f11196854e218ff28c6ac2805f82af92437d2fc46f143b0cead3bee03007f951

General

Target

VirusShare_1ac53ce81afc0e714ce2c32c5673736b
Size

180KB
MD5

1ac53ce81afc0e714ce2c32c5673736b
SHA1

54cad5b26c087fbea477d518b2b74ab19c90d4b7
SHA256

f11196854e218ff28c6ac2805f82af92437d2fc46f143b0cead3bee03007f951
SHA512

f392fe29c12d9aab32422369fdd43574462c0d3bfc496af2475378d5e934ef088a8a2402faf1440af6782b425d60845e4c624aad9e95585d1bff057651dd792f
SSDEEP

3072:0yYjhGWN3yAGpTrZ/xq1a1NVfD9rG1BGCovKMF4mqPvcoLhyn2p9r1WvnnqNd7im:0bjpqKUTfD9rmvpmdqPv5Ls2LhWvnnqp

Score

6^/10

Malware Config

Signatures

Enumerates running processes
Discovers information about currently running processes on the system

Reads CPU attributes 1 TTPs 64 IoCs

System Information Discovery

T1082

Processes:

pkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkill

description	ioc	process
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

Processes:

pkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkill

description	ioc	process
File opened for reading	/proc/13/cmdline	pkill
File opened for reading	/proc/586/status	pkill
File opened for reading	/proc/80/cmdline	pkill
File opened for reading	/proc/163/cmdline	pkill
File opened for reading	/proc/3/status	pkill
File opened for reading	/proc/287/cmdline	pkill
File opened for reading	/proc/251/status	pkill
File opened for reading	/proc/714/status	pkill
File opened for reading	/proc/379/cmdline	pkill
File opened for reading	/proc/36/status	pkill
File opened for reading	/proc/164/cmdline	pkill
File opened for reading	/proc/165/status	pkill
File opened for reading	/proc/35/status	pkill
File opened for reading	/proc/154/cmdline	pkill
File opened for reading	/proc/16/status	pkill
File opened for reading	/proc/154/status	pkill
File opened for reading	/proc/3/cmdline	pkill
File opened for reading	/proc/16/status	pkill
File opened for reading	/proc/251/cmdline	pkill
File opened for reading	/proc/23/status	pkill
File opened for reading	/proc/84/status	pkill
File opened for reading	/proc/358/cmdline	pkill
File opened for reading	/proc/15/cmdline	pkill
File opened for reading	/proc/26/status	pkill
File opened for reading	/proc/167/cmdline	pkill
File opened for reading	/proc/84/cmdline	pkill
File opened for reading	/proc/32/status	pkill
File opened for reading	/proc/15/cmdline	pkill
File opened for reading	/proc/582/cmdline	pkill
File opened for reading	/proc/625/cmdline	pkill
File opened for reading	/proc/169/cmdline	pkill
File opened for reading	/proc/13/cmdline	pkill
File opened for reading	/proc/417/cmdline	pkill
File opened for reading	/proc/9/status	pkill
File opened for reading	/proc/31/cmdline	pkill
File opened for reading	/proc/10/status	pkill
File opened for reading	/proc/115/cmdline	pkill
File opened for reading	/proc/154/status	pkill
File opened for reading	/proc/453/cmdline	pkill
File opened for reading	/proc/27/status	pkill
File opened for reading	/proc/6/status	pkill
File opened for reading	/proc/16/cmdline	pkill
File opened for reading	/proc/586/status	pkill
File opened for reading	/proc/364/status	pkill
File opened for reading	/proc/167/status	pkill
File opened for reading	/proc/163/cmdline	pkill
File opened for reading	/proc/168/status	pkill
File opened for reading	/proc/159/cmdline	pkill
File opened for reading	/proc/580/status	pkill
File opened for reading	/proc/193/cmdline	pkill
File opened for reading	/proc/625/cmdline	pkill
File opened for reading	/proc/130/cmdline	pkill
File opened for reading	/proc/166/cmdline	pkill
File opened for reading	/proc/451/cmdline	pkill
File opened for reading	/proc/423/cmdline	pkill
File opened for reading	/proc/345/cmdline	pkill
File opened for reading	/proc/159/status	pkill
File opened for reading	/proc/155/cmdline	pkill
File opened for reading	/proc/16/cmdline	pkill
File opened for reading	/proc/588/cmdline	pkill
File opened for reading	/proc/161/status	pkill
File opened for reading	/proc/28/cmdline	pkill
File opened for reading	/proc/583/status	pkill
File opened for reading	/proc/159/status	pkill

/tmp/VirusShare_1ac53ce81afc0e714ce2c32c5673736b
/tmp/VirusShare_1ac53ce81afc0e714ce2c32c5673736b
1⤵
PID:585

/bin/sh
sh -c "pkill -9 mips || busybox pkill -9 mips || /usr/busybox pkill -9 mips || /bin/busybox pkill -9 mips > /dev/null"
1⤵
PID:589

/usr/bin/pkill
pkill -9 mips
2⤵
PID:590

/bin/busybox
busybox pkill -9 mips
2⤵
PID:591

/usr/busybox
/usr/busybox pkill -9 mips
2⤵
PID:592

/bin/busybox
/bin/busybox pkill -9 mips
2⤵
PID:593

/bin/sh
sh -c "pkill -9 mips64 || busybox pkill -9 mips64 || /usr/busybox pkill -9 mips64 || /bin/busybox pkill -9 mips64 > /dev/null"
1⤵
PID:594

/usr/bin/pkill
pkill -9 mips64
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:595

/bin/busybox
busybox pkill -9 mips64
2⤵
PID:596

/usr/busybox
/usr/busybox pkill -9 mips64
2⤵
PID:597

/bin/busybox
/bin/busybox pkill -9 mips64
2⤵
PID:598

/bin/sh
sh -c "pkill -9 mipsel || busybox pkill -9 mipsel || /usr/busybox pkill -9 mipsel || /bin/busybox pkill -9 mipsel > /dev/null"
1⤵
PID:599

/usr/bin/pkill
pkill -9 mipsel
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:600

/bin/busybox
busybox pkill -9 mipsel
2⤵
PID:601

/usr/busybox
/usr/busybox pkill -9 mipsel
2⤵
PID:602

/bin/busybox
/bin/busybox pkill -9 mipsel
2⤵
PID:603

/bin/sh
sh -c "pkill -9 sh2eb || busybox pkill -9 sh2eb || /usr/busybox pkill -9 sh2eb || /bin/busybox pkill -9 sh2eb > /dev/null"
1⤵
PID:604

/usr/bin/pkill
pkill -9 sh2eb
2⤵
- Reads CPU attributes
PID:605

/bin/busybox
busybox pkill -9 sh2eb
2⤵
PID:606

/usr/busybox
/usr/busybox pkill -9 sh2eb
2⤵
PID:607

/bin/busybox
/bin/busybox pkill -9 sh2eb
2⤵
PID:608

/bin/sh
sh -c "pkill -9 sh2elf || busybox pkill -9 sh2elf || /usr/busybox pkill -9 sh2elf || /bin/busybox pkill -9 sh2elf > /dev/null"
1⤵
PID:609

/usr/bin/pkill
pkill -9 sh2elf
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:610

/bin/busybox
busybox pkill -9 sh2elf
2⤵
PID:611

/usr/busybox
/usr/busybox pkill -9 sh2elf
2⤵
PID:612

/bin/busybox
/bin/busybox pkill -9 sh2elf
2⤵
PID:613

/bin/sh
sh -c "pkill -9 sh4 || busybox pkill -9 sh4 || /usr/busybox pkill -9 sh4 || /bin/busybox pkill -9 sh4 > /dev/null"
1⤵
PID:614

/usr/bin/pkill
pkill -9 sh4
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:615

/bin/busybox
busybox pkill -9 sh4
2⤵
PID:616

/usr/busybox
/usr/busybox pkill -9 sh4
2⤵
PID:617

/bin/busybox
/bin/busybox pkill -9 sh4
2⤵
PID:618

/bin/sh
sh -c "pkill -9 x86 || busybox pkill -9 x86 || /usr/busybox pkill -9 x86 || /bin/busybox pkill -9 x86 > /dev/null"
1⤵
PID:619

/usr/bin/pkill
pkill -9 x86
2⤵
- Reads CPU attributes
PID:620

/bin/busybox
busybox pkill -9 x86
2⤵
PID:621

/usr/busybox
/usr/busybox pkill -9 x86
2⤵
PID:622

/bin/busybox
/bin/busybox pkill -9 x86
2⤵
PID:623

/bin/sh
sh -c "pkill -9 arm || busybox pkill -9 arm || /usr/busybox pkill -9 arm || /bin/busybox pkill -9 arm > /dev/null"
1⤵
PID:624

/usr/bin/pkill
pkill -9 arm
2⤵
- Reads CPU attributes
PID:629

/bin/busybox
busybox pkill -9 arm
2⤵
PID:630

/usr/busybox
/usr/busybox pkill -9 arm
2⤵
PID:631

/bin/busybox
/bin/busybox pkill -9 arm
2⤵
PID:632

/bin/sh
sh -c "pkill -9 armv5 || busybox pkill -9 armv5 || /usr/busybox pkill -9 armv5 || /bin/busybox pkill -9 armv5 > /dev/null"
1⤵
PID:633

/usr/bin/pkill
pkill -9 armv5
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:634

/bin/busybox
busybox pkill -9 armv5
2⤵
PID:635

/usr/busybox
/usr/busybox pkill -9 armv5
2⤵
PID:636

/bin/busybox
/bin/busybox pkill -9 armv5
2⤵
PID:637

/bin/sh
sh -c "pkill -9 armv4tl || busybox pkill -9 armv4tl || /usr/busybox pkill -9 armv4tl || /bin/busybox pkill -9 armv4tl > /dev/null"
1⤵
PID:638

/usr/bin/pkill
pkill -9 armv4tl
2⤵
- Reads CPU attributes
PID:639

/bin/busybox
busybox pkill -9 armv4tl
2⤵
PID:640

/usr/busybox
/usr/busybox pkill -9 armv4tl
2⤵
PID:641

/bin/busybox
/bin/busybox pkill -9 armv4tl
2⤵
PID:642

/bin/sh
sh -c "pkill -9 armv4 || busybox pkill -9 armv4 || /usr/busybox pkill -9 armv4 || /bin/busybox pkill -9 armv4 > /dev/null"
1⤵
PID:643

/usr/bin/pkill
pkill -9 armv4
2⤵
PID:644

/bin/busybox
busybox pkill -9 armv4
2⤵
PID:645

/usr/busybox
/usr/busybox pkill -9 armv4
2⤵
PID:646

/bin/busybox
/bin/busybox pkill -9 armv4
2⤵
PID:647

/bin/sh
sh -c "pkill -9 armv6 || busybox pkill -9 armv6 || /usr/busybox pkill -9 armv6 || /bin/busybox pkill -9 armv6 > /dev/null"
1⤵
PID:648

/usr/bin/pkill
pkill -9 armv6
2⤵
- Reads CPU attributes
PID:649

/bin/busybox
busybox pkill -9 armv6
2⤵
PID:650

/usr/busybox
/usr/busybox pkill -9 armv6
2⤵
PID:651

/bin/busybox
/bin/busybox pkill -9 armv6
2⤵
PID:652

/bin/sh
sh -c "pkill -9 i686 || busybox pkill -9 i686 || /usr/busybox pkill -9 i686 || /bin/busybox pkill -9 i686 > /dev/null"
1⤵
PID:653

/usr/bin/pkill
pkill -9 i686
2⤵
- Reads CPU attributes
PID:654

/bin/busybox
busybox pkill -9 i686
2⤵
PID:655

/usr/busybox
/usr/busybox pkill -9 i686
2⤵
PID:656

/bin/busybox
/bin/busybox pkill -9 i686
2⤵
PID:657

/bin/sh
sh -c "pkill -9 powerpc || busybox pkill -9 powerpc || /usr/busybox pkill -9 powerpc || /bin/busybox pkill -9 powerpc > /dev/null"
1⤵
PID:658

/usr/bin/pkill
pkill -9 powerpc
2⤵
- Reads runtime system information
PID:659

/bin/busybox
busybox pkill -9 powerpc
2⤵
PID:660

/usr/busybox
/usr/busybox pkill -9 powerpc
2⤵
PID:661

/bin/busybox
/bin/busybox pkill -9 powerpc
2⤵
PID:662

/bin/sh
sh -c "pkill -9 powerpc440fp || busybox pkill -9 powerpc440fp || /usr/busybox pkill -9 powerpc440fp || /bin/busybox pkill -9 powerpc440fp > /dev/null"
1⤵
PID:663

/usr/bin/pkill
pkill -9 powerpc440fp
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:664

/bin/busybox
busybox pkill -9 powerpc440fp
2⤵
PID:665

/usr/busybox
/usr/busybox pkill -9 powerpc440fp
2⤵
PID:666

/bin/busybox
/bin/busybox pkill -9 powerpc440fp
2⤵
PID:667

/bin/sh
sh -c "pkill -9 i586 || busybox pkill -9 i586 || /usr/busybox pkill -9 i586 || /bin/busybox pkill -9 i586 > /dev/null"
1⤵
PID:668

/usr/bin/pkill
pkill -9 i586
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:669

/bin/busybox
busybox pkill -9 i586
2⤵
PID:670

/usr/busybox
/usr/busybox pkill -9 i586
2⤵
PID:671

/bin/busybox
/bin/busybox pkill -9 i586
2⤵
PID:672

/bin/sh
sh -c "pkill -9 m68k || busybox pkill -9 m68k || /usr/busybox pkill -9 m68k || /bin/busybox pkill -9 m68k > /dev/null"
1⤵
PID:673

/usr/bin/pkill
pkill -9 m68k
2⤵
- Reads runtime system information
PID:674

/bin/busybox
busybox pkill -9 m68k
2⤵
PID:675

/usr/busybox
/usr/busybox pkill -9 m68k
2⤵
PID:676

/bin/busybox
/bin/busybox pkill -9 m68k
2⤵
PID:677

/bin/sh
sh -c "pkill -9 sparc || busybox pkill -9 sparc || /usr/busybox pkill -9 sparc || /bin/busybox pkill -9 sparc > /dev/null"
1⤵
PID:678

/usr/bin/pkill
pkill -9 sparc
2⤵
- Reads CPU attributes
PID:679

/bin/busybox
busybox pkill -9 sparc
2⤵
PID:680

/usr/busybox
/usr/busybox pkill -9 sparc
2⤵
PID:681

/bin/busybox
/bin/busybox pkill -9 sparc
2⤵
PID:682

/bin/sh
sh -c "pkill -9 x86_64 || busybox pkill -9 x86_64 || /usr/busybox pkill -9 x86_64 || /bin/busybox pkill -9 x86_64 > /dev/null"
1⤵
PID:683

/usr/bin/pkill
pkill -9 x86_64
2⤵
PID:684

/bin/busybox
busybox pkill -9 x86_64
2⤵
PID:685

/usr/busybox
/usr/busybox pkill -9 x86_64
2⤵
PID:686

/bin/busybox
/bin/busybox pkill -9 x86_64
2⤵
PID:687

/bin/sh
sh -c "pkill -9 jackmymips || busybox pkill -9 jackmymips || /usr/busybox pkill -9 jackmymips || /bin/busybox pkill -9 jackmymips > /dev/null"
1⤵
PID:688

/usr/bin/pkill
pkill -9 jackmymips
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:689

/bin/busybox
busybox pkill -9 jackmymips
2⤵
PID:690

/usr/busybox
/usr/busybox pkill -9 jackmymips
2⤵
PID:691

/bin/busybox
/bin/busybox pkill -9 jackmymips
2⤵
PID:692

/bin/sh
sh -c "pkill -9 jackmymips64 || busybox pkill -9 jackmymips64 || /usr/busybox pkill -9 jackmymips64 || /bin/busybox pkill -9 jackmymips64 > /dev/null"
1⤵
PID:693

/usr/bin/pkill
pkill -9 jackmymips64
2⤵
- Reads CPU attributes
PID:694

/bin/busybox
busybox pkill -9 jackmymips64
2⤵
PID:695

/usr/busybox
/usr/busybox pkill -9 jackmymips64
2⤵
PID:696

/bin/busybox
/bin/busybox pkill -9 jackmymips64
2⤵
PID:697

/bin/sh
sh -c "pkill -9 jackmymipsel || busybox pkill -9 jackmymipsel || /usr/busybox pkill -9 jackmymipsel || /bin/busybox pkill -9 jackmymipsel > /dev/null"
1⤵
PID:698

/usr/bin/pkill
pkill -9 jackmymipsel
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:699

/bin/busybox
busybox pkill -9 jackmymipsel
2⤵
PID:700

/usr/busybox
/usr/busybox pkill -9 jackmymipsel
2⤵
PID:701

/bin/busybox
/bin/busybox pkill -9 jackmymipsel
2⤵
PID:702

/bin/sh
sh -c "pkill -9 jackmysh2eb || busybox pkill -9 jackmysh2eb || /usr/busybox pkill -9 jackmysh2eb || /bin/busybox pkill -9 jackmysh2eb > /dev/null"
1⤵
PID:703

/usr/bin/pkill
pkill -9 jackmysh2eb
2⤵
- Reads CPU attributes
PID:704

/bin/busybox
busybox pkill -9 jackmysh2eb
2⤵
PID:705

/usr/busybox
/usr/busybox pkill -9 jackmysh2eb
2⤵
PID:706

/bin/busybox
/bin/busybox pkill -9 jackmysh2eb
2⤵
PID:707

/bin/sh
sh -c "pkill -9 jackmysh2elf || busybox pkill -9 jackmysh2elf || /usr/busybox pkill -9 jackmysh2elf || /bin/busybox pkill -9 jackmysh2elf > /dev/null"
1⤵
PID:708

/usr/bin/pkill
pkill -9 jackmysh2elf
2⤵
- Reads CPU attributes
PID:709

/bin/busybox
busybox pkill -9 jackmysh2elf
2⤵
PID:710

/usr/busybox
/usr/busybox pkill -9 jackmysh2elf
2⤵
PID:711

/bin/busybox
/bin/busybox pkill -9 jackmysh2elf
2⤵
PID:712

/bin/sh
sh -c "pkill -9 jackmysh4 || busybox pkill -9 jackmysh4 || /usr/busybox pkill -9 jackmysh4 || /bin/busybox pkill -9 jackmysh4 > /dev/null"
1⤵
PID:713

/usr/bin/pkill
pkill -9 jackmysh4
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:714

/bin/busybox
busybox pkill -9 jackmysh4
2⤵
PID:715

/usr/busybox
/usr/busybox pkill -9 jackmysh4
2⤵
PID:716

/bin/busybox
/bin/busybox pkill -9 jackmysh4
2⤵
PID:717

/bin/sh
sh -c "pkill -9 jackmyx86 || busybox pkill -9 jackmyx86 || /usr/busybox pkill -9 jackmyx86 || /bin/busybox pkill -9 jackmyx86 > /dev/null"
1⤵
PID:718

/usr/bin/pkill
pkill -9 jackmyx86
2⤵
- Reads CPU attributes
PID:719

/bin/busybox
busybox pkill -9 jackmyx86
2⤵
PID:720

/usr/busybox
/usr/busybox pkill -9 jackmyx86
2⤵
PID:721

/bin/busybox
/bin/busybox pkill -9 jackmyx86
2⤵
PID:722

/bin/sh
sh -c "pkill -9 jackmyarmv5 || busybox pkill -9 jackmyarmv5 || /usr/busybox pkill -9 jackmyarmv5 || /bin/busybox pkill -9 jackmyarmv5 > /dev/null"
1⤵
PID:723

/usr/bin/pkill
pkill -9 jackmyarmv5
2⤵
PID:724

/bin/busybox
busybox pkill -9 jackmyarmv5
2⤵
PID:725

/usr/busybox
/usr/busybox pkill -9 jackmyarmv5
2⤵
PID:726

/bin/busybox
/bin/busybox pkill -9 jackmyarmv5
2⤵
PID:727

/bin/sh
sh -c "pkill -9 jackmyarmv4tl || busybox pkill -9 jackmyarmv4tl || /usr/busybox pkill -9 jackmyarmv4tl || /bin/busybox pkill -9 jackmyarmv4tl > /dev/null"
1⤵
PID:728

/usr/bin/pkill
pkill -9 jackmyarmv4tl
2⤵
- Reads CPU attributes
PID:729

/bin/busybox
busybox pkill -9 jackmyarmv4tl
2⤵
PID:730

/usr/busybox
/usr/busybox pkill -9 jackmyarmv4tl
2⤵
PID:731

/bin/busybox
/bin/busybox pkill -9 jackmyarmv4tl
2⤵
PID:732

/bin/sh
sh -c "pkill -9 jackmyarmv4 || busybox pkill -9 jackmyarmv4 || /usr/busybox pkill -9 jackmyarmv4 || /bin/busybox pkill -9 jackmyarmv4 > /dev/null"
1⤵
PID:733

/usr/bin/pkill
pkill -9 jackmyarmv4
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:734

/bin/busybox
busybox pkill -9 jackmyarmv4
2⤵
PID:735

/usr/busybox
/usr/busybox pkill -9 jackmyarmv4
2⤵
PID:736

/bin/busybox
/bin/busybox pkill -9 jackmyarmv4
2⤵
PID:737

/bin/sh
sh -c "pkill -9 jackmyarmv6 || busybox pkill -9 jackmyarmv6 || /usr/busybox pkill -9 jackmyarmv6 || /bin/busybox pkill -9 jackmyarmv6 > /dev/null"
1⤵
PID:738

/usr/bin/pkill
pkill -9 jackmyarmv6
2⤵
- Reads CPU attributes
PID:739

/bin/busybox
busybox pkill -9 jackmyarmv6
2⤵
PID:740

/usr/busybox
/usr/busybox pkill -9 jackmyarmv6
2⤵
PID:741

/bin/busybox
/bin/busybox pkill -9 jackmyarmv6
2⤵
PID:742

/bin/sh
sh -c "pkill -9 jackmyi686 || busybox pkill -9 jackmyi686 || /usr/busybox pkill -9 jackmyi686 || /bin/busybox pkill -9 jackmyi686 > /dev/null"
1⤵
PID:743

/usr/bin/pkill
pkill -9 jackmyi686
2⤵
- Reads CPU attributes
PID:744

/bin/busybox
busybox pkill -9 jackmyi686
2⤵
PID:745

/usr/busybox
/usr/busybox pkill -9 jackmyi686
2⤵
PID:746

/bin/busybox
/bin/busybox pkill -9 jackmyi686
2⤵
PID:747

/bin/sh
sh -c "pkill -9 jackmypowerpc || busybox pkill -9 jackmypowerpc || /usr/busybox pkill -9 jackmypowerpc || /bin/busybox pkill -9 jackmypowerpc > /dev/null"
1⤵
PID:748

/usr/bin/pkill
pkill -9 jackmypowerpc
2⤵
- Reads CPU attributes
PID:749

/bin/busybox
busybox pkill -9 jackmypowerpc
2⤵
PID:750

/usr/busybox
/usr/busybox pkill -9 jackmypowerpc
2⤵
PID:751

/bin/busybox
/bin/busybox pkill -9 jackmypowerpc
2⤵
PID:752

/bin/sh
sh -c "pkill -9 jackmypowerpc440fp || busybox pkill -9 jackmypowerpc440fp || /usr/busybox pkill -9 jackmypowerpc440fp || /bin/busybox pkill -9 jackmypowerpc440fp > /dev/null"
1⤵
PID:753

/usr/bin/pkill
pkill -9 jackmypowerpc440fp
2⤵
- Reads CPU attributes
PID:754

/bin/busybox
busybox pkill -9 jackmypowerpc440fp
2⤵
PID:755

/usr/busybox
/usr/busybox pkill -9 jackmypowerpc440fp
2⤵
PID:756

/bin/busybox
/bin/busybox pkill -9 jackmypowerpc440fp
2⤵
PID:757

/bin/sh
sh -c "pkill -9 jackmyi586 || busybox pkill -9 jackmyi586 || /usr/busybox pkill -9 jackmyi586 || /bin/busybox pkill -9 jackmyi586 > /dev/null"
1⤵
PID:758

/usr/bin/pkill
pkill -9 jackmyi586
2⤵
PID:759

/bin/busybox
busybox pkill -9 jackmyi586
2⤵
PID:760

/usr/busybox
/usr/busybox pkill -9 jackmyi586
2⤵
PID:761

/bin/busybox
/bin/busybox pkill -9 jackmyi586
2⤵
PID:762

/bin/sh
sh -c "pkill -9 jackmym68k || busybox pkill -9 jackmym68k || /usr/busybox pkill -9 jackmym68k || /bin/busybox pkill -9 jackmym68k > /dev/null"
1⤵
PID:763

/usr/bin/pkill
pkill -9 jackmym68k
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:764

/bin/busybox
busybox pkill -9 jackmym68k
2⤵
PID:765

/usr/busybox
/usr/busybox pkill -9 jackmym68k
2⤵
PID:766

/bin/busybox
/bin/busybox pkill -9 jackmym68k
2⤵
PID:767

/bin/sh
sh -c "pkill -9 jackmysparc || busybox pkill -9 jackmysparc || /usr/busybox pkill -9 jackmysparc || /bin/busybox pkill -9 jackmysparc > /dev/null"
1⤵
PID:768

/usr/bin/pkill
pkill -9 jackmysparc
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:769

/bin/busybox
busybox pkill -9 jackmysparc
2⤵
PID:770

/usr/busybox
/usr/busybox pkill -9 jackmysparc
2⤵
PID:771

/bin/busybox
/bin/busybox pkill -9 jackmysparc
2⤵
PID:772

/bin/sh
sh -c "pkill -9 jackmyx86_64 || busybox pkill -9 jackmyx86_64 || /usr/busybox pkill -9 jackmyx86_64 || /bin/busybox pkill -9 jackmyx86_64 > /dev/null"
1⤵
PID:773

/usr/bin/pkill
pkill -9 jackmyx86_64
2⤵
- Reads CPU attributes
PID:774

/bin/busybox
busybox pkill -9 jackmyx86_64
2⤵
PID:775

/usr/busybox
/usr/busybox pkill -9 jackmyx86_64
2⤵
PID:776

/bin/busybox
/bin/busybox pkill -9 jackmyx86_64
2⤵
PID:777

/bin/sh
sh -c "pkill -9 hackmymips || busybox pkill -9 hackmymips || /usr/busybox pkill -9 hackmymips || /bin/busybox pkill -9 hackmymips > /dev/null"
1⤵
PID:778

/usr/bin/pkill
pkill -9 hackmymips
2⤵
- Reads runtime system information
PID:779

/bin/busybox
busybox pkill -9 hackmymips
2⤵
PID:780

/usr/busybox
/usr/busybox pkill -9 hackmymips
2⤵
PID:781

/bin/busybox
/bin/busybox pkill -9 hackmymips
2⤵
PID:782

/bin/sh
sh -c "pkill -9 hackmymips64 || busybox pkill -9 hackmymips64 || /usr/busybox pkill -9 hackmymips64 || /bin/busybox pkill -9 hackmymips64 > /dev/null"
1⤵
PID:783

/usr/bin/pkill
pkill -9 hackmymips64
2⤵
- Reads CPU attributes
PID:784

/bin/busybox
busybox pkill -9 hackmymips64
2⤵
PID:785

/usr/busybox
/usr/busybox pkill -9 hackmymips64
2⤵
PID:786

/bin/busybox
/bin/busybox pkill -9 hackmymips64
2⤵
PID:787

/bin/sh
sh -c "pkill -9 hackmymipsel || busybox pkill -9 hackmymipsel || /usr/busybox pkill -9 hackmymipsel || /bin/busybox pkill -9 hackmymipsel > /dev/null"
1⤵
PID:788

/usr/bin/pkill
pkill -9 hackmymipsel
2⤵
- Reads CPU attributes
PID:789

/bin/busybox
busybox pkill -9 hackmymipsel
2⤵
PID:790

/usr/busybox
/usr/busybox pkill -9 hackmymipsel
2⤵
PID:791

/bin/busybox
/bin/busybox pkill -9 hackmymipsel
2⤵
PID:792

/bin/sh
sh -c "pkill -9 hackmysh2eb || busybox pkill -9 hackmysh2eb || /usr/busybox pkill -9 hackmysh2eb || /bin/busybox pkill -9 hackmysh2eb > /dev/null"
1⤵
PID:793

/usr/bin/pkill
pkill -9 hackmysh2eb
2⤵
PID:794

/bin/busybox
busybox pkill -9 hackmysh2eb
2⤵
PID:795

/usr/busybox
/usr/busybox pkill -9 hackmysh2eb
2⤵
PID:796

/bin/busybox
/bin/busybox pkill -9 hackmysh2eb
2⤵
PID:797

/bin/sh
sh -c "pkill -9 hackmysh2elf || busybox pkill -9 hackmysh2elf || /usr/busybox pkill -9 hackmysh2elf || /bin/busybox pkill -9 hackmysh2elf > /dev/null"
1⤵
PID:798

/usr/bin/pkill
pkill -9 hackmysh2elf
2⤵
- Reads CPU attributes
PID:799

/bin/busybox
busybox pkill -9 hackmysh2elf
2⤵
PID:800

/usr/busybox
/usr/busybox pkill -9 hackmysh2elf
2⤵
PID:801

/bin/busybox
/bin/busybox pkill -9 hackmysh2elf
2⤵
PID:802

/bin/sh
sh -c "pkill -9 hackmysh4 || busybox pkill -9 hackmysh4 || /usr/busybox pkill -9 hackmysh4 || /bin/busybox pkill -9 hackmysh4 > /dev/null"
1⤵
PID:803

/usr/bin/pkill
pkill -9 hackmysh4
2⤵
- Reads CPU attributes
PID:804

/bin/busybox
busybox pkill -9 hackmysh4
2⤵
PID:805

/usr/busybox
/usr/busybox pkill -9 hackmysh4
2⤵
PID:806

/bin/busybox
/bin/busybox pkill -9 hackmysh4
2⤵
PID:807

/bin/sh
sh -c "pkill -9 hackmyx86 || busybox pkill -9 hackmyx86 || /usr/busybox pkill -9 hackmyx86 || /bin/busybox pkill -9 hackmyx86 > /dev/null"
1⤵
PID:808

/usr/bin/pkill
pkill -9 hackmyx86
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:809

/bin/busybox
busybox pkill -9 hackmyx86
2⤵
PID:810

/usr/busybox
/usr/busybox pkill -9 hackmyx86
2⤵
PID:811

/bin/busybox
/bin/busybox pkill -9 hackmyx86
2⤵
PID:812

/bin/sh
sh -c "pkill -9 hackmyarmv5 || busybox pkill -9 hackmyarmv5 || /usr/busybox pkill -9 hackmyarmv5 || /bin/busybox pkill -9 hackmyarmv5 > /dev/null"
1⤵
PID:813

/usr/bin/pkill
pkill -9 hackmyarmv5
2⤵
PID:814

/bin/busybox
busybox pkill -9 hackmyarmv5
2⤵
PID:815

/usr/busybox
/usr/busybox pkill -9 hackmyarmv5
2⤵
PID:816

/bin/busybox
/bin/busybox pkill -9 hackmyarmv5
2⤵
PID:817

/bin/sh
sh -c "pkill -9 hackmyarmv4tl || busybox pkill -9 hackmyarmv4tl || /usr/busybox pkill -9 hackmyarmv4tl || /bin/busybox pkill -9 hackmyarmv4tl > /dev/null"
1⤵
PID:818

/usr/bin/pkill
pkill -9 hackmyarmv4tl
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:819

/bin/busybox
busybox pkill -9 hackmyarmv4tl
2⤵
PID:820

/usr/busybox
/usr/busybox pkill -9 hackmyarmv4tl
2⤵
PID:821

/bin/busybox
/bin/busybox pkill -9 hackmyarmv4tl
2⤵
PID:822

/bin/sh
sh -c "pkill -9 hackmyarmv4 || busybox pkill -9 hackmyarmv4 || /usr/busybox pkill -9 hackmyarmv4 || /bin/busybox pkill -9 hackmyarmv4 > /dev/null"
1⤵
PID:823

/usr/bin/pkill
pkill -9 hackmyarmv4
2⤵
- Reads CPU attributes
PID:824

/bin/busybox
busybox pkill -9 hackmyarmv4
2⤵
PID:825

/usr/busybox
/usr/busybox pkill -9 hackmyarmv4
2⤵
PID:826

/bin/busybox
/bin/busybox pkill -9 hackmyarmv4
2⤵
PID:827

/bin/sh
sh -c "pkill -9 hackmyarmv6 || busybox pkill -9 hackmyarmv6 || /usr/busybox pkill -9 hackmyarmv6 || /bin/busybox pkill -9 hackmyarmv6 > /dev/null"
1⤵
PID:828

/usr/bin/pkill
pkill -9 hackmyarmv6
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:829

/bin/busybox
busybox pkill -9 hackmyarmv6
2⤵
PID:830

/usr/busybox
/usr/busybox pkill -9 hackmyarmv6
2⤵
PID:831

/bin/busybox
/bin/busybox pkill -9 hackmyarmv6
2⤵
PID:832

/bin/sh
sh -c "pkill -9 hackmyi686 || busybox pkill -9 hackmyi686 || /usr/busybox pkill -9 hackmyi686 || /bin/busybox pkill -9 hackmyi686 > /dev/null"
1⤵
PID:833

/usr/bin/pkill
pkill -9 hackmyi686
2⤵
PID:834

/bin/busybox
busybox pkill -9 hackmyi686
2⤵
PID:835

/usr/busybox
/usr/busybox pkill -9 hackmyi686
2⤵
PID:836

/bin/busybox
/bin/busybox pkill -9 hackmyi686
2⤵
PID:837

/bin/sh
sh -c "pkill -9 hackmypowerpc || busybox pkill -9 hackmypowerpc || /usr/busybox pkill -9 hackmypowerpc || /bin/busybox pkill -9 hackmypowerpc > /dev/null"
1⤵
PID:838

/usr/bin/pkill
pkill -9 hackmypowerpc
2⤵
- Reads runtime system information
PID:839

/bin/busybox
busybox pkill -9 hackmypowerpc
2⤵
PID:840

/usr/busybox
/usr/busybox pkill -9 hackmypowerpc
2⤵
PID:841

/bin/busybox
/bin/busybox pkill -9 hackmypowerpc
2⤵
PID:842

/bin/sh
sh -c "pkill -9 hackmypowerpc440fp || busybox pkill -9 hackmypowerpc440fp || /usr/busybox pkill -9 hackmypowerpc440fp || /bin/busybox pkill -9 hackmypowerpc440fp > /dev/null"
1⤵
PID:843

/usr/bin/pkill
pkill -9 hackmypowerpc440fp
2⤵
PID:844

/bin/busybox
busybox pkill -9 hackmypowerpc440fp
2⤵
PID:845

/usr/busybox
/usr/busybox pkill -9 hackmypowerpc440fp
2⤵
PID:846

/bin/busybox
/bin/busybox pkill -9 hackmypowerpc440fp
2⤵
PID:847

/bin/sh
sh -c "pkill -9 hackmyi586 || busybox pkill -9 hackmyi586 || /usr/busybox pkill -9 hackmyi586 || /bin/busybox pkill -9 hackmyi586 > /dev/null"
1⤵
PID:848

/usr/bin/pkill
pkill -9 hackmyi586
2⤵
- Reads runtime system information
PID:849

/bin/busybox
busybox pkill -9 hackmyi586
2⤵
PID:850

/usr/busybox
/usr/busybox pkill -9 hackmyi586
2⤵
PID:851

/bin/busybox
/bin/busybox pkill -9 hackmyi586
2⤵
PID:852

/bin/sh
sh -c "pkill -9 hackmym68k || busybox pkill -9 hackmym68k || /usr/busybox pkill -9 hackmym68k || /bin/busybox pkill -9 hackmym68k > /dev/null"
1⤵
PID:853

/usr/bin/pkill
pkill -9 hackmym68k
2⤵
PID:854

/bin/busybox
busybox pkill -9 hackmym68k
2⤵
PID:855

/usr/busybox
/usr/busybox pkill -9 hackmym68k
2⤵
PID:856

/bin/busybox
/bin/busybox pkill -9 hackmym68k
2⤵
PID:857

/bin/sh
sh -c "pkill -9 hackmysparc || busybox pkill -9 hackmysparc || /usr/busybox pkill -9 hackmysparc || /bin/busybox pkill -9 hackmysparc > /dev/null"
1⤵
PID:858

/usr/bin/pkill
pkill -9 hackmysparc
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:859

/bin/busybox
busybox pkill -9 hackmysparc
2⤵
PID:860

/usr/busybox
/usr/busybox pkill -9 hackmysparc
2⤵
PID:861

/bin/busybox
/bin/busybox pkill -9 hackmysparc
2⤵
PID:862

/bin/sh
sh -c "pkill -9 hackmyx86_64 || busybox pkill -9 hackmyx86_64 || /usr/busybox pkill -9 hackmyx86_64 || /bin/busybox pkill -9 hackmyx86_64 > /dev/null"
1⤵
PID:863

/usr/bin/pkill
pkill -9 hackmyx86_64
2⤵
PID:864

/bin/busybox
busybox pkill -9 hackmyx86_64
2⤵
PID:865

/usr/busybox
/usr/busybox pkill -9 hackmyx86_64
2⤵
PID:866

/bin/busybox
/bin/busybox pkill -9 hackmyx86_64
2⤵
PID:867

/bin/sh
sh -c "pkill -9 b1 || busybox pkill -9 b1 || /usr/busybox pkill -9 b1 || /bin/busybox pkill -9 b1 > /dev/null"
1⤵
PID:868

/usr/bin/pkill
pkill -9 b1
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:869

/bin/busybox
busybox pkill -9 b1
2⤵
PID:870

/usr/busybox
/usr/busybox pkill -9 b1
2⤵
PID:871

/bin/busybox
/bin/busybox pkill -9 b1
2⤵
PID:872

/bin/sh
sh -c "pkill -9 b2 || busybox pkill -9 b2 || /usr/busybox pkill -9 b2 || /bin/busybox pkill -9 b2 > /dev/null"
1⤵
PID:873

/usr/bin/pkill
pkill -9 b2
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:874

/bin/busybox
busybox pkill -9 b2
2⤵
PID:875

/usr/busybox
/usr/busybox pkill -9 b2
2⤵
PID:876

/bin/busybox
/bin/busybox pkill -9 b2
2⤵
PID:877

/bin/sh
sh -c "pkill -9 b3 || busybox pkill -9 b3 || /usr/busybox pkill -9 b3 || /bin/busybox pkill -9 b3 > /dev/null"
1⤵
PID:878

/usr/bin/pkill
pkill -9 b3
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:879

/bin/busybox
busybox pkill -9 b3
2⤵
PID:880

/usr/busybox
/usr/busybox pkill -9 b3
2⤵
PID:881

/bin/busybox
/bin/busybox pkill -9 b3
2⤵
PID:882

/bin/sh
sh -c "pkill -9 b4 || busybox pkill -9 b4 || /usr/busybox pkill -9 b4 || /bin/busybox pkill -9 b4 > /dev/null"
1⤵
PID:883

/usr/bin/pkill
pkill -9 b4
2⤵
- Reads runtime system information
PID:884

/bin/busybox
busybox pkill -9 b4
2⤵
PID:885

/usr/busybox
/usr/busybox pkill -9 b4
2⤵
PID:886

/bin/busybox
/bin/busybox pkill -9 b4
2⤵
PID:887

/bin/sh
sh -c "pkill -9 b5 || busybox pkill -9 b5 || /usr/busybox pkill -9 b5 || /bin/busybox pkill -9 b5 > /dev/null"
1⤵
PID:888

/usr/bin/pkill
pkill -9 b5
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:889

/bin/busybox
busybox pkill -9 b5
2⤵
PID:890

/usr/busybox
/usr/busybox pkill -9 b5
2⤵
PID:891

/bin/busybox
/bin/busybox pkill -9 b5
2⤵
PID:892

/bin/sh
sh -c "pkill -9 b6 || busybox pkill -9 b6 || /usr/busybox pkill -9 b6 || /bin/busybox pkill -9 b6 > /dev/null"
1⤵
PID:893

/usr/bin/pkill
pkill -9 b6
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:894

/bin/busybox
busybox pkill -9 b6
2⤵
PID:895

/usr/busybox
/usr/busybox pkill -9 b6
2⤵
PID:896

/bin/busybox
/bin/busybox pkill -9 b6
2⤵
PID:897

/bin/sh
sh -c "pkill -9 b7 || busybox pkill -9 b7 || /usr/busybox pkill -9 b7 || /bin/busybox pkill -9 b7 > /dev/null"
1⤵
PID:898

/usr/bin/pkill
pkill -9 b7
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:899

/bin/busybox
busybox pkill -9 b7
2⤵
PID:900

/usr/busybox
/usr/busybox pkill -9 b7
2⤵
PID:901

/bin/busybox
/bin/busybox pkill -9 b7
2⤵
PID:902

/bin/sh
sh -c "pkill -9 b8 || busybox pkill -9 b8 || /usr/busybox pkill -9 b8 || /bin/busybox pkill -9 b8 > /dev/null"
1⤵
PID:903

/usr/bin/pkill
pkill -9 b8
2⤵
PID:904

/bin/busybox
busybox pkill -9 b8
2⤵
PID:905

/usr/busybox
/usr/busybox pkill -9 b8
2⤵
PID:906

/bin/busybox
/bin/busybox pkill -9 b8
2⤵
PID:907

/bin/sh
sh -c "pkill -9 b9 || busybox pkill -9 b9 || /usr/busybox pkill -9 b9 || /bin/busybox pkill -9 b9 > /dev/null"
1⤵
PID:908

/usr/bin/pkill
pkill -9 b9
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:909

/bin/busybox
busybox pkill -9 b9
2⤵
PID:910

/usr/busybox
/usr/busybox pkill -9 b9
2⤵
PID:911

/bin/busybox
/bin/busybox pkill -9 b9
2⤵
PID:912

/bin/sh
sh -c "pkill -9 b10 || busybox pkill -9 b10 || /usr/busybox pkill -9 b10 || /bin/busybox pkill -9 b10 > /dev/null"
1⤵
PID:913

/usr/bin/pkill
pkill -9 b10
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:914

/bin/busybox
busybox pkill -9 b10
2⤵
PID:915

/usr/busybox
/usr/busybox pkill -9 b10
2⤵
PID:916

/bin/busybox
/bin/busybox pkill -9 b10
2⤵
PID:917

/bin/sh
sh -c "pkill -9 b11 || busybox pkill -9 b11 || /usr/busybox pkill -9 b11 || /bin/busybox pkill -9 b11 > /dev/null"
1⤵
PID:918

/usr/bin/pkill
pkill -9 b11
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:919

/bin/busybox
busybox pkill -9 b11
2⤵
PID:920

/usr/busybox
/usr/busybox pkill -9 b11
2⤵
PID:921

/bin/busybox
/bin/busybox pkill -9 b11
2⤵
PID:922

/bin/sh
sh -c "pkill -9 b12 || busybox pkill -9 b12 || /usr/busybox pkill -9 b12 || /bin/busybox pkill -9 b12 > /dev/null"
1⤵
PID:923

/usr/bin/pkill
pkill -9 b12
2⤵
- Reads runtime system information
PID:924

/bin/busybox
busybox pkill -9 b12
2⤵
PID:925

/usr/busybox
/usr/busybox pkill -9 b12
2⤵
PID:926

/bin/busybox
/bin/busybox pkill -9 b12
2⤵
PID:927

/bin/sh
sh -c "pkill -9 b13 || busybox pkill -9 b13 || /usr/busybox pkill -9 b13 || /bin/busybox pkill -9 b13 > /dev/null"
1⤵
PID:928

/usr/bin/pkill
pkill -9 b13
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:929

/bin/busybox
busybox pkill -9 b13
2⤵
PID:930

/usr/busybox
/usr/busybox pkill -9 b13
2⤵
PID:931

/bin/busybox
/bin/busybox pkill -9 b13
2⤵
PID:932

/bin/sh
sh -c "pkill -9 b14 || busybox pkill -9 b14 || /usr/busybox pkill -9 b14 || /bin/busybox pkill -9 b14 > /dev/null"
1⤵
PID:933

/usr/bin/pkill
pkill -9 b14
2⤵
PID:934

/bin/busybox
busybox pkill -9 b14
2⤵
PID:935

/usr/busybox
/usr/busybox pkill -9 b14
2⤵
PID:936

/bin/busybox
/bin/busybox pkill -9 b14
2⤵
PID:937

/bin/sh
sh -c "pkill -9 b15 || busybox pkill -9 b15 || /usr/busybox pkill -9 b15 || /bin/busybox pkill -9 b15 > /dev/null"
1⤵
PID:938

/usr/bin/pkill
pkill -9 b15
2⤵
- Reads CPU attributes
PID:939

/bin/busybox
busybox pkill -9 b15
2⤵
PID:940

/usr/busybox
/usr/busybox pkill -9 b15
2⤵
PID:941

/bin/busybox
/bin/busybox pkill -9 b15
2⤵
PID:942

/bin/sh
sh -c "pkill -9 b16 || busybox pkill -9 b16 || /usr/busybox pkill -9 b16 || /bin/busybox pkill -9 b16 > /dev/null"
1⤵
PID:943

/usr/bin/pkill
pkill -9 b16
2⤵
- Reads runtime system information
PID:944

/bin/busybox
busybox pkill -9 b16
2⤵
PID:945

/usr/busybox
/usr/busybox pkill -9 b16
2⤵
PID:946

/bin/busybox
/bin/busybox pkill -9 b16
2⤵
PID:947

/bin/sh
sh -c "pkill -9 b17 || busybox pkill -9 b17 || /usr/busybox pkill -9 b17 || /bin/busybox pkill -9 b17 > /dev/null"
1⤵
PID:948

/usr/bin/pkill
pkill -9 b17
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:949

/bin/busybox
busybox pkill -9 b17
2⤵
PID:950

/usr/busybox
/usr/busybox pkill -9 b17
2⤵
PID:951

/bin/busybox
/bin/busybox pkill -9 b17
2⤵
PID:952

/bin/sh
sh -c "pkill -9 b18 || busybox pkill -9 b18 || /usr/busybox pkill -9 b18 || /bin/busybox pkill -9 b18 > /dev/null"
1⤵
PID:953

/usr/bin/pkill
pkill -9 b18
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:954

/bin/busybox
busybox pkill -9 b18
2⤵
PID:955

/usr/busybox
/usr/busybox pkill -9 b18
2⤵
PID:956

/bin/busybox
/bin/busybox pkill -9 b18
2⤵
PID:957

/bin/sh
sh -c "pkill -9 b19 || busybox pkill -9 b19 || /usr/busybox pkill -9 b19 || /bin/busybox pkill -9 b19 > /dev/null"
1⤵
PID:958

/usr/bin/pkill
pkill -9 b19
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:959

/bin/busybox
busybox pkill -9 b19
2⤵
PID:960

/usr/busybox
/usr/busybox pkill -9 b19
2⤵
PID:961

/bin/busybox
/bin/busybox pkill -9 b19
2⤵
PID:962

/bin/sh
sh -c "pkill -9 b20 || busybox pkill -9 b20 || /usr/busybox pkill -9 b20 || /bin/busybox pkill -9 b20 > /dev/null"
1⤵
PID:963

/usr/bin/pkill
pkill -9 b20
2⤵
- Reads runtime system information
PID:964

/bin/busybox
busybox pkill -9 b20
2⤵
PID:965

/usr/busybox
/usr/busybox pkill -9 b20
2⤵
PID:966

/bin/busybox
/bin/busybox pkill -9 b20
2⤵
PID:967

/bin/sh
sh -c "pkill -9 busyboxterrorist || busybox pkill -9 busyboxterrorist || /usr/busybox pkill -9 busyboxterrorist || /bin/busybox pkill -9 busyboxterrorist > /dev/null"
1⤵
PID:968

/usr/bin/pkill
pkill -9 busyboxterrorist
2⤵
PID:969

/bin/busybox
busybox pkill -9 busyboxterrorist
2⤵
PID:970

/usr/busybox
/usr/busybox pkill -9 busyboxterrorist
2⤵
PID:971

/bin/busybox
/bin/busybox pkill -9 busyboxterrorist
2⤵
PID:972

/bin/sh
sh -c "pkill -9 dvrHelper || busybox pkill -9 dvrHelper || /usr/busybox pkill -9 dvrHelper || /bin/busybox pkill -9 dvrHelper > /dev/null"
1⤵
PID:973

/usr/bin/pkill
pkill -9 dvrHelper
2⤵
- Reads runtime system information
PID:974

/bin/busybox
busybox pkill -9 dvrHelper
2⤵
PID:975

/usr/busybox
/usr/busybox pkill -9 dvrHelper
2⤵
PID:976

/bin/busybox
/bin/busybox pkill -9 dvrHelper
2⤵
PID:977

/bin/sh
sh -c "pkill -9 kmymips || busybox pkill -9 kmymips || /usr/busybox pkill -9 kmymips || /bin/busybox pkill -9 kmymips > /dev/null"
1⤵
PID:978

/usr/bin/pkill
pkill -9 kmymips
2⤵
- Reads runtime system information
PID:979

/bin/busybox
busybox pkill -9 kmymips
2⤵
PID:980

/usr/busybox
/usr/busybox pkill -9 kmymips
2⤵
PID:981

/bin/busybox
/bin/busybox pkill -9 kmymips
2⤵
PID:982

/bin/sh
sh -c "pkill -9 kmymips64 || busybox pkill -9 kmymips64 || /usr/busybox pkill -9 kmymips64 || /bin/busybox pkill -9 kmymips64 > /dev/null"
1⤵
PID:983

/usr/bin/pkill
pkill -9 kmymips64
2⤵
- Reads CPU attributes
PID:984

/bin/busybox
busybox pkill -9 kmymips64
2⤵
PID:985

/usr/busybox
/usr/busybox pkill -9 kmymips64
2⤵
PID:986

/bin/busybox
/bin/busybox pkill -9 kmymips64
2⤵
PID:987

/bin/sh
sh -c "pkill -9 kmymipsel || busybox pkill -9 kmymipsel || /usr/busybox pkill -9 kmymipsel || /bin/busybox pkill -9 kmymipsel > /dev/null"
1⤵
PID:988

/usr/bin/pkill
pkill -9 kmymipsel
2⤵
PID:989

/bin/busybox
busybox pkill -9 kmymipsel
2⤵
PID:990

/usr/busybox
/usr/busybox pkill -9 kmymipsel
2⤵
PID:991

/bin/busybox
/bin/busybox pkill -9 kmymipsel
2⤵
PID:992

/bin/sh
sh -c "pkill -9 kmysh2eb || busybox pkill -9 kmysh2eb || /usr/busybox pkill -9 kmysh2eb || /bin/busybox pkill -9 kmysh2eb > /dev/null"
1⤵
PID:993

/usr/bin/pkill
pkill -9 kmysh2eb
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:994

/bin/busybox
busybox pkill -9 kmysh2eb
2⤵
PID:995

/usr/busybox
/usr/busybox pkill -9 kmysh2eb
2⤵
PID:996

/bin/busybox
/bin/busybox pkill -9 kmysh2eb
2⤵
PID:997

/bin/sh
sh -c "pkill -9 kmysh2elf || busybox pkill -9 kmysh2elf || /usr/busybox pkill -9 kmysh2elf || /bin/busybox pkill -9 kmysh2elf > /dev/null"
1⤵
PID:998

/usr/bin/pkill
pkill -9 kmysh2elf
2⤵
- Reads CPU attributes
PID:999

/bin/busybox
busybox pkill -9 kmysh2elf
2⤵
PID:1000

/usr/busybox
/usr/busybox pkill -9 kmysh2elf
2⤵
PID:1001

/bin/busybox
/bin/busybox pkill -9 kmysh2elf
2⤵
PID:1002

/bin/sh
sh -c "pkill -9 kmysh4 || busybox pkill -9 kmysh4 || /usr/busybox pkill -9 kmysh4 || /bin/busybox pkill -9 kmysh4 > /dev/null"
1⤵
PID:1003

/usr/bin/pkill
pkill -9 kmysh4
2⤵
- Reads CPU attributes
PID:1004

/bin/busybox
busybox pkill -9 kmysh4
2⤵
PID:1005

/usr/busybox
/usr/busybox pkill -9 kmysh4
2⤵
PID:1006

/bin/busybox
/bin/busybox pkill -9 kmysh4
2⤵
PID:1007

/bin/sh
sh -c "pkill -9 kmyx86 || busybox pkill -9 kmyx86 || /usr/busybox pkill -9 kmyx86 || /bin/busybox pkill -9 kmyx86 > /dev/null"
1⤵
PID:1008

/usr/bin/pkill
pkill -9 kmyx86
2⤵
- Reads CPU attributes
PID:1009

/bin/busybox
busybox pkill -9 kmyx86
2⤵
PID:1010

/usr/busybox
/usr/busybox pkill -9 kmyx86
2⤵
PID:1011

/bin/busybox
/bin/busybox pkill -9 kmyx86
2⤵
PID:1012

/bin/sh
sh -c "pkill -9 kmyarmv5 || busybox pkill -9 kmyarmv5 || /usr/busybox pkill -9 kmyarmv5 || /bin/busybox pkill -9 kmyarmv5 > /dev/null"
1⤵
PID:1013

/usr/bin/pkill
pkill -9 kmyarmv5
2⤵
- Reads CPU attributes
PID:1014

/bin/busybox
busybox pkill -9 kmyarmv5
2⤵
PID:1015

/usr/busybox
/usr/busybox pkill -9 kmyarmv5
2⤵
PID:1016

/bin/busybox
/bin/busybox pkill -9 kmyarmv5
2⤵
PID:1017

/bin/sh
sh -c "pkill -9 kmyarmv4tl || busybox pkill -9 kmyarmv4tl || /usr/busybox pkill -9 kmyarmv4tl || /bin/busybox pkill -9 kmyarmv4tl > /dev/null"
1⤵
PID:1018

/usr/bin/pkill
pkill -9 kmyarmv4tl
2⤵
PID:1019

/bin/busybox
busybox pkill -9 kmyarmv4tl
2⤵
PID:1020

/usr/busybox
/usr/busybox pkill -9 kmyarmv4tl
2⤵
PID:1021

/bin/busybox
/bin/busybox pkill -9 kmyarmv4tl
2⤵
PID:1022

/bin/sh
sh -c "pkill -9 kmyarmv4 || busybox pkill -9 kmyarmv4 || /usr/busybox pkill -9 kmyarmv4 || /bin/busybox pkill -9 kmyarmv4 > /dev/null"
1⤵
PID:1023

/usr/bin/pkill
pkill -9 kmyarmv4
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1024

/bin/busybox
busybox pkill -9 kmyarmv4
2⤵
PID:1025

/usr/busybox
/usr/busybox pkill -9 kmyarmv4
2⤵
PID:1026

/bin/busybox
/bin/busybox pkill -9 kmyarmv4
2⤵
PID:1027

/bin/sh
sh -c "pkill -9 kmyarmv6 || busybox pkill -9 kmyarmv6 || /usr/busybox pkill -9 kmyarmv6 || /bin/busybox pkill -9 kmyarmv6 > /dev/null"
1⤵
PID:1028

/usr/bin/pkill
pkill -9 kmyarmv6
2⤵
PID:1029

/bin/busybox
busybox pkill -9 kmyarmv6
2⤵
PID:1030

/usr/busybox
/usr/busybox pkill -9 kmyarmv6
2⤵
PID:1031

/bin/busybox
/bin/busybox pkill -9 kmyarmv6
2⤵
PID:1032

/bin/sh
sh -c "pkill -9 kmyi686 || busybox pkill -9 kmyi686 || /usr/busybox pkill -9 kmyi686 || /bin/busybox pkill -9 kmyi686 > /dev/null"
1⤵
PID:1033

/usr/bin/pkill
pkill -9 kmyi686
2⤵
- Reads CPU attributes
PID:1034

/bin/busybox
busybox pkill -9 kmyi686
2⤵
PID:1035

/usr/busybox
/usr/busybox pkill -9 kmyi686
2⤵
PID:1036

/bin/busybox
/bin/busybox pkill -9 kmyi686
2⤵
PID:1037

/bin/sh
sh -c "pkill -9 kmypowerpc || busybox pkill -9 kmypowerpc || /usr/busybox pkill -9 kmypowerpc || /bin/busybox pkill -9 kmypowerpc > /dev/null"
1⤵
PID:1038

/usr/bin/pkill
pkill -9 kmypowerpc
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1039

/bin/busybox
busybox pkill -9 kmypowerpc
2⤵
PID:1040

/usr/busybox
/usr/busybox pkill -9 kmypowerpc
2⤵
PID:1041

/bin/busybox
/bin/busybox pkill -9 kmypowerpc
2⤵
PID:1042

/bin/sh
sh -c "pkill -9 kmypowerpc440fp || busybox pkill -9 kmypowerpc440fp || /usr/busybox pkill -9 kmypowerpc440fp || /bin/busybox pkill -9 kmypowerpc440fp > /dev/null"
1⤵
PID:1043

/usr/bin/pkill
pkill -9 kmypowerpc440fp
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1044

/bin/busybox
busybox pkill -9 kmypowerpc440fp
2⤵
PID:1045

/usr/busybox
/usr/busybox pkill -9 kmypowerpc440fp
2⤵
PID:1046

/bin/busybox
/bin/busybox pkill -9 kmypowerpc440fp
2⤵
PID:1047

/bin/sh
sh -c "pkill -9 kmyi586 || busybox pkill -9 kmyi586 || /usr/busybox pkill -9 kmyi586 || /bin/busybox pkill -9 kmyi586 > /dev/null"
1⤵
PID:1048

/usr/bin/pkill
pkill -9 kmyi586
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1049

/bin/busybox
busybox pkill -9 kmyi586
2⤵
PID:1050

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads