00fce8f5f6519d7b531cf4206b9a9ea1900ad371f5b339972b4bb718db51d376

max time kernel
153s
max time network
132s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240221-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240221-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
21-02-2024 19:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

test/bin/linuxrc
Size

1.1MB
MD5

991461b86aebecfd096dc11ff2a04b4b
SHA1

dc5074340d4631bbf89adc122e8f1a3ca8d87564
SHA256

dcd9a5af1c6297ed1a66c851efa305000335d8ade068ba515125a6612f1d5300
SHA512

8692fb03afbb9601444911167f579c23dfece59d04816b18591f7eb712572f63ce7b12e42dcc02f0e67110208f31f44501708f4b8d0fd8f20be6f1ea3bc0f3a5
SSDEEP

24576:qpLODejvoXyo2dIfScaxJZ7+0T8eaj+I++lZq49k77i:kLODe0XgdI83ak4/9k7u

Score

3^/10

Malware Config

Signatures

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/filesystems	id

/tmp/test/bin/linuxrc
/tmp/test/bin/linuxrc
1⤵
PID:1552
- /etc/init.d/rcS
  /etc/init.d/rcS
  2⤵
  PID:1553
- /bin/sh
  -/bin/sh
  2⤵
  PID:1554
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1558
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1559
- /bin/sh
  -/bin/sh
  2⤵
  PID:1564
- - /usr/bin/id
    id -u
    3⤵
    PID:1565
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1566
- /bin/sh
  -/bin/sh
  2⤵
  PID:1567
- - /usr/bin/id
    id -u
    3⤵
    PID:1568
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1569
- /bin/sh
  -/bin/sh
  2⤵
  PID:1570
- - /usr/bin/id
    id -u
    3⤵
    PID:1571
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1572
- /bin/sh
  -/bin/sh
  2⤵
  PID:1573
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1574
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1575
- /bin/sh
  -/bin/sh
  2⤵
  PID:1576
- - /usr/bin/id
    id -u
    3⤵
    PID:1577
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1578
- /bin/sh
  -/bin/sh
  2⤵
  PID:1579
- - /usr/bin/id
    id -u
    3⤵
    PID:1580
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1581
- /bin/sh
  -/bin/sh
  2⤵
  PID:1582
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1583
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1584
- /bin/sh
  -/bin/sh
  2⤵
  PID:1585
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1586
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1587
- /bin/sh
  -/bin/sh
  2⤵
  PID:1588
- - /usr/bin/id
    id -u
    3⤵
    PID:1589
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1590
- /bin/sh
  -/bin/sh
  2⤵
  PID:1591
- - /usr/bin/id
    id -u
    3⤵
    PID:1592
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1593
- /bin/sh
  -/bin/sh
  2⤵
  PID:1594
- - /usr/bin/id
    id -u
    3⤵
    PID:1595
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1596
- /bin/sh
  -/bin/sh
  2⤵
  PID:1597
- - /usr/bin/id
    id -u
    3⤵
    PID:1598
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1599
- /bin/sh
  -/bin/sh
  2⤵
  PID:1600
- - /usr/bin/id
    id -u
    3⤵
    PID:1601
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1602
- /bin/sh
  -/bin/sh
  2⤵
  PID:1603
- - /usr/bin/id
    id -u
    3⤵
    PID:1604
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1605
- /bin/sh
  -/bin/sh
  2⤵
  PID:1606
- - /usr/bin/id
    id -u
    3⤵
    PID:1607
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1608
- /bin/sh
  -/bin/sh
  2⤵
  PID:1609
- - /usr/bin/id
    id -u
    3⤵
    PID:1610
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1611
- /bin/sh
  -/bin/sh
  2⤵
  PID:1612
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1613
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1614
- /bin/sh
  -/bin/sh
  2⤵
  PID:1615
- - /usr/bin/id
    id -u
    3⤵
    PID:1616
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1617
- /bin/sh
  -/bin/sh
  2⤵
  PID:1618
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1619
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1620
- /bin/sh
  -/bin/sh
  2⤵
  PID:1621
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1622
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1623
- /bin/sh
  -/bin/sh
  2⤵
  PID:1624
- - /usr/bin/id
    id -u
    3⤵
    PID:1625
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1626
- /bin/sh
  -/bin/sh
  2⤵
  PID:1627
- - /usr/bin/id
    id -u
    3⤵
    PID:1628
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1629
- /bin/sh
  -/bin/sh
  2⤵
  PID:1630
- - /usr/bin/id
    id -u
    3⤵
    PID:1631
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1632
- /bin/sh
  -/bin/sh
  2⤵
  PID:1633
- - /usr/bin/id
    id -u
    3⤵
    PID:1634
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1635
- /bin/sh
  -/bin/sh
  2⤵
  PID:1636
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1637
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1638
- /bin/sh
  -/bin/sh
  2⤵
  PID:1641
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1642
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1643
- /bin/sh
  -/bin/sh
  2⤵
  PID:1644
- - /usr/bin/id
    id -u
    3⤵
    PID:1645
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1646
- /bin/sh
  -/bin/sh
  2⤵
  PID:1647
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1648
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1649
- /bin/sh
  -/bin/sh
  2⤵
  PID:1650
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1651
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1652
- /bin/sh
  -/bin/sh
  2⤵
  PID:1653
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1654
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1655
- /bin/sh
  -/bin/sh
  2⤵
  PID:1656
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1657
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1658
- /bin/sh
  -/bin/sh
  2⤵
  PID:1659
- - /usr/bin/id
    id -u
    3⤵
    PID:1660
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1661
- /bin/sh
  -/bin/sh
  2⤵
  PID:1662
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1663
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1664
- /bin/sh
  -/bin/sh
  2⤵
  PID:1665
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1666
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1667
- /bin/sh
  -/bin/sh
  2⤵
  PID:1668
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1669
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1670
- /bin/sh
  -/bin/sh
  2⤵
  PID:1671
- - /usr/bin/id
    id -u
    3⤵
    PID:1672
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1673
- /bin/sh
  -/bin/sh
  2⤵
  PID:1674
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1675
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1676
- /bin/sh
  -/bin/sh
  2⤵
  PID:1677
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1678
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1679
- /bin/sh
  -/bin/sh
  2⤵
  PID:1680
- - /usr/bin/id
    id -u
    3⤵
    PID:1681
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1682
- /bin/sh
  -/bin/sh
  2⤵
  PID:1683
- - /usr/bin/id
    id -u
    3⤵
    PID:1684
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1685
- /bin/sh
  -/bin/sh
  2⤵
  PID:1686
- - /usr/bin/id
    id -u
    3⤵
    PID:1687
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1688
- /bin/sh
  -/bin/sh
  2⤵
  PID:1689
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1690
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1691
- /bin/sh
  -/bin/sh
  2⤵
  PID:1692
- - /usr/bin/id
    id -u
    3⤵
    PID:1693
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1694
- /bin/sh
  -/bin/sh
  2⤵
  PID:1695
- - /usr/bin/id
    id -u
    3⤵
    PID:1696
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1697
- /bin/sh
  -/bin/sh
  2⤵
  PID:1698
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1699
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1700
- /bin/sh
  -/bin/sh
  2⤵
  PID:1701
- - /usr/bin/id
    id -u
    3⤵
    PID:1702
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1703
- /bin/sh
  -/bin/sh
  2⤵
  PID:1704
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1705
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1706
- /bin/sh
  -/bin/sh
  2⤵
  PID:1707
- - /usr/bin/id
    id -u
    3⤵
    PID:1708
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1709
- /bin/sh
  -/bin/sh
  2⤵
  PID:1710
- - /usr/bin/id
    id -u
    3⤵
    PID:1711
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1712
- /bin/sh
  -/bin/sh
  2⤵
  PID:1713
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1714
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1715
- /bin/sh
  -/bin/sh
  2⤵
  PID:1716
- - /usr/bin/id
    id -u
    3⤵
    PID:1717
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1718
- /bin/sh
  -/bin/sh
  2⤵
  PID:1719
- - /usr/bin/id
    id -u
    3⤵
    PID:1720
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1721
- /bin/sh
  -/bin/sh
  2⤵
  PID:1722
- - /usr/bin/id
    id -u
    3⤵
    PID:1723
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1724
- /bin/sh
  -/bin/sh
  2⤵
  PID:1725
- - /usr/bin/id
    id -u
    3⤵
    PID:1726
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1727
- /bin/sh
  -/bin/sh
  2⤵
  PID:1728
- - /usr/bin/id
    id -u
    3⤵
    PID:1729
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1730
- /bin/sh
  -/bin/sh
  2⤵
  PID:1731
- - /usr/bin/id
    id -u
    3⤵
    PID:1732
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1733
- /bin/sh
  -/bin/sh
  2⤵
  PID:1734
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1735
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1736
- /bin/sh
  -/bin/sh
  2⤵
  PID:1737
- - /usr/bin/id
    id -u
    3⤵
    PID:1738
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1739
- /bin/sh
  -/bin/sh
  2⤵
  PID:1740
- - /usr/bin/id
    id -u
    3⤵
    PID:1741
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1742
- /bin/sh
  -/bin/sh
  2⤵
  PID:1743
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1744
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1745
- /bin/sh
  -/bin/sh
  2⤵
  PID:1746
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1747
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1748
- /bin/sh
  -/bin/sh
  2⤵
  PID:1749
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1750
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1751
- /bin/sh
  -/bin/sh
  2⤵
  PID:1752
- - /usr/bin/id
    id -u
    3⤵
    PID:1753
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1754
- /bin/sh
  -/bin/sh
  2⤵
  PID:1755
- - /usr/bin/id
    id -u
    3⤵
    PID:1756
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1757
- /bin/sh
  -/bin/sh
  2⤵
  PID:1758
- - /usr/bin/id
    id -u
    3⤵
    PID:1759
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1760
- /bin/sh
  -/bin/sh
  2⤵
  PID:1761
- - /usr/bin/id
    id -u
    3⤵
    PID:1762
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1763
- /bin/sh
  -/bin/sh
  2⤵
  PID:1764
- - /usr/bin/id
    id -u
    3⤵
    PID:1765
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1766
- /bin/sh
  -/bin/sh
  2⤵
  PID:1767
- - /usr/bin/id
    id -u
    3⤵
    PID:1768
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1769
- /bin/sh
  -/bin/sh
  2⤵
  PID:1770
- - /usr/bin/id
    id -u
    3⤵
    PID:1771
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1772
- /bin/sh
  -/bin/sh
  2⤵
  PID:1773
- - /usr/bin/id
    id -u
    3⤵
    PID:1774
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1775
- /bin/sh
  -/bin/sh
  2⤵
  PID:1776
- - /usr/bin/id
    id -u
    3⤵
    PID:1777
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1778
- /bin/sh
  -/bin/sh
  2⤵
  PID:1779
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1780
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1781
- /bin/sh
  -/bin/sh
  2⤵
  PID:1782
- - /usr/bin/id
    id -u
    3⤵
    PID:1783
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1784
- /bin/sh
  -/bin/sh
  2⤵
  PID:1785
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1786
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1787
- /bin/sh
  -/bin/sh
  2⤵
  PID:1788
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1789
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1790
- /bin/sh
  -/bin/sh
  2⤵
  PID:1791
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1792
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1793
- /bin/sh
  -/bin/sh
  2⤵
  PID:1794
- - /usr/bin/id
    id -u
    3⤵
    PID:1795
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1796
- /bin/sh
  -/bin/sh
  2⤵
  PID:1797
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1798
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1799
- /bin/sh
  -/bin/sh
  2⤵
  PID:1800
- - /usr/bin/id
    id -u
    3⤵
    PID:1801
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1802
- /bin/sh
  -/bin/sh
  2⤵
  PID:1803
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1804
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1805
- /bin/sh
  -/bin/sh
  2⤵
  PID:1806
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1807
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1808
- /bin/sh
  -/bin/sh
  2⤵
  PID:1809
- - /usr/bin/id
    id -u
    3⤵
    PID:1810
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1811
- /bin/sh
  -/bin/sh
  2⤵
  PID:1812
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1813
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1814
- /bin/sh
  -/bin/sh
  2⤵
  PID:1815
- - /usr/bin/id
    id -u
    3⤵
    PID:1816
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1817
- /bin/sh
  -/bin/sh
  2⤵
  PID:1818
- - /usr/bin/id
    id -u
    3⤵
    PID:1819
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1820
- /bin/sh
  -/bin/sh
  2⤵
  PID:1821
- - /usr/bin/id
    id -u
    3⤵
    PID:1822
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1823
- /bin/sh
  -/bin/sh
  2⤵
  PID:1824
- - /usr/bin/id
    id -u
    3⤵
    PID:1825
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1826
- /bin/sh
  -/bin/sh
  2⤵
  PID:1827
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1828
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1829
- /bin/sh
  -/bin/sh
  2⤵
  PID:1830
- - /usr/bin/id
    id -u
    3⤵
    PID:1831
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1832
- /bin/sh
  -/bin/sh
  2⤵
  PID:1833
- - /usr/bin/id
    id -u
    3⤵
    PID:1834
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1835
- /bin/sh
  -/bin/sh
  2⤵
  PID:1836
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1837
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1838
- /bin/sh
  -/bin/sh
  2⤵
  PID:1839
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1840
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1841
- /bin/sh
  -/bin/sh
  2⤵
  PID:1842
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1843
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1844
- /bin/sh
  -/bin/sh
  2⤵
  PID:1845
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1846
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1847
- /bin/sh
  -/bin/sh
  2⤵
  PID:1848
- - /usr/bin/id
    id -u
    3⤵
    PID:1849
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1850
- /bin/sh
  -/bin/sh
  2⤵
  PID:1851
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1852
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1853
- /bin/sh
  -/bin/sh
  2⤵
  PID:1854
- - /usr/bin/id
    id -u
    3⤵
    PID:1855
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1856
- /bin/sh
  -/bin/sh
  2⤵
  PID:1857
- - /usr/bin/id
    id -u
    3⤵
    PID:1858
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1859
- /bin/sh
  -/bin/sh
  2⤵
  PID:1860
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1861
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1862
- /bin/sh
  -/bin/sh
  2⤵
  PID:1863
- - /usr/bin/id
    id -u
    3⤵
    PID:1864
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1865
- /bin/sh
  -/bin/sh
  2⤵
  PID:1866
- - /usr/bin/id
    id -u
    3⤵
    PID:1867
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1868
- /bin/sh
  -/bin/sh
  2⤵
  PID:1869
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1870
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1871
- /bin/sh
  -/bin/sh
  2⤵
  PID:1872
- - /usr/bin/id
    id -u
    3⤵
    PID:1873
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1874
- /bin/sh
  -/bin/sh
  2⤵
  PID:1875
- - /usr/bin/id
    id -u
    3⤵
    PID:1876
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1877
- /bin/sh
  -/bin/sh
  2⤵
  PID:1878
- - /usr/bin/id
    id -u
    3⤵
    PID:1879
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1880
- /bin/sh
  -/bin/sh
  2⤵
  PID:1881
- - /usr/bin/id
    id -u
    3⤵
    PID:1882
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1883
- /bin/sh
  -/bin/sh
  2⤵
  PID:1884
- - /usr/bin/id
    id -u
    3⤵
    PID:1885
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1886
- /bin/sh
  -/bin/sh
  2⤵
  PID:1887
- - /usr/bin/id
    id -u
    3⤵
    PID:1888
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1889
- /bin/sh
  -/bin/sh
  2⤵
  PID:1890
- - /usr/bin/id
    id -u
    3⤵
    PID:1891
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1892
- /bin/sh
  -/bin/sh
  2⤵
  PID:1893
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1894
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1895
- /bin/sh
  -/bin/sh
  2⤵
  PID:1896
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1897
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1898
- /bin/sh
  -/bin/sh
  2⤵
  PID:1899
- - /usr/bin/id
    id -u
    3⤵
    PID:1900
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1901
- /bin/sh
  -/bin/sh
  2⤵
  PID:1902
- - /usr/bin/id
    id -u
    3⤵
    PID:1903
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1904
- /bin/sh
  -/bin/sh
  2⤵
  PID:1905
- - /usr/bin/id
    id -u
    3⤵
    PID:1906
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1907
- /bin/sh
  -/bin/sh
  2⤵
  PID:1908
- - /usr/bin/id
    id -u
    3⤵
    PID:1909
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1910
- /bin/sh
  -/bin/sh
  2⤵
  PID:1911
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1912
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1913
- /bin/sh
  -/bin/sh
  2⤵
  PID:1914
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1915
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1916
- /bin/sh
  -/bin/sh
  2⤵
  PID:1917
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1918
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1919
- /bin/sh
  -/bin/sh
  2⤵
  PID:1920
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1921
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1922
- /bin/sh
  -/bin/sh
  2⤵
  PID:1923
- - /usr/bin/id
    id -u
    3⤵
    PID:1924
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1925
- /bin/sh
  -/bin/sh
  2⤵
  PID:1926
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1927
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1928
- /bin/sh
  -/bin/sh
  2⤵
  PID:1929
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1930
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1931
- /bin/sh
  -/bin/sh
  2⤵
  PID:1932
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1933
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1934
- /bin/sh
  -/bin/sh
  2⤵
  PID:1935
- - /usr/bin/id
    id -u
    3⤵
    PID:1936
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1937
- /bin/sh
  -/bin/sh
  2⤵
  PID:1938
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1939
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1940
- /bin/sh
  -/bin/sh
  2⤵
  PID:1941
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1942
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1943
- /bin/sh
  -/bin/sh
  2⤵
  PID:1944
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1945
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1946
- /bin/sh
  -/bin/sh
  2⤵
  PID:1947
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1948
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1949
- /bin/sh
  -/bin/sh
  2⤵
  PID:1950
- - /usr/bin/id
    id -u
    3⤵
    PID:1951
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1952
- /bin/sh
  -/bin/sh
  2⤵
  PID:1953
- - /usr/bin/id
    id -u
    3⤵
    PID:1954
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1955
- /bin/sh
  -/bin/sh
  2⤵
  PID:1956
- - /usr/bin/id
    id -u
    3⤵
    PID:1957
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1958
- /bin/sh
  -/bin/sh
  2⤵
  PID:1959
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1960
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1961
- /bin/sh
  -/bin/sh
  2⤵
  PID:1962
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1963
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1964
- /bin/sh
  -/bin/sh
  2⤵
  PID:1965
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1966
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1967
- /bin/sh
  -/bin/sh
  2⤵
  PID:1968
- - /usr/bin/id
    id -u
    3⤵
    PID:1969
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1970
- /bin/sh
  -/bin/sh
  2⤵
  PID:1971
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1972
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1973
- /bin/sh
  -/bin/sh
  2⤵
  PID:1974
- - /usr/bin/id
    id -u
    3⤵
    PID:1975
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1976
- /bin/sh
  -/bin/sh
  2⤵
  PID:1977
- - /usr/bin/id
    id -u
    3⤵
    PID:1978
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1979
- /bin/sh
  -/bin/sh
  2⤵
  PID:1980
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1981
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1982
- /bin/sh
  -/bin/sh
  2⤵
  PID:1983
- - /usr/bin/id
    id -u
    3⤵
    PID:1984
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1985
- /bin/sh
  -/bin/sh
  2⤵
  PID:1986
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1987
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1988
- /bin/sh
  -/bin/sh
  2⤵
  PID:1989
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1990
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1991
- /bin/sh
  -/bin/sh
  2⤵
  PID:1992
- - /usr/bin/id
    id -u
    3⤵
    PID:1993
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1994
- /bin/sh
  -/bin/sh
  2⤵
  PID:1995
- - /usr/bin/id
    id -u
    3⤵
    PID:1996
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:1997
- /bin/sh
  -/bin/sh
  2⤵
  PID:1998
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:1999
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:2000
- /bin/sh
  -/bin/sh
  2⤵
  PID:2001
- - /usr/bin/id
    id -u
    3⤵
    PID:2002
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:2003
- /bin/sh
  -/bin/sh
  2⤵
  PID:2004
- - /usr/bin/id
    id -u
    3⤵
    - Reads runtime system information
    PID:2005
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:2006
- /bin/sh
  -/bin/sh
  2⤵
  PID:2007
- - /usr/bin/id
    id -u
    3⤵
    PID:2008
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:2009
- /bin/sh
  -/bin/sh
  2⤵
  PID:2010
- - /usr/bin/id
    id -u
    3⤵
    PID:2011
- - /usr/bin/locale-check
    /usr/bin/locale-check C.UTF-8
    3⤵
    PID:2012

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads