3adebecf50f149d6d54bf740d4721321190903377d37d5dc43358fd9af221f7a

Resubmissions

24/04/2024, 07:19

240424-h5sdcaff68 3

24/04/2024, 07:17

240424-h4wpdaff9y 1

Analysis

max time kernel
151s
platform
debian-9_mips
resource
debian9-mipsbe-20240226-en
resource tags

arch:mipsimage:debian9-mipsbe-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
24/04/2024, 07:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

SAMPLE_Build_Kit_Linux_RHEL7_LBK/SAMPLE_RHEL7_LBK/SAMPLE_RHEL7_BMv3.0.1_BK.sh
Size

13KB
MD5

78d9afc3c02f6ede25a0233a82d8d206
SHA1

d40848159451d4b97333cea1d0bef5ceab560d7a
SHA256

f0a9d4b90de33ddedbd56e724bffdc1b31f5e39dce4fa0c855723f64b7083559
SHA512

b10bf5d5802bff9f64c96f2766f1513c271306bec0d78a992b3dc90d6d1ec55eda1bd64a2cef667f997d9858411510fe699dc6f075abfd70088c6e7b7a042ebb
SSDEEP

192:q1ELxlTFvCOfNFcZBi8TskViy3yyeoDoaDyUOSf5aqLB0qKBQ5EiDj0PQ+Md1IiP:VLxlmiCFL5ELyuiVZ

Score

3^/10

Malware Config

Signatures

Reads runtime system information 2 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	mkdir

/tmp/SAMPLE_Build_Kit_Linux_RHEL7_LBK/SAMPLE_RHEL7_LBK/SAMPLE_RHEL7_BMv3.0.1_BK.sh
/tmp/SAMPLE_Build_Kit_Linux_RHEL7_LBK/SAMPLE_RHEL7_LBK/SAMPLE_RHEL7_BMv3.0.1_BK.sh
1⤵
PID:698

/usr/local/sbin/bash
bash /tmp/SAMPLE_Build_Kit_Linux_RHEL7_LBK/SAMPLE_RHEL7_LBK/SAMPLE_RHEL7_BMv3.0.1_BK.sh
1⤵
PID:698

/usr/local/bin/bash
bash /tmp/SAMPLE_Build_Kit_Linux_RHEL7_LBK/SAMPLE_RHEL7_LBK/SAMPLE_RHEL7_BMv3.0.1_BK.sh
1⤵
PID:698

/usr/sbin/bash
bash /tmp/SAMPLE_Build_Kit_Linux_RHEL7_LBK/SAMPLE_RHEL7_LBK/SAMPLE_RHEL7_BMv3.0.1_BK.sh
1⤵
PID:698

/usr/bin/bash
bash /tmp/SAMPLE_Build_Kit_Linux_RHEL7_LBK/SAMPLE_RHEL7_LBK/SAMPLE_RHEL7_BMv3.0.1_BK.sh
1⤵
PID:698

/sbin/bash
bash /tmp/SAMPLE_Build_Kit_Linux_RHEL7_LBK/SAMPLE_RHEL7_LBK/SAMPLE_RHEL7_BMv3.0.1_BK.sh
1⤵
PID:698

/bin/bash
bash /tmp/SAMPLE_Build_Kit_Linux_RHEL7_LBK/SAMPLE_RHEL7_LBK/SAMPLE_RHEL7_BMv3.0.1_BK.sh
1⤵
PID:698
- /bin/readlink
  readlink -f /tmp/SAMPLE_Build_Kit_Linux_RHEL7_LBK/SAMPLE_RHEL7_LBK/SAMPLE_RHEL7_BMv3.0.1_BK.sh
  2⤵
  PID:707
- /usr/bin/dirname
  dirname /tmp/SAMPLE_Build_Kit_Linux_RHEL7_LBK/SAMPLE_RHEL7_LBK/SAMPLE_RHEL7_BMv3.0.1_BK.sh
  2⤵
  PID:704
- /bin/date
  date "+%m_%d_%Y_%H%M"
  2⤵
  PID:710
- /bin/mkdir
  mkdir /tmp/SAMPLE_Build_Kit_Linux_RHEL7_LBK/SAMPLE_RHEL7_LBK/logs/04_24_2024_0720
  2⤵
  - Reads runtime system information
  PID:712
- /bin/mkdir
  mkdir /tmp/SAMPLE_Build_Kit_Linux_RHEL7_LBK/SAMPLE_RHEL7_LBK/backup/04_24_2024_0720
  2⤵
  - Reads runtime system information
  PID:714
- /usr/bin/clear
  clear
  2⤵
  PID:741
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:749
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:754
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:759
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:764
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:769
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:774
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:779
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:785
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:790
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:794
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:800
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:805
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:811
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:817
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:823
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:830
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:835
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:841
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:845
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:849
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:852
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:855
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:858
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:861
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:864
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:867
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:870
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:873
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:876
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:879
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:882
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:885
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:888
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:891
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:894
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:897
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:900
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:905
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:910
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:915
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:921
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:926
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:932
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:937
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:942
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:947
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:952
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:958
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:963
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:969
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:972
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:975
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:978
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:981
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:984
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:987
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:990
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:993
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:996
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:999
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1002
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1005
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1008
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1011
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1014
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1017
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1020
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1023
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1026
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1029
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1032
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1035
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1038
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1041
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1044
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1047
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1050
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1053
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1056
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1059
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1062
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1065
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1068
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1071
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1074
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1077
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1080
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1083
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1086
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1089
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1092
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1095
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1098
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1101
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1104
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1107
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1110
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1113
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1116
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1119
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1122
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1125
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1128
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1131
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1134
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1137
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1140
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1143
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1146
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1149
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1152
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1155
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1158
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1161
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1164
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1167
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1170
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1173
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1176
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1179
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1182
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1185
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1188
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1191
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1194
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1197
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1200
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1203
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1206
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1209
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1212
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1215
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1218
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1221
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1224
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1227
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1230
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1233
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1236
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1239
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1242
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1245
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1248
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1251
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1254
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1257
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1260
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1263
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1266
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1269
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1272
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1275
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1278
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1281
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1284
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1287
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1290
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1293
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1296
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1299
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1302
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1305
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1308
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1311
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1314
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1317
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1320
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1323
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1326
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1329
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1332
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1335
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1338
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1341
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1344
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1347
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1350
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1353
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1356
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1359
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1362
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1365
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1368
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1371
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1374
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1377
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1380
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1383
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1386
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1389
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1392
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1395
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1398
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1401
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1404
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1407
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1410
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1413
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1416
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1419
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1422
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1425
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1428
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1431
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1434
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1437
- /usr/bin/tr
  tr "[:lower:]" "[:upper:]"
  2⤵
  PID:1440

Windows 7 deprecation

Loading Replay Monitor...

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads