Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

5

Static

static

20c32ad6e0...c5e987

ubuntu-18.04-amd64

5

20c32ad6e0...c5e987

debian-9-armhf

5

20c32ad6e0...c5e987

debian-9-mips

5

20c32ad6e0...c5e987

debian-9-mipsel

5

Analysis

  • max time kernel
    0s
  • max time network
    156s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20221111-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20221111-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    24/11/2022, 03:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987

  • Size

    5KB

  • MD5

    06573b97f6ce7087309c52a24b3fd5d4

  • SHA1

    9971a1324ea973e4c19065cf28e1144d8afe99ef

  • SHA256

    20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987

  • SHA512

    907b0fefe3580512acf8c9bcdf0e33a57738403fb9baef409484b5f9f1c42d4dfe6882f0a0d86bf4fcc8f8dec81aea75f008cc7a37eb18c86f429a7af91d67de

  • SSDEEP

    96:VzalhcpOOQAnPGHhgmft8ryw/wBbaVYdIPd9aBqBZ6tspGU5qtkLQxkhV4x/EG3D:kc5QAqgm1yya0buwc0seoG4+uEYVK/Hz

Score
5/10

Malware Config

Signatures

  • Reads runtime system information 17 IoCs

    Reads data from /proc virtual filesystem.

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987
    /tmp/20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987
    1⤵
    • Writes file to tmp directory
    PID:331
    • /bin/tar
      tar -xzvf f00c0d3.tar.gz
      2⤵
      • Reads runtime system information
      PID:337
    • /bin/chmod
      chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
      2⤵
        PID:339
      • /bin/chmod
        chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
        2⤵
          PID:340
        • /bin/chmod
          chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
          2⤵
            PID:341
          • /bin/chmod
            chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
            2⤵
              PID:342
            • /bin/chmod
              chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
              2⤵
                PID:343
              • /bin/chmod
                chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
                2⤵
                  PID:344
                • /bin/chmod
                  chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
                  2⤵
                    PID:345
                  • /bin/chmod
                    chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
                    2⤵
                      PID:346
                    • /bin/chmod
                      chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
                      2⤵
                        PID:347
                      • /bin/chmod
                        chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
                        2⤵
                          PID:348
                        • /bin/mv
                          mv 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc /tmp
                          2⤵
                          • Reads runtime system information
                          PID:349
                        • /bin/mv
                          mv udev udev1
                          2⤵
                          • Reads runtime system information
                          PID:350
                        • /bin/chmod
                          chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
                          2⤵
                            PID:351
                          • /bin/chmod
                            chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
                            2⤵
                              PID:352
                            • /bin/chmod
                              chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
                              2⤵
                                PID:353
                              • /bin/chmod
                                chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
                                2⤵
                                  PID:354
                                • /bin/chmod
                                  chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
                                  2⤵
                                    PID:355
                                  • /bin/chmod
                                    chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
                                    2⤵
                                      PID:356
                                    • /bin/chmod
                                      chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
                                      2⤵
                                        PID:357
                                      • /bin/chmod
                                        chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
                                        2⤵
                                          PID:358
                                        • /bin/chmod
                                          chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
                                          2⤵
                                            PID:359
                                          • /bin/chmod
                                            chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
                                            2⤵
                                              PID:360
                                            • /bin/chmod
                                              chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
                                              2⤵
                                                PID:361
                                              • /bin/chmod
                                                chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
                                                2⤵
                                                  PID:362
                                                • /bin/chmod
                                                  chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
                                                  2⤵
                                                    PID:363
                                                  • /bin/chmod
                                                    chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
                                                    2⤵
                                                      PID:364
                                                    • /bin/chmod
                                                      chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
                                                      2⤵
                                                        PID:365
                                                      • /bin/chmod
                                                        chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
                                                        2⤵
                                                          PID:366
                                                        • /bin/chmod
                                                          chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-0d16563327f74ebfa4c6cc7df2d8ea69-systemd-timesyncd.service-VQqRrc
                                                          2⤵
                                                            PID:367
                                                          • /bin/mv
                                                            mv getterm /tmp/zd/getterm
                                                            2⤵
                                                            • Reads runtime system information
                                                            PID:368
                                                          • /usr/bin/gcc
                                                            gcc apple.c -o apple
                                                            2⤵
                                                              PID:369
                                                            • /usr/bin/gcc
                                                              gcc full-nelson-fixed.c -o full-nelson-fixed1
                                                              2⤵
                                                                PID:370
                                                              • /usr/bin/gcc
                                                                gcc payload.c -o payload
                                                                2⤵
                                                                  PID:371
                                                                • /usr/bin/gcc
                                                                  gcc ptrace_attach-fixed.c -o ptrace_attach-fixed
                                                                  2⤵
                                                                    PID:372
                                                                  • /usr/bin/gcc
                                                                    gcc rds-fixed.c -o rds-fixed1
                                                                    2⤵
                                                                      PID:373
                                                                    • /usr/bin/gcc
                                                                      gcc -o udpsendmsg-fixed udpsendmsg-fixed.c
                                                                      2⤵
                                                                        PID:374
                                                                      • /usr/bin/gcc
                                                                        gcc 0x82.c -o 0x821
                                                                        2⤵
                                                                          PID:375
                                                                        • /usr/bin/gcc
                                                                          gcc 0x82-simple.c -o 0x82-simple1
                                                                          2⤵
                                                                            PID:376
                                                                          • /usr/bin/gcc
                                                                            gcc linux-sendpage.c -o linux-sendpage1
                                                                            2⤵
                                                                              PID:377
                                                                            • /usr/bin/gcc
                                                                              gcc udp_sendmsg.c -o udp_sendmsg1
                                                                              2⤵
                                                                                PID:378
                                                                              • /usr/bin/gcc
                                                                                gcc 32.c -o 321
                                                                                2⤵
                                                                                  PID:379
                                                                                • /usr/bin/gcc
                                                                                  gcc andi.c -o andi1
                                                                                  2⤵
                                                                                    PID:380
                                                                                  • /usr/bin/gcc
                                                                                    gcc exploit.c -o exploit1
                                                                                    2⤵
                                                                                      PID:381
                                                                                    • /usr/bin/gcc
                                                                                      gcc ppc.c -o ppc1
                                                                                      2⤵
                                                                                        PID:382
                                                                                      • /usr/bin/gcc
                                                                                        gcc simple.c -o simple1
                                                                                        2⤵
                                                                                          PID:383
                                                                                        • /usr/bin/gcc
                                                                                          gcc 2.6.31-2010.c -o 2.6.31-2010
                                                                                          2⤵
                                                                                            PID:384
                                                                                          • /usr/bin/gcc
                                                                                            gcc ab.c -o ab
                                                                                            2⤵
                                                                                              PID:385
                                                                                            • /usr/bin/gcc
                                                                                              gcc american-sign-language.c -o american-sign-language
                                                                                              2⤵
                                                                                                PID:386
                                                                                              • /usr/bin/gcc
                                                                                                gcc caps-to-root2.c -o caps-to-root2
                                                                                                2⤵
                                                                                                  PID:387
                                                                                                • /usr/bin/gcc
                                                                                                  gcc CVE-2010-2963.c -o CVE-2010-2963
                                                                                                  2⤵
                                                                                                    PID:388
                                                                                                  • /usr/bin/gcc
                                                                                                    gcc cve-2010-3437.c -o cve-2010-3437
                                                                                                    2⤵
                                                                                                      PID:389
                                                                                                    • /usr/bin/gcc
                                                                                                      gcc CVE-2010-3904.c -o CVE-2010-3904
                                                                                                      2⤵
                                                                                                        PID:390
                                                                                                      • /usr/bin/gcc
                                                                                                        gcc full-nelson.c -o full-nelson
                                                                                                        2⤵
                                                                                                          PID:391
                                                                                                        • /usr/bin/gcc
                                                                                                          gcc i-can-haz-modharden.c -o i-can-haz-modharden
                                                                                                          2⤵
                                                                                                            PID:392
                                                                                                          • /usr/bin/gcc
                                                                                                            gcc robert_you_suck.c -o robert_you_suck
                                                                                                            2⤵
                                                                                                              PID:393
                                                                                                            • /usr/bin/gcc
                                                                                                              gcc setup_arg_pages.c -o setup_arg_pages
                                                                                                              2⤵
                                                                                                                PID:394
                                                                                                              • /bin/mv
                                                                                                                mv /tmp/sh/0.sh /tmp/f00c0d3/0/0.sh
                                                                                                                2⤵
                                                                                                                • Reads runtime system information
                                                                                                                PID:395
                                                                                                              • /bin/mv
                                                                                                                mv /tmp/sh/1.sh /tmp/f00c0d3/1/1.sh
                                                                                                                2⤵
                                                                                                                • Reads runtime system information
                                                                                                                PID:396
                                                                                                              • /bin/mv
                                                                                                                mv /tmp/sh/2.sh /tmp/f00c0d3/2/2.sh
                                                                                                                2⤵
                                                                                                                • Reads runtime system information
                                                                                                                PID:397
                                                                                                              • /bin/mv
                                                                                                                mv /tmp/sh/3.sh /tmp/f00c0d3/3/3.sh
                                                                                                                2⤵
                                                                                                                • Reads runtime system information
                                                                                                                PID:398
                                                                                                              • /bin/mv
                                                                                                                mv /tmp/sh/c.sh /tmp/f00c0d3/c/c.sh
                                                                                                                2⤵
                                                                                                                • Reads runtime system information
                                                                                                                PID:399
                                                                                                              • /bin/mv
                                                                                                                mv /tmp/sh/fcm.sh /tmp/f00c0d3/fcm.sh
                                                                                                                2⤵
                                                                                                                • Reads runtime system information
                                                                                                                PID:400
                                                                                                              • /bin/mkdir
                                                                                                                mkdir e
                                                                                                                2⤵
                                                                                                                • Reads runtime system information
                                                                                                                PID:401
                                                                                                              • /bin/mv
                                                                                                                mv e.tar.gz e
                                                                                                                2⤵
                                                                                                                • Reads runtime system information
                                                                                                                PID:402
                                                                                                              • /bin/tar
                                                                                                                tar -xzvf e.tar.gz
                                                                                                                2⤵
                                                                                                                • Reads runtime system information
                                                                                                                PID:403
                                                                                                              • /usr/bin/gcc
                                                                                                                gcc -O2 -o fs2 fs1.c
                                                                                                                2⤵
                                                                                                                  PID:405
                                                                                                                • /usr/bin/gcc
                                                                                                                  gcc fsn.c -o fsz
                                                                                                                  2⤵
                                                                                                                    PID:406
                                                                                                                  • /bin/mv
                                                                                                                    mv /tmp/sh/testm.pl /tmp/e
                                                                                                                    2⤵
                                                                                                                    • Reads runtime system information
                                                                                                                    PID:407
                                                                                                                  • /bin/mv
                                                                                                                    mv /tmp/sh/e.sh /tmp/e
                                                                                                                    2⤵
                                                                                                                    • Reads runtime system information
                                                                                                                    PID:408
                                                                                                                  • /bin/chmod
                                                                                                                    chmod +x "*"
                                                                                                                    2⤵
                                                                                                                      PID:409
                                                                                                                    • /usr/bin/gcc
                                                                                                                      gcc -Wall -o 02.x86_845.32 02.x86_845.c
                                                                                                                      2⤵
                                                                                                                        PID:410
                                                                                                                      • /usr/bin/gcc
                                                                                                                        gcc -Wall -m64 -o 02.x86_845.64 02.x86_845.c
                                                                                                                        2⤵
                                                                                                                          PID:411
                                                                                                                        • /usr/bin/gcc
                                                                                                                          gcc -Wall -o 03.2.6.3.any-x86_64.32 03.2.6.3.any-x86_64.c
                                                                                                                          2⤵
                                                                                                                            PID:412
                                                                                                                          • /usr/bin/gcc
                                                                                                                            gcc -Wall -m64 -o 03.2.6.3.any-x86_64.64 03.2.6.3.any-x86_64.c
                                                                                                                            2⤵
                                                                                                                              PID:413
                                                                                                                            • /usr/bin/gcc
                                                                                                                              gcc 08.LTE.3.0.alpha-omega.c -o alpha-omega
                                                                                                                              2⤵
                                                                                                                                PID:414
                                                                                                                              • /usr/bin/gcc
                                                                                                                                gcc -Wall -m64 -o alpha-omega.64 08.LTE.3.0.alpha-omega.c
                                                                                                                                2⤵
                                                                                                                                  PID:415
                                                                                                                                • /usr/bin/gcc
                                                                                                                                  gcc -Wall -o 09.2.6.18-128-1.32 09.2.6.18-128-1.c
                                                                                                                                  2⤵
                                                                                                                                    PID:416
                                                                                                                                  • /usr/bin/gcc
                                                                                                                                    gcc -Wall -m64 -o 09.2.6.18-128-1.64 09.2.6.18-128-1.c
                                                                                                                                    2⤵
                                                                                                                                      PID:417
                                                                                                                                    • /usr/bin/gcc
                                                                                                                                      gcc -Wall -o 09.LT.3.8.9.x86_64.32 09.LT.3.8.9.x86_64.c
                                                                                                                                      2⤵
                                                                                                                                        PID:418
                                                                                                                                      • /usr/bin/gcc
                                                                                                                                        gcc -Wall -m64 -o 09.LT.3.8.9.x86_64.64 09.LT.3.8.9.x86_64.c
                                                                                                                                        2⤵
                                                                                                                                          PID:419
                                                                                                                                        • /usr/bin/gcc
                                                                                                                                          gcc -O2 09.LTE.2.6.37-3.x.x.x86_64.semtex.c
                                                                                                                                          2⤵
                                                                                                                                            PID:420
                                                                                                                                          • /usr/bin/gcc
                                                                                                                                            gcc -Wall -m64 -o 09.LTE.2.6.37-3.x.x.x86_64.semtex.64 09.LTE.2.6.37-3.x.x.x86_64.semtex.c
                                                                                                                                            2⤵
                                                                                                                                              PID:421
                                                                                                                                            • /usr/bin/gcc
                                                                                                                                              gcc -Wall -o 10.2.6.18-128-1.linux-sendpage.32 10.2.6.18-128-1.linux-sendpage.c
                                                                                                                                              2⤵
                                                                                                                                                PID:422
                                                                                                                                              • /usr/bin/gcc
                                                                                                                                                gcc -Wall -m64 -o 10.2.6.18-128-1.linux-sendpage.64 10.2.6.18-128-1.linux-sendpage.c
                                                                                                                                                2⤵
                                                                                                                                                  PID:423
                                                                                                                                                • /usr/bin/gcc
                                                                                                                                                  gcc -Wall -o 2-6-18-164-194.LocalRoot.32 2-6-18-164-194.LocalRoot.c
                                                                                                                                                  2⤵
                                                                                                                                                    PID:424
                                                                                                                                                  • /usr/bin/gcc
                                                                                                                                                    gcc -Wall -m64 -o 2-6-18-164-194.LocalRoot.64 2-6-18-164-194.LocalRoot.c
                                                                                                                                                    2⤵
                                                                                                                                                      PID:425
                                                                                                                                                    • /usr/bin/gcc
                                                                                                                                                      gcc -Wall -o 2-6-18.1.32 2-6-18.1.c
                                                                                                                                                      2⤵
                                                                                                                                                        PID:426
                                                                                                                                                      • /usr/bin/gcc
                                                                                                                                                        gcc -Wall -m64 -o 2-6-18.1.64 2-6-18.1.c
                                                                                                                                                        2⤵
                                                                                                                                                          PID:427
                                                                                                                                                        • /usr/bin/gcc
                                                                                                                                                          gcc -Wall -o 2-6-18.32 2-6-18.c
                                                                                                                                                          2⤵
                                                                                                                                                            PID:428
                                                                                                                                                          • /usr/bin/gcc
                                                                                                                                                            gcc -Wall -m64 -o 2-6-18.64 2-6-18.c
                                                                                                                                                            2⤵
                                                                                                                                                              PID:429
                                                                                                                                                            • /usr/bin/gcc
                                                                                                                                                              gcc -Wall -o 2.6.18-128-2010.32 2.6.18-128-2010.c
                                                                                                                                                              2⤵
                                                                                                                                                                PID:430
                                                                                                                                                              • /usr/bin/gcc
                                                                                                                                                                gcc -Wall -m64 -o 2.6.18-128-2010.64 2.6.18-128-2010.c
                                                                                                                                                                2⤵
                                                                                                                                                                  PID:431
                                                                                                                                                                • /usr/bin/gcc
                                                                                                                                                                  gcc -Wall -o 2.6.18-128-private.32 2.6.18-128-private.c
                                                                                                                                                                  2⤵
                                                                                                                                                                    PID:432
                                                                                                                                                                  • /usr/bin/gcc
                                                                                                                                                                    gcc -Wall -m64 -o 2.6.18-128-private.64 2.6.18-128-private.c
                                                                                                                                                                    2⤵
                                                                                                                                                                      PID:433
                                                                                                                                                                    • /usr/bin/gcc
                                                                                                                                                                      gcc -Wall -o 2.6.18-128.32 2.6.18-128.c
                                                                                                                                                                      2⤵
                                                                                                                                                                        PID:434
                                                                                                                                                                      • /usr/bin/gcc
                                                                                                                                                                        gcc -Wall -m64 -o 2.6.18-128.64 2.6.18-128.c
                                                                                                                                                                        2⤵
                                                                                                                                                                          PID:435
                                                                                                                                                                        • /usr/bin/gcc
                                                                                                                                                                          gcc -w -o 2.6.18-128.el5.and.2.6.9-89.EL.32 2.6.18-128.el5.and.2.6.9-89.EL.c
                                                                                                                                                                          2⤵
                                                                                                                                                                            PID:436
                                                                                                                                                                          • /usr/bin/gcc
                                                                                                                                                                            gcc -w -m64 -o 2.6.18-128.el5.and.2.6.9-89.EL.64 2.6.18-128.el5.and.2.6.9-89.EL.c
                                                                                                                                                                            2⤵
                                                                                                                                                                              PID:437
                                                                                                                                                                            • /usr/bin/gcc
                                                                                                                                                                              gcc -Wall -o 2.6.18-164-priv.32 2.6.18-164-priv.c
                                                                                                                                                                              2⤵
                                                                                                                                                                                PID:438
                                                                                                                                                                              • /usr/bin/gcc
                                                                                                                                                                                gcc -Wall -m64 -o 2.6.18-164-priv.64 2.6.18-164-priv.c
                                                                                                                                                                                2⤵
                                                                                                                                                                                  PID:439
                                                                                                                                                                                • /usr/bin/gcc
                                                                                                                                                                                  gcc -Wall -o 2.6.18-194.32 2.6.18-194.c
                                                                                                                                                                                  2⤵
                                                                                                                                                                                    PID:440
                                                                                                                                                                                  • /usr/bin/gcc
                                                                                                                                                                                    gcc -Wall -m64 -o 2.6.18-194.64 2.6.18-194.c
                                                                                                                                                                                    2⤵
                                                                                                                                                                                      PID:441
                                                                                                                                                                                    • /usr/bin/gcc
                                                                                                                                                                                      gcc -Wall -o 2.6.18-20.32 2.6.18-20.c
                                                                                                                                                                                      2⤵
                                                                                                                                                                                        PID:442
                                                                                                                                                                                      • /usr/bin/gcc
                                                                                                                                                                                        gcc -Wall -m64 -o 2.6.18-20.64 2.6.18-20.c
                                                                                                                                                                                        2⤵
                                                                                                                                                                                          PID:443
                                                                                                                                                                                        • /usr/bin/gcc
                                                                                                                                                                                          gcc -Wall -o 2.6.18-374.32 2.6.18-374.c
                                                                                                                                                                                          2⤵
                                                                                                                                                                                            PID:444
                                                                                                                                                                                          • /usr/bin/gcc
                                                                                                                                                                                            gcc -Wall -m64 -o 2.6.18-374.64 2.6.18-374.c
                                                                                                                                                                                            2⤵
                                                                                                                                                                                              PID:445
                                                                                                                                                                                            • /usr/bin/gcc
                                                                                                                                                                                              gcc -Wall -o 2.6.18-6.32 2.6.18-6.c
                                                                                                                                                                                              2⤵
                                                                                                                                                                                                PID:446
                                                                                                                                                                                              • /usr/bin/gcc
                                                                                                                                                                                                gcc -Wall -m64 -o 2.6.18-6.64 2.6.18-6.c
                                                                                                                                                                                                2⤵
                                                                                                                                                                                                  PID:447
                                                                                                                                                                                                • /usr/bin/gcc
                                                                                                                                                                                                  gcc -o 2.6.18-6.32 2.6.18-6.c
                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                    PID:448
                                                                                                                                                                                                  • /usr/bin/gcc
                                                                                                                                                                                                    gcc -Wall -m64 -o 2.6.18-6.64 2.6.18-6.c
                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                      PID:449
                                                                                                                                                                                                    • /usr/bin/gcc
                                                                                                                                                                                                      gcc -Wall -o 2.6.18.194-privete.32 2.6.18.194-privete.c
                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                        PID:450
                                                                                                                                                                                                      • /usr/bin/gcc
                                                                                                                                                                                                        gcc -Wall -m64 -o 2.6.18.194-privete.64 2.6.18.194-privete.c
                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                          PID:451
                                                                                                                                                                                                        • /usr/bin/gcc
                                                                                                                                                                                                          gcc -Wall -o 2.6.18.2.32 2.6.18.2.c
                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                            PID:452
                                                                                                                                                                                                          • /usr/bin/gcc
                                                                                                                                                                                                            gcc -Wall -m64 -o 2.6.18.2.64 2.6.18.2.c
                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                              PID:453
                                                                                                                                                                                                            • /usr/bin/gcc
                                                                                                                                                                                                              gcc -o 2.6.18.32 2.6.18.c
                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                PID:454
                                                                                                                                                                                                              • /usr/bin/gcc
                                                                                                                                                                                                                gcc -Wall -m64 -o 2.6.18.64 2.6.18.c
                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                  PID:455
                                                                                                                                                                                                                • /usr/bin/gcc
                                                                                                                                                                                                                  gcc -Wall -o 23.2.6.18-20.32 23.2.6.18-20.c
                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                    PID:456
                                                                                                                                                                                                                  • /usr/bin/gcc
                                                                                                                                                                                                                    gcc -Wall -m64 -o 23.2.6.18-20.64 23.2.6.18-20.c
                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                      PID:457
                                                                                                                                                                                                                    • /usr/bin/gcc
                                                                                                                                                                                                                      gcc -Wall -o 2530363.32 2530363.c
                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                        PID:458
                                                                                                                                                                                                                      • /usr/bin/gcc
                                                                                                                                                                                                                        gcc -Wall -m64 -o 2530363.64 2530363.c
                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                          PID:459
                                                                                                                                                                                                                        • /usr/bin/gcc
                                                                                                                                                                                                                          gcc -Wall -o 999.LTE.2.6.37-3.x.x.x86_64.semtex.32 999.LTE.2.6.37-3.x.x.x86_64.semtex.c
                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                            PID:460
                                                                                                                                                                                                                          • /usr/bin/gcc
                                                                                                                                                                                                                            gcc -Wall -m64 -o 999.LTE.2.6.37-3.x.x.x86_64.semtex.64 999.LTE.2.6.37-3.x.x.x86_64.semtex.c
                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                              PID:461
                                                                                                                                                                                                                            • /usr/bin/gcc
                                                                                                                                                                                                                              gcc -Wall -o LT.3.8.9.userns_root_sploit.32 LT.3.8.9.userns_root_sploit.c
                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                PID:462
                                                                                                                                                                                                                              • /usr/bin/gcc
                                                                                                                                                                                                                                gcc -Wall -m64 -o LT.3.8.9.userns_root_sploit.64 LT.3.8.9.userns_root_sploit.c
                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                  PID:463
                                                                                                                                                                                                                                • /usr/bin/gcc
                                                                                                                                                                                                                                  gcc -Wall -o abftw.32 abftw.c
                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                    PID:464
                                                                                                                                                                                                                                  • /usr/bin/gcc
                                                                                                                                                                                                                                    gcc -Wall -m64 -o abftw.64 abftw.c
                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                      PID:465
                                                                                                                                                                                                                                    • /usr/bin/gcc
                                                                                                                                                                                                                                      gcc -Wall -o sambal.32 sambal.c
                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                        PID:466
                                                                                                                                                                                                                                      • /usr/bin/gcc
                                                                                                                                                                                                                                        gcc -Wall -m64 -o sambal.64 sambal.c
                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                          PID:467
                                                                                                                                                                                                                                        • /bin/tar
                                                                                                                                                                                                                                          tar -zxvf CVE-2014-5119.tar.gz
                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                          • Reads runtime system information
                                                                                                                                                                                                                                          PID:468
                                                                                                                                                                                                                                        • /bin/ls
                                                                                                                                                                                                                                          ls -al
                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                          • Reads runtime system information
                                                                                                                                                                                                                                          PID:470

                                                                                                                                                                                                                                      Network

                                                                                                                                                                                                                                      MITRE ATT&CK Matrix

                                                                                                                                                                                                                                      Replay Monitor

                                                                                                                                                                                                                                      Loading Replay Monitor...

                                                                                                                                                                                                                                      Downloads