e56a4fdccbd1d42c0ee428231411c5e532aac3d2d70c002522a4c7700217e71a

Analysis

max time kernel
147s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240226-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
19/03/2024, 00:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

.rsync/c/go
Size

298B
MD5

2375a3b2f66db3f4c1954af5e6c4ddf4
SHA1

2a7f12f1bc13601a0cce6b3bcaf549b5c27bbc21
SHA256

9f181ab41af3a7891aba099db47fd0961e8e2a69cb6b419eb8b6eef68f30c3e2
SHA512

3d8ed028440d0b30bd33b6ccb09af8969d8a60a66b0d564abbf9a1ce2faf578982ff520c147938205963d32d0054d62d693cc57d3930946ce2f7f14b742b9c22

Score

3^/10

Malware Config

Signatures

Writes file to tmp directory 50 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch

/tmp/.rsync/c/go
/tmp/.rsync/c/go
1⤵
PID:1546
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1548
- /bin/rm
  rm -rf p
  2⤵
  PID:1549
- /bin/rm
  rm -rf ip
  2⤵
  PID:1550
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1551
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1552
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1553
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1554
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1555
- /bin/sleep
  sleep 3
  2⤵
  PID:1556
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1561
- /bin/rm
  rm -rf ip
  2⤵
  PID:1562
- /bin/rm
  rm -rf p
  2⤵
  PID:1563
- /bin/rm
  rm -rf .out
  2⤵
  PID:1564
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1565
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1566
- /bin/rm
  rm -rf p
  2⤵
  PID:1567
- /bin/rm
  rm -rf ip
  2⤵
  PID:1568
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1569
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1570
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1571
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1572
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1573
- /bin/sleep
  sleep 3
  2⤵
  PID:1574
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1575
- /bin/rm
  rm -rf ip
  2⤵
  PID:1576
- /bin/rm
  rm -rf p
  2⤵
  PID:1577
- /bin/rm
  rm -rf .out
  2⤵
  PID:1578
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1579
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1580
- /bin/rm
  rm -rf p
  2⤵
  PID:1581
- /bin/rm
  rm -rf ip
  2⤵
  PID:1582
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1583
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1584
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1585
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1586
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1587
- /bin/sleep
  sleep 3
  2⤵
  PID:1588
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1589
- /bin/rm
  rm -rf ip
  2⤵
  PID:1590
- /bin/rm
  rm -rf p
  2⤵
  PID:1591
- /bin/rm
  rm -rf .out
  2⤵
  PID:1592
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1593
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1594
- /bin/rm
  rm -rf p
  2⤵
  PID:1595
- /bin/rm
  rm -rf ip
  2⤵
  PID:1596
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1597
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1598
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1599
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1600
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1601
- /bin/sleep
  sleep 3
  2⤵
  PID:1602
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1603
- /bin/rm
  rm -rf ip
  2⤵
  PID:1604
- /bin/rm
  rm -rf p
  2⤵
  PID:1605
- /bin/rm
  rm -rf .out
  2⤵
  PID:1606
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1607
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1608
- /bin/rm
  rm -rf p
  2⤵
  PID:1609
- /bin/rm
  rm -rf ip
  2⤵
  PID:1610
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1611
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1612
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1613
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1614
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1615
- /bin/sleep
  sleep 3
  2⤵
  PID:1616
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1617
- /bin/rm
  rm -rf ip
  2⤵
  PID:1618
- /bin/rm
  rm -rf p
  2⤵
  PID:1619
- /bin/rm
  rm -rf .out
  2⤵
  PID:1620
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1621
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1622
- /bin/rm
  rm -rf p
  2⤵
  PID:1623
- /bin/rm
  rm -rf ip
  2⤵
  PID:1624
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1625
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1626
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1627
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1628
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1629
- /bin/sleep
  sleep 3
  2⤵
  PID:1630
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1631
- /bin/rm
  rm -rf ip
  2⤵
  PID:1632
- /bin/rm
  rm -rf p
  2⤵
  PID:1633
- /bin/rm
  rm -rf .out
  2⤵
  PID:1634
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1635
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1636
- /bin/rm
  rm -rf p
  2⤵
  PID:1637
- /bin/rm
  rm -rf ip
  2⤵
  PID:1638
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1639
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1640
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1641
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1642
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1643
- /bin/sleep
  sleep 3
  2⤵
  PID:1644
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1645
- /bin/rm
  rm -rf ip
  2⤵
  PID:1646
- /bin/rm
  rm -rf p
  2⤵
  PID:1647
- /bin/rm
  rm -rf .out
  2⤵
  PID:1648
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1649
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1650
- /bin/rm
  rm -rf p
  2⤵
  PID:1651
- /bin/rm
  rm -rf ip
  2⤵
  PID:1652
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1653
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1654
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1655
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1656
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1657
- /bin/sleep
  sleep 3
  2⤵
  PID:1658
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1659
- /bin/rm
  rm -rf ip
  2⤵
  PID:1660
- /bin/rm
  rm -rf p
  2⤵
  PID:1661
- /bin/rm
  rm -rf .out
  2⤵
  PID:1662
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1663
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1664
- /bin/rm
  rm -rf p
  2⤵
  PID:1665
- /bin/rm
  rm -rf ip
  2⤵
  PID:1666
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1667
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1668
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1669
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1670
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1671
- /bin/sleep
  sleep 3
  2⤵
  PID:1672
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1673
- /bin/rm
  rm -rf ip
  2⤵
  PID:1674
- /bin/rm
  rm -rf p
  2⤵
  PID:1675
- /bin/rm
  rm -rf .out
  2⤵
  PID:1676
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1677
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1678
- /bin/rm
  rm -rf p
  2⤵
  PID:1679
- /bin/rm
  rm -rf ip
  2⤵
  PID:1680
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1681
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1682
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1683
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1684
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1685
- /bin/sleep
  sleep 3
  2⤵
  PID:1686
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1689
- /bin/rm
  rm -rf ip
  2⤵
  PID:1690
- /bin/rm
  rm -rf p
  2⤵
  PID:1691
- /bin/rm
  rm -rf .out
  2⤵
  PID:1692
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1693
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1694
- /bin/rm
  rm -rf p
  2⤵
  PID:1695
- /bin/rm
  rm -rf ip
  2⤵
  PID:1696
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1697
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1698
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1699
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1700
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1701
- /bin/sleep
  sleep 3
  2⤵
  PID:1702
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1703
- /bin/rm
  rm -rf ip
  2⤵
  PID:1704
- /bin/rm
  rm -rf p
  2⤵
  PID:1705
- /bin/rm
  rm -rf .out
  2⤵
  PID:1706
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1707
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1708
- /bin/rm
  rm -rf p
  2⤵
  PID:1709
- /bin/rm
  rm -rf ip
  2⤵
  PID:1710
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1711
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1712
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1713
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1714
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1715
- /bin/sleep
  sleep 3
  2⤵
  PID:1716
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1717
- /bin/rm
  rm -rf ip
  2⤵
  PID:1718
- /bin/rm
  rm -rf p
  2⤵
  PID:1719
- /bin/rm
  rm -rf .out
  2⤵
  PID:1720
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1721
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1722
- /bin/rm
  rm -rf p
  2⤵
  PID:1723
- /bin/rm
  rm -rf ip
  2⤵
  PID:1724
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1725
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1726
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1727
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1728
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1729
- /bin/sleep
  sleep 3
  2⤵
  PID:1730
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1731
- /bin/rm
  rm -rf ip
  2⤵
  PID:1732
- /bin/rm
  rm -rf p
  2⤵
  PID:1733
- /bin/rm
  rm -rf .out
  2⤵
  PID:1734
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1735
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1736
- /bin/rm
  rm -rf p
  2⤵
  PID:1737
- /bin/rm
  rm -rf ip
  2⤵
  PID:1738
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1739
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1740
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1741
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1742
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1743
- /bin/sleep
  sleep 3
  2⤵
  PID:1744
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1745
- /bin/rm
  rm -rf ip
  2⤵
  PID:1746
- /bin/rm
  rm -rf p
  2⤵
  PID:1747
- /bin/rm
  rm -rf .out
  2⤵
  PID:1748
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1749
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1750
- /bin/rm
  rm -rf p
  2⤵
  PID:1751
- /bin/rm
  rm -rf ip
  2⤵
  PID:1752
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1753
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1754
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1755
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1756
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1757
- /bin/sleep
  sleep 3
  2⤵
  PID:1758
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1759
- /bin/rm
  rm -rf ip
  2⤵
  PID:1760
- /bin/rm
  rm -rf p
  2⤵
  PID:1761
- /bin/rm
  rm -rf .out
  2⤵
  PID:1762
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1763
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1764
- /bin/rm
  rm -rf p
  2⤵
  PID:1765
- /bin/rm
  rm -rf ip
  2⤵
  PID:1766
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1767
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1768
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1769
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1770
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1771
- /bin/sleep
  sleep 3
  2⤵
  PID:1772
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1773
- /bin/rm
  rm -rf ip
  2⤵
  PID:1774
- /bin/rm
  rm -rf p
  2⤵
  PID:1775
- /bin/rm
  rm -rf .out
  2⤵
  PID:1776
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1777
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1778
- /bin/rm
  rm -rf p
  2⤵
  PID:1779
- /bin/rm
  rm -rf ip
  2⤵
  PID:1780
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1781
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1782
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1783
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1784
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1785
- /bin/sleep
  sleep 3
  2⤵
  PID:1786
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1787
- /bin/rm
  rm -rf ip
  2⤵
  PID:1788
- /bin/rm
  rm -rf p
  2⤵
  PID:1789
- /bin/rm
  rm -rf .out
  2⤵
  PID:1790
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1791
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1792
- /bin/rm
  rm -rf p
  2⤵
  PID:1793
- /bin/rm
  rm -rf ip
  2⤵
  PID:1794
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1795
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1796
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1797
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1798
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1799
- /bin/sleep
  sleep 3
  2⤵
  PID:1800
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1801
- /bin/rm
  rm -rf ip
  2⤵
  PID:1802
- /bin/rm
  rm -rf p
  2⤵
  PID:1803
- /bin/rm
  rm -rf .out
  2⤵
  PID:1804
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1805
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1806
- /bin/rm
  rm -rf p
  2⤵
  PID:1807
- /bin/rm
  rm -rf ip
  2⤵
  PID:1808
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1809
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1810
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1811
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1812
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1813
- /bin/sleep
  sleep 3
  2⤵
  PID:1814
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1815
- /bin/rm
  rm -rf ip
  2⤵
  PID:1816
- /bin/rm
  rm -rf p
  2⤵
  PID:1817
- /bin/rm
  rm -rf .out
  2⤵
  PID:1818
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1819
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1820
- /bin/rm
  rm -rf p
  2⤵
  PID:1821
- /bin/rm
  rm -rf ip
  2⤵
  PID:1822
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1823
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1824
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1825
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1826
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1827
- /bin/sleep
  sleep 3
  2⤵
  PID:1828
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1829
- /bin/rm
  rm -rf ip
  2⤵
  PID:1830
- /bin/rm
  rm -rf p
  2⤵
  PID:1831
- /bin/rm
  rm -rf .out
  2⤵
  PID:1832
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1833
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1834
- /bin/rm
  rm -rf p
  2⤵
  PID:1835
- /bin/rm
  rm -rf ip
  2⤵
  PID:1836
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1837
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1838
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1839
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1840
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1841
- /bin/sleep
  sleep 3
  2⤵
  PID:1842
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1843
- /bin/rm
  rm -rf ip
  2⤵
  PID:1844
- /bin/rm
  rm -rf p
  2⤵
  PID:1845
- /bin/rm
  rm -rf .out
  2⤵
  PID:1846
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1847
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1848
- /bin/rm
  rm -rf p
  2⤵
  PID:1849
- /bin/rm
  rm -rf ip
  2⤵
  PID:1850
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1851
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1852
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1853
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1854
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1855
- /bin/sleep
  sleep 3
  2⤵
  PID:1856
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1857
- /bin/rm
  rm -rf ip
  2⤵
  PID:1858
- /bin/rm
  rm -rf p
  2⤵
  PID:1859
- /bin/rm
  rm -rf .out
  2⤵
  PID:1860
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1861
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1862
- /bin/rm
  rm -rf p
  2⤵
  PID:1863
- /bin/rm
  rm -rf ip
  2⤵
  PID:1864
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1865
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1866
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1867
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1868
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1869
- /bin/sleep
  sleep 3
  2⤵
  PID:1870
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1871
- /bin/rm
  rm -rf ip
  2⤵
  PID:1872
- /bin/rm
  rm -rf p
  2⤵
  PID:1873
- /bin/rm
  rm -rf .out
  2⤵
  PID:1874
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1875
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1876
- /bin/rm
  rm -rf p
  2⤵
  PID:1877
- /bin/rm
  rm -rf ip
  2⤵
  PID:1878
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1879
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1880
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1881
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1882
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1883
- /bin/sleep
  sleep 3
  2⤵
  PID:1884
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1885
- /bin/rm
  rm -rf ip
  2⤵
  PID:1886
- /bin/rm
  rm -rf p
  2⤵
  PID:1887
- /bin/rm
  rm -rf .out
  2⤵
  PID:1888
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1889
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1890
- /bin/rm
  rm -rf p
  2⤵
  PID:1891
- /bin/rm
  rm -rf ip
  2⤵
  PID:1892
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1893
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1894
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1895
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1896
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1897
- /bin/sleep
  sleep 3
  2⤵
  PID:1898
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1899
- /bin/rm
  rm -rf ip
  2⤵
  PID:1900
- /bin/rm
  rm -rf p
  2⤵
  PID:1901
- /bin/rm
  rm -rf .out
  2⤵
  PID:1902
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1903
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1904
- /bin/rm
  rm -rf p
  2⤵
  PID:1905
- /bin/rm
  rm -rf ip
  2⤵
  PID:1906
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1907
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1908
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1909
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1910
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1911
- /bin/sleep
  sleep 3
  2⤵
  PID:1912
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1913
- /bin/rm
  rm -rf ip
  2⤵
  PID:1914
- /bin/rm
  rm -rf p
  2⤵
  PID:1915
- /bin/rm
  rm -rf .out
  2⤵
  PID:1916
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1917
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1918
- /bin/rm
  rm -rf p
  2⤵
  PID:1919
- /bin/rm
  rm -rf ip
  2⤵
  PID:1920
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1921
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1922
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1923
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1924
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1925
- /bin/sleep
  sleep 3
  2⤵
  PID:1926
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1927
- /bin/rm
  rm -rf ip
  2⤵
  PID:1928
- /bin/rm
  rm -rf p
  2⤵
  PID:1929
- /bin/rm
  rm -rf .out
  2⤵
  PID:1930
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1931
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1932
- /bin/rm
  rm -rf p
  2⤵
  PID:1933
- /bin/rm
  rm -rf ip
  2⤵
  PID:1934
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1935
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1936
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1937
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1938
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1939
- /bin/sleep
  sleep 3
  2⤵
  PID:1940
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1941
- /bin/rm
  rm -rf ip
  2⤵
  PID:1942
- /bin/rm
  rm -rf p
  2⤵
  PID:1943
- /bin/rm
  rm -rf .out
  2⤵
  PID:1944
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1945
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1946
- /bin/rm
  rm -rf p
  2⤵
  PID:1947
- /bin/rm
  rm -rf ip
  2⤵
  PID:1948
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1949
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1950
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1951
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1952
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1953
- /bin/sleep
  sleep 3
  2⤵
  PID:1954
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1955
- /bin/rm
  rm -rf ip
  2⤵
  PID:1956
- /bin/rm
  rm -rf p
  2⤵
  PID:1957
- /bin/rm
  rm -rf .out
  2⤵
  PID:1958
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1959
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1960
- /bin/rm
  rm -rf p
  2⤵
  PID:1961
- /bin/rm
  rm -rf ip
  2⤵
  PID:1962
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1963
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1964
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1965
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1966
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1967
- /bin/sleep
  sleep 3
  2⤵
  PID:1968
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1969
- /bin/rm
  rm -rf ip
  2⤵
  PID:1970
- /bin/rm
  rm -rf p
  2⤵
  PID:1971
- /bin/rm
  rm -rf .out
  2⤵
  PID:1972
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1973
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1974
- /bin/rm
  rm -rf p
  2⤵
  PID:1975
- /bin/rm
  rm -rf ip
  2⤵
  PID:1976
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1977
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1978
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1979
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1980
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1981
- /bin/sleep
  sleep 3
  2⤵
  PID:1982
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1983
- /bin/rm
  rm -rf ip
  2⤵
  PID:1984
- /bin/rm
  rm -rf p
  2⤵
  PID:1985
- /bin/rm
  rm -rf .out
  2⤵
  PID:1986
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:1987
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:1988
- /bin/rm
  rm -rf p
  2⤵
  PID:1989
- /bin/rm
  rm -rf ip
  2⤵
  PID:1990
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1991
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:1992
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:1993
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:1994
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:1995
- /bin/sleep
  sleep 3
  2⤵
  PID:1996
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:1997
- /bin/rm
  rm -rf ip
  2⤵
  PID:1998
- /bin/rm
  rm -rf p
  2⤵
  PID:1999
- /bin/rm
  rm -rf .out
  2⤵
  PID:2000
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:2001
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:2002
- /bin/rm
  rm -rf p
  2⤵
  PID:2003
- /bin/rm
  rm -rf ip
  2⤵
  PID:2004
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2005
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:2006
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:2007
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:2008
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:2009
- /bin/sleep
  sleep 3
  2⤵
  PID:2010
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2011
- /bin/rm
  rm -rf ip
  2⤵
  PID:2012
- /bin/rm
  rm -rf p
  2⤵
  PID:2013
- /bin/rm
  rm -rf .out
  2⤵
  PID:2014
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:2015
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:2016
- /bin/rm
  rm -rf p
  2⤵
  PID:2017
- /bin/rm
  rm -rf ip
  2⤵
  PID:2018
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2019
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:2020
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:2021
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:2022
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:2023
- /bin/sleep
  sleep 3
  2⤵
  PID:2024
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2025
- /bin/rm
  rm -rf ip
  2⤵
  PID:2026
- /bin/rm
  rm -rf p
  2⤵
  PID:2027
- /bin/rm
  rm -rf .out
  2⤵
  PID:2028
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:2029
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:2030
- /bin/rm
  rm -rf p
  2⤵
  PID:2031
- /bin/rm
  rm -rf ip
  2⤵
  PID:2032
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2033
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:2034
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:2035
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:2036
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:2037
- /bin/sleep
  sleep 3
  2⤵
  PID:2038
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2039
- /bin/rm
  rm -rf ip
  2⤵
  PID:2040
- /bin/rm
  rm -rf p
  2⤵
  PID:2041
- /bin/rm
  rm -rf .out
  2⤵
  PID:2042
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:2043
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:2044
- /bin/rm
  rm -rf p
  2⤵
  PID:2045
- /bin/rm
  rm -rf ip
  2⤵
  PID:2046
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2047
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:2048
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:2049
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:2050
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:2051
- /bin/sleep
  sleep 3
  2⤵
  PID:2052
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2053
- /bin/rm
  rm -rf ip
  2⤵
  PID:2054
- /bin/rm
  rm -rf p
  2⤵
  PID:2055
- /bin/rm
  rm -rf .out
  2⤵
  PID:2056
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:2057
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:2058
- /bin/rm
  rm -rf p
  2⤵
  PID:2059
- /bin/rm
  rm -rf ip
  2⤵
  PID:2060
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2061
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:2062
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:2063
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:2064
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:2065
- /bin/sleep
  sleep 3
  2⤵
  PID:2066
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2067
- /bin/rm
  rm -rf ip
  2⤵
  PID:2068
- /bin/rm
  rm -rf p
  2⤵
  PID:2069
- /bin/rm
  rm -rf .out
  2⤵
  PID:2070
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:2071
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:2072
- /bin/rm
  rm -rf p
  2⤵
  PID:2073
- /bin/rm
  rm -rf ip
  2⤵
  PID:2074
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2075
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:2076
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:2077
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:2078
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:2079
- /bin/sleep
  sleep 3
  2⤵
  PID:2080
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2081
- /bin/rm
  rm -rf ip
  2⤵
  PID:2082
- /bin/rm
  rm -rf p
  2⤵
  PID:2083
- /bin/rm
  rm -rf .out
  2⤵
  PID:2084
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:2085
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:2086
- /bin/rm
  rm -rf p
  2⤵
  PID:2087
- /bin/rm
  rm -rf ip
  2⤵
  PID:2088
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2089
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:2090
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:2091
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:2092
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:2093
- /bin/sleep
  sleep 3
  2⤵
  PID:2094
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2095
- /bin/rm
  rm -rf ip
  2⤵
  PID:2096
- /bin/rm
  rm -rf p
  2⤵
  PID:2097
- /bin/rm
  rm -rf .out
  2⤵
  PID:2098
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:2099
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:2100
- /bin/rm
  rm -rf p
  2⤵
  PID:2101
- /bin/rm
  rm -rf ip
  2⤵
  PID:2102
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2103
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:2104
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:2105
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:2106
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:2107
- /bin/sleep
  sleep 3
  2⤵
  PID:2108
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2109
- /bin/rm
  rm -rf ip
  2⤵
  PID:2110
- /bin/rm
  rm -rf p
  2⤵
  PID:2111
- /bin/rm
  rm -rf .out
  2⤵
  PID:2112
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:2113
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:2114
- /bin/rm
  rm -rf p
  2⤵
  PID:2115
- /bin/rm
  rm -rf ip
  2⤵
  PID:2116
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2117
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:2118
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:2119
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:2120
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:2121
- /bin/sleep
  sleep 3
  2⤵
  PID:2122
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2123
- /bin/rm
  rm -rf ip
  2⤵
  PID:2124
- /bin/rm
  rm -rf p
  2⤵
  PID:2125
- /bin/rm
  rm -rf .out
  2⤵
  PID:2126
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:2127
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:2128
- /bin/rm
  rm -rf p
  2⤵
  PID:2129
- /bin/rm
  rm -rf ip
  2⤵
  PID:2130
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2131
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:2132
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:2133
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:2134
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:2135
- /bin/sleep
  sleep 3
  2⤵
  PID:2136
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2137
- /bin/rm
  rm -rf ip
  2⤵
  PID:2138
- /bin/rm
  rm -rf p
  2⤵
  PID:2139
- /bin/rm
  rm -rf .out
  2⤵
  PID:2140
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:2141
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:2142
- /bin/rm
  rm -rf p
  2⤵
  PID:2143
- /bin/rm
  rm -rf ip
  2⤵
  PID:2144
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2145
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:2146
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:2147
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:2148
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:2149
- /bin/sleep
  sleep 3
  2⤵
  PID:2150
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2151
- /bin/rm
  rm -rf ip
  2⤵
  PID:2152
- /bin/rm
  rm -rf p
  2⤵
  PID:2153
- /bin/rm
  rm -rf .out
  2⤵
  PID:2154
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:2155
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:2156
- /bin/rm
  rm -rf p
  2⤵
  PID:2157
- /bin/rm
  rm -rf ip
  2⤵
  PID:2158
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2159
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:2160
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:2161
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:2162
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:2163
- /bin/sleep
  sleep 3
  2⤵
  PID:2164
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2165
- /bin/rm
  rm -rf ip
  2⤵
  PID:2166
- /bin/rm
  rm -rf p
  2⤵
  PID:2167
- /bin/rm
  rm -rf .out
  2⤵
  PID:2168
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:2169
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:2170
- /bin/rm
  rm -rf p
  2⤵
  PID:2171
- /bin/rm
  rm -rf ip
  2⤵
  PID:2172
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2173
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:2174
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:2175
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:2176
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:2177
- /bin/sleep
  sleep 3
  2⤵
  PID:2178
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2179
- /bin/rm
  rm -rf ip
  2⤵
  PID:2180
- /bin/rm
  rm -rf p
  2⤵
  PID:2181
- /bin/rm
  rm -rf .out
  2⤵
  PID:2182
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:2183
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:2184
- /bin/rm
  rm -rf p
  2⤵
  PID:2185
- /bin/rm
  rm -rf ip
  2⤵
  PID:2186
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2187
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:2188
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:2189
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:2190
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:2191
- /bin/sleep
  sleep 3
  2⤵
  PID:2192
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2193
- /bin/rm
  rm -rf ip
  2⤵
  PID:2194
- /bin/rm
  rm -rf p
  2⤵
  PID:2195
- /bin/rm
  rm -rf .out
  2⤵
  PID:2196
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:2197
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:2198
- /bin/rm
  rm -rf p
  2⤵
  PID:2199
- /bin/rm
  rm -rf ip
  2⤵
  PID:2200
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2201
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:2202
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:2203
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:2204
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:2205
- /bin/sleep
  sleep 3
  2⤵
  PID:2206
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2207
- /bin/rm
  rm -rf ip
  2⤵
  PID:2208
- /bin/rm
  rm -rf p
  2⤵
  PID:2209
- /bin/rm
  rm -rf .out
  2⤵
  PID:2210
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:2211
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:2212
- /bin/rm
  rm -rf p
  2⤵
  PID:2213
- /bin/rm
  rm -rf ip
  2⤵
  PID:2214
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2215
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:2216
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:2217
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:2218
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:2219
- /bin/sleep
  sleep 3
  2⤵
  PID:2220
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2221
- /bin/rm
  rm -rf ip
  2⤵
  PID:2222
- /bin/rm
  rm -rf p
  2⤵
  PID:2223
- /bin/rm
  rm -rf .out
  2⤵
  PID:2224
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:2225
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:2226
- /bin/rm
  rm -rf p
  2⤵
  PID:2227
- /bin/rm
  rm -rf ip
  2⤵
  PID:2228
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2229
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:2230
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:2231
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:2232
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:2233
- /bin/sleep
  sleep 3
  2⤵
  PID:2234
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2235
- /bin/rm
  rm -rf ip
  2⤵
  PID:2236
- /bin/rm
  rm -rf p
  2⤵
  PID:2237
- /bin/rm
  rm -rf .out
  2⤵
  PID:2238
- /bin/rm
  rm -rf "/tmp/t*"
  2⤵
  PID:2239
- /usr/bin/touch
  touch v
  2⤵
  - Writes file to tmp directory
  PID:2240
- /bin/rm
  rm -rf p
  2⤵
  PID:2241
- /bin/rm
  rm -rf ip
  2⤵
  PID:2242
- /bin/rm
  rm -rf "xtr*"
  2⤵
  PID:2243
- /bin/rm
  rm -rf a "a.*"
  2⤵
  PID:2244
- /bin/rm
  rm -rf b "b.*"
  2⤵
  PID:2245
- /usr/bin/timeout
  timeout 12h ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
  2⤵
  PID:2246
- - /tmp/.rsync/c/tsm
    ./tsm -t 302 -f 1 -s 12 -S 12 -p 0 -d 1 p ip
    3⤵
    PID:2247
- /bin/sleep
  sleep 3
  2⤵
  PID:2248

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads