b6f77551e218f68eef279dda26c5a18a0d93afbcf72127f74326c7962f854c81

Analysis

max time kernel
141s
max time network
152s
platform
debian-9_mipsel
resource
debian9-mipsel-20231215-en
resource tags

arch:mipselimage:debian9-mipsel-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
19/12/2023, 23:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

652a3070fb63cbeff8633cea11b287d5
Size

100KB
MD5

652a3070fb63cbeff8633cea11b287d5
SHA1

52fa56b7a79a4513ee95435a58df30c7bf3d7375
SHA256

b6f77551e218f68eef279dda26c5a18a0d93afbcf72127f74326c7962f854c81
SHA512

155aade9054d6ef2788c819d5f2f97c42072038700b9db22f72c4fe276bc9a63c2f5746e94cec18ca05f0e92df62cad1652e74c5d663583d2cb85cc58dc11983
SSDEEP

1536:2NpeTotsdv3XATYOzdSzZI47xKtVE8i/JozlbXXUghweqPY78UI6BSAAaa:kbdSzLsBbXEPY78UIqRAaa

Score

6^/10

Malware Config

Signatures

Deletes log files 1 TTPs 1 IoCs

Deletes log files on the system.

Indicator Removal

T1070

description	ioc	Process
File deleted	/var/log/lastlog	rm

/tmp/652a3070fb63cbeff8633cea11b287d5
/tmp/652a3070fb63cbeff8633cea11b287d5
1⤵
PID:715
- /bin/sh
  sh -c
  2⤵
  PID:716
- /bin/sh
  sh -c
  2⤵
  PID:718
- /bin/sh
  sh -c
  2⤵
  PID:720
- /bin/sh
  sh -c
  2⤵
  PID:724
- /bin/sh
  sh -c
  2⤵
  PID:728
- /bin/sh
  sh -c
  2⤵
  PID:730
- /bin/sh
  sh -c
  2⤵
  PID:732
- /bin/sh
  sh -c
  2⤵
  PID:733
- /bin/sh
  sh -c
  2⤵
  PID:735
- /bin/sh
  sh -c
  2⤵
  PID:736
- /bin/sh
  sh -c
  2⤵
  PID:737
- /bin/sh
  sh -c
  2⤵
  PID:738
- /bin/sh
  sh -c
  2⤵
  PID:739
- /bin/sh
  sh -c
  2⤵
  PID:741
- /bin/sh
  sh -c
  2⤵
  PID:742
- /bin/sh
  sh -c
  2⤵
  PID:744
- /bin/sh
  sh -c
  2⤵
  PID:745
- /bin/sh
  sh -c
  2⤵
  PID:746
- /bin/sh
  sh -c
  2⤵
  PID:747
- /bin/sh
  sh -c
  2⤵
  PID:748
- /bin/sh
  sh -c
  2⤵
  PID:750
- /bin/sh
  sh -c
  2⤵
  PID:751
- /bin/sh
  sh -c
  2⤵
  PID:752
- /bin/sh
  sh -c
  2⤵
  PID:754
- /bin/sh
  sh -c
  2⤵
  PID:756
- /bin/sh
  sh -c
  2⤵
  PID:757
- /bin/sh
  sh -c
  2⤵
  PID:758
- /bin/sh
  sh -c
  2⤵
  PID:759
- /bin/sh
  sh -c
  2⤵
  PID:760
- /bin/sh
  sh -c
  2⤵
  PID:761
- /bin/sh
  sh -c
  2⤵
  PID:763
- /bin/sh
  sh -c
  2⤵
  PID:764
- /bin/sh
  sh -c
  2⤵
  PID:765
- /bin/sh
  sh -c
  2⤵
  PID:766
- /bin/sh
  sh -c
  2⤵
  PID:767
- /bin/sh
  sh -c
  2⤵
  PID:768
- /bin/sh
  sh -c
  2⤵
  PID:769
- /bin/sh
  sh -c
  2⤵
  PID:770
- /bin/sh
  sh -c
  2⤵
  PID:771
- /bin/sh
  sh -c
  2⤵
  PID:773
- /bin/sh
  sh -c
  2⤵
  PID:774
- /bin/sh
  sh -c
  2⤵
  PID:775
- /bin/sh
  sh -c
  2⤵
  PID:776
- /bin/sh
  sh -c
  2⤵
  PID:777
- /bin/sh
  sh -c
  2⤵
  PID:778
- /bin/sh
  sh -c
  2⤵
  PID:779
- /bin/sh
  sh -c
  2⤵
  PID:780
- /bin/sh
  sh -c
  2⤵
  PID:781
- /bin/sh
  sh -c
  2⤵
  PID:782
- /bin/sh
  sh -c
  2⤵
  PID:783
- /bin/sh
  sh -c
  2⤵
  PID:784
- /bin/sh
  sh -c
  2⤵
  PID:785
- /bin/sh
  sh -c
  2⤵
  PID:786
- /bin/sh
  sh -c
  2⤵
  PID:787
- /bin/sh
  sh -c
  2⤵
  PID:788
- /bin/sh
  sh -c
  2⤵
  PID:789
- /bin/sh
  sh -c
  2⤵
  PID:790
- /bin/sh
  sh -c
  2⤵
  PID:791
- /bin/sh
  sh -c
  2⤵
  PID:792
- /bin/sh
  sh -c
  2⤵
  PID:793
- /bin/sh
  sh -c
  2⤵
  PID:794
- /bin/sh
  sh -c
  2⤵
  PID:795
- /bin/sh
  sh -c
  2⤵
  PID:796
- /bin/sh
  sh -c
  2⤵
  PID:797
- /bin/sh
  sh -c
  2⤵
  PID:798
- /bin/sh
  sh -c
  2⤵
  PID:799
- /bin/sh
  sh -c
  2⤵
  PID:800
- /bin/sh
  sh -c
  2⤵
  PID:801
- /bin/sh
  sh -c
  2⤵
  PID:802
- /bin/sh
  sh -c
  2⤵
  PID:803
- /bin/sh
  sh -c
  2⤵
  PID:804
- /bin/sh
  sh -c
  2⤵
  PID:805
- /bin/sh
  sh -c
  2⤵
  PID:806
- /bin/sh
  sh -c
  2⤵
  PID:807
- /bin/sh
  sh -c
  2⤵
  PID:808
- /bin/sh
  sh -c
  2⤵
  PID:809
- /bin/sh
  sh -c
  2⤵
  PID:810
- /bin/sh
  sh -c
  2⤵
  PID:811
- /bin/sh
  sh -c
  2⤵
  PID:812
- /bin/sh
  sh -c
  2⤵
  PID:813
- /bin/sh
  sh -c
  2⤵
  PID:814
- /bin/sh
  sh -c
  2⤵
  PID:815
- /bin/sh
  sh -c
  2⤵
  PID:816
- /bin/sh
  sh -c
  2⤵
  PID:817
- /bin/sh
  sh -c
  2⤵
  PID:818
- /bin/sh
  sh -c
  2⤵
  PID:819
- /bin/sh
  sh -c
  2⤵
  PID:820
- /bin/sh
  sh -c
  2⤵
  PID:821
- /bin/sh
  sh -c
  2⤵
  PID:822
- /bin/sh
  sh -c
  2⤵
  PID:823
- /bin/sh
  sh -c
  2⤵
  PID:824
- /bin/sh
  sh -c
  2⤵
  PID:825
- /bin/sh
  sh -c
  2⤵
  PID:826
- /bin/sh
  sh -c
  2⤵
  PID:827
- /bin/sh
  sh -c
  2⤵
  PID:828
- /bin/sh
  sh -c
  2⤵
  PID:829
- /bin/sh
  sh -c
  2⤵
  PID:830
- /bin/sh
  sh -c
  2⤵
  PID:831
- /bin/sh
  sh -c
  2⤵
  PID:832
- /bin/sh
  sh -c
  2⤵
  PID:833
- /bin/sh
  sh -c
  2⤵
  PID:834
- /bin/sh
  sh -c
  2⤵
  PID:835
- /bin/sh
  sh -c
  2⤵
  PID:836
- /bin/sh
  sh -c
  2⤵
  PID:837
- /bin/sh
  sh -c
  2⤵
  PID:838
- /bin/sh
  sh -c
  2⤵
  PID:839
- /bin/sh
  sh -c
  2⤵
  PID:840
- /bin/sh
  sh -c
  2⤵
  PID:841
- /bin/sh
  sh -c
  2⤵
  PID:842
- /bin/sh
  sh -c
  2⤵
  PID:843
- /bin/sh
  sh -c
  2⤵
  PID:844
- /bin/sh
  sh -c
  2⤵
  PID:845
- /bin/sh
  sh -c
  2⤵
  PID:846
- /bin/sh
  sh -c
  2⤵
  PID:847
- /bin/sh
  sh -c
  2⤵
  PID:848
- /bin/sh
  sh -c
  2⤵
  PID:849
- /bin/sh
  sh -c
  2⤵
  PID:850
- /bin/sh
  sh -c
  2⤵
  PID:851
- /bin/sh
  sh -c
  2⤵
  PID:852
- /bin/sh
  sh -c
  2⤵
  PID:853
- /bin/sh
  sh -c
  2⤵
  PID:854
- /bin/sh
  sh -c
  2⤵
  PID:855
- /bin/sh
  sh -c
  2⤵
  PID:856
- /bin/sh
  sh -c
  2⤵
  PID:857
- /bin/sh
  sh -c
  2⤵
  PID:858
- /bin/sh
  sh -c
  2⤵
  PID:859
- /bin/sh
  sh -c
  2⤵
  PID:860
- /bin/sh
  sh -c
  2⤵
  PID:861
- /bin/sh
  sh -c
  2⤵
  PID:862
- /bin/sh
  sh -c
  2⤵
  PID:863
- /bin/sh
  sh -c
  2⤵
  PID:864
- /bin/sh
  sh -c
  2⤵
  PID:865
- /bin/sh
  sh -c
  2⤵
  PID:866
- /bin/sh
  sh -c
  2⤵
  PID:867
- /bin/sh
  sh -c
  2⤵
  PID:868
- /bin/sh
  sh -c
  2⤵
  PID:869
- /bin/sh
  sh -c
  2⤵
  PID:870
- /bin/sh
  sh -c
  2⤵
  PID:871
- /bin/sh
  sh -c
  2⤵
  PID:872
- /bin/sh
  sh -c
  2⤵
  PID:873
- /bin/sh
  sh -c
  2⤵
  PID:874
- /bin/sh
  sh -c
  2⤵
  PID:875
- /bin/sh
  sh -c
  2⤵
  PID:876
- /bin/sh
  sh -c
  2⤵
  PID:877
- /bin/sh
  sh -c
  2⤵
  PID:878
- /bin/sh
  sh -c
  2⤵
  PID:879
- /bin/sh
  sh -c
  2⤵
  PID:880
- /bin/sh
  sh -c
  2⤵
  PID:881
- /bin/sh
  sh -c
  2⤵
  PID:882
- /bin/sh
  sh -c
  2⤵
  PID:883
- /bin/sh
  sh -c
  2⤵
  PID:884
- /bin/sh
  sh -c
  2⤵
  PID:885
- /bin/sh
  sh -c
  2⤵
  PID:886
- /bin/sh
  sh -c
  2⤵
  PID:887
- /bin/sh
  sh -c
  2⤵
  PID:888
- /bin/sh
  sh -c
  2⤵
  PID:889
- /bin/sh
  sh -c
  2⤵
  PID:890
- /bin/sh
  sh -c
  2⤵
  PID:891
- /bin/sh
  sh -c
  2⤵
  PID:892
- /bin/sh
  sh -c
  2⤵
  PID:893
- /bin/sh
  sh -c
  2⤵
  PID:894
- /bin/sh
  sh -c
  2⤵
  PID:895
- /bin/sh
  sh -c
  2⤵
  PID:896
- /bin/sh
  sh -c
  2⤵
  PID:897
- /bin/sh
  sh -c
  2⤵
  PID:898
- /bin/sh
  sh -c
  2⤵
  PID:899
- /bin/sh
  sh -c
  2⤵
  PID:900
- /bin/sh
  sh -c
  2⤵
  PID:902
- /bin/sh
  sh -c
  2⤵
  PID:903
- /bin/sh
  sh -c
  2⤵
  PID:905
- /bin/sh
  sh -c
  2⤵
  PID:906
- /bin/sh
  sh -c
  2⤵
  PID:907
- /bin/sh
  sh -c
  2⤵
  PID:908
- /bin/sh
  sh -c
  2⤵
  PID:909
- /bin/sh
  sh -c
  2⤵
  PID:911
- /bin/sh
  sh -c
  2⤵
  PID:912
- /bin/sh
  sh -c
  2⤵
  PID:913
- /bin/sh
  sh -c
  2⤵
  PID:915
- /bin/sh
  sh -c
  2⤵
  PID:916
- /bin/sh
  sh -c
  2⤵
  PID:917
- /bin/sh
  sh -c
  2⤵
  PID:918
- /bin/sh
  sh -c
  2⤵
  PID:919
- /bin/sh
  sh -c
  2⤵
  PID:920
- /bin/sh
  sh -c
  2⤵
  PID:922
- /bin/sh
  sh -c
  2⤵
  PID:923
- /bin/sh
  sh -c
  2⤵
  PID:925
- /bin/sh
  sh -c
  2⤵
  PID:926
- /bin/sh
  sh -c
  2⤵
  PID:927
- /bin/sh
  sh -c
  2⤵
  PID:928
- /bin/sh
  sh -c
  2⤵
  PID:929
- /bin/sh
  sh -c
  2⤵
  PID:931
- /bin/sh
  sh -c
  2⤵
  PID:932
- /bin/sh
  sh -c
  2⤵
  PID:933
- /bin/sh
  sh -c
  2⤵
  PID:935
- /bin/sh
  sh -c
  2⤵
  PID:936
- /bin/sh
  sh -c
  2⤵
  PID:937
- /bin/sh
  sh -c
  2⤵
  PID:938
- /bin/sh
  sh -c
  2⤵
  PID:939
- /bin/sh
  sh -c
  2⤵
  PID:941
- /bin/sh
  sh -c
  2⤵
  PID:942
- /bin/sh
  sh -c
  2⤵
  PID:944
- /bin/sh
  sh -c
  2⤵
  PID:945
- /bin/sh
  sh -c
  2⤵
  PID:946
- /bin/sh
  sh -c
  2⤵
  PID:947
- /bin/sh
  sh -c
  2⤵
  PID:948
- /bin/sh
  sh -c
  2⤵
  PID:949
- /bin/sh
  sh -c
  2⤵
  PID:951
- /bin/sh
  sh -c
  2⤵
  PID:952
- /bin/sh
  sh -c
  2⤵
  PID:953
- /bin/sh
  sh -c
  2⤵
  PID:955
- /bin/sh
  sh -c
  2⤵
  PID:956
- /bin/sh
  sh -c
  2⤵
  PID:957
- /bin/sh
  sh -c
  2⤵
  PID:958
- /bin/sh
  sh -c
  2⤵
  PID:959
- /bin/sh
  sh -c
  2⤵
  PID:961
- /bin/sh
  sh -c
  2⤵
  PID:962
- /bin/sh
  sh -c
  2⤵
  PID:964
- /bin/sh
  sh -c
  2⤵
  PID:965
- /bin/sh
  sh -c
  2⤵
  PID:966
- /bin/sh
  sh -c
  2⤵
  PID:967
- /bin/sh
  sh -c
  2⤵
  PID:968
- /bin/sh
  sh -c
  2⤵
  PID:969
- /bin/sh
  sh -c
  2⤵
  PID:971
- /bin/sh
  sh -c
  2⤵
  PID:972
- /bin/sh
  sh -c
  2⤵
  PID:974
- /bin/sh
  sh -c
  2⤵
  PID:975
- /bin/sh
  sh -c
  2⤵
  PID:976
- /bin/sh
  sh -c
  2⤵
  PID:977
- /bin/sh
  sh -c
  2⤵
  PID:978
- /bin/sh
  sh -c
  2⤵
  PID:980
- /bin/sh
  sh -c
  2⤵
  PID:981
- /bin/sh
  sh -c
  2⤵
  PID:983
- /bin/sh
  sh -c
  2⤵
  PID:984
- /bin/sh
  sh -c
  2⤵
  PID:985
- /bin/sh
  sh -c
  2⤵
  PID:986
- /bin/sh
  sh -c
  2⤵
  PID:987
- /bin/sh
  sh -c
  2⤵
  PID:989
- /bin/sh
  sh -c
  2⤵
  PID:990
- /bin/sh
  sh -c
  2⤵
  PID:991
- /bin/sh
  sh -c
  2⤵
  PID:993
- /bin/sh
  sh -c
  2⤵
  PID:994
- /bin/sh
  sh -c
  2⤵
  PID:995
- /bin/sh
  sh -c
  2⤵
  PID:996
- /bin/sh
  sh -c
  2⤵
  PID:997
- /bin/sh
  sh -c
  2⤵
  PID:998
- /bin/sh
  sh -c
  2⤵
  PID:1000
- /bin/sh
  sh -c
  2⤵
  PID:1001
- /bin/sh
  sh -c
  2⤵
  PID:1002
- /bin/sh
  sh -c
  2⤵
  PID:1004
- /bin/sh
  sh -c
  2⤵
  PID:1005
- /bin/sh
  sh -c
  2⤵
  PID:1006
- /bin/sh
  sh -c
  2⤵
  PID:1007
- /bin/sh
  sh -c
  2⤵
  PID:1008
- /bin/sh
  sh -c
  2⤵
  PID:1010
- /bin/sh
  sh -c
  2⤵
  PID:1011
- /bin/sh
  sh -c
  2⤵
  PID:1013
- /bin/sh
  sh -c
  2⤵
  PID:1014
- /bin/sh
  sh -c
  2⤵
  PID:1015
- /bin/sh
  sh -c
  2⤵
  PID:1016
- /bin/sh
  sh -c
  2⤵
  PID:1017
- /bin/sh
  sh -c
  2⤵
  PID:1019
- /bin/sh
  sh -c
  2⤵
  PID:1020
- /bin/sh
  sh -c
  2⤵
  PID:1021
- /bin/sh
  sh -c
  2⤵
  PID:1023
- /bin/sh
  sh -c
  2⤵
  PID:1024
- /bin/sh
  sh -c
  2⤵
  PID:1025
- /bin/sh
  sh -c
  2⤵
  PID:1026
- /bin/sh
  sh -c
  2⤵
  PID:1027
- /bin/sh
  sh -c
  2⤵
  PID:1029
- /bin/sh
  sh -c
  2⤵
  PID:1030
- /bin/sh
  sh -c
  2⤵
  PID:1032
- /bin/sh
  sh -c
  2⤵
  PID:1033
- /bin/sh
  sh -c
  2⤵
  PID:1034
- /bin/sh
  sh -c
  2⤵
  PID:1035
- /bin/sh
  sh -c
  2⤵
  PID:1036
- /bin/sh
  sh -c
  2⤵
  PID:1037
- /bin/sh
  sh -c
  2⤵
  PID:1039
- /bin/sh
  sh -c
  2⤵
  PID:1040
- /bin/sh
  sh -c
  2⤵
  PID:1042
- /bin/sh
  sh -c
  2⤵
  PID:1044
- /bin/sh
  sh -c
  2⤵
  PID:1046
- /bin/sh
  sh -c
  2⤵
  PID:1047
- /bin/sh
  sh -c
  2⤵
  PID:1048
- /bin/sh
  sh -c
  2⤵
  PID:1049
- /bin/sh
  sh -c
  2⤵
  PID:1050
- /bin/sh
  sh -c
  2⤵
  PID:1051
- /bin/sh
  sh -c
  2⤵
  PID:1053
- /bin/sh
  sh -c
  2⤵
  PID:1054
- /bin/sh
  sh -c
  2⤵
  PID:1055
- /bin/sh
  sh -c
  2⤵
  PID:1057
- /bin/sh
  sh -c
  2⤵
  PID:1058
- /bin/sh
  sh -c
  2⤵
  PID:1060
- /bin/sh
  sh -c
  2⤵
  PID:1062
- /bin/sh
  sh -c
  2⤵
  PID:1064
- /bin/sh
  sh -c
  2⤵
  PID:1065
- /bin/sh
  sh -c
  2⤵
  PID:1067
- /bin/sh
  sh -c
  2⤵
  PID:1068
- /bin/sh
  sh -c
  2⤵
  PID:1069
- /bin/sh
  sh -c
  2⤵
  PID:1070
- /bin/sh
  sh -c
  2⤵
  PID:1071
- /bin/sh
  sh -c
  2⤵
  PID:1072
- /bin/sh
  sh -c
  2⤵
  PID:1077
- /bin/sh
  sh -c
  2⤵
  PID:1078
- /bin/sh
  sh -c
  2⤵
  PID:1080
- /bin/sh
  sh -c
  2⤵
  PID:1081
- /bin/sh
  sh -c
  2⤵
  PID:1082
- /bin/sh
  sh -c
  2⤵
  PID:1083
- /bin/sh
  sh -c
  2⤵
  PID:1084
- /bin/sh
  sh -c
  2⤵
  PID:1086
- /bin/sh
  sh -c
  2⤵
  PID:1087
- /bin/sh
  sh -c
  2⤵
  PID:1089
- /bin/sh
  sh -c
  2⤵
  PID:1090
- /bin/sh
  sh -c
  2⤵
  PID:1092
- /bin/sh
  sh -c
  2⤵
  PID:1093
- /bin/sh
  sh -c
  2⤵
  PID:1094
- /bin/sh
  sh -c
  2⤵
  PID:1095
- /bin/sh
  sh -c
  2⤵
  PID:1096
- /bin/sh
  sh -c
  2⤵
  PID:1098
- /bin/sh
  sh -c
  2⤵
  PID:1099
- /bin/sh
  sh -c
  2⤵
  PID:1100
- /bin/sh
  sh -c
  2⤵
  PID:1101
- /bin/sh
  sh -c
  2⤵
  PID:1102
- /bin/sh
  sh -c
  2⤵
  PID:1103
- /bin/sh
  sh -c
  2⤵
  PID:1104
- /bin/sh
  sh -c
  2⤵
  PID:1105
- /bin/sh
  sh -c
  2⤵
  PID:1106
- /bin/sh
  sh -c
  2⤵
  PID:1107
- /bin/sh
  sh -c
  2⤵
  PID:1109
- /bin/sh
  sh -c
  2⤵
  PID:1110
- /bin/sh
  sh -c
  2⤵
  PID:1111
- /bin/sh
  sh -c
  2⤵
  PID:1112
- /bin/sh
  sh -c
  2⤵
  PID:1113
- /bin/sh
  sh -c
  2⤵
  PID:1114
- /bin/sh
  sh -c
  2⤵
  PID:1115
- /bin/sh
  sh -c
  2⤵
  PID:1116
- /bin/sh
  sh -c
  2⤵
  PID:1117
- /bin/sh
  sh -c
  2⤵
  PID:1118
- /bin/sh
  sh -c
  2⤵
  PID:1119
- /bin/sh
  sh -c
  2⤵
  PID:1120
- /bin/sh
  sh -c
  2⤵
  PID:1121
- /bin/sh
  sh -c
  2⤵
  PID:1122
- /bin/sh
  sh -c
  2⤵
  PID:1123
- /bin/sh
  sh -c
  2⤵
  PID:1124
- /bin/sh
  sh -c
  2⤵
  PID:1125
- /bin/sh
  sh -c
  2⤵
  PID:1126
- /bin/sh
  sh -c
  2⤵
  PID:1127
- /bin/sh
  sh -c
  2⤵
  PID:1128
- /bin/sh
  sh -c
  2⤵
  PID:1129
- /bin/sh
  sh -c
  2⤵
  PID:1130
- /bin/sh
  sh -c
  2⤵
  PID:1131
- /bin/sh
  sh -c
  2⤵
  PID:1132
- /bin/sh
  sh -c
  2⤵
  PID:1133
- /bin/sh
  sh -c
  2⤵
  PID:1134
- /bin/sh
  sh -c
  2⤵
  PID:1135
- /bin/sh
  sh -c
  2⤵
  PID:1136
- /bin/sh
  sh -c
  2⤵
  PID:1137
- /bin/sh
  sh -c
  2⤵
  PID:1138
- /bin/sh
  sh -c
  2⤵
  PID:1139
- /bin/sh
  sh -c
  2⤵
  PID:1140
- /bin/sh
  sh -c
  2⤵
  PID:1141
- /bin/sh
  sh -c
  2⤵
  PID:1142
- /bin/sh
  sh -c
  2⤵
  PID:1143
- /bin/sh
  sh -c
  2⤵
  PID:1144
- /bin/sh
  sh -c
  2⤵
  PID:1145
- /bin/sh
  sh -c
  2⤵
  PID:1146
- /bin/sh
  sh -c
  2⤵
  PID:1147
- /bin/sh
  sh -c
  2⤵
  PID:1148
- /bin/sh
  sh -c
  2⤵
  PID:1149
- /bin/sh
  sh -c
  2⤵
  PID:1150
- /bin/sh
  sh -c
  2⤵
  PID:1151
- /bin/sh
  sh -c
  2⤵
  PID:1152
- /bin/sh
  sh -c
  2⤵
  PID:1153
- /bin/sh
  sh -c
  2⤵
  PID:1154
- /bin/sh
  sh -c
  2⤵
  PID:1155
- /bin/sh
  sh -c
  2⤵
  PID:1156
- /bin/sh
  sh -c
  2⤵
  PID:1157
- /bin/sh
  sh -c
  2⤵
  PID:1158
- /bin/sh
  sh -c
  2⤵
  PID:1159
- /bin/sh
  sh -c
  2⤵
  PID:1160
- /bin/sh
  sh -c
  2⤵
  PID:1161
- /bin/sh
  sh -c
  2⤵
  PID:1162
- /bin/sh
  sh -c
  2⤵
  PID:1163
- /bin/sh
  sh -c
  2⤵
  PID:1164
- /bin/sh
  sh -c
  2⤵
  PID:1165
- /bin/sh
  sh -c
  2⤵
  PID:1166
- /bin/sh
  sh -c
  2⤵
  PID:1167
- /bin/sh
  sh -c
  2⤵
  PID:1168
- /bin/sh
  sh -c
  2⤵
  PID:1169
- /bin/sh
  sh -c
  2⤵
  PID:1170
- /bin/sh
  sh -c
  2⤵
  PID:1171
- /bin/sh
  sh -c
  2⤵
  PID:1172
- /bin/sh
  sh -c
  2⤵
  PID:1173
- /bin/sh
  sh -c
  2⤵
  PID:1174
- /bin/sh
  sh -c
  2⤵
  PID:1175
- /bin/sh
  sh -c
  2⤵
  PID:1176
- /bin/sh
  sh -c
  2⤵
  PID:1177
- /bin/sh
  sh -c
  2⤵
  PID:1178
- /bin/sh
  sh -c
  2⤵
  PID:1179
- /bin/sh
  sh -c
  2⤵
  PID:1180
- /bin/sh
  sh -c
  2⤵
  PID:1181
- /bin/sh
  sh -c
  2⤵
  PID:1182
- /bin/sh
  sh -c
  2⤵
  PID:1183
- /bin/sh
  sh -c
  2⤵
  PID:1184
- /bin/sh
  sh -c
  2⤵
  PID:1185
- /bin/sh
  sh -c
  2⤵
  PID:1186
- /bin/sh
  sh -c
  2⤵
  PID:1187
- /bin/sh
  sh -c
  2⤵
  PID:1188
- /bin/sh
  sh -c
  2⤵
  PID:1189
- /bin/sh
  sh -c
  2⤵
  PID:1190
- /bin/sh
  sh -c
  2⤵
  PID:1191
- /bin/sh
  sh -c
  2⤵
  PID:1192
- /bin/sh
  sh -c
  2⤵
  PID:1193
- /bin/sh
  sh -c
  2⤵
  PID:1194
- /bin/sh
  sh -c
  2⤵
  PID:1195
- /bin/sh
  sh -c
  2⤵
  PID:1196
- /bin/sh
  sh -c
  2⤵
  PID:1197
- /bin/sh
  sh -c
  2⤵
  PID:1198
- /bin/sh
  sh -c
  2⤵
  PID:1199
- /bin/sh
  sh -c
  2⤵
  PID:1200
- /bin/sh
  sh -c
  2⤵
  PID:1201
- /bin/sh
  sh -c
  2⤵
  PID:1202
- /bin/sh
  sh -c
  2⤵
  PID:1203
- /bin/sh
  sh -c
  2⤵
  PID:1204
- /bin/sh
  sh -c
  2⤵
  PID:1205
- /bin/sh
  sh -c
  2⤵
  PID:1206
- /bin/sh
  sh -c
  2⤵
  PID:1207
- /bin/sh
  sh -c
  2⤵
  PID:1208
- /bin/sh
  sh -c
  2⤵
  PID:1209
- /bin/sh
  sh -c
  2⤵
  PID:1210
- /bin/sh
  sh -c
  2⤵
  PID:1211
- /bin/sh
  sh -c
  2⤵
  PID:1212
- /bin/sh
  sh -c
  2⤵
  PID:1213
- /bin/sh
  sh -c
  2⤵
  PID:1214
- /bin/sh
  sh -c
  2⤵
  PID:1215
- /bin/sh
  sh -c
  2⤵
  PID:1216
- /bin/sh
  sh -c
  2⤵
  PID:1217
- /bin/sh
  sh -c
  2⤵
  PID:1218
- /bin/sh
  sh -c
  2⤵
  PID:1219
- /bin/sh
  sh -c
  2⤵
  PID:1220
- /bin/sh
  sh -c
  2⤵
  PID:1221
- /bin/sh
  sh -c "rm -rf /var/log/lastlog; history -c;"
  2⤵
  PID:1222
- - /bin/rm
    rm -rf /var/log/lastlog
    3⤵
    - Deletes log files
    PID:1223

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

T1070

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads