Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

5

Static

static

20c32ad6e0...c5e987

ubuntu-18.04-amd64

5

20c32ad6e0...c5e987

debian-9-armhf

5

20c32ad6e0...c5e987

debian-9-mips

5

20c32ad6e0...c5e987

debian-9-mipsel

5

Analysis

  • max time kernel
    0s
  • max time network
    121s
  • platform
    linux_mipsel
  • resource
    debian9-mipsel-en-20211208
  • resource tags

    arch:mipselimage:debian9-mipsel-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    24/11/2022, 03:12 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987

  • Size

    5KB

  • MD5

    06573b97f6ce7087309c52a24b3fd5d4

  • SHA1

    9971a1324ea973e4c19065cf28e1144d8afe99ef

  • SHA256

    20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987

  • SHA512

    907b0fefe3580512acf8c9bcdf0e33a57738403fb9baef409484b5f9f1c42d4dfe6882f0a0d86bf4fcc8f8dec81aea75f008cc7a37eb18c86f429a7af91d67de

  • SSDEEP

    96:VzalhcpOOQAnPGHhgmft8ryw/wBbaVYdIPd9aBqBZ6tspGU5qtkLQxkhV4x/EG3D:kc5QAqgm1yya0buwc0seoG4+uEYVK/Hz

Score
5/10

Malware Config

Signatures

  • Reads runtime system information 17 IoCs

    Reads data from /proc virtual filesystem.

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987
    /tmp/20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987
    1⤵
    • Writes file to tmp directory
    PID:325
    • /bin/tar
      tar -xzvf f00c0d3.tar.gz
      2⤵
      • Reads runtime system information
      PID:327
    • /bin/chmod
      chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
      2⤵
        PID:332
      • /bin/chmod
        chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
        2⤵
          PID:333
        • /bin/chmod
          chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
          2⤵
            PID:334
          • /bin/chmod
            chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
            2⤵
              PID:335
            • /bin/chmod
              chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
              2⤵
                PID:336
              • /bin/chmod
                chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
                2⤵
                  PID:337
                • /bin/chmod
                  chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
                  2⤵
                    PID:338
                  • /bin/chmod
                    chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
                    2⤵
                      PID:339
                    • /bin/chmod
                      chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
                      2⤵
                        PID:340
                      • /bin/chmod
                        chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
                        2⤵
                          PID:341
                        • /bin/mv
                          mv 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7 /tmp
                          2⤵
                          • Reads runtime system information
                          PID:342
                        • /bin/mv
                          mv udev udev1
                          2⤵
                          • Reads runtime system information
                          PID:343
                        • /bin/chmod
                          chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
                          2⤵
                            PID:344
                          • /bin/chmod
                            chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
                            2⤵
                              PID:345
                            • /bin/chmod
                              chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
                              2⤵
                                PID:346
                              • /bin/chmod
                                chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
                                2⤵
                                  PID:347
                                • /bin/chmod
                                  chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
                                  2⤵
                                    PID:348
                                  • /bin/chmod
                                    chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
                                    2⤵
                                      PID:349
                                    • /bin/chmod
                                      chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
                                      2⤵
                                        PID:350
                                      • /bin/chmod
                                        chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
                                        2⤵
                                          PID:351
                                        • /bin/chmod
                                          chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
                                          2⤵
                                            PID:352
                                          • /bin/chmod
                                            chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
                                            2⤵
                                              PID:353
                                            • /bin/chmod
                                              chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
                                              2⤵
                                                PID:354
                                              • /bin/chmod
                                                chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
                                                2⤵
                                                  PID:355
                                                • /bin/chmod
                                                  chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
                                                  2⤵
                                                    PID:356
                                                  • /bin/chmod
                                                    chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
                                                    2⤵
                                                      PID:357
                                                    • /bin/chmod
                                                      chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
                                                      2⤵
                                                        PID:358
                                                      • /bin/chmod
                                                        chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
                                                        2⤵
                                                          PID:359
                                                        • /bin/chmod
                                                          chmod +x 20c32ad6e0392d3e664fe8c82649552bdf094b14c5585267a044dc4fdcc5e987 systemd-private-c754df73f8264ad1ae33b26bd34a1014-systemd-timesyncd.service-dX0aR7
                                                          2⤵
                                                            PID:360
                                                          • /bin/mv
                                                            mv getterm /tmp/zd/getterm
                                                            2⤵
                                                            • Reads runtime system information
                                                            PID:361
                                                          • /usr/bin/gcc
                                                            gcc apple.c -o apple
                                                            2⤵
                                                              PID:362
                                                            • /usr/bin/gcc
                                                              gcc full-nelson-fixed.c -o full-nelson-fixed1
                                                              2⤵
                                                                PID:363
                                                              • /usr/bin/gcc
                                                                gcc payload.c -o payload
                                                                2⤵
                                                                  PID:364
                                                                • /usr/bin/gcc
                                                                  gcc ptrace_attach-fixed.c -o ptrace_attach-fixed
                                                                  2⤵
                                                                    PID:365
                                                                  • /usr/bin/gcc
                                                                    gcc rds-fixed.c -o rds-fixed1
                                                                    2⤵
                                                                      PID:366
                                                                    • /usr/bin/gcc
                                                                      gcc -o udpsendmsg-fixed udpsendmsg-fixed.c
                                                                      2⤵
                                                                        PID:367
                                                                      • /usr/bin/gcc
                                                                        gcc 0x82.c -o 0x821
                                                                        2⤵
                                                                          PID:368
                                                                        • /usr/bin/gcc
                                                                          gcc 0x82-simple.c -o 0x82-simple1
                                                                          2⤵
                                                                            PID:369
                                                                          • /usr/bin/gcc
                                                                            gcc linux-sendpage.c -o linux-sendpage1
                                                                            2⤵
                                                                              PID:370
                                                                            • /usr/bin/gcc
                                                                              gcc udp_sendmsg.c -o udp_sendmsg1
                                                                              2⤵
                                                                                PID:371
                                                                              • /usr/bin/gcc
                                                                                gcc 32.c -o 321
                                                                                2⤵
                                                                                  PID:372
                                                                                • /usr/bin/gcc
                                                                                  gcc andi.c -o andi1
                                                                                  2⤵
                                                                                    PID:373
                                                                                  • /usr/bin/gcc
                                                                                    gcc exploit.c -o exploit1
                                                                                    2⤵
                                                                                      PID:374
                                                                                    • /usr/bin/gcc
                                                                                      gcc ppc.c -o ppc1
                                                                                      2⤵
                                                                                        PID:375
                                                                                      • /usr/bin/gcc
                                                                                        gcc simple.c -o simple1
                                                                                        2⤵
                                                                                          PID:376
                                                                                        • /usr/bin/gcc
                                                                                          gcc 2.6.31-2010.c -o 2.6.31-2010
                                                                                          2⤵
                                                                                            PID:377
                                                                                          • /usr/bin/gcc
                                                                                            gcc ab.c -o ab
                                                                                            2⤵
                                                                                              PID:378
                                                                                            • /usr/bin/gcc
                                                                                              gcc american-sign-language.c -o american-sign-language
                                                                                              2⤵
                                                                                                PID:379
                                                                                              • /usr/bin/gcc
                                                                                                gcc caps-to-root2.c -o caps-to-root2
                                                                                                2⤵
                                                                                                  PID:380
                                                                                                • /usr/bin/gcc
                                                                                                  gcc CVE-2010-2963.c -o CVE-2010-2963
                                                                                                  2⤵
                                                                                                    PID:381
                                                                                                  • /usr/bin/gcc
                                                                                                    gcc cve-2010-3437.c -o cve-2010-3437
                                                                                                    2⤵
                                                                                                      PID:382
                                                                                                    • /usr/bin/gcc
                                                                                                      gcc CVE-2010-3904.c -o CVE-2010-3904
                                                                                                      2⤵
                                                                                                        PID:383
                                                                                                      • /usr/bin/gcc
                                                                                                        gcc full-nelson.c -o full-nelson
                                                                                                        2⤵
                                                                                                          PID:384
                                                                                                        • /usr/bin/gcc
                                                                                                          gcc i-can-haz-modharden.c -o i-can-haz-modharden
                                                                                                          2⤵
                                                                                                            PID:385
                                                                                                          • /usr/bin/gcc
                                                                                                            gcc robert_you_suck.c -o robert_you_suck
                                                                                                            2⤵
                                                                                                              PID:386
                                                                                                            • /usr/bin/gcc
                                                                                                              gcc setup_arg_pages.c -o setup_arg_pages
                                                                                                              2⤵
                                                                                                                PID:387
                                                                                                              • /bin/mv
                                                                                                                mv /tmp/sh/0.sh /tmp/f00c0d3/0/0.sh
                                                                                                                2⤵
                                                                                                                • Reads runtime system information
                                                                                                                PID:388
                                                                                                              • /bin/mv
                                                                                                                mv /tmp/sh/1.sh /tmp/f00c0d3/1/1.sh
                                                                                                                2⤵
                                                                                                                • Reads runtime system information
                                                                                                                PID:389
                                                                                                              • /bin/mv
                                                                                                                mv /tmp/sh/2.sh /tmp/f00c0d3/2/2.sh
                                                                                                                2⤵
                                                                                                                • Reads runtime system information
                                                                                                                PID:390
                                                                                                              • /bin/mv
                                                                                                                mv /tmp/sh/3.sh /tmp/f00c0d3/3/3.sh
                                                                                                                2⤵
                                                                                                                • Reads runtime system information
                                                                                                                PID:391
                                                                                                              • /bin/mv
                                                                                                                mv /tmp/sh/c.sh /tmp/f00c0d3/c/c.sh
                                                                                                                2⤵
                                                                                                                • Reads runtime system information
                                                                                                                PID:392
                                                                                                              • /bin/mv
                                                                                                                mv /tmp/sh/fcm.sh /tmp/f00c0d3/fcm.sh
                                                                                                                2⤵
                                                                                                                • Reads runtime system information
                                                                                                                PID:393
                                                                                                              • /bin/mkdir
                                                                                                                mkdir e
                                                                                                                2⤵
                                                                                                                • Reads runtime system information
                                                                                                                PID:394
                                                                                                              • /bin/mv
                                                                                                                mv e.tar.gz e
                                                                                                                2⤵
                                                                                                                • Reads runtime system information
                                                                                                                PID:395
                                                                                                              • /bin/tar
                                                                                                                tar -xzvf e.tar.gz
                                                                                                                2⤵
                                                                                                                • Reads runtime system information
                                                                                                                PID:396
                                                                                                              • /usr/bin/gcc
                                                                                                                gcc -O2 -o fs2 fs1.c
                                                                                                                2⤵
                                                                                                                  PID:398
                                                                                                                • /usr/bin/gcc
                                                                                                                  gcc fsn.c -o fsz
                                                                                                                  2⤵
                                                                                                                    PID:399
                                                                                                                  • /bin/mv
                                                                                                                    mv /tmp/sh/testm.pl /tmp/e
                                                                                                                    2⤵
                                                                                                                    • Reads runtime system information
                                                                                                                    PID:400
                                                                                                                  • /bin/mv
                                                                                                                    mv /tmp/sh/e.sh /tmp/e
                                                                                                                    2⤵
                                                                                                                    • Reads runtime system information
                                                                                                                    PID:401
                                                                                                                  • /bin/chmod
                                                                                                                    chmod +x "*"
                                                                                                                    2⤵
                                                                                                                      PID:402
                                                                                                                    • /usr/bin/gcc
                                                                                                                      gcc -Wall -o 02.x86_845.32 02.x86_845.c
                                                                                                                      2⤵
                                                                                                                        PID:403
                                                                                                                      • /usr/bin/gcc
                                                                                                                        gcc -Wall -m64 -o 02.x86_845.64 02.x86_845.c
                                                                                                                        2⤵
                                                                                                                          PID:404
                                                                                                                        • /usr/bin/gcc
                                                                                                                          gcc -Wall -o 03.2.6.3.any-x86_64.32 03.2.6.3.any-x86_64.c
                                                                                                                          2⤵
                                                                                                                            PID:405
                                                                                                                          • /usr/bin/gcc
                                                                                                                            gcc -Wall -m64 -o 03.2.6.3.any-x86_64.64 03.2.6.3.any-x86_64.c
                                                                                                                            2⤵
                                                                                                                              PID:406
                                                                                                                            • /usr/bin/gcc
                                                                                                                              gcc 08.LTE.3.0.alpha-omega.c -o alpha-omega
                                                                                                                              2⤵
                                                                                                                                PID:407
                                                                                                                              • /usr/bin/gcc
                                                                                                                                gcc -Wall -m64 -o alpha-omega.64 08.LTE.3.0.alpha-omega.c
                                                                                                                                2⤵
                                                                                                                                  PID:408
                                                                                                                                • /usr/bin/gcc
                                                                                                                                  gcc -Wall -o 09.2.6.18-128-1.32 09.2.6.18-128-1.c
                                                                                                                                  2⤵
                                                                                                                                    PID:409
                                                                                                                                  • /usr/bin/gcc
                                                                                                                                    gcc -Wall -m64 -o 09.2.6.18-128-1.64 09.2.6.18-128-1.c
                                                                                                                                    2⤵
                                                                                                                                      PID:410
                                                                                                                                    • /usr/bin/gcc
                                                                                                                                      gcc -Wall -o 09.LT.3.8.9.x86_64.32 09.LT.3.8.9.x86_64.c
                                                                                                                                      2⤵
                                                                                                                                        PID:411
                                                                                                                                      • /usr/bin/gcc
                                                                                                                                        gcc -Wall -m64 -o 09.LT.3.8.9.x86_64.64 09.LT.3.8.9.x86_64.c
                                                                                                                                        2⤵
                                                                                                                                          PID:412
                                                                                                                                        • /usr/bin/gcc
                                                                                                                                          gcc -O2 09.LTE.2.6.37-3.x.x.x86_64.semtex.c
                                                                                                                                          2⤵
                                                                                                                                            PID:413
                                                                                                                                          • /usr/bin/gcc
                                                                                                                                            gcc -Wall -m64 -o 09.LTE.2.6.37-3.x.x.x86_64.semtex.64 09.LTE.2.6.37-3.x.x.x86_64.semtex.c
                                                                                                                                            2⤵
                                                                                                                                              PID:414
                                                                                                                                            • /usr/bin/gcc
                                                                                                                                              gcc -Wall -o 10.2.6.18-128-1.linux-sendpage.32 10.2.6.18-128-1.linux-sendpage.c
                                                                                                                                              2⤵
                                                                                                                                                PID:415
                                                                                                                                              • /usr/bin/gcc
                                                                                                                                                gcc -Wall -m64 -o 10.2.6.18-128-1.linux-sendpage.64 10.2.6.18-128-1.linux-sendpage.c
                                                                                                                                                2⤵
                                                                                                                                                  PID:416
                                                                                                                                                • /usr/bin/gcc
                                                                                                                                                  gcc -Wall -o 2-6-18-164-194.LocalRoot.32 2-6-18-164-194.LocalRoot.c
                                                                                                                                                  2⤵
                                                                                                                                                    PID:417
                                                                                                                                                  • /usr/bin/gcc
                                                                                                                                                    gcc -Wall -m64 -o 2-6-18-164-194.LocalRoot.64 2-6-18-164-194.LocalRoot.c
                                                                                                                                                    2⤵
                                                                                                                                                      PID:418
                                                                                                                                                    • /usr/bin/gcc
                                                                                                                                                      gcc -Wall -o 2-6-18.1.32 2-6-18.1.c
                                                                                                                                                      2⤵
                                                                                                                                                        PID:419
                                                                                                                                                      • /usr/bin/gcc
                                                                                                                                                        gcc -Wall -m64 -o 2-6-18.1.64 2-6-18.1.c
                                                                                                                                                        2⤵
                                                                                                                                                          PID:420
                                                                                                                                                        • /usr/bin/gcc
                                                                                                                                                          gcc -Wall -o 2-6-18.32 2-6-18.c
                                                                                                                                                          2⤵
                                                                                                                                                            PID:421
                                                                                                                                                          • /usr/bin/gcc
                                                                                                                                                            gcc -Wall -m64 -o 2-6-18.64 2-6-18.c
                                                                                                                                                            2⤵
                                                                                                                                                              PID:422
                                                                                                                                                            • /usr/bin/gcc
                                                                                                                                                              gcc -Wall -o 2.6.18-128-2010.32 2.6.18-128-2010.c
                                                                                                                                                              2⤵
                                                                                                                                                                PID:423
                                                                                                                                                              • /usr/bin/gcc
                                                                                                                                                                gcc -Wall -m64 -o 2.6.18-128-2010.64 2.6.18-128-2010.c
                                                                                                                                                                2⤵
                                                                                                                                                                  PID:424
                                                                                                                                                                • /usr/bin/gcc
                                                                                                                                                                  gcc -Wall -o 2.6.18-128-private.32 2.6.18-128-private.c
                                                                                                                                                                  2⤵
                                                                                                                                                                    PID:425
                                                                                                                                                                  • /usr/bin/gcc
                                                                                                                                                                    gcc -Wall -m64 -o 2.6.18-128-private.64 2.6.18-128-private.c
                                                                                                                                                                    2⤵
                                                                                                                                                                      PID:426
                                                                                                                                                                    • /usr/bin/gcc
                                                                                                                                                                      gcc -Wall -o 2.6.18-128.32 2.6.18-128.c
                                                                                                                                                                      2⤵
                                                                                                                                                                        PID:427
                                                                                                                                                                      • /usr/bin/gcc
                                                                                                                                                                        gcc -Wall -m64 -o 2.6.18-128.64 2.6.18-128.c
                                                                                                                                                                        2⤵
                                                                                                                                                                          PID:428
                                                                                                                                                                        • /usr/bin/gcc
                                                                                                                                                                          gcc -w -o 2.6.18-128.el5.and.2.6.9-89.EL.32 2.6.18-128.el5.and.2.6.9-89.EL.c
                                                                                                                                                                          2⤵
                                                                                                                                                                            PID:429
                                                                                                                                                                          • /usr/bin/gcc
                                                                                                                                                                            gcc -w -m64 -o 2.6.18-128.el5.and.2.6.9-89.EL.64 2.6.18-128.el5.and.2.6.9-89.EL.c
                                                                                                                                                                            2⤵
                                                                                                                                                                              PID:430
                                                                                                                                                                            • /usr/bin/gcc
                                                                                                                                                                              gcc -Wall -o 2.6.18-164-priv.32 2.6.18-164-priv.c
                                                                                                                                                                              2⤵
                                                                                                                                                                                PID:431
                                                                                                                                                                              • /usr/bin/gcc
                                                                                                                                                                                gcc -Wall -m64 -o 2.6.18-164-priv.64 2.6.18-164-priv.c
                                                                                                                                                                                2⤵
                                                                                                                                                                                  PID:432
                                                                                                                                                                                • /usr/bin/gcc
                                                                                                                                                                                  gcc -Wall -o 2.6.18-194.32 2.6.18-194.c
                                                                                                                                                                                  2⤵
                                                                                                                                                                                    PID:433
                                                                                                                                                                                  • /usr/bin/gcc
                                                                                                                                                                                    gcc -Wall -m64 -o 2.6.18-194.64 2.6.18-194.c
                                                                                                                                                                                    2⤵
                                                                                                                                                                                      PID:434
                                                                                                                                                                                    • /usr/bin/gcc
                                                                                                                                                                                      gcc -Wall -o 2.6.18-20.32 2.6.18-20.c
                                                                                                                                                                                      2⤵
                                                                                                                                                                                        PID:435
                                                                                                                                                                                      • /usr/bin/gcc
                                                                                                                                                                                        gcc -Wall -m64 -o 2.6.18-20.64 2.6.18-20.c
                                                                                                                                                                                        2⤵
                                                                                                                                                                                          PID:436
                                                                                                                                                                                        • /usr/bin/gcc
                                                                                                                                                                                          gcc -Wall -o 2.6.18-374.32 2.6.18-374.c
                                                                                                                                                                                          2⤵
                                                                                                                                                                                            PID:437
                                                                                                                                                                                          • /usr/bin/gcc
                                                                                                                                                                                            gcc -Wall -m64 -o 2.6.18-374.64 2.6.18-374.c
                                                                                                                                                                                            2⤵
                                                                                                                                                                                              PID:438
                                                                                                                                                                                            • /usr/bin/gcc
                                                                                                                                                                                              gcc -Wall -o 2.6.18-6.32 2.6.18-6.c
                                                                                                                                                                                              2⤵
                                                                                                                                                                                                PID:439
                                                                                                                                                                                              • /usr/bin/gcc
                                                                                                                                                                                                gcc -Wall -m64 -o 2.6.18-6.64 2.6.18-6.c
                                                                                                                                                                                                2⤵
                                                                                                                                                                                                  PID:440
                                                                                                                                                                                                • /usr/bin/gcc
                                                                                                                                                                                                  gcc -o 2.6.18-6.32 2.6.18-6.c
                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                    PID:441
                                                                                                                                                                                                  • /usr/bin/gcc
                                                                                                                                                                                                    gcc -Wall -m64 -o 2.6.18-6.64 2.6.18-6.c
                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                      PID:442
                                                                                                                                                                                                    • /usr/bin/gcc
                                                                                                                                                                                                      gcc -Wall -o 2.6.18.194-privete.32 2.6.18.194-privete.c
                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                        PID:443
                                                                                                                                                                                                      • /usr/bin/gcc
                                                                                                                                                                                                        gcc -Wall -m64 -o 2.6.18.194-privete.64 2.6.18.194-privete.c
                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                          PID:444
                                                                                                                                                                                                        • /usr/bin/gcc
                                                                                                                                                                                                          gcc -Wall -o 2.6.18.2.32 2.6.18.2.c
                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                            PID:445
                                                                                                                                                                                                          • /usr/bin/gcc
                                                                                                                                                                                                            gcc -Wall -m64 -o 2.6.18.2.64 2.6.18.2.c
                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                              PID:446
                                                                                                                                                                                                            • /usr/bin/gcc
                                                                                                                                                                                                              gcc -o 2.6.18.32 2.6.18.c
                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                PID:447
                                                                                                                                                                                                              • /usr/bin/gcc
                                                                                                                                                                                                                gcc -Wall -m64 -o 2.6.18.64 2.6.18.c
                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                  PID:448
                                                                                                                                                                                                                • /usr/bin/gcc
                                                                                                                                                                                                                  gcc -Wall -o 23.2.6.18-20.32 23.2.6.18-20.c
                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                    PID:449
                                                                                                                                                                                                                  • /usr/bin/gcc
                                                                                                                                                                                                                    gcc -Wall -m64 -o 23.2.6.18-20.64 23.2.6.18-20.c
                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                      PID:450
                                                                                                                                                                                                                    • /usr/bin/gcc
                                                                                                                                                                                                                      gcc -Wall -o 2530363.32 2530363.c
                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                        PID:451
                                                                                                                                                                                                                      • /usr/bin/gcc
                                                                                                                                                                                                                        gcc -Wall -m64 -o 2530363.64 2530363.c
                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                          PID:452
                                                                                                                                                                                                                        • /usr/bin/gcc
                                                                                                                                                                                                                          gcc -Wall -o 999.LTE.2.6.37-3.x.x.x86_64.semtex.32 999.LTE.2.6.37-3.x.x.x86_64.semtex.c
                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                            PID:453
                                                                                                                                                                                                                          • /usr/bin/gcc
                                                                                                                                                                                                                            gcc -Wall -m64 -o 999.LTE.2.6.37-3.x.x.x86_64.semtex.64 999.LTE.2.6.37-3.x.x.x86_64.semtex.c
                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                              PID:454
                                                                                                                                                                                                                            • /usr/bin/gcc
                                                                                                                                                                                                                              gcc -Wall -o LT.3.8.9.userns_root_sploit.32 LT.3.8.9.userns_root_sploit.c
                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                PID:455
                                                                                                                                                                                                                              • /usr/bin/gcc
                                                                                                                                                                                                                                gcc -Wall -m64 -o LT.3.8.9.userns_root_sploit.64 LT.3.8.9.userns_root_sploit.c
                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                  PID:456
                                                                                                                                                                                                                                • /usr/bin/gcc
                                                                                                                                                                                                                                  gcc -Wall -o abftw.32 abftw.c
                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                    PID:457
                                                                                                                                                                                                                                  • /usr/bin/gcc
                                                                                                                                                                                                                                    gcc -Wall -m64 -o abftw.64 abftw.c
                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                      PID:458
                                                                                                                                                                                                                                    • /usr/bin/gcc
                                                                                                                                                                                                                                      gcc -Wall -o sambal.32 sambal.c
                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                        PID:459
                                                                                                                                                                                                                                      • /usr/bin/gcc
                                                                                                                                                                                                                                        gcc -Wall -m64 -o sambal.64 sambal.c
                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                          PID:460
                                                                                                                                                                                                                                        • /bin/tar
                                                                                                                                                                                                                                          tar -zxvf CVE-2014-5119.tar.gz
                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                          • Reads runtime system information
                                                                                                                                                                                                                                          PID:461
                                                                                                                                                                                                                                        • /bin/ls
                                                                                                                                                                                                                                          ls -al
                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                          • Reads runtime system information
                                                                                                                                                                                                                                          PID:463

                                                                                                                                                                                                                                      Network

                                                                                                                                                                                                                                      MITRE ATT&CK Matrix

                                                                                                                                                                                                                                      Replay Monitor

                                                                                                                                                                                                                                      Loading Replay Monitor...

                                                                                                                                                                                                                                      Downloads

                                                                                                                                                                                                                                      We care about your privacy.

                                                                                                                                                                                                                                      This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.