00fce8f5f6519d7b531cf4206b9a9ea1900ad371f5b339972b4bb718db51d376

max time kernel
155s
max time network
133s
platform
ubuntu-20.04_amd64
resource
ubuntu2004-amd64-20240221-en
resource tags

arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system
submitted
21/02/2024, 19:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

test/bin/linuxrc
Size

1.1MB
MD5

991461b86aebecfd096dc11ff2a04b4b
SHA1

dc5074340d4631bbf89adc122e8f1a3ca8d87564
SHA256

dcd9a5af1c6297ed1a66c851efa305000335d8ade068ba515125a6612f1d5300
SHA512

8692fb03afbb9601444911167f579c23dfece59d04816b18591f7eb712572f63ce7b12e42dcc02f0e67110208f31f44501708f4b8d0fd8f20be6f1ea3bc0f3a5
SSDEEP

24576:qpLODejvoXyo2dIfScaxJZ7+0T8eaj+I++lZq49k77i:kLODe0XgdI83ak4/9k7u

Score

3^/10

Malware Config

Signatures

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id

/tmp/test/bin/linuxrc
/tmp/test/bin/linuxrc
1⤵
PID:1434
- /etc/init.d/rcS
  /etc/init.d/rcS
  2⤵
  PID:1435
- /bin/sh
  -/bin/sh
  2⤵
  PID:1436
- - /bin/id
    id -u
    3⤵
    PID:1441
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1442
- /bin/sh
  -/bin/sh
  2⤵
  PID:1446
- - /bin/id
    id -u
    3⤵
    PID:1447
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1448
- /bin/sh
  -/bin/sh
  2⤵
  PID:1449
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1450
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1451
- /bin/sh
  -/bin/sh
  2⤵
  PID:1452
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1453
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1454
- /bin/sh
  -/bin/sh
  2⤵
  PID:1455
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1456
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1457
- /bin/sh
  -/bin/sh
  2⤵
  PID:1458
- - /bin/id
    id -u
    3⤵
    PID:1459
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1460
- /bin/sh
  -/bin/sh
  2⤵
  PID:1461
- - /bin/id
    id -u
    3⤵
    PID:1462
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1463
- /bin/sh
  -/bin/sh
  2⤵
  PID:1464
- - /bin/id
    id -u
    3⤵
    PID:1465
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1466
- /bin/sh
  -/bin/sh
  2⤵
  PID:1467
- - /bin/id
    id -u
    3⤵
    PID:1468
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1469
- /bin/sh
  -/bin/sh
  2⤵
  PID:1470
- - /bin/id
    id -u
    3⤵
    PID:1471
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1472
- /bin/sh
  -/bin/sh
  2⤵
  PID:1473
- - /bin/id
    id -u
    3⤵
    PID:1474
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1475
- /bin/sh
  -/bin/sh
  2⤵
  PID:1476
- - /bin/id
    id -u
    3⤵
    PID:1477
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1478
- /bin/sh
  -/bin/sh
  2⤵
  PID:1479
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1480
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1481
- /bin/sh
  -/bin/sh
  2⤵
  PID:1482
- - /bin/id
    id -u
    3⤵
    PID:1483
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1484
- /bin/sh
  -/bin/sh
  2⤵
  PID:1485
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1486
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1487
- /bin/sh
  -/bin/sh
  2⤵
  PID:1488
- - /bin/id
    id -u
    3⤵
    PID:1489
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1490
- /bin/sh
  -/bin/sh
  2⤵
  PID:1491
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1492
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1493
- /bin/sh
  -/bin/sh
  2⤵
  PID:1494
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1495
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1496
- /bin/sh
  -/bin/sh
  2⤵
  PID:1497
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1498
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1499
- /bin/sh
  -/bin/sh
  2⤵
  PID:1500
- - /bin/id
    id -u
    3⤵
    PID:1501
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1502
- /bin/sh
  -/bin/sh
  2⤵
  PID:1503
- - /bin/id
    id -u
    3⤵
    PID:1504
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1505
- /bin/sh
  -/bin/sh
  2⤵
  PID:1506
- - /bin/id
    id -u
    3⤵
    PID:1507
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1508
- /bin/sh
  -/bin/sh
  2⤵
  PID:1509
- - /bin/id
    id -u
    3⤵
    PID:1510
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1511
- /bin/sh
  -/bin/sh
  2⤵
  PID:1512
- - /bin/id
    id -u
    3⤵
    PID:1513
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1514
- /bin/sh
  -/bin/sh
  2⤵
  PID:1529
- - /bin/id
    id -u
    3⤵
    PID:1530
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1531
- /bin/sh
  -/bin/sh
  2⤵
  PID:1532
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1533
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1534
- /bin/sh
  -/bin/sh
  2⤵
  PID:1535
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1536
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1537
- /bin/sh
  -/bin/sh
  2⤵
  PID:1538
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1539
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1540
- /bin/sh
  -/bin/sh
  2⤵
  PID:1541
- - /bin/id
    id -u
    3⤵
    PID:1542
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1543
- /bin/sh
  -/bin/sh
  2⤵
  PID:1544
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1545
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1546
- /bin/sh
  -/bin/sh
  2⤵
  PID:1547
- - /bin/id
    id -u
    3⤵
    PID:1548
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1549
- /bin/sh
  -/bin/sh
  2⤵
  PID:1550
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1551
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1552
- /bin/sh
  -/bin/sh
  2⤵
  PID:1553
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1554
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1555
- /bin/sh
  -/bin/sh
  2⤵
  PID:1556
- - /bin/id
    id -u
    3⤵
    PID:1557
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1558
- /bin/sh
  -/bin/sh
  2⤵
  PID:1559
- - /bin/id
    id -u
    3⤵
    PID:1560
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1561
- /bin/sh
  -/bin/sh
  2⤵
  PID:1562
- - /bin/id
    id -u
    3⤵
    PID:1563
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1564
- /bin/sh
  -/bin/sh
  2⤵
  PID:1565
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1566
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1567
- /bin/sh
  -/bin/sh
  2⤵
  PID:1568
- - /bin/id
    id -u
    3⤵
    PID:1569
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1570
- /bin/sh
  -/bin/sh
  2⤵
  PID:1571
- - /bin/id
    id -u
    3⤵
    PID:1572
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1573
- /bin/sh
  -/bin/sh
  2⤵
  PID:1574
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1575
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1576
- /bin/sh
  -/bin/sh
  2⤵
  PID:1577
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1578
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1579
- /bin/sh
  -/bin/sh
  2⤵
  PID:1580
- - /bin/id
    id -u
    3⤵
    PID:1581
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1582
- /bin/sh
  -/bin/sh
  2⤵
  PID:1583
- - /bin/id
    id -u
    3⤵
    PID:1584
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1585
- /bin/sh
  -/bin/sh
  2⤵
  PID:1586
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1587
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1588
- /bin/sh
  -/bin/sh
  2⤵
  PID:1589
- - /bin/id
    id -u
    3⤵
    PID:1590
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1591
- /bin/sh
  -/bin/sh
  2⤵
  PID:1592
- - /bin/id
    id -u
    3⤵
    PID:1593
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1594
- /bin/sh
  -/bin/sh
  2⤵
  PID:1595
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1596
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1597
- /bin/sh
  -/bin/sh
  2⤵
  PID:1598
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1599
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1600
- /bin/sh
  -/bin/sh
  2⤵
  PID:1601
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1602
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1603
- /bin/sh
  -/bin/sh
  2⤵
  PID:1604
- - /bin/id
    id -u
    3⤵
    PID:1605
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1606
- /bin/sh
  -/bin/sh
  2⤵
  PID:1607
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1608
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1609
- /bin/sh
  -/bin/sh
  2⤵
  PID:1610
- - /bin/id
    id -u
    3⤵
    PID:1611
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1612
- /bin/sh
  -/bin/sh
  2⤵
  PID:1613
- - /bin/id
    id -u
    3⤵
    PID:1614
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1615
- /bin/sh
  -/bin/sh
  2⤵
  PID:1616
- - /bin/id
    id -u
    3⤵
    PID:1617
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1618
- /bin/sh
  -/bin/sh
  2⤵
  PID:1619
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1620
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1621
- /bin/sh
  -/bin/sh
  2⤵
  PID:1622
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1623
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1624
- /bin/sh
  -/bin/sh
  2⤵
  PID:1625
- - /bin/id
    id -u
    3⤵
    PID:1626
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1627
- /bin/sh
  -/bin/sh
  2⤵
  PID:1628
- - /bin/id
    id -u
    3⤵
    PID:1629
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1630
- /bin/sh
  -/bin/sh
  2⤵
  PID:1631
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1632
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1633
- /bin/sh
  -/bin/sh
  2⤵
  PID:1634
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1635
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1636
- /bin/sh
  -/bin/sh
  2⤵
  PID:1637
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1638
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1639
- /bin/sh
  -/bin/sh
  2⤵
  PID:1640
- - /bin/id
    id -u
    3⤵
    PID:1641
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1642
- /bin/sh
  -/bin/sh
  2⤵
  PID:1643
- - /bin/id
    id -u
    3⤵
    PID:1644
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1645
- /bin/sh
  -/bin/sh
  2⤵
  PID:1646
- - /bin/id
    id -u
    3⤵
    PID:1647
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1648
- /bin/sh
  -/bin/sh
  2⤵
  PID:1649
- - /bin/id
    id -u
    3⤵
    PID:1650
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1651
- /bin/sh
  -/bin/sh
  2⤵
  PID:1652
- - /bin/id
    id -u
    3⤵
    PID:1653
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1654
- /bin/sh
  -/bin/sh
  2⤵
  PID:1655
- - /bin/id
    id -u
    3⤵
    PID:1656
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1657
- /bin/sh
  -/bin/sh
  2⤵
  PID:1658
- - /bin/id
    id -u
    3⤵
    PID:1659
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1660
- /bin/sh
  -/bin/sh
  2⤵
  PID:1661
- - /bin/id
    id -u
    3⤵
    PID:1662
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1663
- /bin/sh
  -/bin/sh
  2⤵
  PID:1664
- - /bin/id
    id -u
    3⤵
    PID:1665
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1666
- /bin/sh
  -/bin/sh
  2⤵
  PID:1667
- - /bin/id
    id -u
    3⤵
    PID:1668
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1669
- /bin/sh
  -/bin/sh
  2⤵
  PID:1670
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1671
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1672
- /bin/sh
  -/bin/sh
  2⤵
  PID:1673
- - /bin/id
    id -u
    3⤵
    PID:1674
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1675
- /bin/sh
  -/bin/sh
  2⤵
  PID:1676
- - /bin/id
    id -u
    3⤵
    PID:1677
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1678
- /bin/sh
  -/bin/sh
  2⤵
  PID:1679
- - /bin/id
    id -u
    3⤵
    PID:1680
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1681
- /bin/sh
  -/bin/sh
  2⤵
  PID:1682
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1683
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1684
- /bin/sh
  -/bin/sh
  2⤵
  PID:1685
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1686
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1687
- /bin/sh
  -/bin/sh
  2⤵
  PID:1688
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1689
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1690
- /bin/sh
  -/bin/sh
  2⤵
  PID:1691
- - /bin/id
    id -u
    3⤵
    PID:1692
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1693
- /bin/sh
  -/bin/sh
  2⤵
  PID:1694
- - /bin/id
    id -u
    3⤵
    PID:1695
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1696
- /bin/sh
  -/bin/sh
  2⤵
  PID:1697
- - /bin/id
    id -u
    3⤵
    PID:1698
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1699
- /bin/sh
  -/bin/sh
  2⤵
  PID:1700
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1701
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1702
- /bin/sh
  -/bin/sh
  2⤵
  PID:1703
- - /bin/id
    id -u
    3⤵
    PID:1704
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1705
- /bin/sh
  -/bin/sh
  2⤵
  PID:1706
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1707
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1708
- /bin/sh
  -/bin/sh
  2⤵
  PID:1709
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1710
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1711
- /bin/sh
  -/bin/sh
  2⤵
  PID:1712
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1713
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1714
- /bin/sh
  -/bin/sh
  2⤵
  PID:1715
- - /bin/id
    id -u
    3⤵
    PID:1716
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1717
- /bin/sh
  -/bin/sh
  2⤵
  PID:1718
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1719
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1720
- /bin/sh
  -/bin/sh
  2⤵
  PID:1721
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1722
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1723
- /bin/sh
  -/bin/sh
  2⤵
  PID:1724
- - /bin/id
    id -u
    3⤵
    PID:1725
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1726
- /bin/sh
  -/bin/sh
  2⤵
  PID:1727
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1728
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1729
- /bin/sh
  -/bin/sh
  2⤵
  PID:1730
- - /bin/id
    id -u
    3⤵
    PID:1731
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1732
- /bin/sh
  -/bin/sh
  2⤵
  PID:1733
- - /bin/id
    id -u
    3⤵
    PID:1734
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1735
- /bin/sh
  -/bin/sh
  2⤵
  PID:1736
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1737
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1738
- /bin/sh
  -/bin/sh
  2⤵
  PID:1739
- - /bin/id
    id -u
    3⤵
    PID:1740
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1741
- /bin/sh
  -/bin/sh
  2⤵
  PID:1742
- - /bin/id
    id -u
    3⤵
    PID:1743
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1744
- /bin/sh
  -/bin/sh
  2⤵
  PID:1745
- - /bin/id
    id -u
    3⤵
    PID:1746
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1747
- /bin/sh
  -/bin/sh
  2⤵
  PID:1748
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1749
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1750
- /bin/sh
  -/bin/sh
  2⤵
  PID:1751
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1752
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1753
- /bin/sh
  -/bin/sh
  2⤵
  PID:1754
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1755
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1756
- /bin/sh
  -/bin/sh
  2⤵
  PID:1757
- - /bin/id
    id -u
    3⤵
    PID:1758
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1759
- /bin/sh
  -/bin/sh
  2⤵
  PID:1760
- - /bin/id
    id -u
    3⤵
    PID:1761
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1762
- /bin/sh
  -/bin/sh
  2⤵
  PID:1763
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1764
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1765
- /bin/sh
  -/bin/sh
  2⤵
  PID:1766
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1767
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1768
- /bin/sh
  -/bin/sh
  2⤵
  PID:1769
- - /bin/id
    id -u
    3⤵
    PID:1770
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1771
- /bin/sh
  -/bin/sh
  2⤵
  PID:1772
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1773
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1774
- /bin/sh
  -/bin/sh
  2⤵
  PID:1775
- - /bin/id
    id -u
    3⤵
    PID:1776
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1777
- /bin/sh
  -/bin/sh
  2⤵
  PID:1778
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1779
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1780
- /bin/sh
  -/bin/sh
  2⤵
  PID:1781
- - /bin/id
    id -u
    3⤵
    PID:1782
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1783
- /bin/sh
  -/bin/sh
  2⤵
  PID:1784
- - /bin/id
    id -u
    3⤵
    PID:1785
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1786
- /bin/sh
  -/bin/sh
  2⤵
  PID:1787
- - /bin/id
    id -u
    3⤵
    PID:1788
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1789
- /bin/sh
  -/bin/sh
  2⤵
  PID:1790
- - /bin/id
    id -u
    3⤵
    PID:1791
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1792
- /bin/sh
  -/bin/sh
  2⤵
  PID:1793
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1794
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1795
- /bin/sh
  -/bin/sh
  2⤵
  PID:1796
- - /bin/id
    id -u
    3⤵
    PID:1797
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1798
- /bin/sh
  -/bin/sh
  2⤵
  PID:1799
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1800
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1801
- /bin/sh
  -/bin/sh
  2⤵
  PID:1802
- - /bin/id
    id -u
    3⤵
    PID:1803
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1804
- /bin/sh
  -/bin/sh
  2⤵
  PID:1805
- - /bin/id
    id -u
    3⤵
    PID:1806
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1807
- /bin/sh
  -/bin/sh
  2⤵
  PID:1808
- - /bin/id
    id -u
    3⤵
    PID:1809
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1810
- /bin/sh
  -/bin/sh
  2⤵
  PID:1811
- - /bin/id
    id -u
    3⤵
    PID:1812
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1813
- /bin/sh
  -/bin/sh
  2⤵
  PID:1814
- - /bin/id
    id -u
    3⤵
    PID:1815
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1816
- /bin/sh
  -/bin/sh
  2⤵
  PID:1817
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1818
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1819
- /bin/sh
  -/bin/sh
  2⤵
  PID:1820
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1821
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1822
- /bin/sh
  -/bin/sh
  2⤵
  PID:1823
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1824
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1825
- /bin/sh
  -/bin/sh
  2⤵
  PID:1826
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1827
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1828
- /bin/sh
  -/bin/sh
  2⤵
  PID:1829
- - /bin/id
    id -u
    3⤵
    PID:1830
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1831
- /bin/sh
  -/bin/sh
  2⤵
  PID:1832
- - /bin/id
    id -u
    3⤵
    PID:1833
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1834
- /bin/sh
  -/bin/sh
  2⤵
  PID:1835
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1836
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1837
- /bin/sh
  -/bin/sh
  2⤵
  PID:1838
- - /bin/id
    id -u
    3⤵
    PID:1839
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1840
- /bin/sh
  -/bin/sh
  2⤵
  PID:1841
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1842
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1843
- /bin/sh
  -/bin/sh
  2⤵
  PID:1844
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1845
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1846
- /bin/sh
  -/bin/sh
  2⤵
  PID:1847
- - /bin/id
    id -u
    3⤵
    PID:1848
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1849
- /bin/sh
  -/bin/sh
  2⤵
  PID:1850
- - /bin/id
    id -u
    3⤵
    PID:1851
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1852
- /bin/sh
  -/bin/sh
  2⤵
  PID:1853
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1854
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1855
- /bin/sh
  -/bin/sh
  2⤵
  PID:1856
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1857
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1858
- /bin/sh
  -/bin/sh
  2⤵
  PID:1859
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1860
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1861
- /bin/sh
  -/bin/sh
  2⤵
  PID:1862
- - /bin/id
    id -u
    3⤵
    PID:1863
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1864
- /bin/sh
  -/bin/sh
  2⤵
  PID:1865
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1866
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1867
- /bin/sh
  -/bin/sh
  2⤵
  PID:1868
- - /bin/id
    id -u
    3⤵
    PID:1869
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1870
- /bin/sh
  -/bin/sh
  2⤵
  PID:1871
- - /bin/id
    id -u
    3⤵
    PID:1872
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1873
- /bin/sh
  -/bin/sh
  2⤵
  PID:1874
- - /bin/id
    id -u
    3⤵
    PID:1875
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1876
- /bin/sh
  -/bin/sh
  2⤵
  PID:1877
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1878
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1879
- /bin/sh
  -/bin/sh
  2⤵
  PID:1880
- - /bin/id
    id -u
    3⤵
    PID:1881
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1882
- /bin/sh
  -/bin/sh
  2⤵
  PID:1883
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1884
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1885
- /bin/sh
  -/bin/sh
  2⤵
  PID:1886
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1887
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1888
- /bin/sh
  -/bin/sh
  2⤵
  PID:1889
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1890
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1891
- /bin/sh
  -/bin/sh
  2⤵
  PID:1892
- - /bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1893
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1894
- /bin/sh
  -/bin/sh
  2⤵
  PID:1895
- - /bin/id
    id -u
    3⤵
    PID:1896
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1897
- /bin/sh
  -/bin/sh
  2⤵
  PID:1898
- - /bin/id
    id -u
    3⤵
    PID:1899
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1900

Windows 7 deprecation

Loading Replay Monitor...

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads