Overview
overview
9Static
static
dota3.tar.gz
windows7-x64
3dota3.tar.gz
windows10-2004-x64
3.rsync/a/a
ubuntu-18.04-amd64
1.rsync/a/a
debian-9-armhf
9.rsync/a/a
debian-9-mips
9.rsync/a/a
debian-9-mipsel
9.rsync/a/init0
ubuntu-18.04-amd64
9.rsync/a/init0
debian-9-armhf
9.rsync/a/init0
debian-9-mips
9.rsync/a/init0
debian-9-mipsel
9.rsync/a/kswapd0
ubuntu-18.04-amd64
9.rsync/a/run
ubuntu-18.04-amd64
5.rsync/a/run
debian-9-armhf
5.rsync/a/run
debian-9-mips
5.rsync/a/run
debian-9-mipsel
5.rsync/a/stop
ubuntu-18.04-amd64
1.rsync/a/stop
debian-9-armhf
6.rsync/a/stop
debian-9-mips
6.rsync/a/stop
debian-9-mipsel
6.rsync/a/tors/bin/tor
ubuntu-18.04-amd64
1.rsync/a/t...encert
ubuntu-18.04-amd64
1.rsync/a/t...g-cert
ubuntu-18.04-amd64
1.rsync/a/t...esolve
ubuntu-18.04-amd64
1.rsync/a/t...irs.sh
ubuntu-18.04-amd64
7.rsync/a/t...irs.sh
debian-9-armhf
7.rsync/a/t...irs.sh
debian-9-mips
7.rsync/a/t...irs.sh
debian-9-mipsel
7.rsync/a/t...art.sh
ubuntu-18.04-amd64
7.rsync/a/t...art.sh
debian-9-armhf
7.rsync/a/t...art.sh
debian-9-mips
7.rsync/a/t...art.sh
debian-9-mipsel
7.rsync/a/tors/stop.sh
ubuntu-18.04-amd64
7Analysis
-
max time kernel
0s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
22/12/2022, 00:19
Static task
static1
Behavioral task
behavioral1
Sample
dota3.tar.gz
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dota3.tar.gz
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
.rsync/a/a
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral4
Sample
.rsync/a/a
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral5
Sample
.rsync/a/a
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral6
Sample
.rsync/a/a
Resource
debian9-mipsel-20221111-en
Behavioral task
behavioral7
Sample
.rsync/a/init0
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral8
Sample
.rsync/a/init0
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral9
Sample
.rsync/a/init0
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral10
Sample
.rsync/a/init0
Resource
debian9-mipsel-20221111-en
Behavioral task
behavioral11
Sample
.rsync/a/kswapd0
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral12
Sample
.rsync/a/run
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral13
Sample
.rsync/a/run
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral14
Sample
.rsync/a/run
Resource
debian9-mipsbe-20221111-en
Behavioral task
behavioral15
Sample
.rsync/a/run
Resource
debian9-mipsel-en-20211208
Behavioral task
behavioral16
Sample
.rsync/a/stop
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral17
Sample
.rsync/a/stop
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral18
Sample
.rsync/a/stop
Resource
debian9-mipsbe-20221111-en
Behavioral task
behavioral19
Sample
.rsync/a/stop
Resource
debian9-mipsel-en-20211208
Behavioral task
behavioral20
Sample
.rsync/a/tors/bin/tor
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral21
Sample
.rsync/a/tors/bin/tor-gencert
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral22
Sample
.rsync/a/tors/bin/tor-print-ed-signing-cert
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral23
Sample
.rsync/a/tors/bin/tor-resolve
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral24
Sample
.rsync/a/tors/cleandirs.sh
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral25
Sample
.rsync/a/tors/cleandirs.sh
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral26
Sample
.rsync/a/tors/cleandirs.sh
Resource
debian9-mipsbe-20221111-en
Behavioral task
behavioral27
Sample
.rsync/a/tors/cleandirs.sh
Resource
debian9-mipsel-20221111-en
Behavioral task
behavioral28
Sample
.rsync/a/tors/start.sh
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral29
Sample
.rsync/a/tors/start.sh
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral30
Sample
.rsync/a/tors/start.sh
Resource
debian9-mipsbe-20221111-en
Behavioral task
behavioral31
Sample
.rsync/a/tors/start.sh
Resource
debian9-mipsel-en-20211208
Behavioral task
behavioral32
Sample
.rsync/a/tors/stop.sh
Resource
ubuntu1804-amd64-20221111-en
General
-
Target
.rsync/a/init0
-
Size
9KB
-
MD5
019e23027bc3849142dd8625451ed5c0
-
SHA1
982c0318414c3fdf82e3726c4ef4e9021751bbd9
-
SHA256
0e8472f2005560c6f4db4e5aef39e5d35185b35c67f70a27c8b3dcb242eed25e
-
SHA512
89fd143e3060669df59feeb599cb5042bf8996983dd9073a53cf1d00d408ec9930e1ce29a1aa3aa1f1157a3a6dee1a0cc32f0791c92f75ed0f74c59f326cdc32
-
SSDEEP
96:97gXuXeR7P0YQH8h9GVQbxgeJwI222bznGWDKKFZ5W:97xeRb038hAGbxIz9/0
Malware Config
Signatures
-
Writes file to system bin folder 1 TTPs 2 IoCs
description ioc Process /bin/config.json /bin/config.json rm /bin/kworkerds /bin/kworkerds rm -
Reads CPU attributes 1 TTPs 64 IoCs
description ioc Process /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online kill /sys/devices/system/cpu/online /sys/devices/system/cpu/online kill /sys/devices/system/cpu/online /sys/devices/system/cpu/online kill /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online kill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online kill /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online kill /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online kill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online kill /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online kill /sys/devices/system/cpu/online /sys/devices/system/cpu/online kill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online kill /sys/devices/system/cpu/online /sys/devices/system/cpu/online kill /sys/devices/system/cpu/online /sys/devices/system/cpu/online kill /sys/devices/system/cpu/online /sys/devices/system/cpu/online kill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online kill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps -
Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
description ioc Process /proc/383/stat /proc/383/stat ps /proc/15/stat /proc/15/stat ps /proc/80/cmdline /proc/80/cmdline ps /proc/126/status /proc/126/status pkill /proc/565/status /proc/565/status pkill /proc/11/status /proc/11/status pkill /proc/84/status /proc/84/status pkill /proc/383/stat /proc/383/stat ps /proc/29/cmdline /proc/29/cmdline pkill /proc/171/stat /proc/171/stat ps /proc/84/stat /proc/84/stat ps /proc/115/cmdline /proc/115/cmdline pkill /proc/85/cmdline /proc/85/cmdline pkill /proc/262/status /proc/262/status pkill /proc/383/stat /proc/383/stat ps /proc/172/cmdline /proc/172/cmdline ps /proc/11/cmdline /proc/11/cmdline ps /proc/202/status /proc/202/status ps /proc/422/status /proc/422/status pkill /proc/15/cmdline /proc/15/cmdline pkill /proc/9/stat /proc/9/stat killall /proc/12/stat /proc/12/stat ps /proc/30/cmdline /proc/30/cmdline ps /proc/30/cmdline /proc/30/cmdline pkill /proc/173/cmdline /proc/173/cmdline ps /proc/262/stat /proc/262/stat ps /proc/262/status /proc/262/status pkill /proc/89/cmdline /proc/89/cmdline pkill /proc/904/cmdline /proc/904/cmdline pkill /proc/81/status /proc/81/status ps /proc/357/cmdline /proc/357/cmdline ps /proc/14/status /proc/14/status pkill /proc/31/status /proc/31/status ps /proc/250/cmdline /proc/250/cmdline pkill /proc/178/cmdline /proc/178/cmdline pkill /proc/357/stat /proc/357/stat ps /proc/126/cmdline /proc/126/cmdline ps /proc/173/cmdline /proc/173/cmdline pkill /proc/262/cmdline /proc/262/cmdline pkill /proc/168/cmdline /proc/168/cmdline pkill /proc/176/cmdline /proc/176/cmdline pkill /proc/5/cmdline /proc/5/cmdline ps /proc/4/cmdline /proc/4/cmdline pkill /proc/422/cmdline /proc/422/cmdline pkill /proc/13/status /proc/13/status pkill /proc/178/status /proc/178/status ps /proc/9/stat /proc/9/stat ps /proc/174/cmdline /proc/174/cmdline ps /proc/31/status /proc/31/status ps /proc/82/cmdline /proc/82/cmdline ps /proc/591/cmdline /proc/591/cmdline ps /proc/167/cmdline /proc/167/cmdline pkill /proc/12/status /proc/12/status pkill /proc/22/cmdline /proc/22/cmdline ps /proc/593/stat /proc/593/stat ps /proc/178/cmdline /proc/178/cmdline pkill /proc/331/cmdline /proc/331/cmdline pkill /proc/261/cmdline /proc/261/cmdline pkill /proc/331/status /proc/331/status pkill /proc/20/cmdline /proc/20/cmdline pkill /proc/382/cmdline /proc/382/cmdline pkill /proc/8/stat /proc/8/stat killall /proc/115/stat /proc/115/stat ps /proc/172/status /proc/172/status pkill -
Writes file to tmp directory 41 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process /tmp/crondpid /tmp/crondpid rm /tmp/Donald* /tmp/Donald* rm /tmp/.yam* /tmp/.yam* rm /tmp/irq /tmp/irq rm /tmp/*httpd.conf* /tmp/*httpd.conf* rm /tmp/.rsync/a/init0 /tmp/.rsync/a/init0 init0 /tmp/httpd.conf /tmp/httpd.conf rm /tmp/ddgs.3012 /tmp/ddgs.3012 rm /tmp/pools.txt /tmp/pools.txt rm /tmp/qW3xT.2 /tmp/qW3xT.2 rm /tmp/root.sh /tmp/root.sh rm /tmp/config.json /tmp/config.json rm /tmp/bashf /tmp/bashf rm /tmp/irq.sh /tmp/irq.sh rm /tmp/*httpd.conf /tmp/*httpd.conf rm /tmp/*index_bak* /tmp/*index_bak* rm /tmp/conns /tmp/conns rm /tmp/crondpid /tmp/crondpid Process not Found /tmp/crondpid /tmp/crondpid init0 /tmp/a7b104c270 /tmp/a7b104c270 rm /tmp/java* /tmp/java* rm /tmp/bashg /tmp/bashg rm /tmp/xm* /tmp/xm* rm /tmp/syslogspid /tmp/syslogspid rm /tmp/.main /tmp/.main rm /tmp/wnTKYg /tmp/wnTKYg rm /tmp/libapache /tmp/libapache rm /tmp/ssdpid /tmp/ssdpid init0 /tmp/.cron /tmp/.cron rm /tmp/ssdpid /tmp/ssdpid rm /tmp/syslogspid /tmp/syslogspid Process not Found /tmp/.xm* /tmp/.xm* rm /tmp/kworkerds /tmp/kworkerds rm /tmp/ddgs.3013 /tmp/ddgs.3013 rm /tmp/2t3ik /tmp/2t3ik rm /tmp/ssdpid /tmp/ssdpid Process not Found /tmp/Macron* /tmp/Macron* rm /tmp/irqbalanc1 /tmp/irqbalanc1 rm /tmp/.systemd-private-* /tmp/.systemd-private-* rm /tmp/conn /tmp/conn rm /tmp/syslogspid /tmp/syslogspid init0
Processes
-
/tmp/.rsync/a/init0/tmp/.rsync/a/init01⤵
- Writes file to tmp directory
PID:593 -
/bin/rmrm /tmp/.cron2⤵
- Writes file to tmp directory
PID:594
-
-
/bin/rmrm "/tmp/Donald*"2⤵
- Writes file to tmp directory
PID:595
-
-
/bin/rmrm "/tmp/Macron*"2⤵
- Writes file to tmp directory
PID:596
-
-
/bin/rmrm /tmp/.main2⤵
- Writes file to tmp directory
PID:597
-
-
/bin/rmrm "/tmp/.yam*" -rf2⤵
- Writes file to tmp directory
PID:598
-
-
/bin/rmrm -f /tmp/irq2⤵
- Writes file to tmp directory
PID:599
-
-
/bin/rmrm -f /tmp/irq.sh2⤵
- Writes file to tmp directory
PID:600
-
-
/bin/rmrm -f /tmp/irqbalanc12⤵
- Writes file to tmp directory
PID:601
-
-
/bin/rmrm -rf /boot/grub/deamon2⤵PID:602
-
-
/bin/rmrm -rf /boot/grub/disk_genius2⤵PID:603
-
-
/bin/rmrm -rf "/tmp/*httpd.conf"2⤵
- Writes file to tmp directory
PID:604
-
-
/bin/rmrm -rf "/tmp/*httpd.conf*"2⤵
- Writes file to tmp directory
PID:605
-
-
/bin/rmrm -rf "/tmp/*index_bak*"2⤵
- Writes file to tmp directory
PID:606
-
-
/bin/rmrm -rf "/tmp/.systemd-private-*"2⤵
- Writes file to tmp directory
PID:607
-
-
/bin/rmrm -rf "/tmp/.xm*"2⤵
- Writes file to tmp directory
PID:608
-
-
/bin/rmrm -rf /tmp/a7b104c2702⤵
- Writes file to tmp directory
PID:609
-
-
/bin/rmrm -rf /tmp/conn2⤵
- Writes file to tmp directory
PID:610
-
-
/bin/rmrm -rf /tmp/conns2⤵
- Writes file to tmp directory
PID:615
-
-
/bin/rmrm -rf /tmp/httpd.conf2⤵
- Writes file to tmp directory
PID:616
-
-
/bin/rmrm -rf "/tmp/java*"2⤵
- Writes file to tmp directory
PID:617
-
-
/bin/rmrm -rf /tmp/kworkerds /bin/kworkerds /bin/config.json /var/tmp/kworkerds /var/tmp/config.json /usr/local/lib/libjdk.so2⤵
- Writes file to system bin folder
- Writes file to tmp directory
PID:618
-
-
/bin/rmrm -rf /tmp/qW3xT.2 /tmp/ddgs.3013 /tmp/ddgs.3012 /tmp/wnTKYg /tmp/2t3ik2⤵
- Writes file to tmp directory
PID:619
-
-
/bin/rmrm -rf /tmp/root.sh /tmp/pools.txt /tmp/libapache /tmp/config.json /tmp/bashf /tmp/bashg /tmp/libapache2⤵
- Writes file to tmp directory
PID:620
-
-
/bin/rmrm -rf "/tmp/xm*"2⤵
- Writes file to tmp directory
PID:621
-
-
/bin/rmrm -rf "/var/tmp/java*"2⤵PID:622
-
-
/usr/bin/awkawk /34e2fg/2⤵PID:624
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:626
-
-
/bin/psps auxw2⤵
- Reads CPU attributes
- Reads runtime system information
PID:623
-
-
/usr/bin/awkawk "!/awk/"2⤵PID:625
-
-
/usr/bin/xargsxargs kill -92⤵PID:627
-
/usr/local/sbin/killkill -93⤵PID:632
-
-
/usr/local/bin/killkill -93⤵PID:632
-
-
/usr/sbin/killkill -93⤵PID:632
-
-
/usr/bin/killkill -93⤵PID:632
-
-
/sbin/killkill -93⤵PID:632
-
-
/bin/killkill -93⤵PID:632
-
-
-
/usr/bin/killallkillall -9 chron-34e2fg2⤵PID:629
-
-
/bin/psps wx2⤵
- Reads CPU attributes
- Reads runtime system information
PID:630
-
-
/usr/bin/awkawk "/34e|r\\/v3|moy5|defunct/"2⤵PID:631
-
-
/usr/bin/awkawk "{print \$1}"2⤵PID:633
-
-
/usr/bin/xargsxargs kill -92⤵PID:634
-
/usr/local/sbin/killkill -9 623 624 625 626 627 6313⤵PID:639
-
-
/usr/local/bin/killkill -9 623 624 625 626 627 6313⤵PID:639
-
-
/usr/sbin/killkill -9 623 624 625 626 627 6313⤵PID:639
-
-
/usr/bin/killkill -9 623 624 625 626 627 6313⤵PID:639
-
-
/sbin/killkill -9 623 624 625 626 627 6313⤵PID:639
-
-
/bin/killkill -9 623 624 625 626 627 6313⤵PID:639
-
-
-
/bin/psps axf -o "pid %cpu"2⤵
- Reads runtime system information
PID:636
-
-
/usr/bin/awkawk "{if(\$2>=40.0) print \$1}"2⤵PID:637
-
-
/usr/bin/killallkillall .Historys2⤵PID:640
-
-
/usr/bin/killallkillall .sshd2⤵PID:641
-
-
/usr/bin/killallkillall neptune2⤵PID:642
-
-
/usr/bin/killallkillall xm642⤵
- Reads runtime system information
PID:643
-
-
/usr/bin/killallkillall xm322⤵
- Reads runtime system information
PID:644
-
-
/usr/bin/killallkillall ld-linux2⤵PID:645
-
-
/usr/bin/killallkillall xmrig2⤵PID:646
-
-
/usr/bin/killallkillall .xmrig2⤵PID:647
-
-
/usr/bin/killallkillall suppoieup2⤵PID:648
-
-
/usr/bin/killallkillall xrx2⤵PID:649
-
-
/usr/bin/pkillpkill -f sourplum2⤵
- Reads CPU attributes
- Reads runtime system information
PID:650
-
-
/usr/bin/pkillpkill wnTKYg2⤵
- Reads CPU attributes
PID:651
-
-
/bin/grepgrep -v grep2⤵PID:653
-
-
/bin/psps auxf2⤵
- Reads runtime system information
PID:652
-
-
/bin/grepgrep mine.moneropool.com2⤵PID:654
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:655
-
-
/usr/bin/xargsxargs kill -92⤵PID:656
-
/usr/local/sbin/killkill -93⤵PID:657
-
-
/usr/local/bin/killkill -93⤵PID:657
-
-
/usr/sbin/killkill -93⤵PID:657
-
-
/usr/bin/killkill -93⤵PID:657
-
-
/sbin/killkill -93⤵PID:657
-
-
/bin/killkill -93⤵PID:657
-
-
-
/bin/grepgrep -v grep2⤵PID:659
-
-
/bin/psps auxf2⤵PID:658
-
-
/bin/grepgrep xmr.crypto-pool.fr:80802⤵PID:660
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:661
-
-
/usr/bin/xargsxargs kill -92⤵PID:662
-
/usr/local/sbin/killkill -93⤵PID:663
-
-
/usr/local/bin/killkill -93⤵PID:663
-
-
/usr/sbin/killkill -93⤵PID:663
-
-
/usr/bin/killkill -93⤵PID:663
-
-
/sbin/killkill -93⤵PID:663
-
-
/bin/killkill -93⤵PID:663
-
-
-
/bin/grepgrep -v grep2⤵PID:665
-
-
/bin/psps auxf2⤵
- Reads runtime system information
PID:664
-
-
/bin/grepgrep xmr.crypto-pool.fr:80802⤵PID:666
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:667
-
-
/usr/bin/xargsxargs kill -92⤵PID:668
-
/usr/local/sbin/killkill -93⤵PID:669
-
-
/usr/local/bin/killkill -93⤵PID:669
-
-
/usr/sbin/killkill -93⤵PID:669
-
-
/usr/bin/killkill -93⤵PID:669
-
-
/sbin/killkill -93⤵PID:669
-
-
/bin/killkill -93⤵PID:669
-
-
-
/bin/grepgrep -v grep2⤵PID:671
-
-
/bin/psps auxf2⤵
- Reads CPU attributes
PID:670
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:673
-
-
/bin/grepgrep 119.9.76.107:4432⤵PID:672
-
-
/usr/bin/xargsxargs kill -92⤵PID:674
-
/usr/local/sbin/killkill -93⤵PID:675
-
-
/usr/local/bin/killkill -93⤵PID:675
-
-
/usr/sbin/killkill -93⤵PID:675
-
-
/usr/bin/killkill -93⤵PID:675
-
-
/sbin/killkill -93⤵PID:675
-
-
/bin/killkill -93⤵
- Reads CPU attributes
PID:675
-
-
-
/bin/psps auxf2⤵PID:676
-
-
/bin/grepgrep -v grep2⤵PID:677
-
-
/bin/grepgrep monerohash.com2⤵PID:678
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:679
-
-
/usr/bin/xargsxargs kill -92⤵PID:680
-
/usr/local/sbin/killkill -93⤵PID:681
-
-
/usr/local/bin/killkill -93⤵PID:681
-
-
/usr/sbin/killkill -93⤵PID:681
-
-
/usr/bin/killkill -93⤵PID:681
-
-
/sbin/killkill -93⤵PID:681
-
-
/bin/killkill -93⤵PID:681
-
-
-
/bin/grepgrep -v grep2⤵PID:683
-
-
/bin/psps auxf2⤵
- Reads CPU attributes
- Reads runtime system information
PID:682
-
-
/bin/grepgrep /tmp/a7b104c2702⤵PID:684
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:685
-
-
/usr/bin/xargsxargs kill -92⤵PID:686
-
/usr/local/sbin/killkill -93⤵PID:687
-
-
/usr/local/bin/killkill -93⤵PID:687
-
-
/usr/sbin/killkill -93⤵PID:687
-
-
/usr/bin/killkill -93⤵PID:687
-
-
/sbin/killkill -93⤵PID:687
-
-
/bin/killkill -93⤵PID:687
-
-
-
/bin/grepgrep -v grep2⤵PID:689
-
-
/bin/psps auxf2⤵PID:688
-
-
/bin/grepgrep xmr.crypto-pool.fr:66662⤵PID:690
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:691
-
-
/usr/bin/xargsxargs kill -92⤵PID:692
-
/usr/local/sbin/killkill -93⤵PID:693
-
-
/usr/local/bin/killkill -93⤵PID:693
-
-
/usr/sbin/killkill -93⤵PID:693
-
-
/usr/bin/killkill -93⤵PID:693
-
-
/sbin/killkill -93⤵PID:693
-
-
/bin/killkill -93⤵
- Reads CPU attributes
PID:693
-
-
-
/bin/psps auxf2⤵
- Reads runtime system information
PID:694
-
-
/bin/grepgrep -v grep2⤵PID:695
-
-
/bin/grepgrep xmr.crypto-pool.fr:77772⤵PID:696
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:697
-
-
/usr/bin/xargsxargs kill -92⤵PID:698
-
/usr/local/sbin/killkill -93⤵PID:699
-
-
/usr/local/bin/killkill -93⤵PID:699
-
-
/usr/sbin/killkill -93⤵PID:699
-
-
/usr/bin/killkill -93⤵PID:699
-
-
/sbin/killkill -93⤵PID:699
-
-
/bin/killkill -93⤵PID:699
-
-
-
/bin/psps auxf2⤵
- Reads CPU attributes
PID:700
-
-
/bin/grepgrep -v grep2⤵PID:701
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:703
-
-
/bin/grepgrep xmr.crypto-pool.fr:4432⤵PID:702
-
-
/usr/bin/xargsxargs kill -92⤵PID:704
-
/usr/local/sbin/killkill -93⤵PID:705
-
-
/usr/local/bin/killkill -93⤵PID:705
-
-
/usr/sbin/killkill -93⤵PID:705
-
-
/usr/bin/killkill -93⤵PID:705
-
-
/sbin/killkill -93⤵PID:705
-
-
/bin/killkill -93⤵PID:705
-
-
-
/bin/psps auxf2⤵
- Reads CPU attributes
PID:706
-
-
/bin/grepgrep -v grep2⤵PID:707
-
-
/bin/grepgrep stratum.f2pool.com:88882⤵PID:708
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:709
-
-
/usr/bin/xargsxargs kill -92⤵PID:710
-
/usr/local/sbin/killkill -93⤵PID:711
-
-
/usr/local/bin/killkill -93⤵PID:711
-
-
/usr/sbin/killkill -93⤵PID:711
-
-
/usr/bin/killkill -93⤵PID:711
-
-
/sbin/killkill -93⤵PID:711
-
-
/bin/killkill -93⤵
- Reads CPU attributes
PID:711
-
-
-
/bin/grepgrep -v grep2⤵PID:713
-
-
/bin/grepgrep xmrpool.eu2⤵PID:714
-
-
/bin/psps auxf2⤵
- Reads CPU attributes
PID:712
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:715
-
-
/usr/bin/xargsxargs kill -92⤵PID:716
-
/usr/local/sbin/killkill -93⤵PID:717
-
-
/usr/local/bin/killkill -93⤵PID:717
-
-
/usr/sbin/killkill -93⤵PID:717
-
-
/usr/bin/killkill -93⤵PID:717
-
-
/sbin/killkill -93⤵PID:717
-
-
/bin/killkill -93⤵PID:717
-
-
-
/bin/grepgrep -v grep2⤵PID:719
-
-
/bin/psps auxf2⤵
- Reads CPU attributes
- Reads runtime system information
PID:718
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:721
-
-
/bin/grepgrep xmrig2⤵PID:720
-
-
/usr/bin/xargsxargs kill -92⤵PID:722
-
/usr/local/sbin/killkill -93⤵PID:723
-
-
/usr/local/bin/killkill -93⤵PID:723
-
-
/usr/sbin/killkill -93⤵PID:723
-
-
/usr/bin/killkill -93⤵PID:723
-
-
/sbin/killkill -93⤵PID:723
-
-
/bin/killkill -93⤵PID:723
-
-
-
/bin/grepgrep -v grep2⤵PID:725
-
-
/bin/psps auxf2⤵
- Reads CPU attributes
- Reads runtime system information
PID:724
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:727
-
-
/bin/grepgrep xmrigDaemon2⤵PID:726
-
-
/usr/bin/xargsxargs kill -92⤵PID:728
-
/usr/local/sbin/killkill -93⤵PID:729
-
-
/usr/local/bin/killkill -93⤵PID:729
-
-
/usr/sbin/killkill -93⤵PID:729
-
-
/usr/bin/killkill -93⤵PID:729
-
-
/sbin/killkill -93⤵PID:729
-
-
/bin/killkill -93⤵PID:729
-
-
-
/bin/grepgrep -v grep2⤵PID:731
-
-
/bin/psps auxf2⤵PID:730
-
-
/bin/grepgrep xmrigMiner2⤵PID:732
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:733
-
-
/usr/bin/xargsxargs kill -92⤵PID:734
-
/usr/local/sbin/killkill -93⤵PID:735
-
-
/usr/local/bin/killkill -93⤵PID:735
-
-
/usr/sbin/killkill -93⤵PID:735
-
-
/usr/bin/killkill -93⤵PID:735
-
-
/sbin/killkill -93⤵PID:735
-
-
/bin/killkill -93⤵
- Reads CPU attributes
PID:735
-
-
-
/bin/grepgrep -v grep2⤵PID:737
-
-
/bin/psps auxf2⤵
- Reads CPU attributes
PID:736
-
-
/bin/grepgrep /var/tmp/java2⤵PID:738
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:739
-
-
/usr/bin/xargsxargs kill -92⤵PID:740
-
/usr/local/sbin/killkill -93⤵PID:741
-
-
/usr/local/bin/killkill -93⤵PID:741
-
-
/usr/sbin/killkill -93⤵PID:741
-
-
/usr/bin/killkill -93⤵PID:741
-
-
/sbin/killkill -93⤵PID:741
-
-
/bin/killkill -93⤵
- Reads CPU attributes
PID:741
-
-
-
/bin/psps auxf2⤵
- Reads CPU attributes
PID:742
-
-
/bin/grepgrep -v grep2⤵PID:743
-
-
/bin/grepgrep ddgs2⤵PID:744
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:745
-
-
/usr/bin/xargsxargs kill -92⤵PID:746
-
/usr/local/sbin/killkill -93⤵PID:747
-
-
/usr/local/bin/killkill -93⤵PID:747
-
-
/usr/sbin/killkill -93⤵PID:747
-
-
/usr/bin/killkill -93⤵PID:747
-
-
/sbin/killkill -93⤵PID:747
-
-
/bin/killkill -93⤵PID:747
-
-
-
/bin/psps auxf2⤵
- Reads CPU attributes
- Reads runtime system information
PID:748
-
-
/bin/grepgrep -v grep2⤵PID:749
-
-
/bin/grepgrep qW3xT2⤵PID:750
-
-
/usr/bin/xargsxargs kill -92⤵PID:752
-
/usr/local/sbin/killkill -93⤵PID:753
-
-
/usr/local/bin/killkill -93⤵PID:753
-
-
/usr/sbin/killkill -93⤵PID:753
-
-
/usr/bin/killkill -93⤵PID:753
-
-
/sbin/killkill -93⤵PID:753
-
-
/bin/killkill -93⤵PID:753
-
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:751
-
-
/bin/grepgrep -v grep2⤵PID:755
-
-
/bin/psps auxf2⤵
- Reads runtime system information
PID:754
-
-
/bin/grepgrep t00ls.ru2⤵PID:756
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:757
-
-
/usr/bin/xargsxargs kill -92⤵PID:758
-
/usr/local/sbin/killkill -93⤵PID:759
-
-
/usr/local/bin/killkill -93⤵PID:759
-
-
/usr/sbin/killkill -93⤵PID:759
-
-
/usr/bin/killkill -93⤵PID:759
-
-
/sbin/killkill -93⤵PID:759
-
-
/bin/killkill -93⤵
- Reads CPU attributes
PID:759
-
-
-
/bin/grepgrep -v grep2⤵PID:761
-
-
/bin/psps auxf2⤵PID:760
-
-
/bin/grepgrep /var/tmp/sustes2⤵PID:762
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:763
-
-
/usr/bin/xargsxargs kill -92⤵PID:764
-
/usr/local/sbin/killkill -93⤵PID:765
-
-
/usr/local/bin/killkill -93⤵PID:765
-
-
/usr/sbin/killkill -93⤵PID:765
-
-
/usr/bin/killkill -93⤵PID:765
-
-
/sbin/killkill -93⤵PID:765
-
-
/bin/killkill -93⤵PID:765
-
-
-
/bin/grepgrep -v grep2⤵PID:767
-
-
/bin/psps auxf2⤵PID:766
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:769
-
-
/bin/grepgrep ld-linux2⤵PID:768
-
-
/usr/bin/xargsxargs kill -92⤵PID:770
-
/usr/local/sbin/killkill -93⤵PID:771
-
-
/usr/local/bin/killkill -93⤵PID:771
-
-
/usr/sbin/killkill -93⤵PID:771
-
-
/usr/bin/killkill -93⤵PID:771
-
-
/sbin/killkill -93⤵PID:771
-
-
/bin/killkill -93⤵PID:771
-
-
-
/bin/psps auxf2⤵
- Reads runtime system information
PID:772
-
-
/bin/grepgrep xiaoyao2⤵PID:773
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:774
-
-
/usr/bin/xargsxargs kill -92⤵PID:775
-
/usr/local/sbin/killkill -9 7733⤵PID:776
-
-
/usr/local/bin/killkill -9 7733⤵PID:776
-
-
/usr/sbin/killkill -9 7733⤵PID:776
-
-
/usr/bin/killkill -9 7733⤵PID:776
-
-
/sbin/killkill -9 7733⤵PID:776
-
-
/bin/killkill -9 7733⤵
- Reads CPU attributes
PID:776
-
-
-
/bin/grepgrep Donald2⤵PID:778
-
-
/bin/psps auxf2⤵
- Reads runtime system information
PID:777
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:779
-
-
/usr/bin/xargsxargs kill -92⤵PID:780
-
/usr/local/sbin/killkill -9 7783⤵PID:781
-
-
/usr/local/bin/killkill -9 7783⤵PID:781
-
-
/usr/sbin/killkill -9 7783⤵PID:781
-
-
/usr/bin/killkill -9 7783⤵PID:781
-
-
/sbin/killkill -9 7783⤵PID:781
-
-
/bin/killkill -9 7783⤵
- Reads CPU attributes
PID:781
-
-
-
/bin/grepgrep Macron2⤵PID:783
-
-
/bin/psps auxf2⤵
- Reads runtime system information
PID:782
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:784
-
-
/usr/bin/xargsxargs kill -92⤵PID:785
-
/usr/local/sbin/killkill -9 7833⤵PID:786
-
-
/usr/local/bin/killkill -9 7833⤵PID:786
-
-
/usr/sbin/killkill -9 7833⤵PID:786
-
-
/usr/bin/killkill -9 7833⤵PID:786
-
-
/sbin/killkill -9 7833⤵PID:786
-
-
/bin/killkill -9 7833⤵
- Reads CPU attributes
PID:786
-
-
-
/bin/grepgrep ld-linux2⤵PID:788
-
-
/bin/psps auxf2⤵
- Reads CPU attributes
PID:787
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:789
-
-
/usr/bin/xargsxargs kill -92⤵PID:790
-
/usr/local/sbin/killkill -9 7883⤵PID:791
-
-
/usr/local/bin/killkill -9 7883⤵PID:791
-
-
/usr/sbin/killkill -9 7883⤵PID:791
-
-
/usr/bin/killkill -9 7883⤵PID:791
-
-
/sbin/killkill -9 7883⤵PID:791
-
-
/bin/killkill -9 7883⤵PID:791
-
-
-
/bin/grepgrep named2⤵PID:793
-
-
/bin/psps auxf2⤵
- Reads CPU attributes
PID:792
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:794
-
-
/usr/bin/xargsxargs kill -92⤵PID:795
-
/usr/local/sbin/killkill -9 7933⤵PID:796
-
-
/usr/local/bin/killkill -9 7933⤵PID:796
-
-
/usr/sbin/killkill -9 7933⤵PID:796
-
-
/usr/bin/killkill -9 7933⤵PID:796
-
-
/sbin/killkill -9 7933⤵PID:796
-
-
/bin/killkill -9 7933⤵
- Reads CPU attributes
PID:796
-
-
-
/bin/grepgrep kernelcfg2⤵PID:798
-
-
/bin/psps auxf2⤵
- Reads CPU attributes
PID:797
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:799
-
-
/usr/bin/xargsxargs kill -92⤵PID:800
-
/usr/local/sbin/killkill -9 7983⤵PID:801
-
-
/usr/local/bin/killkill -9 7983⤵PID:801
-
-
/usr/sbin/killkill -9 7983⤵PID:801
-
-
/usr/bin/killkill -9 7983⤵PID:801
-
-
/sbin/killkill -9 7983⤵PID:801
-
-
/bin/killkill -9 7983⤵
- Reads CPU attributes
PID:801
-
-
-
/bin/grepgrep xiaoxue2⤵PID:803
-
-
/bin/psps auxf2⤵
- Reads CPU attributes
PID:802
-
-
/usr/bin/xargsxargs kill -92⤵PID:805
-
/usr/local/sbin/killkill -9 8033⤵PID:806
-
-
/usr/local/bin/killkill -9 8033⤵PID:806
-
-
/usr/sbin/killkill -9 8033⤵PID:806
-
-
/usr/bin/killkill -9 8033⤵PID:806
-
-
/sbin/killkill -9 8033⤵PID:806
-
-
/bin/killkill -9 8033⤵PID:806
-
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:804
-
-
/bin/grepgrep kernelupgrade2⤵PID:808
-
-
/bin/psps auxf2⤵
- Reads CPU attributes
PID:807
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:809
-
-
/usr/bin/xargsxargs kill -92⤵PID:810
-
/usr/local/sbin/killkill -9 8083⤵PID:811
-
-
/usr/local/bin/killkill -9 8083⤵PID:811
-
-
/usr/sbin/killkill -9 8083⤵PID:811
-
-
/usr/bin/killkill -9 8083⤵PID:811
-
-
/sbin/killkill -9 8083⤵PID:811
-
-
/bin/killkill -9 8083⤵
- Reads CPU attributes
PID:811
-
-
-
/bin/grepgrep kernelorg2⤵PID:813
-
-
/bin/psps auxf2⤵
- Reads runtime system information
PID:812
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:814
-
-
/usr/bin/xargsxargs kill -92⤵PID:815
-
/usr/local/sbin/killkill -9 8133⤵PID:816
-
-
/usr/local/bin/killkill -9 8133⤵PID:816
-
-
/usr/sbin/killkill -9 8133⤵PID:816
-
-
/usr/bin/killkill -9 8133⤵PID:816
-
-
/sbin/killkill -9 8133⤵PID:816
-
-
/bin/killkill -9 8133⤵PID:816
-
-
-
/bin/grepgrep kernelupdates2⤵PID:818
-
-
/bin/psps auxf2⤵
- Reads CPU attributes
PID:817
-
-
/usr/bin/xargsxargs kill -92⤵PID:820
-
/usr/local/sbin/killkill -9 8183⤵PID:821
-
-
/usr/local/bin/killkill -9 8183⤵PID:821
-
-
/usr/sbin/killkill -9 8183⤵PID:821
-
-
/usr/bin/killkill -9 8183⤵PID:821
-
-
/sbin/killkill -9 8183⤵PID:821
-
-
/bin/killkill -9 8183⤵PID:821
-
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:819
-
-
/bin/grepgrep var2⤵PID:823
-
-
/bin/psps ax2⤵PID:822
-
-
/bin/grepgrep lib2⤵PID:824
-
-
/bin/grepgrep jenkins2⤵PID:825
-
-
/bin/grepgrep -v httpPort2⤵PID:826
-
-
/bin/grepgrep -v headless2⤵PID:827
-
-
/bin/grepgrep "\\-c"2⤵PID:828
-
-
/usr/bin/xargsxargs kill -92⤵PID:829
-
/usr/local/sbin/killkill -93⤵PID:830
-
-
/usr/local/bin/killkill -93⤵PID:830
-
-
/usr/sbin/killkill -93⤵PID:830
-
-
/usr/bin/killkill -93⤵PID:830
-
-
/sbin/killkill -93⤵PID:830
-
-
/bin/killkill -93⤵
- Reads CPU attributes
PID:830
-
-
-
/bin/psps ax2⤵
- Reads CPU attributes
- Reads runtime system information
PID:831
-
-
/bin/grepgrep -o "./[0-9]* -c"2⤵PID:832
-
-
/usr/bin/xargsxargs pkill -f2⤵PID:833
-
/usr/local/sbin/pkillpkill -f3⤵PID:834
-
-
/usr/local/bin/pkillpkill -f3⤵PID:834
-
-
/usr/sbin/pkillpkill -f3⤵PID:834
-
-
/usr/bin/pkillpkill -f3⤵PID:834
-
-
-
/usr/bin/pkillpkill -f /usr/bin/.sshd2⤵
- Reads CPU attributes
PID:835
-
-
/usr/bin/pkillpkill -f acpid2⤵PID:836
-
-
/usr/bin/pkillpkill -f Donald2⤵
- Reads CPU attributes
- Reads runtime system information
PID:837
-
-
/usr/bin/pkillpkill -f Macron2⤵PID:838
-
-
/usr/bin/pkillpkill -f AnXqV.yam2⤵PID:839
-
-
/usr/bin/pkillpkill -f apaceha2⤵
- Reads runtime system information
PID:840
-
-
/usr/bin/pkillpkill -f askdljlqw2⤵
- Reads runtime system information
PID:841
-
-
/usr/bin/pkillpkill -f bashe2⤵PID:842
-
-
/usr/bin/pkillpkill -f bashf2⤵PID:843
-
-
/usr/bin/pkillpkill -f bashg2⤵PID:844
-
-
/usr/bin/pkillpkill -f bashh2⤵
- Reads runtime system information
PID:845
-
-
/usr/bin/pkillpkill -f bashx2⤵PID:846
-
-
/usr/bin/pkillpkill -f BI5zj2⤵
- Reads CPU attributes
- Reads runtime system information
PID:847
-
-
/usr/bin/pkillpkill -f biosetjenkins2⤵
- Reads CPU attributes
PID:848
-
-
/usr/bin/pkillpkill -f bonn.sh2⤵
- Reads runtime system information
PID:849
-
-
/usr/bin/pkillpkill -f bonns2⤵
- Reads CPU attributes
PID:850
-
-
/usr/bin/pkillpkill -f conn.sh2⤵
- Reads CPU attributes
- Reads runtime system information
PID:851
-
-
/usr/bin/pkillpkill -f conns2⤵
- Reads CPU attributes
PID:852
-
-
/usr/bin/pkillpkill -f cryptonight2⤵
- Reads CPU attributes
PID:853
-
-
/usr/bin/pkillpkill -f crypto-pool2⤵PID:854
-
-
/usr/bin/pkillpkill -f ddg.20112⤵
- Reads CPU attributes
PID:855
-
-
/usr/bin/pkillpkill -f deamon2⤵PID:856
-
-
/usr/bin/pkillpkill -f disk_genius2⤵
- Reads CPU attributes
PID:857
-
-
/usr/bin/pkillpkill -f donns2⤵
- Reads CPU attributes
- Reads runtime system information
PID:858
-
-
/usr/bin/pkillpkill -f Duck.sh2⤵
- Reads runtime system information
PID:859
-
-
/usr/bin/pkillpkill -f gddr2⤵PID:860
-
-
/usr/bin/pkillpkill -f Guard.sh2⤵PID:861
-
-
/usr/bin/pkillpkill -f i5862⤵
- Reads CPU attributes
PID:862
-
-
/usr/bin/pkillpkill -f icb5o2⤵
- Reads CPU attributes
PID:863
-
-
/usr/bin/pkillpkill -f ir29xc12⤵
- Reads runtime system information
PID:864
-
-
/usr/bin/pkillpkill -f irqba2anc12⤵
- Reads CPU attributes
- Reads runtime system information
PID:865
-
-
/usr/bin/pkillpkill -f irqba5xnc12⤵
- Reads runtime system information
PID:866
-
-
/usr/bin/pkillpkill -f irqbalanc12⤵
- Reads CPU attributes
- Reads runtime system information
PID:867
-
-
/usr/bin/pkillpkill -f irqbalance2⤵PID:868
-
-
/usr/bin/pkillpkill -f irqbnc12⤵
- Reads runtime system information
PID:869
-
-
/usr/bin/pkillpkill -f JnKihGjn2⤵
- Reads CPU attributes
PID:870
-
-
/usr/bin/pkillpkill -f jweri2⤵
- Reads runtime system information
PID:871
-
-
/usr/bin/pkillpkill -f kw.sh2⤵
- Reads CPU attributes
- Reads runtime system information
PID:872
-
-
/usr/bin/pkillpkill -f kworker342⤵
- Reads CPU attributes
PID:873
-
-
/usr/bin/pkillpkill -f kxjd2⤵PID:874
-
-
/usr/bin/pkillpkill -f libapache2⤵PID:875
-
-
/usr/bin/pkillpkill -f Loopback2⤵PID:876
-
-
/usr/bin/pkillpkill -f lx262⤵
- Reads runtime system information
PID:877
-
-
/usr/bin/pkillpkill -f mgwsl2⤵PID:878
-
-
/usr/bin/pkillpkill -f minerd2⤵
- Reads runtime system information
PID:879
-
-
/usr/bin/pkillpkill -f minergate2⤵PID:880
-
-
/usr/bin/pkillpkill -f minexmr2⤵PID:881
-
-
/usr/bin/pkillpkill -f mixnerdx2⤵
- Reads CPU attributes
PID:882
-
-
/usr/bin/pkillpkill -f mstxmr2⤵PID:883
-
-
/usr/bin/pkillpkill -f nanoWatch2⤵
- Reads CPU attributes
- Reads runtime system information
PID:884
-
-
/usr/bin/pkillpkill -f nopxi2⤵PID:885
-
-
/usr/bin/pkillpkill -f NXLAi2⤵
- Reads CPU attributes
PID:886
-
-
/usr/bin/pkillpkill -f performedl2⤵
- Reads runtime system information
PID:887
-
-
/usr/bin/pkillpkill -f polkitd2⤵PID:888
-
-
/usr/bin/pkillpkill -f pro.sh2⤵
- Reads runtime system information
PID:889
-
-
/usr/bin/pkillpkill -f pythno2⤵
- Reads runtime system information
PID:890
-
-
/usr/bin/pkillpkill -f qW3xT.22⤵PID:891
-
-
/usr/bin/pkillpkill -f sourplum2⤵PID:892
-
-
/usr/bin/pkillpkill -f stratum2⤵
- Reads CPU attributes
PID:893
-
-
/usr/bin/pkillpkill -f sustes2⤵
- Reads runtime system information
PID:894
-
-
/usr/bin/pkillpkill -f wnTKYg2⤵
- Reads CPU attributes
PID:895
-
-
/usr/bin/pkillpkill -f XbashY2⤵
- Reads runtime system information
PID:896
-
-
/usr/bin/pkillpkill -f XJnRj2⤵
- Reads CPU attributes
PID:897
-
-
/usr/bin/pkillpkill -f xmrig2⤵PID:898
-
-
/usr/bin/pkillpkill -f xmrigDaemon2⤵
- Reads runtime system information
PID:899
-
-
/usr/bin/pkillpkill -f xmrigMiner2⤵
- Reads CPU attributes
- Reads runtime system information
PID:900
-
-
/usr/bin/pkillpkill -f ysaydh2⤵
- Reads runtime system information
PID:901
-
-
/usr/bin/pkillpkill -f zigw2⤵PID:902
-
-
/usr/bin/pkillpkill -f ld-linux2⤵PID:903
-
-
/usr/bin/pkillpkill -f xrx2⤵
- Reads CPU attributes
- Reads runtime system information
PID:904
-
-
/bin/grepgrep crond2⤵PID:906
-
-
/bin/psps ax2⤵PID:905
-
-
/bin/grepgrep -v grep2⤵PID:907
-
-
/usr/bin/awkawk "{print \$1}"2⤵PID:908
-
-
/bin/rmrm /tmp/crondpid -f2⤵
- Writes file to tmp directory
PID:909
-
-
/bin/grepgrep sshd2⤵PID:911
-
-
/bin/psps ax2⤵PID:910
-
-
/usr/bin/awkawk "{print \$1}"2⤵PID:913
-
-
/bin/grepgrep -v grep2⤵PID:912
-
-
/bin/rmrm -f /tmp/ssdpid2⤵
- Writes file to tmp directory
PID:920
-
-
/bin/grepgrep syslogs2⤵PID:922
-
-
/bin/psps ax2⤵
- Reads runtime system information
PID:921
-
-
/bin/grepgrep -v grep2⤵PID:923
-
-
/usr/bin/awkawk "{print \$1}"2⤵PID:924
-
-
/bin/rmrm /tmp/syslogspid -f2⤵
- Writes file to tmp directory
PID:925
-
-
/bin/psps x2⤵
- Reads CPU attributes
- Reads runtime system information
PID:926
-
-
/bin/grepgrep "b 22"2⤵PID:927
-
-
/usr/bin/awkawk "{print \$1,\$5}"2⤵PID:928
-
-
/bin/catcat .procs2⤵PID:929
-
-
/usr/bin/chattrchattr -iaR /var/tmp/.xrx2⤵PID:940
-
-
/bin/rmrm -rf /var/tmp/.xrx2⤵PID:941
-
-
/bin/grepgrep "d 22"2⤵PID:943
-
-
/bin/psps x2⤵
- Reads CPU attributes
- Reads runtime system information
PID:942
-
-
/usr/bin/awkawk "{print \$1,\$5}"2⤵PID:944
-
-
/bin/catcat .procs2⤵PID:945
-
-
/bin/grepgrep 69.28.55.86:4432⤵PID:957
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:959
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:958
-
-
/usr/bin/xargsxargs kill -92⤵PID:960
-
/usr/local/sbin/killkill -93⤵PID:961
-
-
/usr/local/bin/killkill -93⤵PID:961
-
-
/usr/sbin/killkill -93⤵PID:961
-
-
/usr/bin/killkill -93⤵PID:961
-
-
/sbin/killkill -93⤵PID:961
-
-
/bin/killkill -93⤵PID:961
-
-
-
/bin/grepgrep 185.71.65.2382⤵PID:963
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:964
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:965
-
-
/usr/bin/xargsxargs kill -92⤵PID:966
-
/usr/local/sbin/killkill -93⤵PID:967
-
-
/usr/local/bin/killkill -93⤵PID:967
-
-
/usr/sbin/killkill -93⤵PID:967
-
-
/usr/bin/killkill -93⤵PID:967
-
-
/sbin/killkill -93⤵PID:967
-
-
/bin/killkill -93⤵
- Reads CPU attributes
PID:967
-
-
-
/bin/grepgrep 140.82.52.872⤵PID:969
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:970
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:971
-
-
/usr/bin/xargsxargs kill -92⤵PID:972
-
/usr/local/sbin/killkill -93⤵PID:973
-
-
/usr/local/bin/killkill -93⤵PID:973
-
-
/usr/sbin/killkill -93⤵PID:973
-
-
/usr/bin/killkill -93⤵PID:973
-
-
/sbin/killkill -93⤵PID:973
-
-
/bin/killkill -93⤵PID:973
-
-
-
/bin/grepgrep 119.9.76.1072⤵PID:975
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:976
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:977
-
-
/usr/bin/xargsxargs kill -92⤵PID:978
-
/usr/local/sbin/killkill -93⤵PID:979
-
-
/usr/local/bin/killkill -93⤵PID:979
-
-
/usr/sbin/killkill -93⤵PID:979
-
-
/usr/bin/killkill -93⤵PID:979
-
-
/sbin/killkill -93⤵PID:979
-
-
/bin/killkill -93⤵PID:979
-
-
-
/bin/grepgrep :1432⤵PID:981
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:982
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:983
-
-
/usr/bin/xargsxargs kill -92⤵PID:984
-
/usr/local/sbin/killkill -93⤵PID:985
-
-
/usr/local/bin/killkill -93⤵PID:985
-
-
/usr/sbin/killkill -93⤵PID:985
-
-
/usr/bin/killkill -93⤵PID:985
-
-
/sbin/killkill -93⤵PID:985
-
-
/bin/killkill -93⤵PID:985
-
-
-
/bin/grepgrep :22222⤵PID:987
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:989
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:988
-
-
/usr/bin/xargsxargs kill -92⤵PID:990
-
/usr/local/sbin/killkill -93⤵PID:991
-
-
/usr/local/bin/killkill -93⤵PID:991
-
-
/usr/sbin/killkill -93⤵PID:991
-
-
/usr/bin/killkill -93⤵PID:991
-
-
/sbin/killkill -93⤵PID:991
-
-
/bin/killkill -93⤵PID:991
-
-
-
/bin/grepgrep :33332⤵PID:993
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:994
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:995
-
-
/usr/bin/xargsxargs kill -92⤵PID:996
-
/usr/local/sbin/killkill -93⤵PID:997
-
-
/usr/local/bin/killkill -93⤵PID:997
-
-
/usr/sbin/killkill -93⤵PID:997
-
-
/usr/bin/killkill -93⤵PID:997
-
-
/sbin/killkill -93⤵PID:997
-
-
/bin/killkill -93⤵
- Reads CPU attributes
PID:997
-
-
-
/bin/grepgrep :33892⤵PID:999
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1001
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1000
-
-
/usr/bin/xargsxargs kill -92⤵PID:1002
-
/usr/local/sbin/killkill -93⤵PID:1003
-
-
/usr/local/bin/killkill -93⤵PID:1003
-
-
/usr/sbin/killkill -93⤵PID:1003
-
-
/usr/bin/killkill -93⤵PID:1003
-
-
/sbin/killkill -93⤵PID:1003
-
-
/bin/killkill -93⤵PID:1003
-
-
-
/bin/grepgrep :44442⤵PID:1005
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1006
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1007
-
-
/usr/bin/xargsxargs kill -92⤵PID:1008
-
/usr/local/sbin/killkill -93⤵PID:1009
-
-
/usr/local/bin/killkill -93⤵PID:1009
-
-
/usr/sbin/killkill -93⤵PID:1009
-
-
/usr/bin/killkill -93⤵PID:1009
-
-
/sbin/killkill -93⤵PID:1009
-
-
/bin/killkill -93⤵PID:1009
-
-
-
/bin/grepgrep :55552⤵PID:1011
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1013
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1012
-
-
/usr/bin/xargsxargs kill -92⤵PID:1014
-
/usr/local/sbin/killkill -93⤵PID:1015
-
-
/usr/local/bin/killkill -93⤵PID:1015
-
-
/usr/sbin/killkill -93⤵PID:1015
-
-
/usr/bin/killkill -93⤵PID:1015
-
-
/sbin/killkill -93⤵PID:1015
-
-
/bin/killkill -93⤵PID:1015
-
-
-
/bin/sedsed -e "s/\\.[0-9]*//g"1⤵PID:916
-
/bin/psps -p 382 -o "%cpu"1⤵
- Reads runtime system information
PID:918
-
/bin/grepgrep -v "%CPU"1⤵PID:919
-
/usr/bin/awkawk "{print \$1;}"1⤵PID:933
-
/usr/bin/awkawk "{print \$2;}"1⤵PID:936
-
/usr/bin/wcwc -c1⤵PID:939
-
/usr/bin/awkawk "{print \$1;}"1⤵PID:949
-
/usr/bin/awkawk "{print \$2;}"1⤵PID:952
-
/usr/bin/wcwc -c1⤵PID:955