mrblack | 3af00ccefc81f874be86a1c3a6184b52a75d0cf4f91ab5343d3f9176cfcbd860

Analysis

max time kernel
149s
max time network
150s
platform
ubuntu-20.04_amd64
resource
ubuntu2004-amd64-20240508-en
resource tags

arch:amd64arch:i386image:ubuntu2004-amd64-20240508-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system
submitted
09-05-2024 01:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

21db4ff2a01d4d4d4246aea05b5a9c02.bin
Size

1.2MB
MD5

21db4ff2a01d4d4d4246aea05b5a9c02
SHA1

6e6e730abf88ef15824e9d00fcb75956943a02d8
SHA256

3af00ccefc81f874be86a1c3a6184b52a75d0cf4f91ab5343d3f9176cfcbd860
SHA512

2e23d1cdbd819f47726a12a7a90b76c430bbc3013cd2ea190d62235bca7453ef3b57db062c516c382d17dd1065a9535a9e222764a0a04596ca9f7bbbefe8a36f
SSDEEP

24576:e845rGHu6gVJKG75oFpA0VWeX4O2y1q2rJp0:745vRVJKGtSA0VWeotu9p0

Score

10^/10

mrblack antivm botnet persistence trojan

Malware Config

Signatures

MrBlack Trojan
IoT botnet which infects routers to be used for DDoS attacks.
trojan botnet mrblack

MrBlack trojan 1 IoCs

Processes:

resource	yara_rule
/usr/bin/bsd-port/getty	family_mrblack

Executes dropped EXE 2 IoCs

Processes:

getty.sshd

ioc pid process

/usr/bin/bsd-port/getty 1371 getty
/usr/bin/.sshd 1395 .sshd

ioc	pid	process
/usr/bin/bsd-port/getty	1371	getty
/usr/bin/.sshd	1395	.sshd

Modifies init.d 1 TTPs 2 IoCs

Adds/modifies system service, likely for persistence.

persistence

Boot or Logon Autostart Execution

T1547

Processes:

21db4ff2a01d4d4d4246aea05b5a9c02.bingetty

description	ioc	process
File opened for modification	/etc/init.d/DbSecuritySpt	21db4ff2a01d4d4d4246aea05b5a9c02.bin
File opened for modification	/etc/init.d/selinux	getty

Write file to user bin folder 1 TTPs 11 IoCs

Hijack Execution Flow

T1574

Processes:

21db4ff2a01d4d4d4246aea05b5a9c02.bingettycpcpcpcpcpcpcpcp

description	ioc	process
File opened for modification	/usr/bin/bsd-port/getty.lock	21db4ff2a01d4d4d4246aea05b5a9c02.bin
File opened for modification	/usr/bin/bsd-port/getty.lock	getty
File opened for modification	/usr/bin/.sshd	cp
File opened for modification	/usr/bin/dpkgd/lsof	cp
File opened for modification	/usr/bin/dpkgd/ps	cp
File opened for modification	/usr/bin/dpkgd/ss	cp
File opened for modification	/usr/bin/lsof	cp
File opened for modification	/usr/bin/bsd-port/udevd.lock	21db4ff2a01d4d4d4246aea05b5a9c02.bin
File opened for modification	/usr/bin/bsd-port/getty	cp
File opened for modification	/usr/bin/ps	cp
File opened for modification	/usr/bin/ss	cp

Writes file to system bin folder 1 TTPs 3 IoCs

Hijack Execution Flow
T1574

Processes:

cpcpcp

description ioc process

File opened for modification /bin/ps cp
File opened for modification /bin/ss cp
File opened for modification /bin/lsof cp
Checks CPU configuration 1 TTPs 2 IoCs
Checks CPU information which indicate if the system is a virtual machine.
antivm

Virtualization/Sandbox Evasion
T1497

Processes:

getty21db4ff2a01d4d4d4246aea05b5a9c02.bin

description ioc process

File opened for reading /proc/cpuinfo getty
File opened for reading /proc/cpuinfo 21db4ff2a01d4d4d4246aea05b5a9c02.bin
Reads system network configuration 1 TTPs 2 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

getty21db4ff2a01d4d4d4246aea05b5a9c02.bin

description ioc process

File opened for reading /proc/net/dev getty
File opened for reading /proc/net/dev 21db4ff2a01d4d4d4246aea05b5a9c02.bin

description	ioc	process
File opened for modification	/bin/ps	cp
File opened for modification	/bin/ss	cp
File opened for modification	/bin/lsof	cp

description	ioc	process
File opened for reading	/proc/cpuinfo	getty
File opened for reading	/proc/cpuinfo	21db4ff2a01d4d4d4246aea05b5a9c02.bin

description	ioc	process
File opened for reading	/proc/net/dev	getty
File opened for reading	/proc/net/dev	21db4ff2a01d4d4d4246aea05b5a9c02.bin

Reads runtime system information 37 IoCs

Reads data from /proc virtual filesystem.

Processes:

cpgettymkdirmkdircpmkdirmkdircpcpmkdirmkdirmkdircp21db4ff2a01d4d4d4246aea05b5a9c02.binmkdirmkdircpmkdirmkdircpmkdirmkdirinsmodinsmod.sshdcpmkdirmkdirmkdircpcpmkdircp

description	ioc	process
File opened for reading	/proc/filesystems	cp
File opened for reading	/proc/sys/kernel/version	getty
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	cp
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	cp
File opened for reading	/proc/filesystems	cp
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	cp
File opened for reading	/proc/sys/kernel/version	21db4ff2a01d4d4d4246aea05b5a9c02.bin
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/meminfo	getty
File opened for reading	/proc/filesystems	cp
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/stat	21db4ff2a01d4d4d4246aea05b5a9c02.bin
File opened for reading	/proc/filesystems	cp
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/cmdline	insmod
File opened for reading	/proc/cmdline	insmod
File opened for reading	/proc/sys/kernel/version	.sshd
File opened for reading	/proc/filesystems	cp
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/stat	getty
File opened for reading	/proc/meminfo	21db4ff2a01d4d4d4246aea05b5a9c02.bin
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	cp
File opened for reading	/proc/filesystems	cp
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	cp

Writes file to tmp directory 7 IoCs

Malware often drops required files in the /tmp directory.

Processes:

21db4ff2a01d4d4d4246aea05b5a9c02.bin.sshd

description	ioc	process
File opened for modification	/tmp/bill.lock	21db4ff2a01d4d4d4246aea05b5a9c02.bin
File opened for modification	/tmp/gates.lod	21db4ff2a01d4d4d4246aea05b5a9c02.bin
File opened for modification	/tmp/notify.file	21db4ff2a01d4d4d4246aea05b5a9c02.bin
File opened for modification	/tmp/moni.lod	.sshd
File opened for modification	/tmp/notify.file	.sshd
File opened for modification	/tmp/gates.lod	.sshd
File opened for modification	/tmp/moni.lod	21db4ff2a01d4d4d4246aea05b5a9c02.bin

/tmp/21db4ff2a01d4d4d4246aea05b5a9c02.bin
/tmp/21db4ff2a01d4d4d4246aea05b5a9c02.bin
1⤵
- Modifies init.d
- Write file to user bin folder
- Checks CPU configuration
- Reads system network configuration
- Reads runtime system information
- Writes file to tmp directory
PID:1347

/bin/sh
sh -c "ln -s /etc/init.d/DbSecuritySpt /etc/rc1.d/S97DbSecuritySpt"
2⤵
PID:1353

/usr/bin/ln
ln -s /etc/init.d/DbSecuritySpt /etc/rc1.d/S97DbSecuritySpt
3⤵
PID:1354

/bin/sh
sh -c "ln -s /etc/init.d/DbSecuritySpt /etc/rc2.d/S97DbSecuritySpt"
2⤵
PID:1355

/usr/bin/ln
ln -s /etc/init.d/DbSecuritySpt /etc/rc2.d/S97DbSecuritySpt
3⤵
PID:1356

/bin/sh
sh -c "ln -s /etc/init.d/DbSecuritySpt /etc/rc3.d/S97DbSecuritySpt"
2⤵
PID:1357

/usr/bin/ln
ln -s /etc/init.d/DbSecuritySpt /etc/rc3.d/S97DbSecuritySpt
3⤵
PID:1358

/bin/sh
sh -c "ln -s /etc/init.d/DbSecuritySpt /etc/rc4.d/S97DbSecuritySpt"
2⤵
PID:1359

/usr/bin/ln
ln -s /etc/init.d/DbSecuritySpt /etc/rc4.d/S97DbSecuritySpt
3⤵
PID:1360

/bin/sh
sh -c "ln -s /etc/init.d/DbSecuritySpt /etc/rc5.d/S97DbSecuritySpt"
2⤵
PID:1361

/usr/bin/ln
ln -s /etc/init.d/DbSecuritySpt /etc/rc5.d/S97DbSecuritySpt
3⤵
PID:1362

/bin/sh
sh -c "mkdir -p /usr/bin/bsd-port"
2⤵
PID:1363

/usr/bin/mkdir
mkdir -p /usr/bin/bsd-port
3⤵
- Reads runtime system information
PID:1364

/bin/sh
sh -c "mkdir -p /usr/bin/bsd-port"
2⤵
PID:1365

/usr/bin/mkdir
mkdir -p /usr/bin/bsd-port
3⤵
- Reads runtime system information
PID:1366

/bin/sh
sh -c "cp -f /tmp/21db4ff2a01d4d4d4246aea05b5a9c02.bin /usr/bin/bsd-port/getty"
2⤵
PID:1367

/usr/bin/cp
cp -f /tmp/21db4ff2a01d4d4d4246aea05b5a9c02.bin /usr/bin/bsd-port/getty
3⤵
- Write file to user bin folder
- Reads runtime system information
PID:1368

/bin/sh
sh -c /usr/bin/bsd-port/getty
2⤵
PID:1370

/usr/bin/bsd-port/getty
/usr/bin/bsd-port/getty
3⤵
- Executes dropped EXE
- Modifies init.d
- Write file to user bin folder
- Checks CPU configuration
- Reads system network configuration
- Reads runtime system information
PID:1371

/bin/sh
sh -c "ln -s /etc/init.d/selinux /etc/rc1.d/S99selinux"
4⤵
PID:1379

/usr/bin/ln
ln -s /etc/init.d/selinux /etc/rc1.d/S99selinux
5⤵
PID:1380

/bin/sh
sh -c "ln -s /etc/init.d/selinux /etc/rc2.d/S99selinux"
4⤵
PID:1381

/usr/bin/ln
ln -s /etc/init.d/selinux /etc/rc2.d/S99selinux
5⤵
PID:1382

/bin/sh
sh -c "ln -s /etc/init.d/selinux /etc/rc3.d/S99selinux"
4⤵
PID:1383

/usr/bin/ln
ln -s /etc/init.d/selinux /etc/rc3.d/S99selinux
5⤵
PID:1384

/bin/sh
sh -c "ln -s /etc/init.d/selinux /etc/rc4.d/S99selinux"
4⤵
PID:1385

/usr/bin/ln
ln -s /etc/init.d/selinux /etc/rc4.d/S99selinux
5⤵
PID:1386

/bin/sh
sh -c "ln -s /etc/init.d/selinux /etc/rc5.d/S99selinux"
4⤵
PID:1387

/usr/bin/ln
ln -s /etc/init.d/selinux /etc/rc5.d/S99selinux
5⤵
PID:1388

/bin/sh
sh -c "mkdir -p /usr/bin/dpkgd"
4⤵
PID:1389

/usr/bin/mkdir
mkdir -p /usr/bin/dpkgd
5⤵
- Reads runtime system information
PID:1390

/bin/sh
sh -c "cp -f /bin/lsof /usr/bin/dpkgd/lsof"
4⤵
PID:1391

/usr/bin/cp
cp -f /bin/lsof /usr/bin/dpkgd/lsof
5⤵
- Write file to user bin folder
- Reads runtime system information
PID:1392

/bin/sh
sh -c "mkdir -p /bin"
4⤵
PID:1396

/usr/bin/mkdir
mkdir -p /bin
5⤵
- Reads runtime system information
PID:1397

/bin/sh
sh -c "mkdir -p /bin"
4⤵
PID:1398

/usr/bin/mkdir
mkdir -p /bin
5⤵
- Reads runtime system information
PID:1399

/bin/sh
sh -c "cp -f /usr/bin/bsd-port/getty /bin/lsof"
4⤵
PID:1400

/usr/bin/cp
cp -f /usr/bin/bsd-port/getty /bin/lsof
5⤵
- Writes file to system bin folder
- Reads runtime system information
PID:1401

/bin/sh
sh -c "chmod 0755 /bin/lsof"
4⤵
PID:1402

/usr/bin/chmod
chmod 0755 /bin/lsof
5⤵
PID:1403

/bin/sh
sh -c "cp -f /bin/ps /usr/bin/dpkgd/ps"
4⤵
PID:1404

/usr/bin/cp
cp -f /bin/ps /usr/bin/dpkgd/ps
5⤵
- Write file to user bin folder
- Reads runtime system information
PID:1405

/bin/sh
sh -c "mkdir -p /bin"
4⤵
PID:1406

/usr/bin/mkdir
mkdir -p /bin
5⤵
- Reads runtime system information
PID:1407

/bin/sh
sh -c "mkdir -p /bin"
4⤵
PID:1408

/usr/bin/mkdir
mkdir -p /bin
5⤵
- Reads runtime system information
PID:1409

/bin/sh
sh -c "cp -f /usr/bin/bsd-port/getty /bin/ps"
4⤵
PID:1410

/usr/bin/cp
cp -f /usr/bin/bsd-port/getty /bin/ps
5⤵
- Writes file to system bin folder
- Reads runtime system information
PID:1411

/bin/sh
sh -c "chmod 0755 /bin/ps"
4⤵
PID:1412

/usr/bin/chmod
chmod 0755 /bin/ps
5⤵
PID:1413

/bin/sh
sh -c "cp -f /bin/ss /usr/bin/dpkgd/ss"
4⤵
PID:1414

/usr/bin/cp
cp -f /bin/ss /usr/bin/dpkgd/ss
5⤵
- Write file to user bin folder
- Reads runtime system information
PID:1415

/bin/sh
sh -c "mkdir -p /bin"
4⤵
PID:1416

/usr/bin/mkdir
mkdir -p /bin
5⤵
- Reads runtime system information
PID:1417

/bin/sh
sh -c "mkdir -p /bin"
4⤵
PID:1418

/usr/bin/mkdir
mkdir -p /bin
5⤵
- Reads runtime system information
PID:1419

/bin/sh
sh -c "cp -f /usr/bin/bsd-port/getty /bin/ss"
4⤵
PID:1420

/usr/bin/cp
cp -f /usr/bin/bsd-port/getty /bin/ss
5⤵
- Writes file to system bin folder
- Reads runtime system information
PID:1421

/bin/sh
sh -c "chmod 0755 /bin/ss"
4⤵
PID:1422

/usr/bin/chmod
chmod 0755 /bin/ss
5⤵
PID:1423

/bin/sh
sh -c "mkdir -p /usr/bin"
4⤵
PID:1424

/usr/bin/mkdir
mkdir -p /usr/bin
5⤵
- Reads runtime system information
PID:1425

/bin/sh
sh -c "mkdir -p /usr/bin"
4⤵
PID:1426

/usr/bin/mkdir
mkdir -p /usr/bin
5⤵
- Reads runtime system information
PID:1427

/bin/sh
sh -c "cp -f /usr/bin/bsd-port/getty /usr/bin/lsof"
4⤵
PID:1428

/usr/bin/cp
cp -f /usr/bin/bsd-port/getty /usr/bin/lsof
5⤵
- Write file to user bin folder
- Reads runtime system information
PID:1429

/bin/sh
sh -c "chmod 0755 /usr/bin/lsof"
4⤵
PID:1430

/usr/bin/chmod
chmod 0755 /usr/bin/lsof
5⤵
PID:1431

/bin/sh
sh -c "mkdir -p /usr/bin"
4⤵
PID:1432

/usr/bin/mkdir
mkdir -p /usr/bin
5⤵
- Reads runtime system information
PID:1433

/bin/sh
sh -c "mkdir -p /usr/bin"
4⤵
PID:1434

/usr/bin/mkdir
mkdir -p /usr/bin
5⤵
- Reads runtime system information
PID:1435

/bin/sh
sh -c "cp -f /usr/bin/bsd-port/getty /usr/bin/ps"
4⤵
PID:1436

/usr/bin/cp
cp -f /usr/bin/bsd-port/getty /usr/bin/ps
5⤵
- Write file to user bin folder
- Reads runtime system information
PID:1437

/bin/sh
sh -c "chmod 0755 /usr/bin/ps"
4⤵
PID:1438

/usr/bin/chmod
chmod 0755 /usr/bin/ps
5⤵
PID:1439

/bin/sh
sh -c "mkdir -p /usr/bin"
4⤵
PID:1440

/usr/bin/mkdir
mkdir -p /usr/bin
5⤵
- Reads runtime system information
PID:1441

/bin/sh
sh -c "mkdir -p /usr/bin"
4⤵
PID:1442

/usr/bin/mkdir
mkdir -p /usr/bin
5⤵
- Reads runtime system information
PID:1443

/bin/sh
sh -c "cp -f /usr/bin/bsd-port/getty /usr/bin/ss"
4⤵
PID:1444

/usr/bin/cp
cp -f /usr/bin/bsd-port/getty /usr/bin/ss
5⤵
- Write file to user bin folder
- Reads runtime system information
PID:1445

/bin/sh
sh -c "chmod 0755 /usr/bin/ss"
4⤵
PID:1446

/usr/bin/chmod
chmod 0755 /usr/bin/ss
5⤵
PID:1447

/bin/sh
sh -c "insmod /usr/bin/bsd-port/xpacket.ko"
4⤵
PID:1450

/usr/sbin/insmod
insmod /usr/bin/bsd-port/xpacket.ko
5⤵
- Reads runtime system information
PID:1451

/bin/sh
sh -c "mkdir -p /usr/bin"
2⤵
PID:1373

/usr/bin/mkdir
mkdir -p /usr/bin
3⤵
- Reads runtime system information
PID:1374

/bin/sh
sh -c "mkdir -p /usr/bin"
2⤵
PID:1375

/usr/bin/mkdir
mkdir -p /usr/bin
3⤵
- Reads runtime system information
PID:1376

/bin/sh
sh -c "cp -f /tmp/21db4ff2a01d4d4d4246aea05b5a9c02.bin /usr/bin/.sshd"
2⤵
PID:1377

/usr/bin/cp
cp -f /tmp/21db4ff2a01d4d4d4246aea05b5a9c02.bin /usr/bin/.sshd
3⤵
- Write file to user bin folder
- Reads runtime system information
PID:1378

/bin/sh
sh -c /usr/bin/.sshd
2⤵
PID:1394

/usr/bin/.sshd
/usr/bin/.sshd
3⤵
- Executes dropped EXE
- Reads runtime system information
- Writes file to tmp directory
PID:1395

/bin/sh
sh -c "insmod /tmp/xpacket.ko"
2⤵
PID:1457

/usr/sbin/insmod
insmod /tmp/xpacket.ko
3⤵
- Reads runtime system information
PID:1458

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Hijack Execution Flow

T1574

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Hijack Execution Flow

T1574

Defense Evasion

Hijack Execution Flow

T1574

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

Virtualization/Sandbox Evasion

T1497

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

/etc/init.d/DbSecuritySpt
Filesize
54B

MD5
c5ecdecb14cf83f499d88644702f1075

SHA1
4e6fe571b56e2045645df01970da40b5f7379d7a

SHA256
617fcbaae5655e15e86af2cab5256a4c56a85eeaf55ee961afa71c834c168a45

SHA512
5ec69a48b9aef8683f537d2387c1b851fca47691764855e8c4fc9b03c80b4f27a97c488afc9baab068012bef9ae32fcb96c4ae5d2c825ebbfcd44263232cd764

Download Submit
/etc/init.d/selinux
Filesize
36B

MD5
993cc15058142d96c3daf7852c3d5ee8

SHA1
0950b8b391b04dd3895ea33cd3141543ebd2525d

SHA256
8171d077918611803d93088409f220c66fae1c670b297e1aa5d8cbd548ce9208

SHA512
0c4256c00a3710f97e92581b552682b36b62afc35fe72622c491323c618c19ea62611ac04ccafc3dfcde2254a2ebbd93b69b66795b16e36332293bed83adb928

Download Submit
/tmp/gates.lod
Filesize
4B

MD5
c73dfe6c630edb4c1692db67c510f65c

SHA1
9c320bc8499977b59b1c72b878b055ea494dd320

SHA256
7f9401303ba2dafb41c911e1957b16e370a167a55cd62aa474431165ec993954

SHA512
bdda4d0886165e021a49babd3991a66cbd25f2a3396a191ea355f1bc05fee86eea244145293db4f5e72ef84b9ad420fd664915629f5b514949347e5eda194dff

Download Submit
/tmp/moni.lod
Filesize
4B

MD5
e94f63f579e05cb49c05c2d050ead9c0

SHA1
ecbc54904eb7fe332c5764cbefeee200527ff160

SHA256
57c03210be824f7a26151a1000ae617d5f31a8bdee6001fc05284de407d93e7b

SHA512
71fd9a4702f177fdd97e0b35cfe2d094d52d3279b7a48fe198a9bd0175806eedace805695d3f82cbf15bdc483f6b24e13889d0c38ed817000d418a629bb82895

Download Submit
/tmp/notify.file
Filesize
41B

MD5
abb0f769b6b412a33d3ba50aece01e92

SHA1
e8b257fff81e69434792e08ec9488f027f926c93

SHA256
4369662c8ea0b677a53fcb374844c48891704cd898fab882e18408b0d99e3371

SHA512
5615d984265cb7a0d4ddea88bb60d7447230f3c1116db1d04347d5cb1694bd3f9f010fc772a4f605dd1078b96d58bb47afd5c570e1b8129a9b673db385cb5e13

Download Submit
/usr/bin/bsd-port/getty
Filesize
1.2MB

MD5
21db4ff2a01d4d4d4246aea05b5a9c02

SHA1
6e6e730abf88ef15824e9d00fcb75956943a02d8

SHA256
3af00ccefc81f874be86a1c3a6184b52a75d0cf4f91ab5343d3f9176cfcbd860

SHA512
2e23d1cdbd819f47726a12a7a90b76c430bbc3013cd2ea190d62235bca7453ef3b57db062c516c382d17dd1065a9535a9e222764a0a04596ca9f7bbbefe8a36f

Download Submit
/usr/bin/dpkgd/lsof
Filesize
171KB

MD5
061386937ec7acf924438a2643a32be0

SHA1
01a044b9e58839bea3e58c66cb32acc16241bf91

SHA256
8a26bbae9eb85aa98ef29cfe5b0a291234db6eb394c3e0c2841983dcf7dda959

SHA512
2de2e56ac4c32f47b4a1945ccfb0db378e6d59019ee8004e3e5d2ec8935efb5aa8ee14b8a0b21c61a267e195d42a3232a6dcade8720de06118fd579277f59db7

Download Submit
/usr/bin/dpkgd/ps
Filesize
134KB

MD5
d194576b899af45b1d2a448612ec21e5

SHA1
492f7d8f28cd4397ce22fcf0d8bf3304ea93465a

SHA256
a8cf81f3a1137c999c3cf336507ce120b3065e633ade01db6280d427b7d986ca

SHA512
b323babd9580b91772cde29c9f22ae75b27f5ce8ce0268a48ca41713c3545dd72409932a5c48f6af66ac6e43127eb5461d1f686bd667fa1b0e56a1564db3c539

Download Submit
/usr/bin/dpkgd/ss
Filesize
164KB

MD5
51d83131b398a97dd38555ba57084721

SHA1
7d392a87f7db787dfa85fbcdf2a5ba6f0b59b4ed

SHA256
e429f9d16a4cd64593b94dee8309a427fe8ca57765bf0d2e7b822efd123fe768

SHA512
adc7137df75410c2535986c1e86c2e92e58f9bee70094f72f1f7adf3db125720ce281eb3f48474b0e192d672e96cbb1bc6e1ef6b26b10bf76a412c4516948216

Download Submit