f11196854e218ff28c6ac2805f82af92437d2fc46f143b0cead3bee03007f951

General

Target

VirusShare_1ac53ce81afc0e714ce2c32c5673736b
Size

180KB
MD5

1ac53ce81afc0e714ce2c32c5673736b
SHA1

54cad5b26c087fbea477d518b2b74ab19c90d4b7
SHA256

f11196854e218ff28c6ac2805f82af92437d2fc46f143b0cead3bee03007f951
SHA512

f392fe29c12d9aab32422369fdd43574462c0d3bfc496af2475378d5e934ef088a8a2402faf1440af6782b425d60845e4c624aad9e95585d1bff057651dd792f
SSDEEP

3072:0yYjhGWN3yAGpTrZ/xq1a1NVfD9rG1BGCovKMF4mqPvcoLhyn2p9r1WvnnqNd7im:0bjpqKUTfD9rmvpmdqPv5Ls2LhWvnnqp

Score

6^/10

Malware Config

Signatures

Enumerates running processes
Discovers information about currently running processes on the system

Reads CPU attributes 1 TTPs 64 IoCs

System Information Discovery

T1082

Processes:

pkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkill

description	ioc	process
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

Processes:

pkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkill

description	ioc	process
File opened for reading	/proc/155/status	pkill
File opened for reading	/proc/79/status	pkill
File opened for reading	/proc/11/status	pkill
File opened for reading	/proc/364/cmdline	pkill
File opened for reading	/proc/289/cmdline	pkill
File opened for reading	/proc/158/status	pkill
File opened for reading	/proc/801/cmdline	pkill
File opened for reading	/proc/252/cmdline	pkill
File opened for reading	/proc/228/cmdline	pkill
File opened for reading	/proc/78/cmdline	pkill
File opened for reading	/proc/1/cmdline	pkill
File opened for reading	/proc/252/cmdline	pkill
File opened for reading	/proc/357/cmdline	pkill
File opened for reading	/proc/8/status	pkill
File opened for reading	/proc/13/status	pkill
File opened for reading	/proc/30/cmdline	pkill
File opened for reading	/proc/606/status	pkill
File opened for reading	/proc/606/status	pkill
File opened for reading	/proc/23/status	pkill
File opened for reading	/proc/31/cmdline	pkill
File opened for reading	/proc/640/status	pkill
File opened for reading	/proc/574/status	pkill
File opened for reading	/proc/161/status	pkill
File opened for reading	/proc/10/cmdline	pkill
File opened for reading	/proc/21/status	pkill
File opened for reading	/proc/83/cmdline	pkill
File opened for reading	/proc/24/cmdline	pkill
File opened for reading	/proc/18/status	pkill
File opened for reading	/proc/24/status	pkill
File opened for reading	/proc/31/cmdline	pkill
File opened for reading	/proc/81/cmdline	pkill
File opened for reading	/proc/28/status	pkill
File opened for reading	/proc/115/cmdline	pkill
File opened for reading	/proc/83/status	pkill
File opened for reading	/proc/82/status	pkill
File opened for reading	/proc/9/cmdline	pkill
File opened for reading	/proc/80/cmdline	pkill
File opened for reading	/proc/155/status	pkill
File opened for reading	/proc/450/status	pkill
File opened for reading	/proc/289/cmdline	pkill
File opened for reading	/proc/289/status	pkill
File opened for reading	/proc/31/cmdline	pkill
File opened for reading	/proc/24/cmdline	pkill
File opened for reading	/proc/81/cmdline	pkill
File opened for reading	/proc/82/cmdline	pkill
File opened for reading	/proc/14/cmdline	pkill
File opened for reading	/proc/26/status	pkill
File opened for reading	/proc/34/cmdline	pkill
File opened for reading	/proc/156/status	pkill
File opened for reading	/proc/194/status	pkill
File opened for reading	/proc/600/cmdline	pkill
File opened for reading	/proc/606/status	pkill
File opened for reading	/proc/157/cmdline	pkill
File opened for reading	/proc/166/status	pkill
File opened for reading	/proc/168/cmdline	pkill
File opened for reading	/proc/169/cmdline	pkill
File opened for reading	/proc/170/status	pkill
File opened for reading	/proc/89/cmdline	pkill
File opened for reading	/proc/412/status	pkill
File opened for reading	/proc/78/status	pkill
File opened for reading	/proc/156/status	pkill
File opened for reading	/proc/636/cmdline	pkill
File opened for reading	/proc/165/cmdline	pkill
File opened for reading	/proc/1/cmdline	pkill

/tmp/VirusShare_1ac53ce81afc0e714ce2c32c5673736b
/tmp/VirusShare_1ac53ce81afc0e714ce2c32c5673736b
1⤵
PID:602

/bin/sh
sh -c "pkill -9 mips || busybox pkill -9 mips || /usr/busybox pkill -9 mips || /bin/busybox pkill -9 mips > /dev/null"
1⤵
PID:605

/usr/bin/pkill
pkill -9 mips
2⤵
- Reads runtime system information
PID:607

/bin/busybox
busybox pkill -9 mips
2⤵
PID:608

/usr/busybox
/usr/busybox pkill -9 mips
2⤵
PID:609

/bin/busybox
/bin/busybox pkill -9 mips
2⤵
PID:610

/bin/sh
sh -c "pkill -9 mips64 || busybox pkill -9 mips64 || /usr/busybox pkill -9 mips64 || /bin/busybox pkill -9 mips64 > /dev/null"
1⤵
PID:611

/usr/bin/pkill
pkill -9 mips64
2⤵
- Reads CPU attributes
PID:612

/bin/busybox
busybox pkill -9 mips64
2⤵
PID:613

/usr/busybox
/usr/busybox pkill -9 mips64
2⤵
PID:614

/bin/busybox
/bin/busybox pkill -9 mips64
2⤵
PID:615

/bin/sh
sh -c "pkill -9 mipsel || busybox pkill -9 mipsel || /usr/busybox pkill -9 mipsel || /bin/busybox pkill -9 mipsel > /dev/null"
1⤵
PID:616

/usr/bin/pkill
pkill -9 mipsel
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:617

/bin/busybox
busybox pkill -9 mipsel
2⤵
PID:618

/usr/busybox
/usr/busybox pkill -9 mipsel
2⤵
PID:619

/bin/busybox
/bin/busybox pkill -9 mipsel
2⤵
PID:620

/bin/sh
sh -c "pkill -9 sh2eb || busybox pkill -9 sh2eb || /usr/busybox pkill -9 sh2eb || /bin/busybox pkill -9 sh2eb > /dev/null"
1⤵
PID:621

/usr/bin/pkill
pkill -9 sh2eb
2⤵
- Reads CPU attributes
PID:622

/bin/busybox
busybox pkill -9 sh2eb
2⤵
PID:623

/usr/busybox
/usr/busybox pkill -9 sh2eb
2⤵
PID:624

/bin/busybox
/bin/busybox pkill -9 sh2eb
2⤵
PID:625

/bin/sh
sh -c "pkill -9 sh2elf || busybox pkill -9 sh2elf || /usr/busybox pkill -9 sh2elf || /bin/busybox pkill -9 sh2elf > /dev/null"
1⤵
PID:626

/usr/bin/pkill
pkill -9 sh2elf
2⤵
- Reads CPU attributes
PID:627

/bin/busybox
busybox pkill -9 sh2elf
2⤵
PID:628

/usr/busybox
/usr/busybox pkill -9 sh2elf
2⤵
PID:629

/bin/busybox
/bin/busybox pkill -9 sh2elf
2⤵
PID:630

/bin/sh
sh -c "pkill -9 sh4 || busybox pkill -9 sh4 || /usr/busybox pkill -9 sh4 || /bin/busybox pkill -9 sh4 > /dev/null"
1⤵
PID:631

/usr/bin/pkill
pkill -9 sh4
2⤵
- Reads runtime system information
PID:632

/bin/busybox
busybox pkill -9 sh4
2⤵
PID:633

/usr/busybox
/usr/busybox pkill -9 sh4
2⤵
PID:634

/bin/busybox
/bin/busybox pkill -9 sh4
2⤵
PID:635

/bin/sh
sh -c "pkill -9 x86 || busybox pkill -9 x86 || /usr/busybox pkill -9 x86 || /bin/busybox pkill -9 x86 > /dev/null"
1⤵
PID:636

/usr/bin/pkill
pkill -9 x86
2⤵
- Reads runtime system information
PID:637

/bin/busybox
busybox pkill -9 x86
2⤵
PID:638

/usr/busybox
/usr/busybox pkill -9 x86
2⤵
PID:639

/bin/busybox
/bin/busybox pkill -9 x86
2⤵
PID:644

/bin/sh
sh -c "pkill -9 arm || busybox pkill -9 arm || /usr/busybox pkill -9 arm || /bin/busybox pkill -9 arm > /dev/null"
1⤵
PID:645

/usr/bin/pkill
pkill -9 arm
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:646

/bin/busybox
busybox pkill -9 arm
2⤵
PID:647

/usr/busybox
/usr/busybox pkill -9 arm
2⤵
PID:648

/bin/busybox
/bin/busybox pkill -9 arm
2⤵
PID:649

/bin/sh
sh -c "pkill -9 armv5 || busybox pkill -9 armv5 || /usr/busybox pkill -9 armv5 || /bin/busybox pkill -9 armv5 > /dev/null"
1⤵
PID:650

/usr/bin/pkill
pkill -9 armv5
2⤵
- Reads CPU attributes
PID:651

/bin/busybox
busybox pkill -9 armv5
2⤵
PID:652

/usr/busybox
/usr/busybox pkill -9 armv5
2⤵
PID:653

/bin/busybox
/bin/busybox pkill -9 armv5
2⤵
PID:654

/bin/sh
sh -c "pkill -9 armv4tl || busybox pkill -9 armv4tl || /usr/busybox pkill -9 armv4tl || /bin/busybox pkill -9 armv4tl > /dev/null"
1⤵
PID:655

/usr/bin/pkill
pkill -9 armv4tl
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:656

/bin/busybox
busybox pkill -9 armv4tl
2⤵
PID:657

/usr/busybox
/usr/busybox pkill -9 armv4tl
2⤵
PID:658

/bin/busybox
/bin/busybox pkill -9 armv4tl
2⤵
PID:659

/bin/sh
sh -c "pkill -9 armv4 || busybox pkill -9 armv4 || /usr/busybox pkill -9 armv4 || /bin/busybox pkill -9 armv4 > /dev/null"
1⤵
PID:660

/usr/bin/pkill
pkill -9 armv4
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:661

/bin/busybox
busybox pkill -9 armv4
2⤵
PID:662

/usr/busybox
/usr/busybox pkill -9 armv4
2⤵
PID:663

/bin/busybox
/bin/busybox pkill -9 armv4
2⤵
PID:664

/bin/sh
sh -c "pkill -9 armv6 || busybox pkill -9 armv6 || /usr/busybox pkill -9 armv6 || /bin/busybox pkill -9 armv6 > /dev/null"
1⤵
PID:665

/usr/bin/pkill
pkill -9 armv6
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:666

/bin/busybox
busybox pkill -9 armv6
2⤵
PID:667

/usr/busybox
/usr/busybox pkill -9 armv6
2⤵
PID:668

/bin/busybox
/bin/busybox pkill -9 armv6
2⤵
PID:669

/bin/sh
sh -c "pkill -9 i686 || busybox pkill -9 i686 || /usr/busybox pkill -9 i686 || /bin/busybox pkill -9 i686 > /dev/null"
1⤵
PID:670

/usr/bin/pkill
pkill -9 i686
2⤵
- Reads CPU attributes
PID:671

/bin/busybox
busybox pkill -9 i686
2⤵
PID:672

/usr/busybox
/usr/busybox pkill -9 i686
2⤵
PID:673

/bin/busybox
/bin/busybox pkill -9 i686
2⤵
PID:674

/bin/sh
sh -c "pkill -9 powerpc || busybox pkill -9 powerpc || /usr/busybox pkill -9 powerpc || /bin/busybox pkill -9 powerpc > /dev/null"
1⤵
PID:675

/usr/bin/pkill
pkill -9 powerpc
2⤵
- Reads CPU attributes
PID:676

/bin/busybox
busybox pkill -9 powerpc
2⤵
PID:677

/usr/busybox
/usr/busybox pkill -9 powerpc
2⤵
PID:678

/bin/busybox
/bin/busybox pkill -9 powerpc
2⤵
PID:679

/bin/sh
sh -c "pkill -9 powerpc440fp || busybox pkill -9 powerpc440fp || /usr/busybox pkill -9 powerpc440fp || /bin/busybox pkill -9 powerpc440fp > /dev/null"
1⤵
PID:680

/usr/bin/pkill
pkill -9 powerpc440fp
2⤵
- Reads runtime system information
PID:681

/bin/busybox
busybox pkill -9 powerpc440fp
2⤵
PID:682

/usr/busybox
/usr/busybox pkill -9 powerpc440fp
2⤵
PID:683

/bin/busybox
/bin/busybox pkill -9 powerpc440fp
2⤵
PID:684

/bin/sh
sh -c "pkill -9 i586 || busybox pkill -9 i586 || /usr/busybox pkill -9 i586 || /bin/busybox pkill -9 i586 > /dev/null"
1⤵
PID:685

/usr/bin/pkill
pkill -9 i586
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:686

/bin/busybox
busybox pkill -9 i586
2⤵
PID:687

/usr/busybox
/usr/busybox pkill -9 i586
2⤵
PID:688

/bin/busybox
/bin/busybox pkill -9 i586
2⤵
PID:689

/bin/sh
sh -c "pkill -9 m68k || busybox pkill -9 m68k || /usr/busybox pkill -9 m68k || /bin/busybox pkill -9 m68k > /dev/null"
1⤵
PID:690

/usr/bin/pkill
pkill -9 m68k
2⤵
- Reads CPU attributes
PID:691

/bin/busybox
busybox pkill -9 m68k
2⤵
PID:692

/usr/busybox
/usr/busybox pkill -9 m68k
2⤵
PID:693

/bin/busybox
/bin/busybox pkill -9 m68k
2⤵
PID:694

/bin/sh
sh -c "pkill -9 sparc || busybox pkill -9 sparc || /usr/busybox pkill -9 sparc || /bin/busybox pkill -9 sparc > /dev/null"
1⤵
PID:695

/usr/bin/pkill
pkill -9 sparc
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:696

/bin/busybox
busybox pkill -9 sparc
2⤵
PID:697

/usr/busybox
/usr/busybox pkill -9 sparc
2⤵
PID:698

/bin/busybox
/bin/busybox pkill -9 sparc
2⤵
PID:699

/bin/sh
sh -c "pkill -9 x86_64 || busybox pkill -9 x86_64 || /usr/busybox pkill -9 x86_64 || /bin/busybox pkill -9 x86_64 > /dev/null"
1⤵
PID:700

/usr/bin/pkill
pkill -9 x86_64
2⤵
- Reads CPU attributes
PID:701

/bin/busybox
busybox pkill -9 x86_64
2⤵
PID:702

/usr/busybox
/usr/busybox pkill -9 x86_64
2⤵
PID:703

/bin/busybox
/bin/busybox pkill -9 x86_64
2⤵
PID:704

/bin/sh
sh -c "pkill -9 jackmymips || busybox pkill -9 jackmymips || /usr/busybox pkill -9 jackmymips || /bin/busybox pkill -9 jackmymips > /dev/null"
1⤵
PID:705

/usr/bin/pkill
pkill -9 jackmymips
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:706

/bin/busybox
busybox pkill -9 jackmymips
2⤵
PID:707

/usr/busybox
/usr/busybox pkill -9 jackmymips
2⤵
PID:708

/bin/busybox
/bin/busybox pkill -9 jackmymips
2⤵
PID:709

/bin/sh
sh -c "pkill -9 jackmymips64 || busybox pkill -9 jackmymips64 || /usr/busybox pkill -9 jackmymips64 || /bin/busybox pkill -9 jackmymips64 > /dev/null"
1⤵
PID:710

/usr/bin/pkill
pkill -9 jackmymips64
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:711

/bin/busybox
busybox pkill -9 jackmymips64
2⤵
PID:712

/usr/busybox
/usr/busybox pkill -9 jackmymips64
2⤵
PID:713

/bin/busybox
/bin/busybox pkill -9 jackmymips64
2⤵
PID:714

/bin/sh
sh -c "pkill -9 jackmymipsel || busybox pkill -9 jackmymipsel || /usr/busybox pkill -9 jackmymipsel || /bin/busybox pkill -9 jackmymipsel > /dev/null"
1⤵
PID:715

/usr/bin/pkill
pkill -9 jackmymipsel
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:716

/bin/busybox
busybox pkill -9 jackmymipsel
2⤵
PID:717

/usr/busybox
/usr/busybox pkill -9 jackmymipsel
2⤵
PID:718

/bin/busybox
/bin/busybox pkill -9 jackmymipsel
2⤵
PID:719

/bin/sh
sh -c "pkill -9 jackmysh2eb || busybox pkill -9 jackmysh2eb || /usr/busybox pkill -9 jackmysh2eb || /bin/busybox pkill -9 jackmysh2eb > /dev/null"
1⤵
PID:720

/usr/bin/pkill
pkill -9 jackmysh2eb
2⤵
- Reads CPU attributes
PID:721

/bin/busybox
busybox pkill -9 jackmysh2eb
2⤵
PID:722

/usr/busybox
/usr/busybox pkill -9 jackmysh2eb
2⤵
PID:723

/bin/busybox
/bin/busybox pkill -9 jackmysh2eb
2⤵
PID:724

/bin/sh
sh -c "pkill -9 jackmysh2elf || busybox pkill -9 jackmysh2elf || /usr/busybox pkill -9 jackmysh2elf || /bin/busybox pkill -9 jackmysh2elf > /dev/null"
1⤵
PID:725

/usr/bin/pkill
pkill -9 jackmysh2elf
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:726

/bin/busybox
busybox pkill -9 jackmysh2elf
2⤵
PID:727

/usr/busybox
/usr/busybox pkill -9 jackmysh2elf
2⤵
PID:728

/bin/busybox
/bin/busybox pkill -9 jackmysh2elf
2⤵
PID:729

/bin/sh
sh -c "pkill -9 jackmysh4 || busybox pkill -9 jackmysh4 || /usr/busybox pkill -9 jackmysh4 || /bin/busybox pkill -9 jackmysh4 > /dev/null"
1⤵
PID:730

/usr/bin/pkill
pkill -9 jackmysh4
2⤵
- Reads CPU attributes
PID:731

/bin/busybox
busybox pkill -9 jackmysh4
2⤵
PID:732

/usr/busybox
/usr/busybox pkill -9 jackmysh4
2⤵
PID:733

/bin/busybox
/bin/busybox pkill -9 jackmysh4
2⤵
PID:734

/bin/sh
sh -c "pkill -9 jackmyx86 || busybox pkill -9 jackmyx86 || /usr/busybox pkill -9 jackmyx86 || /bin/busybox pkill -9 jackmyx86 > /dev/null"
1⤵
PID:735

/usr/bin/pkill
pkill -9 jackmyx86
2⤵
- Reads runtime system information
PID:736

/bin/busybox
busybox pkill -9 jackmyx86
2⤵
PID:737

/usr/busybox
/usr/busybox pkill -9 jackmyx86
2⤵
PID:738

/bin/busybox
/bin/busybox pkill -9 jackmyx86
2⤵
PID:739

/bin/sh
sh -c "pkill -9 jackmyarmv5 || busybox pkill -9 jackmyarmv5 || /usr/busybox pkill -9 jackmyarmv5 || /bin/busybox pkill -9 jackmyarmv5 > /dev/null"
1⤵
PID:740

/usr/bin/pkill
pkill -9 jackmyarmv5
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:741

/bin/busybox
busybox pkill -9 jackmyarmv5
2⤵
PID:742

/usr/busybox
/usr/busybox pkill -9 jackmyarmv5
2⤵
PID:743

/bin/busybox
/bin/busybox pkill -9 jackmyarmv5
2⤵
PID:744

/bin/sh
sh -c "pkill -9 jackmyarmv4tl || busybox pkill -9 jackmyarmv4tl || /usr/busybox pkill -9 jackmyarmv4tl || /bin/busybox pkill -9 jackmyarmv4tl > /dev/null"
1⤵
PID:745

/usr/bin/pkill
pkill -9 jackmyarmv4tl
2⤵
- Reads CPU attributes
PID:746

/bin/busybox
busybox pkill -9 jackmyarmv4tl
2⤵
PID:747

/usr/busybox
/usr/busybox pkill -9 jackmyarmv4tl
2⤵
PID:748

/bin/busybox
/bin/busybox pkill -9 jackmyarmv4tl
2⤵
PID:749

/bin/sh
sh -c "pkill -9 jackmyarmv4 || busybox pkill -9 jackmyarmv4 || /usr/busybox pkill -9 jackmyarmv4 || /bin/busybox pkill -9 jackmyarmv4 > /dev/null"
1⤵
PID:750

/usr/bin/pkill
pkill -9 jackmyarmv4
2⤵
PID:751

/bin/busybox
busybox pkill -9 jackmyarmv4
2⤵
PID:752

/usr/busybox
/usr/busybox pkill -9 jackmyarmv4
2⤵
PID:753

/bin/busybox
/bin/busybox pkill -9 jackmyarmv4
2⤵
PID:754

/bin/sh
sh -c "pkill -9 jackmyarmv6 || busybox pkill -9 jackmyarmv6 || /usr/busybox pkill -9 jackmyarmv6 || /bin/busybox pkill -9 jackmyarmv6 > /dev/null"
1⤵
PID:755

/usr/bin/pkill
pkill -9 jackmyarmv6
2⤵
PID:756

/bin/busybox
busybox pkill -9 jackmyarmv6
2⤵
PID:757

/usr/busybox
/usr/busybox pkill -9 jackmyarmv6
2⤵
PID:758

/bin/busybox
/bin/busybox pkill -9 jackmyarmv6
2⤵
PID:759

/bin/sh
sh -c "pkill -9 jackmyi686 || busybox pkill -9 jackmyi686 || /usr/busybox pkill -9 jackmyi686 || /bin/busybox pkill -9 jackmyi686 > /dev/null"
1⤵
PID:760

/usr/bin/pkill
pkill -9 jackmyi686
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:761

/bin/busybox
busybox pkill -9 jackmyi686
2⤵
PID:762

/usr/busybox
/usr/busybox pkill -9 jackmyi686
2⤵
PID:763

/bin/busybox
/bin/busybox pkill -9 jackmyi686
2⤵
PID:764

/bin/sh
sh -c "pkill -9 jackmypowerpc || busybox pkill -9 jackmypowerpc || /usr/busybox pkill -9 jackmypowerpc || /bin/busybox pkill -9 jackmypowerpc > /dev/null"
1⤵
PID:765

/usr/bin/pkill
pkill -9 jackmypowerpc
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:766

/bin/busybox
busybox pkill -9 jackmypowerpc
2⤵
PID:767

/usr/busybox
/usr/busybox pkill -9 jackmypowerpc
2⤵
PID:768

/bin/busybox
/bin/busybox pkill -9 jackmypowerpc
2⤵
PID:769

/bin/sh
sh -c "pkill -9 jackmypowerpc440fp || busybox pkill -9 jackmypowerpc440fp || /usr/busybox pkill -9 jackmypowerpc440fp || /bin/busybox pkill -9 jackmypowerpc440fp > /dev/null"
1⤵
PID:770

/usr/bin/pkill
pkill -9 jackmypowerpc440fp
2⤵
- Reads runtime system information
PID:771

/bin/busybox
busybox pkill -9 jackmypowerpc440fp
2⤵
PID:772

/usr/busybox
/usr/busybox pkill -9 jackmypowerpc440fp
2⤵
PID:773

/bin/busybox
/bin/busybox pkill -9 jackmypowerpc440fp
2⤵
PID:774

/bin/sh
sh -c "pkill -9 jackmyi586 || busybox pkill -9 jackmyi586 || /usr/busybox pkill -9 jackmyi586 || /bin/busybox pkill -9 jackmyi586 > /dev/null"
1⤵
PID:775

/usr/bin/pkill
pkill -9 jackmyi586
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:776

/bin/busybox
busybox pkill -9 jackmyi586
2⤵
PID:777

/usr/busybox
/usr/busybox pkill -9 jackmyi586
2⤵
PID:778

/bin/busybox
/bin/busybox pkill -9 jackmyi586
2⤵
PID:779

/bin/sh
sh -c "pkill -9 jackmym68k || busybox pkill -9 jackmym68k || /usr/busybox pkill -9 jackmym68k || /bin/busybox pkill -9 jackmym68k > /dev/null"
1⤵
PID:780

/usr/bin/pkill
pkill -9 jackmym68k
2⤵
- Reads runtime system information
PID:781

/bin/busybox
busybox pkill -9 jackmym68k
2⤵
PID:782

/usr/busybox
/usr/busybox pkill -9 jackmym68k
2⤵
PID:783

/bin/busybox
/bin/busybox pkill -9 jackmym68k
2⤵
PID:784

/bin/sh
sh -c "pkill -9 jackmysparc || busybox pkill -9 jackmysparc || /usr/busybox pkill -9 jackmysparc || /bin/busybox pkill -9 jackmysparc > /dev/null"
1⤵
PID:785

/usr/bin/pkill
pkill -9 jackmysparc
2⤵
- Reads CPU attributes
PID:786

/bin/busybox
busybox pkill -9 jackmysparc
2⤵
PID:787

/usr/busybox
/usr/busybox pkill -9 jackmysparc
2⤵
PID:788

/bin/busybox
/bin/busybox pkill -9 jackmysparc
2⤵
PID:789

/bin/sh
sh -c "pkill -9 jackmyx86_64 || busybox pkill -9 jackmyx86_64 || /usr/busybox pkill -9 jackmyx86_64 || /bin/busybox pkill -9 jackmyx86_64 > /dev/null"
1⤵
PID:790

/usr/bin/pkill
pkill -9 jackmyx86_64
2⤵
PID:791

/bin/busybox
busybox pkill -9 jackmyx86_64
2⤵
PID:792

/usr/busybox
/usr/busybox pkill -9 jackmyx86_64
2⤵
PID:793

/bin/busybox
/bin/busybox pkill -9 jackmyx86_64
2⤵
PID:794

/bin/sh
sh -c "pkill -9 hackmymips || busybox pkill -9 hackmymips || /usr/busybox pkill -9 hackmymips || /bin/busybox pkill -9 hackmymips > /dev/null"
1⤵
PID:795

/usr/bin/pkill
pkill -9 hackmymips
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:796

/bin/busybox
busybox pkill -9 hackmymips
2⤵
PID:797

/usr/busybox
/usr/busybox pkill -9 hackmymips
2⤵
PID:798

/bin/busybox
/bin/busybox pkill -9 hackmymips
2⤵
PID:799

/bin/sh
sh -c "pkill -9 hackmymips64 || busybox pkill -9 hackmymips64 || /usr/busybox pkill -9 hackmymips64 || /bin/busybox pkill -9 hackmymips64 > /dev/null"
1⤵
PID:800

/usr/bin/pkill
pkill -9 hackmymips64
2⤵
- Reads runtime system information
PID:801

/bin/busybox
busybox pkill -9 hackmymips64
2⤵
PID:802

/usr/busybox
/usr/busybox pkill -9 hackmymips64
2⤵
PID:803

/bin/busybox
/bin/busybox pkill -9 hackmymips64
2⤵
PID:804

/bin/sh
sh -c "pkill -9 hackmymipsel || busybox pkill -9 hackmymipsel || /usr/busybox pkill -9 hackmymipsel || /bin/busybox pkill -9 hackmymipsel > /dev/null"
1⤵
PID:805

/usr/bin/pkill
pkill -9 hackmymipsel
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:806

/bin/busybox
busybox pkill -9 hackmymipsel
2⤵
PID:807

/usr/busybox
/usr/busybox pkill -9 hackmymipsel
2⤵
PID:808

/bin/busybox
/bin/busybox pkill -9 hackmymipsel
2⤵
PID:809

/bin/sh
sh -c "pkill -9 hackmysh2eb || busybox pkill -9 hackmysh2eb || /usr/busybox pkill -9 hackmysh2eb || /bin/busybox pkill -9 hackmysh2eb > /dev/null"
1⤵
PID:810

/usr/bin/pkill
pkill -9 hackmysh2eb
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:811

/bin/busybox
busybox pkill -9 hackmysh2eb
2⤵
PID:812

/usr/busybox
/usr/busybox pkill -9 hackmysh2eb
2⤵
PID:813

/bin/busybox
/bin/busybox pkill -9 hackmysh2eb
2⤵
PID:814

/bin/sh
sh -c "pkill -9 hackmysh2elf || busybox pkill -9 hackmysh2elf || /usr/busybox pkill -9 hackmysh2elf || /bin/busybox pkill -9 hackmysh2elf > /dev/null"
1⤵
PID:815

/usr/bin/pkill
pkill -9 hackmysh2elf
2⤵
- Reads CPU attributes
PID:816

/bin/busybox
busybox pkill -9 hackmysh2elf
2⤵
PID:817

/usr/busybox
/usr/busybox pkill -9 hackmysh2elf
2⤵
PID:818

/bin/busybox
/bin/busybox pkill -9 hackmysh2elf
2⤵
PID:819

/bin/sh
sh -c "pkill -9 hackmysh4 || busybox pkill -9 hackmysh4 || /usr/busybox pkill -9 hackmysh4 || /bin/busybox pkill -9 hackmysh4 > /dev/null"
1⤵
PID:820

/usr/bin/pkill
pkill -9 hackmysh4
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:821

/bin/busybox
busybox pkill -9 hackmysh4
2⤵
PID:822

/usr/busybox
/usr/busybox pkill -9 hackmysh4
2⤵
PID:823

/bin/busybox
/bin/busybox pkill -9 hackmysh4
2⤵
PID:824

/bin/sh
sh -c "pkill -9 hackmyx86 || busybox pkill -9 hackmyx86 || /usr/busybox pkill -9 hackmyx86 || /bin/busybox pkill -9 hackmyx86 > /dev/null"
1⤵
PID:825

/usr/bin/pkill
pkill -9 hackmyx86
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:826

/bin/busybox
busybox pkill -9 hackmyx86
2⤵
PID:827

/usr/busybox
/usr/busybox pkill -9 hackmyx86
2⤵
PID:828

/bin/busybox
/bin/busybox pkill -9 hackmyx86
2⤵
PID:829

/bin/sh
sh -c "pkill -9 hackmyarmv5 || busybox pkill -9 hackmyarmv5 || /usr/busybox pkill -9 hackmyarmv5 || /bin/busybox pkill -9 hackmyarmv5 > /dev/null"
1⤵
PID:830

/usr/bin/pkill
pkill -9 hackmyarmv5
2⤵
- Reads CPU attributes
PID:831

/bin/busybox
busybox pkill -9 hackmyarmv5
2⤵
PID:832

/usr/busybox
/usr/busybox pkill -9 hackmyarmv5
2⤵
PID:833

/bin/busybox
/bin/busybox pkill -9 hackmyarmv5
2⤵
PID:834

/bin/sh
sh -c "pkill -9 hackmyarmv4tl || busybox pkill -9 hackmyarmv4tl || /usr/busybox pkill -9 hackmyarmv4tl || /bin/busybox pkill -9 hackmyarmv4tl > /dev/null"
1⤵
PID:835

/usr/bin/pkill
pkill -9 hackmyarmv4tl
2⤵
- Reads CPU attributes
PID:836

/bin/busybox
busybox pkill -9 hackmyarmv4tl
2⤵
PID:837

/usr/busybox
/usr/busybox pkill -9 hackmyarmv4tl
2⤵
PID:838

/bin/busybox
/bin/busybox pkill -9 hackmyarmv4tl
2⤵
PID:839

/bin/sh
sh -c "pkill -9 hackmyarmv4 || busybox pkill -9 hackmyarmv4 || /usr/busybox pkill -9 hackmyarmv4 || /bin/busybox pkill -9 hackmyarmv4 > /dev/null"
1⤵
PID:840

/usr/bin/pkill
pkill -9 hackmyarmv4
2⤵
- Reads CPU attributes
PID:841

/bin/busybox
busybox pkill -9 hackmyarmv4
2⤵
PID:842

/usr/busybox
/usr/busybox pkill -9 hackmyarmv4
2⤵
PID:843

/bin/busybox
/bin/busybox pkill -9 hackmyarmv4
2⤵
PID:844

/bin/sh
sh -c "pkill -9 hackmyarmv6 || busybox pkill -9 hackmyarmv6 || /usr/busybox pkill -9 hackmyarmv6 || /bin/busybox pkill -9 hackmyarmv6 > /dev/null"
1⤵
PID:845

/usr/bin/pkill
pkill -9 hackmyarmv6
2⤵
PID:846

/bin/busybox
busybox pkill -9 hackmyarmv6
2⤵
PID:847

/usr/busybox
/usr/busybox pkill -9 hackmyarmv6
2⤵
PID:848

/bin/busybox
/bin/busybox pkill -9 hackmyarmv6
2⤵
PID:849

/bin/sh
sh -c "pkill -9 hackmyi686 || busybox pkill -9 hackmyi686 || /usr/busybox pkill -9 hackmyi686 || /bin/busybox pkill -9 hackmyi686 > /dev/null"
1⤵
PID:850

/usr/bin/pkill
pkill -9 hackmyi686
2⤵
- Reads CPU attributes
PID:851

/bin/busybox
busybox pkill -9 hackmyi686
2⤵
PID:852

/usr/busybox
/usr/busybox pkill -9 hackmyi686
2⤵
PID:853

/bin/busybox
/bin/busybox pkill -9 hackmyi686
2⤵
PID:854

/bin/sh
sh -c "pkill -9 hackmypowerpc || busybox pkill -9 hackmypowerpc || /usr/busybox pkill -9 hackmypowerpc || /bin/busybox pkill -9 hackmypowerpc > /dev/null"
1⤵
PID:855

/usr/bin/pkill
pkill -9 hackmypowerpc
2⤵
- Reads CPU attributes
PID:856

/bin/busybox
busybox pkill -9 hackmypowerpc
2⤵
PID:857

/usr/busybox
/usr/busybox pkill -9 hackmypowerpc
2⤵
PID:858

/bin/busybox
/bin/busybox pkill -9 hackmypowerpc
2⤵
PID:859

/bin/sh
sh -c "pkill -9 hackmypowerpc440fp || busybox pkill -9 hackmypowerpc440fp || /usr/busybox pkill -9 hackmypowerpc440fp || /bin/busybox pkill -9 hackmypowerpc440fp > /dev/null"
1⤵
PID:860

/usr/bin/pkill
pkill -9 hackmypowerpc440fp
2⤵
- Reads runtime system information
PID:861

/bin/busybox
busybox pkill -9 hackmypowerpc440fp
2⤵
PID:862

/usr/busybox
/usr/busybox pkill -9 hackmypowerpc440fp
2⤵
PID:863

/bin/busybox
/bin/busybox pkill -9 hackmypowerpc440fp
2⤵
PID:864

/bin/sh
sh -c "pkill -9 hackmyi586 || busybox pkill -9 hackmyi586 || /usr/busybox pkill -9 hackmyi586 || /bin/busybox pkill -9 hackmyi586 > /dev/null"
1⤵
PID:865

/usr/bin/pkill
pkill -9 hackmyi586
2⤵
- Reads runtime system information
PID:866

/bin/busybox
busybox pkill -9 hackmyi586
2⤵
PID:867

/usr/busybox
/usr/busybox pkill -9 hackmyi586
2⤵
PID:868

/bin/busybox
/bin/busybox pkill -9 hackmyi586
2⤵
PID:869

/bin/sh
sh -c "pkill -9 hackmym68k || busybox pkill -9 hackmym68k || /usr/busybox pkill -9 hackmym68k || /bin/busybox pkill -9 hackmym68k > /dev/null"
1⤵
PID:870

/usr/bin/pkill
pkill -9 hackmym68k
2⤵
- Reads CPU attributes
PID:871

/bin/busybox
busybox pkill -9 hackmym68k
2⤵
PID:872

/usr/busybox
/usr/busybox pkill -9 hackmym68k
2⤵
PID:873

/bin/busybox
/bin/busybox pkill -9 hackmym68k
2⤵
PID:874

/bin/sh
sh -c "pkill -9 hackmysparc || busybox pkill -9 hackmysparc || /usr/busybox pkill -9 hackmysparc || /bin/busybox pkill -9 hackmysparc > /dev/null"
1⤵
PID:875

/usr/bin/pkill
pkill -9 hackmysparc
2⤵
PID:876

/bin/busybox
busybox pkill -9 hackmysparc
2⤵
PID:877

/usr/busybox
/usr/busybox pkill -9 hackmysparc
2⤵
PID:878

/bin/busybox
/bin/busybox pkill -9 hackmysparc
2⤵
PID:879

/bin/sh
sh -c "pkill -9 hackmyx86_64 || busybox pkill -9 hackmyx86_64 || /usr/busybox pkill -9 hackmyx86_64 || /bin/busybox pkill -9 hackmyx86_64 > /dev/null"
1⤵
PID:880

/usr/bin/pkill
pkill -9 hackmyx86_64
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:881

/bin/busybox
busybox pkill -9 hackmyx86_64
2⤵
PID:882

/usr/busybox
/usr/busybox pkill -9 hackmyx86_64
2⤵
PID:883

/bin/busybox
/bin/busybox pkill -9 hackmyx86_64
2⤵
PID:884

/bin/sh
sh -c "pkill -9 b1 || busybox pkill -9 b1 || /usr/busybox pkill -9 b1 || /bin/busybox pkill -9 b1 > /dev/null"
1⤵
PID:885

/usr/bin/pkill
pkill -9 b1
2⤵
- Reads CPU attributes
PID:886

/bin/busybox
busybox pkill -9 b1
2⤵
PID:887

/usr/busybox
/usr/busybox pkill -9 b1
2⤵
PID:888

/bin/busybox
/bin/busybox pkill -9 b1
2⤵
PID:889

/bin/sh
sh -c "pkill -9 b2 || busybox pkill -9 b2 || /usr/busybox pkill -9 b2 || /bin/busybox pkill -9 b2 > /dev/null"
1⤵
PID:890

/usr/bin/pkill
pkill -9 b2
2⤵
- Reads CPU attributes
PID:891

/bin/busybox
busybox pkill -9 b2
2⤵
PID:892

/usr/busybox
/usr/busybox pkill -9 b2
2⤵
PID:893

/bin/busybox
/bin/busybox pkill -9 b2
2⤵
PID:894

/bin/sh
sh -c "pkill -9 b3 || busybox pkill -9 b3 || /usr/busybox pkill -9 b3 || /bin/busybox pkill -9 b3 > /dev/null"
1⤵
PID:895

/usr/bin/pkill
pkill -9 b3
2⤵
- Reads runtime system information
PID:896

/bin/busybox
busybox pkill -9 b3
2⤵
PID:897

/usr/busybox
/usr/busybox pkill -9 b3
2⤵
PID:898

/bin/busybox
/bin/busybox pkill -9 b3
2⤵
PID:899

/bin/sh
sh -c "pkill -9 b4 || busybox pkill -9 b4 || /usr/busybox pkill -9 b4 || /bin/busybox pkill -9 b4 > /dev/null"
1⤵
PID:900

/usr/bin/pkill
pkill -9 b4
2⤵
- Reads runtime system information
PID:901

/bin/busybox
busybox pkill -9 b4
2⤵
PID:902

/usr/busybox
/usr/busybox pkill -9 b4
2⤵
PID:903

/bin/busybox
/bin/busybox pkill -9 b4
2⤵
PID:904

/bin/sh
sh -c "pkill -9 b5 || busybox pkill -9 b5 || /usr/busybox pkill -9 b5 || /bin/busybox pkill -9 b5 > /dev/null"
1⤵
PID:905

/usr/bin/pkill
pkill -9 b5
2⤵
- Reads runtime system information
PID:906

/bin/busybox
busybox pkill -9 b5
2⤵
PID:907

/usr/busybox
/usr/busybox pkill -9 b5
2⤵
PID:908

/bin/busybox
/bin/busybox pkill -9 b5
2⤵
PID:909

/bin/sh
sh -c "pkill -9 b6 || busybox pkill -9 b6 || /usr/busybox pkill -9 b6 || /bin/busybox pkill -9 b6 > /dev/null"
1⤵
PID:910

/usr/bin/pkill
pkill -9 b6
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:911

/bin/busybox
busybox pkill -9 b6
2⤵
PID:912

/usr/busybox
/usr/busybox pkill -9 b6
2⤵
PID:913

/bin/busybox
/bin/busybox pkill -9 b6
2⤵
PID:914

/bin/sh
sh -c "pkill -9 b7 || busybox pkill -9 b7 || /usr/busybox pkill -9 b7 || /bin/busybox pkill -9 b7 > /dev/null"
1⤵
PID:915

/usr/bin/pkill
pkill -9 b7
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:916

/bin/busybox
busybox pkill -9 b7
2⤵
PID:917

/usr/busybox
/usr/busybox pkill -9 b7
2⤵
PID:918

/bin/busybox
/bin/busybox pkill -9 b7
2⤵
PID:919

/bin/sh
sh -c "pkill -9 b8 || busybox pkill -9 b8 || /usr/busybox pkill -9 b8 || /bin/busybox pkill -9 b8 > /dev/null"
1⤵
PID:920

/usr/bin/pkill
pkill -9 b8
2⤵
PID:921

/bin/busybox
busybox pkill -9 b8
2⤵
PID:922

/usr/busybox
/usr/busybox pkill -9 b8
2⤵
PID:923

/bin/busybox
/bin/busybox pkill -9 b8
2⤵
PID:924

/bin/sh
sh -c "pkill -9 b9 || busybox pkill -9 b9 || /usr/busybox pkill -9 b9 || /bin/busybox pkill -9 b9 > /dev/null"
1⤵
PID:925

/usr/bin/pkill
pkill -9 b9
2⤵
PID:926

/bin/busybox
busybox pkill -9 b9
2⤵
PID:927

/usr/busybox
/usr/busybox pkill -9 b9
2⤵
PID:928

/bin/busybox
/bin/busybox pkill -9 b9
2⤵
PID:929

/bin/sh
sh -c "pkill -9 b10 || busybox pkill -9 b10 || /usr/busybox pkill -9 b10 || /bin/busybox pkill -9 b10 > /dev/null"
1⤵
PID:930

/usr/bin/pkill
pkill -9 b10
2⤵
PID:931

/bin/busybox
busybox pkill -9 b10
2⤵
PID:932

/usr/busybox
/usr/busybox pkill -9 b10
2⤵
PID:933

/bin/busybox
/bin/busybox pkill -9 b10
2⤵
PID:934

/bin/sh
sh -c "pkill -9 b11 || busybox pkill -9 b11 || /usr/busybox pkill -9 b11 || /bin/busybox pkill -9 b11 > /dev/null"
1⤵
PID:935

/usr/bin/pkill
pkill -9 b11
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:936

/bin/busybox
busybox pkill -9 b11
2⤵
PID:937

/usr/busybox
/usr/busybox pkill -9 b11
2⤵
PID:938

/bin/busybox
/bin/busybox pkill -9 b11
2⤵
PID:939

/bin/sh
sh -c "pkill -9 b12 || busybox pkill -9 b12 || /usr/busybox pkill -9 b12 || /bin/busybox pkill -9 b12 > /dev/null"
1⤵
PID:940

/usr/bin/pkill
pkill -9 b12
2⤵
- Reads CPU attributes
PID:941

/bin/busybox
busybox pkill -9 b12
2⤵
PID:942

/usr/busybox
/usr/busybox pkill -9 b12
2⤵
PID:943

/bin/busybox
/bin/busybox pkill -9 b12
2⤵
PID:944

/bin/sh
sh -c "pkill -9 b13 || busybox pkill -9 b13 || /usr/busybox pkill -9 b13 || /bin/busybox pkill -9 b13 > /dev/null"
1⤵
PID:945

/usr/bin/pkill
pkill -9 b13
2⤵
PID:946

/bin/busybox
busybox pkill -9 b13
2⤵
PID:947

/usr/busybox
/usr/busybox pkill -9 b13
2⤵
PID:948

/bin/busybox
/bin/busybox pkill -9 b13
2⤵
PID:949

/bin/sh
sh -c "pkill -9 b14 || busybox pkill -9 b14 || /usr/busybox pkill -9 b14 || /bin/busybox pkill -9 b14 > /dev/null"
1⤵
PID:950

/usr/bin/pkill
pkill -9 b14
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:951

/bin/busybox
busybox pkill -9 b14
2⤵
PID:952

/usr/busybox
/usr/busybox pkill -9 b14
2⤵
PID:953

/bin/busybox
/bin/busybox pkill -9 b14
2⤵
PID:954

/bin/sh
sh -c "pkill -9 b15 || busybox pkill -9 b15 || /usr/busybox pkill -9 b15 || /bin/busybox pkill -9 b15 > /dev/null"
1⤵
PID:955

/usr/bin/pkill
pkill -9 b15
2⤵
PID:956

/bin/busybox
busybox pkill -9 b15
2⤵
PID:957

/usr/busybox
/usr/busybox pkill -9 b15
2⤵
PID:958

/bin/busybox
/bin/busybox pkill -9 b15
2⤵
PID:959

/bin/sh
sh -c "pkill -9 b16 || busybox pkill -9 b16 || /usr/busybox pkill -9 b16 || /bin/busybox pkill -9 b16 > /dev/null"
1⤵
PID:960

/usr/bin/pkill
pkill -9 b16
2⤵
- Reads runtime system information
PID:961

/bin/busybox
busybox pkill -9 b16
2⤵
PID:962

/usr/busybox
/usr/busybox pkill -9 b16
2⤵
PID:963

/bin/busybox
/bin/busybox pkill -9 b16
2⤵
PID:964

/bin/sh
sh -c "pkill -9 b17 || busybox pkill -9 b17 || /usr/busybox pkill -9 b17 || /bin/busybox pkill -9 b17 > /dev/null"
1⤵
PID:965

/usr/bin/pkill
pkill -9 b17
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:966

/bin/busybox
busybox pkill -9 b17
2⤵
PID:967

/usr/busybox
/usr/busybox pkill -9 b17
2⤵
PID:968

/bin/busybox
/bin/busybox pkill -9 b17
2⤵
PID:969

/bin/sh
sh -c "pkill -9 b18 || busybox pkill -9 b18 || /usr/busybox pkill -9 b18 || /bin/busybox pkill -9 b18 > /dev/null"
1⤵
PID:970

/usr/bin/pkill
pkill -9 b18
2⤵
- Reads CPU attributes
PID:971

/bin/busybox
busybox pkill -9 b18
2⤵
PID:972

/usr/busybox
/usr/busybox pkill -9 b18
2⤵
PID:973

/bin/busybox
/bin/busybox pkill -9 b18
2⤵
PID:974

/bin/sh
sh -c "pkill -9 b19 || busybox pkill -9 b19 || /usr/busybox pkill -9 b19 || /bin/busybox pkill -9 b19 > /dev/null"
1⤵
PID:975

/usr/bin/pkill
pkill -9 b19
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:976

/bin/busybox
busybox pkill -9 b19
2⤵
PID:977

/usr/busybox
/usr/busybox pkill -9 b19
2⤵
PID:978

/bin/busybox
/bin/busybox pkill -9 b19
2⤵
PID:979

/bin/sh
sh -c "pkill -9 b20 || busybox pkill -9 b20 || /usr/busybox pkill -9 b20 || /bin/busybox pkill -9 b20 > /dev/null"
1⤵
PID:980

/usr/bin/pkill
pkill -9 b20
2⤵
- Reads CPU attributes
PID:981

/bin/busybox
busybox pkill -9 b20
2⤵
PID:982

/usr/busybox
/usr/busybox pkill -9 b20
2⤵
PID:983

/bin/busybox
/bin/busybox pkill -9 b20
2⤵
PID:984

/bin/sh
sh -c "pkill -9 busyboxterrorist || busybox pkill -9 busyboxterrorist || /usr/busybox pkill -9 busyboxterrorist || /bin/busybox pkill -9 busyboxterrorist > /dev/null"
1⤵
PID:985

/usr/bin/pkill
pkill -9 busyboxterrorist
2⤵
- Reads CPU attributes
PID:986

/bin/busybox
busybox pkill -9 busyboxterrorist
2⤵
PID:987

/usr/busybox
/usr/busybox pkill -9 busyboxterrorist
2⤵
PID:988

/bin/busybox
/bin/busybox pkill -9 busyboxterrorist
2⤵
PID:989

/bin/sh
sh -c "pkill -9 dvrHelper || busybox pkill -9 dvrHelper || /usr/busybox pkill -9 dvrHelper || /bin/busybox pkill -9 dvrHelper > /dev/null"
1⤵
PID:990

/usr/bin/pkill
pkill -9 dvrHelper
2⤵
- Reads runtime system information
PID:991

/bin/busybox
busybox pkill -9 dvrHelper
2⤵
PID:992

/usr/busybox
/usr/busybox pkill -9 dvrHelper
2⤵
PID:993

/bin/busybox
/bin/busybox pkill -9 dvrHelper
2⤵
PID:994

/bin/sh
sh -c "pkill -9 kmymips || busybox pkill -9 kmymips || /usr/busybox pkill -9 kmymips || /bin/busybox pkill -9 kmymips > /dev/null"
1⤵
PID:995

/usr/bin/pkill
pkill -9 kmymips
2⤵
PID:996

/bin/busybox
busybox pkill -9 kmymips
2⤵
PID:997

/usr/busybox
/usr/busybox pkill -9 kmymips
2⤵
PID:998

/bin/busybox
/bin/busybox pkill -9 kmymips
2⤵
PID:999

/bin/sh
sh -c "pkill -9 kmymips64 || busybox pkill -9 kmymips64 || /usr/busybox pkill -9 kmymips64 || /bin/busybox pkill -9 kmymips64 > /dev/null"
1⤵
PID:1000

/usr/bin/pkill
pkill -9 kmymips64
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1001

/bin/busybox
busybox pkill -9 kmymips64
2⤵
PID:1002

/usr/busybox
/usr/busybox pkill -9 kmymips64
2⤵
PID:1003

/bin/busybox
/bin/busybox pkill -9 kmymips64
2⤵
PID:1004

/bin/sh
sh -c "pkill -9 kmymipsel || busybox pkill -9 kmymipsel || /usr/busybox pkill -9 kmymipsel || /bin/busybox pkill -9 kmymipsel > /dev/null"
1⤵
PID:1005

/usr/bin/pkill
pkill -9 kmymipsel
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1006

/bin/busybox
busybox pkill -9 kmymipsel
2⤵
PID:1007

/usr/busybox
/usr/busybox pkill -9 kmymipsel
2⤵
PID:1008

/bin/busybox
/bin/busybox pkill -9 kmymipsel
2⤵
PID:1009

/bin/sh
sh -c "pkill -9 kmysh2eb || busybox pkill -9 kmysh2eb || /usr/busybox pkill -9 kmysh2eb || /bin/busybox pkill -9 kmysh2eb > /dev/null"
1⤵
PID:1010

/usr/bin/pkill
pkill -9 kmysh2eb
2⤵
- Reads CPU attributes
PID:1011

/bin/busybox
busybox pkill -9 kmysh2eb
2⤵
PID:1012

/usr/busybox
/usr/busybox pkill -9 kmysh2eb
2⤵
PID:1013

/bin/busybox
/bin/busybox pkill -9 kmysh2eb
2⤵
PID:1014

/bin/sh
sh -c "pkill -9 kmysh2elf || busybox pkill -9 kmysh2elf || /usr/busybox pkill -9 kmysh2elf || /bin/busybox pkill -9 kmysh2elf > /dev/null"
1⤵
PID:1015

/usr/bin/pkill
pkill -9 kmysh2elf
2⤵
- Reads CPU attributes
PID:1016

/bin/busybox
busybox pkill -9 kmysh2elf
2⤵
PID:1017

/usr/busybox
/usr/busybox pkill -9 kmysh2elf
2⤵
PID:1018

/bin/busybox
/bin/busybox pkill -9 kmysh2elf
2⤵
PID:1019

/bin/sh
sh -c "pkill -9 kmysh4 || busybox pkill -9 kmysh4 || /usr/busybox pkill -9 kmysh4 || /bin/busybox pkill -9 kmysh4 > /dev/null"
1⤵
PID:1020

/usr/bin/pkill
pkill -9 kmysh4
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1021

/bin/busybox
busybox pkill -9 kmysh4
2⤵
PID:1022

/usr/busybox
/usr/busybox pkill -9 kmysh4
2⤵
PID:1023

/bin/busybox
/bin/busybox pkill -9 kmysh4
2⤵
PID:1024

/bin/sh
sh -c "pkill -9 kmyx86 || busybox pkill -9 kmyx86 || /usr/busybox pkill -9 kmyx86 || /bin/busybox pkill -9 kmyx86 > /dev/null"
1⤵
PID:1025

/usr/bin/pkill
pkill -9 kmyx86
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1026

/bin/busybox
busybox pkill -9 kmyx86
2⤵
PID:1027

/usr/busybox
/usr/busybox pkill -9 kmyx86
2⤵
PID:1028

/bin/busybox
/bin/busybox pkill -9 kmyx86
2⤵
PID:1029

/bin/sh
sh -c "pkill -9 kmyarmv5 || busybox pkill -9 kmyarmv5 || /usr/busybox pkill -9 kmyarmv5 || /bin/busybox pkill -9 kmyarmv5 > /dev/null"
1⤵
PID:1030

/usr/bin/pkill
pkill -9 kmyarmv5
2⤵
PID:1031

/bin/busybox
busybox pkill -9 kmyarmv5
2⤵
PID:1032

/usr/busybox
/usr/busybox pkill -9 kmyarmv5
2⤵
PID:1033

/bin/busybox
/bin/busybox pkill -9 kmyarmv5
2⤵
PID:1034

/bin/sh
sh -c "pkill -9 kmyarmv4tl || busybox pkill -9 kmyarmv4tl || /usr/busybox pkill -9 kmyarmv4tl || /bin/busybox pkill -9 kmyarmv4tl > /dev/null"
1⤵
PID:1035

/usr/bin/pkill
pkill -9 kmyarmv4tl
2⤵
- Reads CPU attributes
PID:1036

/bin/busybox
busybox pkill -9 kmyarmv4tl
2⤵
PID:1037

/usr/busybox
/usr/busybox pkill -9 kmyarmv4tl
2⤵
PID:1038

/bin/busybox
/bin/busybox pkill -9 kmyarmv4tl
2⤵
PID:1039

/bin/sh
sh -c "pkill -9 kmyarmv4 || busybox pkill -9 kmyarmv4 || /usr/busybox pkill -9 kmyarmv4 || /bin/busybox pkill -9 kmyarmv4 > /dev/null"
1⤵
PID:1040

/usr/bin/pkill
pkill -9 kmyarmv4
2⤵
- Reads CPU attributes
PID:1041

/bin/busybox
busybox pkill -9 kmyarmv4
2⤵
PID:1042

/usr/busybox
/usr/busybox pkill -9 kmyarmv4
2⤵
PID:1043

/bin/busybox
/bin/busybox pkill -9 kmyarmv4
2⤵
PID:1044

/bin/sh
sh -c "pkill -9 kmyarmv6 || busybox pkill -9 kmyarmv6 || /usr/busybox pkill -9 kmyarmv6 || /bin/busybox pkill -9 kmyarmv6 > /dev/null"
1⤵
PID:1045

/usr/bin/pkill
pkill -9 kmyarmv6
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1046

/bin/busybox
busybox pkill -9 kmyarmv6
2⤵
PID:1047

/usr/busybox
/usr/busybox pkill -9 kmyarmv6
2⤵
PID:1048

/bin/busybox
/bin/busybox pkill -9 kmyarmv6
2⤵
PID:1049

/bin/sh
sh -c "pkill -9 kmyi686 || busybox pkill -9 kmyi686 || /usr/busybox pkill -9 kmyi686 || /bin/busybox pkill -9 kmyi686 > /dev/null"
1⤵
PID:1050

/usr/bin/pkill
pkill -9 kmyi686
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1051

/bin/busybox
busybox pkill -9 kmyi686
2⤵
PID:1052

/usr/busybox
/usr/busybox pkill -9 kmyi686
2⤵
PID:1053

/bin/busybox
/bin/busybox pkill -9 kmyi686
2⤵
PID:1054

/bin/sh
sh -c "pkill -9 kmypowerpc || busybox pkill -9 kmypowerpc || /usr/busybox pkill -9 kmypowerpc || /bin/busybox pkill -9 kmypowerpc > /dev/null"
1⤵
PID:1055

/usr/bin/pkill
pkill -9 kmypowerpc
2⤵
PID:1056

/bin/busybox
busybox pkill -9 kmypowerpc
2⤵
PID:1057

/usr/busybox
/usr/busybox pkill -9 kmypowerpc
2⤵
PID:1058

/bin/busybox
/bin/busybox pkill -9 kmypowerpc
2⤵
PID:1059

/bin/sh
sh -c "pkill -9 kmypowerpc440fp || busybox pkill -9 kmypowerpc440fp || /usr/busybox pkill -9 kmypowerpc440fp || /bin/busybox pkill -9 kmypowerpc440fp > /dev/null"
1⤵
PID:1060

/usr/bin/pkill
pkill -9 kmypowerpc440fp
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1061

/bin/busybox
busybox pkill -9 kmypowerpc440fp
2⤵
PID:1062

/usr/busybox
/usr/busybox pkill -9 kmypowerpc440fp
2⤵
PID:1063

/bin/busybox
/bin/busybox pkill -9 kmypowerpc440fp
2⤵
PID:1064

/bin/sh
sh -c "pkill -9 kmyi586 || busybox pkill -9 kmyi586 || /usr/busybox pkill -9 kmyi586 || /bin/busybox pkill -9 kmyi586 > /dev/null"
1⤵
PID:1065

/usr/bin/pkill
pkill -9 kmyi586
2⤵
- Reads CPU attributes
PID:1066

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads