b8"1⤵PID:458
-
/usr/bin/pkillpkill -9 b82⤵
- Reads CPU attributes
- Reads runtime system information
PID:459
-
-
/bin/busyboxbusybox pkill -9 b82⤵PID:460
-
-
/bin/shsh -c "pkill -9 b9 || busybox pkill -9 b9"1⤵PID:461
-
/usr/bin/pkillpkill -9 b92⤵
- Reads CPU attributes
PID:462
-
-
/bin/busyboxbusybox pkill -9 b92⤵PID:464
-
-
/bin/shsh -c "pkill -9 b10 || busybox pkill -9 b10"1⤵PID:466
-
/usr/bin/pkillpkill -9 b102⤵
- Reads CPU attributes
PID:467
-
-
/bin/busyboxbusybox pkill -9 b102⤵PID:468
-
-
/bin/shsh -c "pkill -9 b11 || busybox pkill -9 b11"1⤵PID:469
-
/usr/bin/pkillpkill -9 b112⤵
- Reads CPU attributes
- Reads runtime system information
PID:470
-
-
/bin/busyboxbusybox pkill -9 b112⤵PID:471
-
-
/bin/shsh -c "pkill -9 b12 || busybox pkill -9 b12"1⤵PID:472
-
/usr/bin/pkillpkill -9 b122⤵
- Reads CPU attributes
- Reads runtime system information
PID:473
-
-
/bin/busyboxbusybox pkill -9 b122⤵PID:474
-
-
/bin/shsh -c "pkill -9 b13 || busybox pkill -9 b13"1⤵PID:475
-
/usr/bin/pkillpkill -9 b132⤵PID:476
-
-
/bin/busyboxbusybox pkill -9 b132⤵PID:477
-
-
/bin/shsh -c "pkill -9 b14 || busybox pkill -9 b14"1⤵PID:478
-
/usr/bin/pkillpkill -9 b142⤵PID:479
-
-
/bin/busyboxbusybox pkill -9 b142⤵PID:480
-
-
/bin/shsh -c "pkill -9 b15 || busybox pkill -9 b15"1⤵PID:481
-
/usr/bin/pkillpkill -9 b152⤵PID:482
-
-
/bin/busyboxbusybox pkill -9 b152⤵PID:483
-
-
/bin/shsh -c "pkill -9 b16 || busybox pkill -9 b16"1⤵PID:484
-
/usr/bin/pkillpkill -9 b162⤵PID:485
-
-
/bin/busyboxbusybox pkill -9 b162⤵PID:486
-
-
/bin/shsh -c "pkill -9 b17 || busybox pkill -9 b17"1⤵PID:489
-
/usr/bin/pkillpkill -9 b172⤵
- Reads runtime system information
PID:490
-
-
/bin/busyboxbusybox pkill -9 b172⤵PID:491
-
-
/bin/shsh -c "pkill -9 b18 || busybox pkill -9 b18"1⤵PID:492
-
/usr/bin/pkillpkill -9 b182⤵
- Reads CPU attributes
PID:493
-
-
/bin/busyboxbusybox pkill -9 b182⤵PID:494
-
-
/bin/shsh -c "pkill -9 b19 || busybox pkill -9 b19"1⤵PID:495
-
/usr/bin/pkillpkill -9 b192⤵
- Reads CPU attributes
PID:496
-
-
/bin/busyboxbusybox pkill -9 b192⤵PID:497
-
-
/bin/shsh -c "pkill -9 b20 || busybox pkill -9 b20"1⤵PID:498
-
/usr/bin/pkillpkill -9 b202⤵PID:499
-
-
/bin/busyboxbusybox pkill -9 b202⤵PID:500
-
-
/bin/shsh -c "pkill -9 busyboxterrorist || busybox pkill -9 busyboxterrorist"1⤵PID:501
-
/usr/bin/pkillpkill -9 busyboxterrorist2⤵
- Reads runtime system information
PID:502
-
-
/bin/busyboxbusybox pkill -9 busyboxterrorist2⤵PID:503
-
-
/bin/shsh -c "pkill -9 dvrHelper || busybox pkill -9 dvrHelper"1⤵PID:504
-
/usr/bin/pkillpkill -9 dvrHelper2⤵
- Reads CPU attributes
PID:505
-
-
/bin/busyboxbusybox pkill -9 dvrHelper2⤵PID:506
-
-
/bin/shsh -c "pkill -9 kmy* || busybox pkill -9 kmy*"1⤵PID:507
-
/usr/bin/pkillpkill -9 "kmy*"2⤵
- Reads runtime system information
PID:508
-
-
/bin/busyboxbusybox pkill -9 "kmy*"2⤵PID:509
-
-
/bin/shsh -c "pkill -9 lol* || busybox pkill -9 lol*"1⤵PID:510
-
/usr/bin/pkillpkill -9 "lol*"2⤵
- Reads CPU attributes
- Reads runtime system information
PID:511
-
-
/bin/shsh -c "pkill -9 telmips || busybox pkill -9 telmips"1⤵PID:519
-
/usr/bin/pkillpkill -9 telmips2⤵
- Reads CPU attributes
- Reads runtime system information
PID:521
-
-
/bin/busyboxbusybox pkill -9 telmips2⤵PID:526
-
-
/bin/shsh -c "pkill -9 telmips64 || busybox pkill -9 telmips64"1⤵PID:530
-
/usr/bin/pkillpkill -9 telmips642⤵
- Reads runtime system information
PID:531
-
-
/bin/busyboxbusybox pkill -9 telmips642⤵PID:532
-
-
/bin/shsh -c "pkill -9 telmipsel || busybox pkill -9 telmipsel"1⤵PID:543
-
/usr/bin/pkillpkill -9 telmipsel2⤵
- Reads CPU attributes
- Reads runtime system information
PID:547
-
-
/bin/busyboxbusybox pkill -9 telmipsel2⤵PID:552
-
-
/bin/shsh -c "pkill -9 telsh2eb || busybox pkill -9 telsh2eb"1⤵PID:560
-
/usr/bin/pkillpkill -9 telsh2eb2⤵
- Reads runtime system information
PID:561
-
-
/bin/busyboxbusybox pkill -9 telsh2eb2⤵PID:564
-
-
/bin/shsh -c "pkill -9 telsh2elf || busybox pkill -9 telsh2elf"1⤵PID:565
-
/usr/bin/pkillpkill -9 telsh2elf2⤵
- Reads CPU attributes
- Reads runtime system information
PID:566
-
-
/bin/busyboxbusybox pkill -9 telsh2elf2⤵PID:567
-
-
/bin/shsh -c "pkill -9 telsh4 || busybox pkill -9 telsh4"1⤵PID:568
-
/usr/bin/pkillpkill -9 telsh42⤵
- Reads CPU attributes
- Reads runtime system information
PID:569
-
-
/bin/busyboxbusybox pkill -9 telsh42⤵PID:570
-
-
/bin/shsh -c "pkill -9 telx86 || busybox pkill -9 telx86"1⤵PID:571
-
/usr/bin/pkillpkill -9 telx862⤵
- Reads CPU attributes
- Reads runtime system information
PID:572
-
-
/bin/busyboxbusybox pkill -9 telx862⤵PID:573
-
-
/bin/shsh -c "pkill -9 telarmv5 || busybox pkill -9 telarmv5"1⤵PID:575
-
/usr/bin/pkillpkill -9 telarmv52⤵
- Reads CPU attributes
PID:576
-
-
/bin/busyboxbusybox pkill -9 telarmv52⤵PID:578
-
-
/bin/shsh -c "pkill -9 telarmv4tl || busybox pkill -9 telarmv4tl"1⤵PID:579
-
/usr/bin/pkillpkill -9 telarmv4tl2⤵
- Reads CPU attributes
- Reads runtime system information
PID:580
-
-
/bin/busyboxbusybox pkill -9 telarmv4tl2⤵PID:581
-
-
/bin/shsh -c "pkill -9 telarmv4 || busybox pkill -9 telarmv4"1⤵PID:582
-
/usr/bin/pkillpkill -9 telarmv42⤵
- Reads CPU attributes
- Reads runtime system information
PID:583
-
-
/bin/busyboxbusybox pkill -9 telarmv42⤵PID:584
-
-
/bin/shsh -c "pkill -9 telarmv6 || busybox pkill -9 telarmv6"1⤵PID:585
-
/usr/bin/pkillpkill -9 telarmv62⤵
- Reads CPU attributes
- Reads runtime system information
PID:586
-
-
/bin/busyboxbusybox pkill -9 telarmv62⤵PID:587
-
-
/bin/shsh -c "pkill -9 teli686 || busybox pkill -9 teli686"1⤵PID:588
-
/usr/bin/pkillpkill -9 teli6862⤵
- Reads CPU attributes
- Reads runtime system information
PID:589
-
-
/bin/busyboxbusybox pkill -9 teli6862⤵PID:590
-
-
/bin/shsh -c "pkill -9 telpowerpc || busybox pkill -9 telpowerpc"1⤵PID:591
-
/usr/bin/pkillpkill -9 telpowerpc2⤵
- Reads CPU attributes
- Reads runtime system information
PID:592
-
-
/bin/busyboxbusybox pkill -9 telpowerpc2⤵PID:593
-
-
/bin/shsh -c "pkill -9 telpowerpc440fp || busybox pkill -9 telpowerpc440fp"1⤵PID:594
-
/usr/bin/pkillpkill -9 telpowerpc440fp2⤵
- Reads CPU attributes
- Reads runtime system information
PID:595
-
-
/bin/busyboxbusybox pkill -9 telpowerpc440fp2⤵PID:596
-
-
/bin/shsh -c "pkill -9 teli586 || busybox pkill -9 teli586"1⤵PID:597
-
/usr/bin/pkillpkill -9 teli5862⤵
- Reads CPU attributes
PID:598
-
-
/bin/busyboxbusybox pkill -9 teli5862⤵PID:599
-
-
/bin/shsh -c "pkill -9 telm68k || busybox pkill -9 telm68k"1⤵PID:602
-
/usr/bin/pkillpkill -9 telm68k2⤵
- Reads CPU attributes
- Reads runtime system information
PID:603
-
-
/bin/busyboxbusybox pkill -9 telm68k2⤵PID:604
-
-
/bin/shsh -c "pkill -9 telsparc || busybox pkill -9 telsparc"1⤵PID:605
-
/usr/bin/pkillpkill -9 telsparc2⤵
- Reads CPU attributes
- Reads runtime system information
PID:606
-
-
/bin/busyboxbusybox pkill -9 telsparc2⤵PID:607
-
-
/bin/shsh -c "pkill -9 telx86_64 || busybox pkill -9 telx86_64"1⤵PID:608
-
/usr/bin/pkillpkill -9 telx86_642⤵
- Reads CPU attributes
PID:609
-
-
/bin/busyboxbusybox pkill -9 telx86_642⤵PID:610
-
-
/bin/shsh -c "pkill -9 TwoFace* || busybox pkill -9 TwoFace*"1⤵PID:611
-
/usr/bin/pkillpkill -9 "TwoFace*"2⤵
- Reads CPU attributes
PID:612
-
-
/bin/busyboxbusybox pkill -9 "TwoFace*"2⤵PID:613
-
-
/bin/shsh -c "pkill -9 xxb* || busybox pkill -9 xxb*"1⤵PID:614
-
/usr/bin/pkillpkill -9 "xxb*"2⤵
- Reads runtime system information
PID:615
-
-
/bin/busyboxbusybox pkill -9 "xxb*"2⤵PID:616
-
-
/bin/shsh -c "pkill -9 bb || busybox pkill -9 bb"1⤵PID:617
-
/usr/bin/pkillpkill -9 bb2⤵PID:618
-
-
/bin/busyboxbusybox pkill -9 bb2⤵PID:619
-
-
/bin/shsh -c "pkill -9 busybotnet || busybox pkill -9 busybotnet"1⤵PID:620
-
/usr/bin/pkillpkill -9 busybotnet2⤵
- Reads runtime system information
PID:621
-
-
/bin/busyboxbusybox pkill -9 busybotnet2⤵PID:622
-
-
/bin/shsh -c "pkill -9 busybox || busybox pkill -9 busybox"1⤵PID:623
-
/usr/bin/pkillpkill -9 busybox2⤵
- Reads CPU attributes
- Reads runtime system information
PID:624
-
-
/bin/busyboxbusybox pkill -9 busybox2⤵PID:625
-
-
/bin/shsh -c "pkill -9 badbox || busybox pkill -9 badbox"1⤵PID:628
-
/usr/bin/pkillpkill -9 badbox2⤵
- Reads CPU attributes
PID:629
-
-
/bin/busyboxbusybox pkill -9 badbox2⤵PID:630
-
-
/bin/shsh -c "pkill -9 B1 || busybox pkill -9 B1"1⤵PID:631
-
/usr/bin/pkillpkill -9 B12⤵
- Reads CPU attributes
- Reads runtime system information
PID:632
-
-
/bin/busyboxbusybox pkill -9 B12⤵PID:633
-
-
/bin/shsh -c "pkill -9 B2 || busybox pkill -9 B2"1⤵PID:634
-
/usr/bin/pkillpkill -9 B22⤵
- Reads CPU attributes
PID:635
-
-
/bin/busyboxbusybox pkill -9 B22⤵PID:636
-
-
/bin/shsh -c "pkill -9 B3 || busybox pkill -9 B3"1⤵PID:637
-
/usr/bin/pkillpkill -9 B32⤵PID:638
-
-
/bin/busyboxbusybox pkill -9 B32⤵PID:639
-
-
/bin/shsh -c "pkill -9 B4 || busybox pkill -9 B4"1⤵PID:640
-
/usr/bin/pkillpkill -9 B42⤵
- Reads runtime system information
PID:641
-
-
/bin/busyboxbusybox pkill -9 B42⤵PID:642
-
-
/bin/shsh -c "pkill -9 B5 || busybox pkill -9 B5"1⤵PID:643
-
/usr/bin/pkillpkill -9 B52⤵
- Reads runtime system information
PID:644
-
-
/bin/busyboxbusybox pkill -9 B52⤵PID:645
-
-
/bin/shsh -c "pkill -9 B6 || busybox pkill -9 B6"1⤵PID:646
-
/usr/bin/pkillpkill -9 B62⤵PID:647
-
-
/bin/busyboxbusybox pkill -9 B62⤵PID:648
-
-
/bin/shsh -c "pkill -9 B7 || busybox pkill -9 B7"1⤵PID:651
-
/usr/bin/pkillpkill -9 B72⤵
- Reads CPU attributes
PID:652
-
-
/bin/busyboxbusybox pkill -9 B72⤵PID:653
-
-
/bin/shsh -c "pkill -9 B8 || busybox pkill -9 B8"1⤵PID:654
-
/usr/bin/pkillpkill -9 B82⤵
- Reads CPU attributes
- Reads runtime system information
PID:655
-
-
/bin/busyboxbusybox pkill -9 B82⤵PID:656
-
-
/bin/shsh -c "pkill -9 B9 || busybox pkill -9 B9"1⤵PID:657
-
/usr/bin/pkillpkill -9 B92⤵PID:658
-
-
/bin/busyboxbusybox pkill -9 B92⤵PID:659
-
-
/bin/shsh -c "pkill -9 B10 || busybox pkill -9 B10"1⤵PID:660
-
/usr/bin/pkillpkill -9 B102⤵PID:661
-
-
/bin/busyboxbusybox pkill -9 B102⤵PID:662
-
-
/bin/shsh -c "pkill -9 B11 || busybox pkill -9 B11"1⤵PID:663
-
/usr/bin/pkillpkill -9 B112⤵PID:664
-
-
/bin/busyboxbusybox pkill -9 B112⤵PID:665
-
-
/bin/shsh -c "pkill -9 B12 || busybox pkill -9 B12"1⤵PID:666
-
/usr/bin/pkillpkill -9 B122⤵PID:667
-
-
/bin/busyboxbusybox pkill -9 B122⤵PID:668
-
-
/bin/shsh -c "pkill -9 B13 || busybox pkill -9 B13"1⤵PID:669
-
/usr/bin/pkillpkill -9 B132⤵
- Reads CPU attributes
- Reads runtime system information
PID:670
-
-
/bin/busyboxbusybox pkill -9 B132⤵PID:671
-
-
/bin/shsh -c "pkill -9 B14 || busybox pkill -9 B14"1⤵PID:672
-
/usr/bin/pkillpkill -9 B142⤵
- Reads CPU attributes
PID:673
-
-
/bin/busyboxbusybox pkill -9 B142⤵PID:674
-
-
/bin/shsh -c "pkill -9 B15 || busybox pkill -9 B15"1⤵PID:677
-
/usr/bin/pkillpkill -9 B152⤵
- Reads runtime system information
PID:678
-
-
/bin/busyboxbusybox pkill -9 B152⤵PID:679
-
-
/bin/shsh -c "pkill -9 B16 || busybox pkill -9 B16"1⤵PID:680
-
/usr/bin/pkillpkill -9 B162⤵
- Reads CPU attributes
- Reads runtime system information
PID:681
-
-
/bin/busyboxbusybox pkill -9 B162⤵PID:682
-
-
/bin/shsh -c "pkill -9 B17 || busybox pkill -9 B17"1⤵PID:683
-
/usr/bin/pkillpkill -9 B172⤵PID:684
-
-
/bin/busyboxbusybox pkill -9 B172⤵PID:685
-
-
/bin/shsh -c "pkill -9 B18 || busybox pkill -9 B18"1⤵PID:686
-
/usr/bin/pkillpkill -9 B182⤵
- Reads CPU attributes
PID:687
-
-
/bin/busyboxbusybox pkill -9 B182⤵PID:688
-
-
/bin/shsh -c "pkill -9 B20 || busybox pkill -9 B20"1⤵PID:689
-
/usr/bin/pkillpkill -9 B202⤵PID:690
-
-
/bin/busyboxbusybox pkill -9 B202⤵PID:691
-
-
/bin/shsh -c "pkill -9 gaybot || busybox pkill -9 gaybot"1⤵PID:692
-
/usr/bin/pkillpkill -9 gaybot2⤵
- Reads CPU attributes
PID:693
-
-
/bin/busyboxbusybox pkill -9 gaybot2⤵PID:694
-
-
/bin/shsh -c "pkill -9 hackz || busybox pkill -9 hackz"1⤵PID:695
-
/usr/bin/pkillpkill -9 hackz2⤵
- Reads CPU attributes
PID:696
-
-
/bin/busyboxbusybox pkill -9 hackz2⤵PID:697
-
-
/bin/shsh -c "pkill -9 bin* || busybox pkill -9 bin*"1⤵PID:698
-
/usr/bin/pkillpkill -9 bin2⤵
- Reads CPU attributes
PID:699
-
-
/bin/busyboxbusybox pkill -9 bin2⤵PID:700
-
-
/bin/shsh -c "pkill -9 gtop || busybox pkill -9 gtop"1⤵PID:703
-
/usr/bin/pkillpkill -9 gtop2⤵
- Reads CPU attributes
PID:704
-
-
/bin/busyboxbusybox pkill -9 gtop2⤵PID:705
-
-
/bin/shsh -c "pkill -9 botnet || busybox pkill -9 botnet"1⤵PID:706
-
/usr/bin/pkillpkill -9 botnet2⤵
- Reads CPU attributes
PID:707
-
-
/bin/busyboxbusybox pkill -9 botnet2⤵PID:708
-
-
/bin/shsh -c "pkill -9 swatnet || busybox pkill -9 swatnet"1⤵PID:709
-
/usr/bin/pkillpkill -9 swatnet2⤵
- Reads CPU attributes
PID:710
-
-
/bin/busyboxbusybox pkill -9 swatnet2⤵PID:711
-
-
/bin/shsh -c "pkill -9 ballpit || busybox pkill -9 ballpit"1⤵PID:712
-
/usr/bin/pkillpkill -9 ballpit2⤵PID:713
-
-
/bin/busyboxbusybox pkill -9 ballpit2⤵PID:714
-
-
/bin/shsh -c "pkill -9 fucknet || busybox pkill -9 fucknet"1⤵PID:715
-
/usr/bin/pkillpkill -9 fucknet2⤵
- Reads CPU attributes
PID:716
-
-
/bin/busyboxbusybox pkill -9 fucknet2⤵PID:717
-
-
/bin/shsh -c "pkill -9 cracknet || busybox pkill -9 cracknet"1⤵PID:718
-
/usr/bin/pkillpkill -9 cracknet2⤵PID:719
-
-
/bin/busyboxbusybox pkill -9 cracknet2⤵PID:720
-
-
/bin/shsh -c "pkill -9 weednet || busybox pkill -9 weednet"1⤵PID:721
-
/usr/bin/pkillpkill -9 weednet2⤵
- Reads CPU attributes
- Reads runtime system information
PID:722
-
-
/bin/busyboxbusybox pkill -9 weednet2⤵PID:723
-
-
/bin/shsh -c "pkill -9 gaynet || busybox pkill -9 gaynet"1⤵PID:724
-
/usr/bin/pkillpkill -9 gaynet2⤵
- Reads runtime system information
PID:725
-
-
/bin/busyboxbusybox pkill -9 gaynet2⤵PID:726
-
-
/bin/shsh -c "pkill -9 queernet || busybox pkill -9 queernet"1⤵PID:729
-
/usr/bin/pkillpkill -9 queernet2⤵PID:730
-
-
/bin/busyboxbusybox pkill -9 queernet2⤵PID:731
-
-
/bin/shsh -c "pkill -9 ballnet || busybox pkill -9 ballnet"1⤵PID:732
-
/usr/bin/pkillpkill -9 ballnet2⤵
- Reads CPU attributes
- Reads runtime system information
PID:733
-
-
/bin/busyboxbusybox pkill -9 ballnet2⤵PID:734
-
-
/bin/shsh -c "pkill -9 unet || busybox pkill -9 unet"1⤵PID:735
-
/usr/bin/pkillpkill -9 unet2⤵
- Reads CPU attributes
- Reads runtime system information
PID:736
-
-
/bin/busyboxbusybox pkill -9 unet2⤵PID:737
-
-
/bin/shsh -c "pkill -9 yougay || busybox pkill -9 yougay"1⤵PID:738
-
/usr/bin/pkillpkill -9 yougay2⤵PID:739
-
-
/bin/busyboxbusybox pkill -9 yougay2⤵PID:740
-
-
/bin/shsh -c "pkill -9 sttftp || busybox pkill -9 sttftp"1⤵PID:741
-
/usr/bin/pkillpkill -9 sttftp2⤵
- Reads CPU attributes
PID:742
-
-
/bin/busyboxbusybox pkill -9 sttftp2⤵PID:743
-
-
/bin/shsh -c "pkill -9 sstftp || busybox pkill -9 sstftp"1⤵PID:744
-
/usr/bin/pkillpkill -9 sstftp2⤵PID:745
-
-
/bin/busyboxbusybox pkill -9 sstftp2⤵PID:746
-
-
/bin/shsh -c "pkill -9 sbtftp || busybox pkill -9 sbtftp"1⤵PID:747
-
/usr/bin/pkillpkill -9 sbtftp2⤵
- Reads runtime system information
PID:748
-
-
/bin/busyboxbusybox pkill -9 sbtftp2⤵PID:749
-