f11196854e218ff28c6ac2805f82af92437d2fc46f143b0cead3bee03007f951

Analysis

max time kernel
63s
max time network
63s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
31/07/2023, 03:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

VirusShare_1ac53ce81afc0e714ce2c32c5673736b
Size

180KB
MD5

1ac53ce81afc0e714ce2c32c5673736b
SHA1

54cad5b26c087fbea477d518b2b74ab19c90d4b7
SHA256

f11196854e218ff28c6ac2805f82af92437d2fc46f143b0cead3bee03007f951
SHA512

f392fe29c12d9aab32422369fdd43574462c0d3bfc496af2475378d5e934ef088a8a2402faf1440af6782b425d60845e4c624aad9e95585d1bff057651dd792f
SSDEEP

3072:0yYjhGWN3yAGpTrZ/xq1a1NVfD9rG1BGCovKMF4mqPvcoLhyn2p9r1WvnnqNd7im:0bjpqKUTfD9rmvpmdqPv5Ls2LhWvnnqp

Score

6^/10

Malware Config

Signatures

Enumerates running processes
Discovers information about currently running processes on the system

Reads CPU attributes 1 TTPs 64 IoCs

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/13/cmdline	pkill
File opened for reading	/proc/586/status	pkill
File opened for reading	/proc/80/cmdline	pkill
File opened for reading	/proc/163/cmdline	pkill
File opened for reading	/proc/3/status	pkill
File opened for reading	/proc/287/cmdline	pkill
File opened for reading	/proc/251/status	pkill
File opened for reading	/proc/714/status	pkill
File opened for reading	/proc/379/cmdline	pkill
File opened for reading	/proc/36/status	pkill
File opened for reading	/proc/164/cmdline	pkill
File opened for reading	/proc/165/status	pkill
File opened for reading	/proc/35/status	pkill
File opened for reading	/proc/154/cmdline	pkill
File opened for reading	/proc/16/status	pkill
File opened for reading	/proc/154/status	pkill
File opened for reading	/proc/3/cmdline	pkill
File opened for reading	/proc/16/status	pkill
File opened for reading	/proc/251/cmdline	pkill
File opened for reading	/proc/23/status	pkill
File opened for reading	/proc/84/status	pkill
File opened for reading	/proc/358/cmdline	pkill
File opened for reading	/proc/15/cmdline	pkill
File opened for reading	/proc/26/status	pkill
File opened for reading	/proc/167/cmdline	pkill
File opened for reading	/proc/84/cmdline	pkill
File opened for reading	/proc/32/status	pkill
File opened for reading	/proc/15/cmdline	pkill
File opened for reading	/proc/582/cmdline	pkill
File opened for reading	/proc/625/cmdline	pkill
File opened for reading	/proc/169/cmdline	pkill
File opened for reading	/proc/13/cmdline	pkill
File opened for reading	/proc/417/cmdline	pkill
File opened for reading	/proc/9/status	pkill
File opened for reading	/proc/31/cmdline	pkill
File opened for reading	/proc/10/status	pkill
File opened for reading	/proc/115/cmdline	pkill
File opened for reading	/proc/154/status	pkill
File opened for reading	/proc/453/cmdline	pkill
File opened for reading	/proc/27/status	pkill
File opened for reading	/proc/6/status	pkill
File opened for reading	/proc/16/cmdline	pkill
File opened for reading	/proc/586/status	pkill
File opened for reading	/proc/364/status	pkill
File opened for reading	/proc/167/status	pkill
File opened for reading	/proc/163/cmdline	pkill
File opened for reading	/proc/168/status	pkill
File opened for reading	/proc/159/cmdline	pkill
File opened for reading	/proc/580/status	pkill
File opened for reading	/proc/193/cmdline	pkill
File opened for reading	/proc/625/cmdline	pkill
File opened for reading	/proc/130/cmdline	pkill
File opened for reading	/proc/166/cmdline	pkill
File opened for reading	/proc/451/cmdline	pkill
File opened for reading	/proc/423/cmdline	pkill
File opened for reading	/proc/345/cmdline	pkill
File opened for reading	/proc/159/status	pkill
File opened for reading	/proc/155/cmdline	pkill
File opened for reading	/proc/16/cmdline	pkill
File opened for reading	/proc/588/cmdline	pkill
File opened for reading	/proc/161/status	pkill
File opened for reading	/proc/28/cmdline	pkill
File opened for reading	/proc/583/status	pkill
File opened for reading	/proc/159/status	pkill

/tmp/VirusShare_1ac53ce81afc0e714ce2c32c5673736b
/tmp/VirusShare_1ac53ce81afc0e714ce2c32c5673736b
1⤵
PID:585

/bin/sh
sh -c "pkill -9 mips || busybox pkill -9 mips || /usr/busybox pkill -9 mips || /bin/busybox pkill -9 mips > /dev/null"
1⤵
PID:589
- /usr/bin/pkill
  pkill -9 mips
  2⤵
  PID:590
- /bin/busybox
  busybox pkill -9 mips
  2⤵
  PID:591
- /usr/busybox
  /usr/busybox pkill -9 mips
  2⤵
  PID:592
- /bin/busybox
  /bin/busybox pkill -9 mips
  2⤵
  PID:593

/bin/sh
sh -c "pkill -9 mips64 || busybox pkill -9 mips64 || /usr/busybox pkill -9 mips64 || /bin/busybox pkill -9 mips64 > /dev/null"
1⤵
PID:594
- /usr/bin/pkill
  pkill -9 mips64
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:595
- /bin/busybox
  busybox pkill -9 mips64
  2⤵
  PID:596
- /usr/busybox
  /usr/busybox pkill -9 mips64
  2⤵
  PID:597
- /bin/busybox
  /bin/busybox pkill -9 mips64
  2⤵
  PID:598

/bin/sh
sh -c "pkill -9 mipsel || busybox pkill -9 mipsel || /usr/busybox pkill -9 mipsel || /bin/busybox pkill -9 mipsel > /dev/null"
1⤵
PID:599
- /usr/bin/pkill
  pkill -9 mipsel
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:600
- /bin/busybox
  busybox pkill -9 mipsel
  2⤵
  PID:601
- /usr/busybox
  /usr/busybox pkill -9 mipsel
  2⤵
  PID:602
- /bin/busybox
  /bin/busybox pkill -9 mipsel
  2⤵
  PID:603

/bin/sh
sh -c "pkill -9 sh2eb || busybox pkill -9 sh2eb || /usr/busybox pkill -9 sh2eb || /bin/busybox pkill -9 sh2eb > /dev/null"
1⤵
PID:604
- /usr/bin/pkill
  pkill -9 sh2eb
  2⤵
  - Reads CPU attributes
  PID:605
- /bin/busybox
  busybox pkill -9 sh2eb
  2⤵
  PID:606
- /usr/busybox
  /usr/busybox pkill -9 sh2eb
  2⤵
  PID:607
- /bin/busybox
  /bin/busybox pkill -9 sh2eb
  2⤵
  PID:608

/bin/sh
sh -c "pkill -9 sh2elf || busybox pkill -9 sh2elf || /usr/busybox pkill -9 sh2elf || /bin/busybox pkill -9 sh2elf > /dev/null"
1⤵
PID:609
- /usr/bin/pkill
  pkill -9 sh2elf
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:610
- /bin/busybox
  busybox pkill -9 sh2elf
  2⤵
  PID:611
- /usr/busybox
  /usr/busybox pkill -9 sh2elf
  2⤵
  PID:612
- /bin/busybox
  /bin/busybox pkill -9 sh2elf
  2⤵
  PID:613

/bin/sh
sh -c "pkill -9 sh4 || busybox pkill -9 sh4 || /usr/busybox pkill -9 sh4 || /bin/busybox pkill -9 sh4 > /dev/null"
1⤵
PID:614
- /usr/bin/pkill
  pkill -9 sh4
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:615
- /bin/busybox
  busybox pkill -9 sh4
  2⤵
  PID:616
- /usr/busybox
  /usr/busybox pkill -9 sh4
  2⤵
  PID:617
- /bin/busybox
  /bin/busybox pkill -9 sh4
  2⤵
  PID:618

/bin/sh
sh -c "pkill -9 x86 || busybox pkill -9 x86 || /usr/busybox pkill -9 x86 || /bin/busybox pkill -9 x86 > /dev/null"
1⤵
PID:619
- /usr/bin/pkill
  pkill -9 x86
  2⤵
  - Reads CPU attributes
  PID:620
- /bin/busybox
  busybox pkill -9 x86
  2⤵
  PID:621
- /usr/busybox
  /usr/busybox pkill -9 x86
  2⤵
  PID:622
- /bin/busybox
  /bin/busybox pkill -9 x86
  2⤵
  PID:623

/bin/sh
sh -c "pkill -9 arm || busybox pkill -9 arm || /usr/busybox pkill -9 arm || /bin/busybox pkill -9 arm > /dev/null"
1⤵
PID:624
- /usr/bin/pkill
  pkill -9 arm
  2⤵
  - Reads CPU attributes
  PID:629
- /bin/busybox
  busybox pkill -9 arm
  2⤵
  PID:630
- /usr/busybox
  /usr/busybox pkill -9 arm
  2⤵
  PID:631
- /bin/busybox
  /bin/busybox pkill -9 arm
  2⤵
  PID:632

/bin/sh
sh -c "pkill -9 armv5 || busybox pkill -9 armv5 || /usr/busybox pkill -9 armv5 || /bin/busybox pkill -9 armv5 > /dev/null"
1⤵
PID:633
- /usr/bin/pkill
  pkill -9 armv5
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:634
- /bin/busybox
  busybox pkill -9 armv5
  2⤵
  PID:635
- /usr/busybox
  /usr/busybox pkill -9 armv5
  2⤵
  PID:636
- /bin/busybox
  /bin/busybox pkill -9 armv5
  2⤵
  PID:637

/bin/sh
sh -c "pkill -9 armv4tl || busybox pkill -9 armv4tl || /usr/busybox pkill -9 armv4tl || /bin/busybox pkill -9 armv4tl > /dev/null"
1⤵
PID:638
- /usr/bin/pkill
  pkill -9 armv4tl
  2⤵
  - Reads CPU attributes
  PID:639
- /bin/busybox
  busybox pkill -9 armv4tl
  2⤵
  PID:640
- /usr/busybox
  /usr/busybox pkill -9 armv4tl
  2⤵
  PID:641
- /bin/busybox
  /bin/busybox pkill -9 armv4tl
  2⤵
  PID:642

/bin/sh
sh -c "pkill -9 armv4 || busybox pkill -9 armv4 || /usr/busybox pkill -9 armv4 || /bin/busybox pkill -9 armv4 > /dev/null"
1⤵
PID:643
- /usr/bin/pkill
  pkill -9 armv4
  2⤵
  PID:644
- /bin/busybox
  busybox pkill -9 armv4
  2⤵
  PID:645
- /usr/busybox
  /usr/busybox pkill -9 armv4
  2⤵
  PID:646
- /bin/busybox
  /bin/busybox pkill -9 armv4
  2⤵
  PID:647

/bin/sh
sh -c "pkill -9 armv6 || busybox pkill -9 armv6 || /usr/busybox pkill -9 armv6 || /bin/busybox pkill -9 armv6 > /dev/null"
1⤵
PID:648
- /usr/bin/pkill
  pkill -9 armv6
  2⤵
  - Reads CPU attributes
  PID:649
- /bin/busybox
  busybox pkill -9 armv6
  2⤵
  PID:650
- /usr/busybox
  /usr/busybox pkill -9 armv6
  2⤵
  PID:651
- /bin/busybox
  /bin/busybox pkill -9 armv6
  2⤵
  PID:652

/bin/sh
sh -c "pkill -9 i686 || busybox pkill -9 i686 || /usr/busybox pkill -9 i686 || /bin/busybox pkill -9 i686 > /dev/null"
1⤵
PID:653
- /usr/bin/pkill
  pkill -9 i686
  2⤵
  - Reads CPU attributes
  PID:654
- /bin/busybox
  busybox pkill -9 i686
  2⤵
  PID:655
- /usr/busybox
  /usr/busybox pkill -9 i686
  2⤵
  PID:656
- /bin/busybox
  /bin/busybox pkill -9 i686
  2⤵
  PID:657

/bin/sh
sh -c "pkill -9 powerpc || busybox pkill -9 powerpc || /usr/busybox pkill -9 powerpc || /bin/busybox pkill -9 powerpc > /dev/null"
1⤵
PID:658
- /usr/bin/pkill
  pkill -9 powerpc
  2⤵
  - Reads runtime system information
  PID:659
- /bin/busybox
  busybox pkill -9 powerpc
  2⤵
  PID:660
- /usr/busybox
  /usr/busybox pkill -9 powerpc
  2⤵
  PID:661
- /bin/busybox
  /bin/busybox pkill -9 powerpc
  2⤵
  PID:662

/bin/sh
sh -c "pkill -9 powerpc440fp || busybox pkill -9 powerpc440fp || /usr/busybox pkill -9 powerpc440fp || /bin/busybox pkill -9 powerpc440fp > /dev/null"
1⤵
PID:663
- /usr/bin/pkill
  pkill -9 powerpc440fp
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:664
- /bin/busybox
  busybox pkill -9 powerpc440fp
  2⤵
  PID:665
- /usr/busybox
  /usr/busybox pkill -9 powerpc440fp
  2⤵
  PID:666
- /bin/busybox
  /bin/busybox pkill -9 powerpc440fp
  2⤵
  PID:667

/bin/sh
sh -c "pkill -9 i586 || busybox pkill -9 i586 || /usr/busybox pkill -9 i586 || /bin/busybox pkill -9 i586 > /dev/null"
1⤵
PID:668
- /usr/bin/pkill
  pkill -9 i586
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:669
- /bin/busybox
  busybox pkill -9 i586
  2⤵
  PID:670
- /usr/busybox
  /usr/busybox pkill -9 i586
  2⤵
  PID:671
- /bin/busybox
  /bin/busybox pkill -9 i586
  2⤵
  PID:672

/bin/sh
sh -c "pkill -9 m68k || busybox pkill -9 m68k || /usr/busybox pkill -9 m68k || /bin/busybox pkill -9 m68k > /dev/null"
1⤵
PID:673
- /usr/bin/pkill
  pkill -9 m68k
  2⤵
  - Reads runtime system information
  PID:674
- /bin/busybox
  busybox pkill -9 m68k
  2⤵
  PID:675
- /usr/busybox
  /usr/busybox pkill -9 m68k
  2⤵
  PID:676
- /bin/busybox
  /bin/busybox pkill -9 m68k
  2⤵
  PID:677

/bin/sh
sh -c "pkill -9 sparc || busybox pkill -9 sparc || /usr/busybox pkill -9 sparc || /bin/busybox pkill -9 sparc > /dev/null"
1⤵
PID:678
- /usr/bin/pkill
  pkill -9 sparc
  2⤵
  - Reads CPU attributes
  PID:679
- /bin/busybox
  busybox pkill -9 sparc
  2⤵
  PID:680
- /usr/busybox
  /usr/busybox pkill -9 sparc
  2⤵
  PID:681
- /bin/busybox
  /bin/busybox pkill -9 sparc
  2⤵
  PID:682

/bin/sh
sh -c "pkill -9 x86_64 || busybox pkill -9 x86_64 || /usr/busybox pkill -9 x86_64 || /bin/busybox pkill -9 x86_64 > /dev/null"
1⤵
PID:683
- /usr/bin/pkill
  pkill -9 x86_64
  2⤵
  PID:684
- /bin/busybox
  busybox pkill -9 x86_64
  2⤵
  PID:685
- /usr/busybox
  /usr/busybox pkill -9 x86_64
  2⤵
  PID:686
- /bin/busybox
  /bin/busybox pkill -9 x86_64
  2⤵
  PID:687

/bin/sh
sh -c "pkill -9 jackmymips || busybox pkill -9 jackmymips || /usr/busybox pkill -9 jackmymips || /bin/busybox pkill -9 jackmymips > /dev/null"
1⤵
PID:688
- /usr/bin/pkill
  pkill -9 jackmymips
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:689
- /bin/busybox
  busybox pkill -9 jackmymips
  2⤵
  PID:690
- /usr/busybox
  /usr/busybox pkill -9 jackmymips
  2⤵
  PID:691
- /bin/busybox
  /bin/busybox pkill -9 jackmymips
  2⤵
  PID:692

/bin/sh
sh -c "pkill -9 jackmymips64 || busybox pkill -9 jackmymips64 || /usr/busybox pkill -9 jackmymips64 || /bin/busybox pkill -9 jackmymips64 > /dev/null"
1⤵
PID:693
- /usr/bin/pkill
  pkill -9 jackmymips64
  2⤵
  - Reads CPU attributes
  PID:694
- /bin/busybox
  busybox pkill -9 jackmymips64
  2⤵
  PID:695
- /usr/busybox
  /usr/busybox pkill -9 jackmymips64
  2⤵
  PID:696
- /bin/busybox
  /bin/busybox pkill -9 jackmymips64
  2⤵
  PID:697

/bin/sh
sh -c "pkill -9 jackmymipsel || busybox pkill -9 jackmymipsel || /usr/busybox pkill -9 jackmymipsel || /bin/busybox pkill -9 jackmymipsel > /dev/null"
1⤵
PID:698
- /usr/bin/pkill
  pkill -9 jackmymipsel
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:699
- /bin/busybox
  busybox pkill -9 jackmymipsel
  2⤵
  PID:700
- /usr/busybox
  /usr/busybox pkill -9 jackmymipsel
  2⤵
  PID:701
- /bin/busybox
  /bin/busybox pkill -9 jackmymipsel
  2⤵
  PID:702

/bin/sh
sh -c "pkill -9 jackmysh2eb || busybox pkill -9 jackmysh2eb || /usr/busybox pkill -9 jackmysh2eb || /bin/busybox pkill -9 jackmysh2eb > /dev/null"
1⤵
PID:703
- /usr/bin/pkill
  pkill -9 jackmysh2eb
  2⤵
  - Reads CPU attributes
  PID:704
- /bin/busybox
  busybox pkill -9 jackmysh2eb
  2⤵
  PID:705
- /usr/busybox
  /usr/busybox pkill -9 jackmysh2eb
  2⤵
  PID:706
- /bin/busybox
  /bin/busybox pkill -9 jackmysh2eb
  2⤵
  PID:707

/bin/sh
sh -c "pkill -9 jackmysh2elf || busybox pkill -9 jackmysh2elf || /usr/busybox pkill -9 jackmysh2elf || /bin/busybox pkill -9 jackmysh2elf > /dev/null"
1⤵
PID:708
- /usr/bin/pkill
  pkill -9 jackmysh2elf
  2⤵
  - Reads CPU attributes
  PID:709
- /bin/busybox
  busybox pkill -9 jackmysh2elf
  2⤵
  PID:710
- /usr/busybox
  /usr/busybox pkill -9 jackmysh2elf
  2⤵
  PID:711
- /bin/busybox
  /bin/busybox pkill -9 jackmysh2elf
  2⤵
  PID:712

/bin/sh
sh -c "pkill -9 jackmysh4 || busybox pkill -9 jackmysh4 || /usr/busybox pkill -9 jackmysh4 || /bin/busybox pkill -9 jackmysh4 > /dev/null"
1⤵
PID:713
- /usr/bin/pkill
  pkill -9 jackmysh4
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:714
- /bin/busybox
  busybox pkill -9 jackmysh4
  2⤵
  PID:715
- /usr/busybox
  /usr/busybox pkill -9 jackmysh4
  2⤵
  PID:716
- /bin/busybox
  /bin/busybox pkill -9 jackmysh4
  2⤵
  PID:717

/bin/sh
sh -c "pkill -9 jackmyx86 || busybox pkill -9 jackmyx86 || /usr/busybox pkill -9 jackmyx86 || /bin/busybox pkill -9 jackmyx86 > /dev/null"
1⤵
PID:718
- /usr/bin/pkill
  pkill -9 jackmyx86
  2⤵
  - Reads CPU attributes
  PID:719
- /bin/busybox
  busybox pkill -9 jackmyx86
  2⤵
  PID:720
- /usr/busybox
  /usr/busybox pkill -9 jackmyx86
  2⤵
  PID:721
- /bin/busybox
  /bin/busybox pkill -9 jackmyx86
  2⤵
  PID:722

/bin/sh
sh -c "pkill -9 jackmyarmv5 || busybox pkill -9 jackmyarmv5 || /usr/busybox pkill -9 jackmyarmv5 || /bin/busybox pkill -9 jackmyarmv5 > /dev/null"
1⤵
PID:723
- /usr/bin/pkill
  pkill -9 jackmyarmv5
  2⤵
  PID:724
- /bin/busybox
  busybox pkill -9 jackmyarmv5
  2⤵
  PID:725
- /usr/busybox
  /usr/busybox pkill -9 jackmyarmv5
  2⤵
  PID:726
- /bin/busybox
  /bin/busybox pkill -9 jackmyarmv5
  2⤵
  PID:727

/bin/sh
sh -c "pkill -9 jackmyarmv4tl || busybox pkill -9 jackmyarmv4tl || /usr/busybox pkill -9 jackmyarmv4tl || /bin/busybox pkill -9 jackmyarmv4tl > /dev/null"
1⤵
PID:728
- /usr/bin/pkill
  pkill -9 jackmyarmv4tl
  2⤵
  - Reads CPU attributes
  PID:729
- /bin/busybox
  busybox pkill -9 jackmyarmv4tl
  2⤵
  PID:730
- /usr/busybox
  /usr/busybox pkill -9 jackmyarmv4tl
  2⤵
  PID:731
- /bin/busybox
  /bin/busybox pkill -9 jackmyarmv4tl
  2⤵
  PID:732

/bin/sh
sh -c "pkill -9 jackmyarmv4 || busybox pkill -9 jackmyarmv4 || /usr/busybox pkill -9 jackmyarmv4 || /bin/busybox pkill -9 jackmyarmv4 > /dev/null"
1⤵
PID:733
- /usr/bin/pkill
  pkill -9 jackmyarmv4
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:734
- /bin/busybox
  busybox pkill -9 jackmyarmv4
  2⤵
  PID:735
- /usr/busybox
  /usr/busybox pkill -9 jackmyarmv4
  2⤵
  PID:736
- /bin/busybox
  /bin/busybox pkill -9 jackmyarmv4
  2⤵
  PID:737

/bin/sh
sh -c "pkill -9 jackmyarmv6 || busybox pkill -9 jackmyarmv6 || /usr/busybox pkill -9 jackmyarmv6 || /bin/busybox pkill -9 jackmyarmv6 > /dev/null"
1⤵
PID:738
- /usr/bin/pkill
  pkill -9 jackmyarmv6
  2⤵
  - Reads CPU attributes
  PID:739
- /bin/busybox
  busybox pkill -9 jackmyarmv6
  2⤵
  PID:740
- /usr/busybox
  /usr/busybox pkill -9 jackmyarmv6
  2⤵
  PID:741
- /bin/busybox
  /bin/busybox pkill -9 jackmyarmv6
  2⤵
  PID:742

/bin/sh
sh -c "pkill -9 jackmyi686 || busybox pkill -9 jackmyi686 || /usr/busybox pkill -9 jackmyi686 || /bin/busybox pkill -9 jackmyi686 > /dev/null"
1⤵
PID:743
- /usr/bin/pkill
  pkill -9 jackmyi686
  2⤵
  - Reads CPU attributes
  PID:744
- /bin/busybox
  busybox pkill -9 jackmyi686
  2⤵
  PID:745
- /usr/busybox
  /usr/busybox pkill -9 jackmyi686
  2⤵
  PID:746
- /bin/busybox
  /bin/busybox pkill -9 jackmyi686
  2⤵
  PID:747

/bin/sh
sh -c "pkill -9 jackmypowerpc || busybox pkill -9 jackmypowerpc || /usr/busybox pkill -9 jackmypowerpc || /bin/busybox pkill -9 jackmypowerpc > /dev/null"
1⤵
PID:748
- /usr/bin/pkill
  pkill -9 jackmypowerpc
  2⤵
  - Reads CPU attributes
  PID:749
- /bin/busybox
  busybox pkill -9 jackmypowerpc
  2⤵
  PID:750
- /usr/busybox
  /usr/busybox pkill -9 jackmypowerpc
  2⤵
  PID:751
- /bin/busybox
  /bin/busybox pkill -9 jackmypowerpc
  2⤵
  PID:752

/bin/sh
sh -c "pkill -9 jackmypowerpc440fp || busybox pkill -9 jackmypowerpc440fp || /usr/busybox pkill -9 jackmypowerpc440fp || /bin/busybox pkill -9 jackmypowerpc440fp > /dev/null"
1⤵
PID:753
- /usr/bin/pkill
  pkill -9 jackmypowerpc440fp
  2⤵
  - Reads CPU attributes
  PID:754
- /bin/busybox
  busybox pkill -9 jackmypowerpc440fp
  2⤵
  PID:755
- /usr/busybox
  /usr/busybox pkill -9 jackmypowerpc440fp
  2⤵
  PID:756
- /bin/busybox
  /bin/busybox pkill -9 jackmypowerpc440fp
  2⤵
  PID:757

/bin/sh
sh -c "pkill -9 jackmyi586 || busybox pkill -9 jackmyi586 || /usr/busybox pkill -9 jackmyi586 || /bin/busybox pkill -9 jackmyi586 > /dev/null"
1⤵
PID:758
- /usr/bin/pkill
  pkill -9 jackmyi586
  2⤵
  PID:759
- /bin/busybox
  busybox pkill -9 jackmyi586
  2⤵
  PID:760
- /usr/busybox
  /usr/busybox pkill -9 jackmyi586
  2⤵
  PID:761
- /bin/busybox
  /bin/busybox pkill -9 jackmyi586
  2⤵
  PID:762

/bin/sh
sh -c "pkill -9 jackmym68k || busybox pkill -9 jackmym68k || /usr/busybox pkill -9 jackmym68k || /bin/busybox pkill -9 jackmym68k > /dev/null"
1⤵
PID:763
- /usr/bin/pkill
  pkill -9 jackmym68k
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:764
- /bin/busybox
  busybox pkill -9 jackmym68k
  2⤵
  PID:765
- /usr/busybox
  /usr/busybox pkill -9 jackmym68k
  2⤵
  PID:766
- /bin/busybox
  /bin/busybox pkill -9 jackmym68k
  2⤵
  PID:767

/bin/sh
sh -c "pkill -9 jackmysparc || busybox pkill -9 jackmysparc || /usr/busybox pkill -9 jackmysparc || /bin/busybox pkill -9 jackmysparc > /dev/null"
1⤵
PID:768
- /usr/bin/pkill
  pkill -9 jackmysparc
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:769
- /bin/busybox
  busybox pkill -9 jackmysparc
  2⤵
  PID:770
- /usr/busybox
  /usr/busybox pkill -9 jackmysparc
  2⤵
  PID:771
- /bin/busybox
  /bin/busybox pkill -9 jackmysparc
  2⤵
  PID:772

/bin/sh
sh -c "pkill -9 jackmyx86_64 || busybox pkill -9 jackmyx86_64 || /usr/busybox pkill -9 jackmyx86_64 || /bin/busybox pkill -9 jackmyx86_64 > /dev/null"
1⤵
PID:773
- /usr/bin/pkill
  pkill -9 jackmyx86_64
  2⤵
  - Reads CPU attributes
  PID:774
- /bin/busybox
  busybox pkill -9 jackmyx86_64
  2⤵
  PID:775
- /usr/busybox
  /usr/busybox pkill -9 jackmyx86_64
  2⤵
  PID:776
- /bin/busybox
  /bin/busybox pkill -9 jackmyx86_64
  2⤵
  PID:777

/bin/sh
sh -c "pkill -9 hackmymips || busybox pkill -9 hackmymips || /usr/busybox pkill -9 hackmymips || /bin/busybox pkill -9 hackmymips > /dev/null"
1⤵
PID:778
- /usr/bin/pkill
  pkill -9 hackmymips
  2⤵
  - Reads runtime system information
  PID:779
- /bin/busybox
  busybox pkill -9 hackmymips
  2⤵
  PID:780
- /usr/busybox
  /usr/busybox pkill -9 hackmymips
  2⤵
  PID:781
- /bin/busybox
  /bin/busybox pkill -9 hackmymips
  2⤵
  PID:782

/bin/sh
sh -c "pkill -9 hackmymips64 || busybox pkill -9 hackmymips64 || /usr/busybox pkill -9 hackmymips64 || /bin/busybox pkill -9 hackmymips64 > /dev/null"
1⤵
PID:783
- /usr/bin/pkill
  pkill -9 hackmymips64
  2⤵
  - Reads CPU attributes
  PID:784
- /bin/busybox
  busybox pkill -9 hackmymips64
  2⤵
  PID:785
- /usr/busybox
  /usr/busybox pkill -9 hackmymips64
  2⤵
  PID:786
- /bin/busybox
  /bin/busybox pkill -9 hackmymips64
  2⤵
  PID:787

/bin/sh
sh -c "pkill -9 hackmymipsel || busybox pkill -9 hackmymipsel || /usr/busybox pkill -9 hackmymipsel || /bin/busybox pkill -9 hackmymipsel > /dev/null"
1⤵
PID:788
- /usr/bin/pkill
  pkill -9 hackmymipsel
  2⤵
  - Reads CPU attributes
  PID:789
- /bin/busybox
  busybox pkill -9 hackmymipsel
  2⤵
  PID:790
- /usr/busybox
  /usr/busybox pkill -9 hackmymipsel
  2⤵
  PID:791
- /bin/busybox
  /bin/busybox pkill -9 hackmymipsel
  2⤵
  PID:792

/bin/sh
sh -c "pkill -9 hackmysh2eb || busybox pkill -9 hackmysh2eb || /usr/busybox pkill -9 hackmysh2eb || /bin/busybox pkill -9 hackmysh2eb > /dev/null"
1⤵
PID:793
- /usr/bin/pkill
  pkill -9 hackmysh2eb
  2⤵
  PID:794
- /bin/busybox
  busybox pkill -9 hackmysh2eb
  2⤵
  PID:795
- /usr/busybox
  /usr/busybox pkill -9 hackmysh2eb
  2⤵
  PID:796
- /bin/busybox
  /bin/busybox pkill -9 hackmysh2eb
  2⤵
  PID:797

/bin/sh
sh -c "pkill -9 hackmysh2elf || busybox pkill -9 hackmysh2elf || /usr/busybox pkill -9 hackmysh2elf || /bin/busybox pkill -9 hackmysh2elf > /dev/null"
1⤵
PID:798
- /usr/bin/pkill
  pkill -9 hackmysh2elf
  2⤵
  - Reads CPU attributes
  PID:799
- /bin/busybox
  busybox pkill -9 hackmysh2elf
  2⤵
  PID:800
- /usr/busybox
  /usr/busybox pkill -9 hackmysh2elf
  2⤵
  PID:801
- /bin/busybox
  /bin/busybox pkill -9 hackmysh2elf
  2⤵
  PID:802

/bin/sh
sh -c "pkill -9 hackmysh4 || busybox pkill -9 hackmysh4 || /usr/busybox pkill -9 hackmysh4 || /bin/busybox pkill -9 hackmysh4 > /dev/null"
1⤵
PID:803
- /usr/bin/pkill
  pkill -9 hackmysh4
  2⤵
  - Reads CPU attributes
  PID:804
- /bin/busybox
  busybox pkill -9 hackmysh4
  2⤵
  PID:805
- /usr/busybox
  /usr/busybox pkill -9 hackmysh4
  2⤵
  PID:806
- /bin/busybox
  /bin/busybox pkill -9 hackmysh4
  2⤵
  PID:807

/bin/sh
sh -c "pkill -9 hackmyx86 || busybox pkill -9 hackmyx86 || /usr/busybox pkill -9 hackmyx86 || /bin/busybox pkill -9 hackmyx86 > /dev/null"
1⤵
PID:808
- /usr/bin/pkill
  pkill -9 hackmyx86
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:809
- /bin/busybox
  busybox pkill -9 hackmyx86
  2⤵
  PID:810
- /usr/busybox
  /usr/busybox pkill -9 hackmyx86
  2⤵
  PID:811
- /bin/busybox
  /bin/busybox pkill -9 hackmyx86
  2⤵
  PID:812

/bin/sh
sh -c "pkill -9 hackmyarmv5 || busybox pkill -9 hackmyarmv5 || /usr/busybox pkill -9 hackmyarmv5 || /bin/busybox pkill -9 hackmyarmv5 > /dev/null"
1⤵
PID:813
- /usr/bin/pkill
  pkill -9 hackmyarmv5
  2⤵
  PID:814
- /bin/busybox
  busybox pkill -9 hackmyarmv5
  2⤵
  PID:815
- /usr/busybox
  /usr/busybox pkill -9 hackmyarmv5
  2⤵
  PID:816
- /bin/busybox
  /bin/busybox pkill -9 hackmyarmv5
  2⤵
  PID:817

/bin/sh
sh -c "pkill -9 hackmyarmv4tl || busybox pkill -9 hackmyarmv4tl || /usr/busybox pkill -9 hackmyarmv4tl || /bin/busybox pkill -9 hackmyarmv4tl > /dev/null"
1⤵
PID:818
- /usr/bin/pkill
  pkill -9 hackmyarmv4tl
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:819
- /bin/busybox
  busybox pkill -9 hackmyarmv4tl
  2⤵
  PID:820
- /usr/busybox
  /usr/busybox pkill -9 hackmyarmv4tl
  2⤵
  PID:821
- /bin/busybox
  /bin/busybox pkill -9 hackmyarmv4tl
  2⤵
  PID:822

/bin/sh
sh -c "pkill -9 hackmyarmv4 || busybox pkill -9 hackmyarmv4 || /usr/busybox pkill -9 hackmyarmv4 || /bin/busybox pkill -9 hackmyarmv4 > /dev/null"
1⤵
PID:823
- /usr/bin/pkill
  pkill -9 hackmyarmv4
  2⤵
  - Reads CPU attributes
  PID:824
- /bin/busybox
  busybox pkill -9 hackmyarmv4
  2⤵
  PID:825
- /usr/busybox
  /usr/busybox pkill -9 hackmyarmv4
  2⤵
  PID:826
- /bin/busybox
  /bin/busybox pkill -9 hackmyarmv4
  2⤵
  PID:827

/bin/sh
sh -c "pkill -9 hackmyarmv6 || busybox pkill -9 hackmyarmv6 || /usr/busybox pkill -9 hackmyarmv6 || /bin/busybox pkill -9 hackmyarmv6 > /dev/null"
1⤵
PID:828
- /usr/bin/pkill
  pkill -9 hackmyarmv6
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:829
- /bin/busybox
  busybox pkill -9 hackmyarmv6
  2⤵
  PID:830
- /usr/busybox
  /usr/busybox pkill -9 hackmyarmv6
  2⤵
  PID:831
- /bin/busybox
  /bin/busybox pkill -9 hackmyarmv6
  2⤵
  PID:832

/bin/sh
sh -c "pkill -9 hackmyi686 || busybox pkill -9 hackmyi686 || /usr/busybox pkill -9 hackmyi686 || /bin/busybox pkill -9 hackmyi686 > /dev/null"
1⤵
PID:833
- /usr/bin/pkill
  pkill -9 hackmyi686
  2⤵
  PID:834
- /bin/busybox
  busybox pkill -9 hackmyi686
  2⤵
  PID:835
- /usr/busybox
  /usr/busybox pkill -9 hackmyi686
  2⤵
  PID:836
- /bin/busybox
  /bin/busybox pkill -9 hackmyi686
  2⤵
  PID:837

/bin/sh
sh -c "pkill -9 hackmypowerpc || busybox pkill -9 hackmypowerpc || /usr/busybox pkill -9 hackmypowerpc || /bin/busybox pkill -9 hackmypowerpc > /dev/null"
1⤵
PID:838
- /usr/bin/pkill
  pkill -9 hackmypowerpc
  2⤵
  - Reads runtime system information
  PID:839
- /bin/busybox
  busybox pkill -9 hackmypowerpc
  2⤵
  PID:840
- /usr/busybox
  /usr/busybox pkill -9 hackmypowerpc
  2⤵
  PID:841
- /bin/busybox
  /bin/busybox pkill -9 hackmypowerpc
  2⤵
  PID:842

/bin/sh
sh -c "pkill -9 hackmypowerpc440fp || busybox pkill -9 hackmypowerpc440fp || /usr/busybox pkill -9 hackmypowerpc440fp || /bin/busybox pkill -9 hackmypowerpc440fp > /dev/null"
1⤵
PID:843
- /usr/bin/pkill
  pkill -9 hackmypowerpc440fp
  2⤵
  PID:844
- /bin/busybox
  busybox pkill -9 hackmypowerpc440fp
  2⤵
  PID:845
- /usr/busybox
  /usr/busybox pkill -9 hackmypowerpc440fp
  2⤵
  PID:846
- /bin/busybox
  /bin/busybox pkill -9 hackmypowerpc440fp
  2⤵
  PID:847

/bin/sh
sh -c "pkill -9 hackmyi586 || busybox pkill -9 hackmyi586 || /usr/busybox pkill -9 hackmyi586 || /bin/busybox pkill -9 hackmyi586 > /dev/null"
1⤵
PID:848
- /usr/bin/pkill
  pkill -9 hackmyi586
  2⤵
  - Reads runtime system information
  PID:849
- /bin/busybox
  busybox pkill -9 hackmyi586
  2⤵
  PID:850
- /usr/busybox
  /usr/busybox pkill -9 hackmyi586
  2⤵
  PID:851
- /bin/busybox
  /bin/busybox pkill -9 hackmyi586
  2⤵
  PID:852

/bin/sh
sh -c "pkill -9 hackmym68k || busybox pkill -9 hackmym68k || /usr/busybox pkill -9 hackmym68k || /bin/busybox pkill -9 hackmym68k > /dev/null"
1⤵
PID:853
- /usr/bin/pkill
  pkill -9 hackmym68k
  2⤵
  PID:854
- /bin/busybox
  busybox pkill -9 hackmym68k
  2⤵
  PID:855
- /usr/busybox
  /usr/busybox pkill -9 hackmym68k
  2⤵
  PID:856
- /bin/busybox
  /bin/busybox pkill -9 hackmym68k
  2⤵
  PID:857

/bin/sh
sh -c "pkill -9 hackmysparc || busybox pkill -9 hackmysparc || /usr/busybox pkill -9 hackmysparc || /bin/busybox pkill -9 hackmysparc > /dev/null"
1⤵
PID:858
- /usr/bin/pkill
  pkill -9 hackmysparc
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:859
- /bin/busybox
  busybox pkill -9 hackmysparc
  2⤵
  PID:860
- /usr/busybox
  /usr/busybox pkill -9 hackmysparc
  2⤵
  PID:861
- /bin/busybox
  /bin/busybox pkill -9 hackmysparc
  2⤵
  PID:862

/bin/sh
sh -c "pkill -9 hackmyx86_64 || busybox pkill -9 hackmyx86_64 || /usr/busybox pkill -9 hackmyx86_64 || /bin/busybox pkill -9 hackmyx86_64 > /dev/null"
1⤵
PID:863
- /usr/bin/pkill
  pkill -9 hackmyx86_64
  2⤵
  PID:864
- /bin/busybox
  busybox pkill -9 hackmyx86_64
  2⤵
  PID:865
- /usr/busybox
  /usr/busybox pkill -9 hackmyx86_64
  2⤵
  PID:866
- /bin/busybox
  /bin/busybox pkill -9 hackmyx86_64
  2⤵
  PID:867

/bin/sh
sh -c "pkill -9 b1 || busybox pkill -9 b1 || /usr/busybox pkill -9 b1 || /bin/busybox pkill -9 b1 > /dev/null"
1⤵
PID:868
- /usr/bin/pkill
  pkill -9 b1
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:869
- /bin/busybox
  busybox pkill -9 b1
  2⤵
  PID:870
- /usr/busybox
  /usr/busybox pkill -9 b1
  2⤵
  PID:871
- /bin/busybox
  /bin/busybox pkill -9 b1
  2⤵
  PID:872

/bin/sh
sh -c "pkill -9 b2 || busybox pkill -9 b2 || /usr/busybox pkill -9 b2 || /bin/busybox pkill -9 b2 > /dev/null"
1⤵
PID:873
- /usr/bin/pkill
  pkill -9 b2
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:874
- /bin/busybox
  busybox pkill -9 b2
  2⤵
  PID:875
- /usr/busybox
  /usr/busybox pkill -9 b2
  2⤵
  PID:876
- /bin/busybox
  /bin/busybox pkill -9 b2
  2⤵
  PID:877

/bin/sh
sh -c "pkill -9 b3 || busybox pkill -9 b3 || /usr/busybox pkill -9 b3 || /bin/busybox pkill -9 b3 > /dev/null"
1⤵
PID:878
- /usr/bin/pkill
  pkill -9 b3
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:879
- /bin/busybox
  busybox pkill -9 b3
  2⤵
  PID:880
- /usr/busybox
  /usr/busybox pkill -9 b3
  2⤵
  PID:881
- /bin/busybox
  /bin/busybox pkill -9 b3
  2⤵
  PID:882

/bin/sh
sh -c "pkill -9 b4 || busybox pkill -9 b4 || /usr/busybox pkill -9 b4 || /bin/busybox pkill -9 b4 > /dev/null"
1⤵
PID:883
- /usr/bin/pkill
  pkill -9 b4
  2⤵
  - Reads runtime system information
  PID:884
- /bin/busybox
  busybox pkill -9 b4
  2⤵
  PID:885
- /usr/busybox
  /usr/busybox pkill -9 b4
  2⤵
  PID:886
- /bin/busybox
  /bin/busybox pkill -9 b4
  2⤵
  PID:887

/bin/sh
sh -c "pkill -9 b5 || busybox pkill -9 b5 || /usr/busybox pkill -9 b5 || /bin/busybox pkill -9 b5 > /dev/null"
1⤵
PID:888
- /usr/bin/pkill
  pkill -9 b5
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:889
- /bin/busybox
  busybox pkill -9 b5
  2⤵
  PID:890
- /usr/busybox
  /usr/busybox pkill -9 b5
  2⤵
  PID:891
- /bin/busybox
  /bin/busybox pkill -9 b5
  2⤵
  PID:892

/bin/sh
sh -c "pkill -9 b6 || busybox pkill -9 b6 || /usr/busybox pkill -9 b6 || /bin/busybox pkill -9 b6 > /dev/null"
1⤵
PID:893
- /usr/bin/pkill
  pkill -9 b6
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:894
- /bin/busybox
  busybox pkill -9 b6
  2⤵
  PID:895
- /usr/busybox
  /usr/busybox pkill -9 b6
  2⤵
  PID:896
- /bin/busybox
  /bin/busybox pkill -9 b6
  2⤵
  PID:897

/bin/sh
sh -c "pkill -9 b7 || busybox pkill -9 b7 || /usr/busybox pkill -9 b7 || /bin/busybox pkill -9 b7 > /dev/null"
1⤵
PID:898
- /usr/bin/pkill
  pkill -9 b7
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:899
- /bin/busybox
  busybox pkill -9 b7
  2⤵
  PID:900
- /usr/busybox
  /usr/busybox pkill -9 b7
  2⤵
  PID:901
- /bin/busybox
  /bin/busybox pkill -9 b7
  2⤵
  PID:902

/bin/sh
sh -c "pkill -9 b8 || busybox pkill -9 b8 || /usr/busybox pkill -9 b8 || /bin/busybox pkill -9 b8 > /dev/null"
1⤵
PID:903
- /usr/bin/pkill
  pkill -9 b8
  2⤵
  PID:904
- /bin/busybox
  busybox pkill -9 b8
  2⤵
  PID:905
- /usr/busybox
  /usr/busybox pkill -9 b8
  2⤵
  PID:906
- /bin/busybox
  /bin/busybox pkill -9 b8
  2⤵
  PID:907

/bin/sh
sh -c "pkill -9 b9 || busybox pkill -9 b9 || /usr/busybox pkill -9 b9 || /bin/busybox pkill -9 b9 > /dev/null"
1⤵
PID:908
- /usr/bin/pkill
  pkill -9 b9
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:909
- /bin/busybox
  busybox pkill -9 b9
  2⤵
  PID:910
- /usr/busybox
  /usr/busybox pkill -9 b9
  2⤵
  PID:911
- /bin/busybox
  /bin/busybox pkill -9 b9
  2⤵
  PID:912

/bin/sh
sh -c "pkill -9 b10 || busybox pkill -9 b10 || /usr/busybox pkill -9 b10 || /bin/busybox pkill -9 b10 > /dev/null"
1⤵
PID:913
- /usr/bin/pkill
  pkill -9 b10
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:914
- /bin/busybox
  busybox pkill -9 b10
  2⤵
  PID:915
- /usr/busybox
  /usr/busybox pkill -9 b10
  2⤵
  PID:916
- /bin/busybox
  /bin/busybox pkill -9 b10
  2⤵
  PID:917

/bin/sh
sh -c "pkill -9 b11 || busybox pkill -9 b11 || /usr/busybox pkill -9 b11 || /bin/busybox pkill -9 b11 > /dev/null"
1⤵
PID:918
- /usr/bin/pkill
  pkill -9 b11
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:919
- /bin/busybox
  busybox pkill -9 b11
  2⤵
  PID:920
- /usr/busybox
  /usr/busybox pkill -9 b11
  2⤵
  PID:921
- /bin/busybox
  /bin/busybox pkill -9 b11
  2⤵
  PID:922

/bin/sh
sh -c "pkill -9 b12 || busybox pkill -9 b12 || /usr/busybox pkill -9 b12 || /bin/busybox pkill -9 b12 > /dev/null"
1⤵
PID:923
- /usr/bin/pkill
  pkill -9 b12
  2⤵
  - Reads runtime system information
  PID:924
- /bin/busybox
  busybox pkill -9 b12
  2⤵
  PID:925
- /usr/busybox
  /usr/busybox pkill -9 b12
  2⤵
  PID:926
- /bin/busybox
  /bin/busybox pkill -9 b12
  2⤵
  PID:927

/bin/sh
sh -c "pkill -9 b13 || busybox pkill -9 b13 || /usr/busybox pkill -9 b13 || /bin/busybox pkill -9 b13 > /dev/null"
1⤵
PID:928
- /usr/bin/pkill
  pkill -9 b13
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:929
- /bin/busybox
  busybox pkill -9 b13
  2⤵
  PID:930
- /usr/busybox
  /usr/busybox pkill -9 b13
  2⤵
  PID:931
- /bin/busybox
  /bin/busybox pkill -9 b13
  2⤵
  PID:932

/bin/sh
sh -c "pkill -9 b14 || busybox pkill -9 b14 || /usr/busybox pkill -9 b14 || /bin/busybox pkill -9 b14 > /dev/null"
1⤵
PID:933
- /usr/bin/pkill
  pkill -9 b14
  2⤵
  PID:934
- /bin/busybox
  busybox pkill -9 b14
  2⤵
  PID:935
- /usr/busybox
  /usr/busybox pkill -9 b14
  2⤵
  PID:936
- /bin/busybox
  /bin/busybox pkill -9 b14
  2⤵
  PID:937

/bin/sh
sh -c "pkill -9 b15 || busybox pkill -9 b15 || /usr/busybox pkill -9 b15 || /bin/busybox pkill -9 b15 > /dev/null"
1⤵
PID:938
- /usr/bin/pkill
  pkill -9 b15
  2⤵
  - Reads CPU attributes
  PID:939
- /bin/busybox
  busybox pkill -9 b15
  2⤵
  PID:940
- /usr/busybox
  /usr/busybox pkill -9 b15
  2⤵
  PID:941
- /bin/busybox
  /bin/busybox pkill -9 b15
  2⤵
  PID:942

/bin/sh
sh -c "pkill -9 b16 || busybox pkill -9 b16 || /usr/busybox pkill -9 b16 || /bin/busybox pkill -9 b16 > /dev/null"
1⤵
PID:943
- /usr/bin/pkill
  pkill -9 b16
  2⤵
  - Reads runtime system information
  PID:944
- /bin/busybox
  busybox pkill -9 b16
  2⤵
  PID:945
- /usr/busybox
  /usr/busybox pkill -9 b16
  2⤵
  PID:946
- /bin/busybox
  /bin/busybox pkill -9 b16
  2⤵
  PID:947

/bin/sh
sh -c "pkill -9 b17 || busybox pkill -9 b17 || /usr/busybox pkill -9 b17 || /bin/busybox pkill -9 b17 > /dev/null"
1⤵
PID:948
- /usr/bin/pkill
  pkill -9 b17
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:949
- /bin/busybox
  busybox pkill -9 b17
  2⤵
  PID:950
- /usr/busybox
  /usr/busybox pkill -9 b17
  2⤵
  PID:951
- /bin/busybox
  /bin/busybox pkill -9 b17
  2⤵
  PID:952

/bin/sh
sh -c "pkill -9 b18 || busybox pkill -9 b18 || /usr/busybox pkill -9 b18 || /bin/busybox pkill -9 b18 > /dev/null"
1⤵
PID:953
- /usr/bin/pkill
  pkill -9 b18
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:954
- /bin/busybox
  busybox pkill -9 b18
  2⤵
  PID:955
- /usr/busybox
  /usr/busybox pkill -9 b18
  2⤵
  PID:956
- /bin/busybox
  /bin/busybox pkill -9 b18
  2⤵
  PID:957

/bin/sh
sh -c "pkill -9 b19 || busybox pkill -9 b19 || /usr/busybox pkill -9 b19 || /bin/busybox pkill -9 b19 > /dev/null"
1⤵
PID:958
- /usr/bin/pkill
  pkill -9 b19
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:959
- /bin/busybox
  busybox pkill -9 b19
  2⤵
  PID:960
- /usr/busybox
  /usr/busybox pkill -9 b19
  2⤵
  PID:961
- /bin/busybox
  /bin/busybox pkill -9 b19
  2⤵
  PID:962

/bin/sh
sh -c "pkill -9 b20 || busybox pkill -9 b20 || /usr/busybox pkill -9 b20 || /bin/busybox pkill -9 b20 > /dev/null"
1⤵
PID:963
- /usr/bin/pkill
  pkill -9 b20
  2⤵
  - Reads runtime system information
  PID:964
- /bin/busybox
  busybox pkill -9 b20
  2⤵
  PID:965
- /usr/busybox
  /usr/busybox pkill -9 b20
  2⤵
  PID:966
- /bin/busybox
  /bin/busybox pkill -9 b20
  2⤵
  PID:967

/bin/sh
sh -c "pkill -9 busyboxterrorist || busybox pkill -9 busyboxterrorist || /usr/busybox pkill -9 busyboxterrorist || /bin/busybox pkill -9 busyboxterrorist > /dev/null"
1⤵
PID:968
- /usr/bin/pkill
  pkill -9 busyboxterrorist
  2⤵
  PID:969
- /bin/busybox
  busybox pkill -9 busyboxterrorist
  2⤵
  PID:970
- /usr/busybox
  /usr/busybox pkill -9 busyboxterrorist
  2⤵
  PID:971
- /bin/busybox
  /bin/busybox pkill -9 busyboxterrorist
  2⤵
  PID:972

/bin/sh
sh -c "pkill -9 dvrHelper || busybox pkill -9 dvrHelper || /usr/busybox pkill -9 dvrHelper || /bin/busybox pkill -9 dvrHelper > /dev/null"
1⤵
PID:973
- /usr/bin/pkill
  pkill -9 dvrHelper
  2⤵
  - Reads runtime system information
  PID:974
- /bin/busybox
  busybox pkill -9 dvrHelper
  2⤵
  PID:975
- /usr/busybox
  /usr/busybox pkill -9 dvrHelper
  2⤵
  PID:976
- /bin/busybox
  /bin/busybox pkill -9 dvrHelper
  2⤵
  PID:977

/bin/sh
sh -c "pkill -9 kmymips || busybox pkill -9 kmymips || /usr/busybox pkill -9 kmymips || /bin/busybox pkill -9 kmymips > /dev/null"
1⤵
PID:978
- /usr/bin/pkill
  pkill -9 kmymips
  2⤵
  - Reads runtime system information
  PID:979
- /bin/busybox
  busybox pkill -9 kmymips
  2⤵
  PID:980
- /usr/busybox
  /usr/busybox pkill -9 kmymips
  2⤵
  PID:981
- /bin/busybox
  /bin/busybox pkill -9 kmymips
  2⤵
  PID:982

/bin/sh
sh -c "pkill -9 kmymips64 || busybox pkill -9 kmymips64 || /usr/busybox pkill -9 kmymips64 || /bin/busybox pkill -9 kmymips64 > /dev/null"
1⤵
PID:983
- /usr/bin/pkill
  pkill -9 kmymips64
  2⤵
  - Reads CPU attributes
  PID:984
- /bin/busybox
  busybox pkill -9 kmymips64
  2⤵
  PID:985
- /usr/busybox
  /usr/busybox pkill -9 kmymips64
  2⤵
  PID:986
- /bin/busybox
  /bin/busybox pkill -9 kmymips64
  2⤵
  PID:987

/bin/sh
sh -c "pkill -9 kmymipsel || busybox pkill -9 kmymipsel || /usr/busybox pkill -9 kmymipsel || /bin/busybox pkill -9 kmymipsel > /dev/null"
1⤵
PID:988
- /usr/bin/pkill
  pkill -9 kmymipsel
  2⤵
  PID:989
- /bin/busybox
  busybox pkill -9 kmymipsel
  2⤵
  PID:990
- /usr/busybox
  /usr/busybox pkill -9 kmymipsel
  2⤵
  PID:991
- /bin/busybox
  /bin/busybox pkill -9 kmymipsel
  2⤵
  PID:992

/bin/sh
sh -c "pkill -9 kmysh2eb || busybox pkill -9 kmysh2eb || /usr/busybox pkill -9 kmysh2eb || /bin/busybox pkill -9 kmysh2eb > /dev/null"
1⤵
PID:993
- /usr/bin/pkill
  pkill -9 kmysh2eb
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:994
- /bin/busybox
  busybox pkill -9 kmysh2eb
  2⤵
  PID:995
- /usr/busybox
  /usr/busybox pkill -9 kmysh2eb
  2⤵
  PID:996
- /bin/busybox
  /bin/busybox pkill -9 kmysh2eb
  2⤵
  PID:997

/bin/sh
sh -c "pkill -9 kmysh2elf || busybox pkill -9 kmysh2elf || /usr/busybox pkill -9 kmysh2elf || /bin/busybox pkill -9 kmysh2elf > /dev/null"
1⤵
PID:998
- /usr/bin/pkill
  pkill -9 kmysh2elf
  2⤵
  - Reads CPU attributes
  PID:999
- /bin/busybox
  busybox pkill -9 kmysh2elf
  2⤵
  PID:1000
- /usr/busybox
  /usr/busybox pkill -9 kmysh2elf
  2⤵
  PID:1001
- /bin/busybox
  /bin/busybox pkill -9 kmysh2elf
  2⤵
  PID:1002

/bin/sh
sh -c "pkill -9 kmysh4 || busybox pkill -9 kmysh4 || /usr/busybox pkill -9 kmysh4 || /bin/busybox pkill -9 kmysh4 > /dev/null"
1⤵
PID:1003
- /usr/bin/pkill
  pkill -9 kmysh4
  2⤵
  - Reads CPU attributes
  PID:1004
- /bin/busybox
  busybox pkill -9 kmysh4
  2⤵
  PID:1005
- /usr/busybox
  /usr/busybox pkill -9 kmysh4
  2⤵
  PID:1006
- /bin/busybox
  /bin/busybox pkill -9 kmysh4
  2⤵
  PID:1007

/bin/sh
sh -c "pkill -9 kmyx86 || busybox pkill -9 kmyx86 || /usr/busybox pkill -9 kmyx86 || /bin/busybox pkill -9 kmyx86 > /dev/null"
1⤵
PID:1008
- /usr/bin/pkill
  pkill -9 kmyx86
  2⤵
  - Reads CPU attributes
  PID:1009
- /bin/busybox
  busybox pkill -9 kmyx86
  2⤵
  PID:1010
- /usr/busybox
  /usr/busybox pkill -9 kmyx86
  2⤵
  PID:1011
- /bin/busybox
  /bin/busybox pkill -9 kmyx86
  2⤵
  PID:1012

/bin/sh
sh -c "pkill -9 kmyarmv5 || busybox pkill -9 kmyarmv5 || /usr/busybox pkill -9 kmyarmv5 || /bin/busybox pkill -9 kmyarmv5 > /dev/null"
1⤵
PID:1013
- /usr/bin/pkill
  pkill -9 kmyarmv5
  2⤵
  - Reads CPU attributes
  PID:1014
- /bin/busybox
  busybox pkill -9 kmyarmv5
  2⤵
  PID:1015
- /usr/busybox
  /usr/busybox pkill -9 kmyarmv5
  2⤵
  PID:1016
- /bin/busybox
  /bin/busybox pkill -9 kmyarmv5
  2⤵
  PID:1017

/bin/sh
sh -c "pkill -9 kmyarmv4tl || busybox pkill -9 kmyarmv4tl || /usr/busybox pkill -9 kmyarmv4tl || /bin/busybox pkill -9 kmyarmv4tl > /dev/null"
1⤵
PID:1018
- /usr/bin/pkill
  pkill -9 kmyarmv4tl
  2⤵
  PID:1019
- /bin/busybox
  busybox pkill -9 kmyarmv4tl
  2⤵
  PID:1020
- /usr/busybox
  /usr/busybox pkill -9 kmyarmv4tl
  2⤵
  PID:1021
- /bin/busybox
  /bin/busybox pkill -9 kmyarmv4tl
  2⤵
  PID:1022

/bin/sh
sh -c "pkill -9 kmyarmv4 || busybox pkill -9 kmyarmv4 || /usr/busybox pkill -9 kmyarmv4 || /bin/busybox pkill -9 kmyarmv4 > /dev/null"
1⤵
PID:1023
- /usr/bin/pkill
  pkill -9 kmyarmv4
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1024
- /bin/busybox
  busybox pkill -9 kmyarmv4
  2⤵
  PID:1025
- /usr/busybox
  /usr/busybox pkill -9 kmyarmv4
  2⤵
  PID:1026
- /bin/busybox
  /bin/busybox pkill -9 kmyarmv4
  2⤵
  PID:1027

/bin/sh
sh -c "pkill -9 kmyarmv6 || busybox pkill -9 kmyarmv6 || /usr/busybox pkill -9 kmyarmv6 || /bin/busybox pkill -9 kmyarmv6 > /dev/null"
1⤵
PID:1028
- /usr/bin/pkill
  pkill -9 kmyarmv6
  2⤵
  PID:1029
- /bin/busybox
  busybox pkill -9 kmyarmv6
  2⤵
  PID:1030
- /usr/busybox
  /usr/busybox pkill -9 kmyarmv6
  2⤵
  PID:1031
- /bin/busybox
  /bin/busybox pkill -9 kmyarmv6
  2⤵
  PID:1032

/bin/sh
sh -c "pkill -9 kmyi686 || busybox pkill -9 kmyi686 || /usr/busybox pkill -9 kmyi686 || /bin/busybox pkill -9 kmyi686 > /dev/null"
1⤵
PID:1033
- /usr/bin/pkill
  pkill -9 kmyi686
  2⤵
  - Reads CPU attributes
  PID:1034
- /bin/busybox
  busybox pkill -9 kmyi686
  2⤵
  PID:1035
- /usr/busybox
  /usr/busybox pkill -9 kmyi686
  2⤵
  PID:1036
- /bin/busybox
  /bin/busybox pkill -9 kmyi686
  2⤵
  PID:1037

/bin/sh
sh -c "pkill -9 kmypowerpc || busybox pkill -9 kmypowerpc || /usr/busybox pkill -9 kmypowerpc || /bin/busybox pkill -9 kmypowerpc > /dev/null"
1⤵
PID:1038
- /usr/bin/pkill
  pkill -9 kmypowerpc
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1039
- /bin/busybox
  busybox pkill -9 kmypowerpc
  2⤵
  PID:1040
- /usr/busybox
  /usr/busybox pkill -9 kmypowerpc
  2⤵
  PID:1041
- /bin/busybox
  /bin/busybox pkill -9 kmypowerpc
  2⤵
  PID:1042

/bin/sh
sh -c "pkill -9 kmypowerpc440fp || busybox pkill -9 kmypowerpc440fp || /usr/busybox pkill -9 kmypowerpc440fp || /bin/busybox pkill -9 kmypowerpc440fp > /dev/null"
1⤵
PID:1043
- /usr/bin/pkill
  pkill -9 kmypowerpc440fp
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1044
- /bin/busybox
  busybox pkill -9 kmypowerpc440fp
  2⤵
  PID:1045
- /usr/busybox
  /usr/busybox pkill -9 kmypowerpc440fp
  2⤵
  PID:1046
- /bin/busybox
  /bin/busybox pkill -9 kmypowerpc440fp
  2⤵
  PID:1047

/bin/sh
sh -c "pkill -9 kmyi586 || busybox pkill -9 kmyi586 || /usr/busybox pkill -9 kmyi586 || /bin/busybox pkill -9 kmyi586 > /dev/null"
1⤵
PID:1048
- /usr/bin/pkill
  pkill -9 kmyi586
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1049
- /bin/busybox
  busybox pkill -9 kmyi586
  2⤵
  PID:1050

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...