3c0242f1491a5bfa548c73301e172fad00ff6ad82ba6d0084c272ce55861f7d2

Analysis

max time kernel
147s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240508-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
01-07-2024 10:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

.rsync/c/go
Size

296B
MD5

aad27afb36fd789a686eee2ab082e6bd
SHA1

424e81adf6bd2159c5872673222feb1aa4db801e
SHA256

054301f34ca331ed89b0fd7da73b2058b5c15e0ed2f36cad308a5e17fc8fe385
SHA512

3de61a046db9884efeaddf41d5b89454c08a687db1543bdf4619abcb3a90004dda480b4876d182e8caac4c5a4cdf25c91c3da949ba04e30c93cfa59d18b280a3

Score

3^/10

Malware Config

Signatures

Writes file to tmp directory 50 IoCs

Malware often drops required files in the /tmp directory.

Processes:

touchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouch

description	ioc	process
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch

/tmp/.rsync/c/go
/tmp/.rsync/c/go
1⤵
PID:1516

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1518

/bin/rm
rm -rf p
2⤵
PID:1519

/bin/rm
rm -rf ip
2⤵
PID:1520

/bin/rm
rm -rf "xtr*"
2⤵
PID:1521

/bin/rm
rm -rf a "a.*"
2⤵
PID:1522

/bin/rm
rm -rf b "b.*"
2⤵
PID:1523

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1524

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1525

/bin/sleep
sleep 3
2⤵
PID:1526

/bin/rm
rm -rf "xtr*"
2⤵
PID:1530

/bin/rm
rm -rf ip
2⤵
PID:1531

/bin/rm
rm -rf p
2⤵
PID:1532

/bin/rm
rm -rf .out
2⤵
PID:1533

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1534

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1535

/bin/rm
rm -rf p
2⤵
PID:1536

/bin/rm
rm -rf ip
2⤵
PID:1537

/bin/rm
rm -rf "xtr*"
2⤵
PID:1538

/bin/rm
rm -rf a "a.*"
2⤵
PID:1539

/bin/rm
rm -rf b "b.*"
2⤵
PID:1540

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1541

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1542

/bin/sleep
sleep 3
2⤵
PID:1543

/bin/rm
rm -rf "xtr*"
2⤵
PID:1544

/bin/rm
rm -rf ip
2⤵
PID:1545

/bin/rm
rm -rf p
2⤵
PID:1546

/bin/rm
rm -rf .out
2⤵
PID:1547

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1548

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1549

/bin/rm
rm -rf p
2⤵
PID:1550

/bin/rm
rm -rf ip
2⤵
PID:1551

/bin/rm
rm -rf "xtr*"
2⤵
PID:1552

/bin/rm
rm -rf a "a.*"
2⤵
PID:1553

/bin/rm
rm -rf b "b.*"
2⤵
PID:1554

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1555

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1556

/bin/sleep
sleep 3
2⤵
PID:1557

/bin/rm
rm -rf "xtr*"
2⤵
PID:1558

/bin/rm
rm -rf ip
2⤵
PID:1559

/bin/rm
rm -rf p
2⤵
PID:1560

/bin/rm
rm -rf .out
2⤵
PID:1561

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1562

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1563

/bin/rm
rm -rf p
2⤵
PID:1564

/bin/rm
rm -rf ip
2⤵
PID:1565

/bin/rm
rm -rf "xtr*"
2⤵
PID:1566

/bin/rm
rm -rf a "a.*"
2⤵
PID:1567

/bin/rm
rm -rf b "b.*"
2⤵
PID:1568

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1569

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1570

/bin/sleep
sleep 3
2⤵
PID:1571

/bin/rm
rm -rf "xtr*"
2⤵
PID:1572

/bin/rm
rm -rf ip
2⤵
PID:1573

/bin/rm
rm -rf p
2⤵
PID:1574

/bin/rm
rm -rf .out
2⤵
PID:1575

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1576

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1577

/bin/rm
rm -rf p
2⤵
PID:1578

/bin/rm
rm -rf ip
2⤵
PID:1579

/bin/rm
rm -rf "xtr*"
2⤵
PID:1580

/bin/rm
rm -rf a "a.*"
2⤵
PID:1581

/bin/rm
rm -rf b "b.*"
2⤵
PID:1582

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1583

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1584

/bin/sleep
sleep 3
2⤵
PID:1585

/bin/rm
rm -rf "xtr*"
2⤵
PID:1586

/bin/rm
rm -rf ip
2⤵
PID:1587

/bin/rm
rm -rf p
2⤵
PID:1588

/bin/rm
rm -rf .out
2⤵
PID:1589

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1590

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1591

/bin/rm
rm -rf p
2⤵
PID:1592

/bin/rm
rm -rf ip
2⤵
PID:1593

/bin/rm
rm -rf "xtr*"
2⤵
PID:1594

/bin/rm
rm -rf a "a.*"
2⤵
PID:1595

/bin/rm
rm -rf b "b.*"
2⤵
PID:1596

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1597

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1598

/bin/sleep
sleep 3
2⤵
PID:1599

/bin/rm
rm -rf "xtr*"
2⤵
PID:1600

/bin/rm
rm -rf ip
2⤵
PID:1601

/bin/rm
rm -rf p
2⤵
PID:1602

/bin/rm
rm -rf .out
2⤵
PID:1603

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1604

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1605

/bin/rm
rm -rf p
2⤵
PID:1606

/bin/rm
rm -rf ip
2⤵
PID:1607

/bin/rm
rm -rf "xtr*"
2⤵
PID:1608

/bin/rm
rm -rf a "a.*"
2⤵
PID:1609

/bin/rm
rm -rf b "b.*"
2⤵
PID:1610

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1611

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1612

/bin/sleep
sleep 3
2⤵
PID:1613

/bin/rm
rm -rf "xtr*"
2⤵
PID:1614

/bin/rm
rm -rf ip
2⤵
PID:1615

/bin/rm
rm -rf p
2⤵
PID:1616

/bin/rm
rm -rf .out
2⤵
PID:1617

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1618

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1619

/bin/rm
rm -rf p
2⤵
PID:1620

/bin/rm
rm -rf ip
2⤵
PID:1621

/bin/rm
rm -rf "xtr*"
2⤵
PID:1622

/bin/rm
rm -rf a "a.*"
2⤵
PID:1623

/bin/rm
rm -rf b "b.*"
2⤵
PID:1624

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1625

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1626

/bin/sleep
sleep 3
2⤵
PID:1627

/bin/rm
rm -rf "xtr*"
2⤵
PID:1628

/bin/rm
rm -rf ip
2⤵
PID:1629

/bin/rm
rm -rf p
2⤵
PID:1630

/bin/rm
rm -rf .out
2⤵
PID:1631

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1632

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1633

/bin/rm
rm -rf p
2⤵
PID:1634

/bin/rm
rm -rf ip
2⤵
PID:1635

/bin/rm
rm -rf "xtr*"
2⤵
PID:1636

/bin/rm
rm -rf a "a.*"
2⤵
PID:1637

/bin/rm
rm -rf b "b.*"
2⤵
PID:1638

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1639

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1640

/bin/sleep
sleep 3
2⤵
PID:1641

/bin/rm
rm -rf "xtr*"
2⤵
PID:1642

/bin/rm
rm -rf ip
2⤵
PID:1643

/bin/rm
rm -rf p
2⤵
PID:1644

/bin/rm
rm -rf .out
2⤵
PID:1645

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1646

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1647

/bin/rm
rm -rf p
2⤵
PID:1648

/bin/rm
rm -rf ip
2⤵
PID:1649

/bin/rm
rm -rf "xtr*"
2⤵
PID:1650

/bin/rm
rm -rf a "a.*"
2⤵
PID:1651

/bin/rm
rm -rf b "b.*"
2⤵
PID:1652

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1653

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1654

/bin/sleep
sleep 3
2⤵
PID:1655

/bin/rm
rm -rf "xtr*"
2⤵
PID:1658

/bin/rm
rm -rf ip
2⤵
PID:1659

/bin/rm
rm -rf p
2⤵
PID:1660

/bin/rm
rm -rf .out
2⤵
PID:1661

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1662

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1663

/bin/rm
rm -rf p
2⤵
PID:1664

/bin/rm
rm -rf ip
2⤵
PID:1665

/bin/rm
rm -rf "xtr*"
2⤵
PID:1666

/bin/rm
rm -rf a "a.*"
2⤵
PID:1667

/bin/rm
rm -rf b "b.*"
2⤵
PID:1668

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1669

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1670

/bin/sleep
sleep 3
2⤵
PID:1671

/bin/rm
rm -rf "xtr*"
2⤵
PID:1672

/bin/rm
rm -rf ip
2⤵
PID:1673

/bin/rm
rm -rf p
2⤵
PID:1674

/bin/rm
rm -rf .out
2⤵
PID:1675

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1676

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1677

/bin/rm
rm -rf p
2⤵
PID:1678

/bin/rm
rm -rf ip
2⤵
PID:1679

/bin/rm
rm -rf "xtr*"
2⤵
PID:1680

/bin/rm
rm -rf a "a.*"
2⤵
PID:1681

/bin/rm
rm -rf b "b.*"
2⤵
PID:1682

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1683

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1684

/bin/sleep
sleep 3
2⤵
PID:1685

/bin/rm
rm -rf "xtr*"
2⤵
PID:1686

/bin/rm
rm -rf ip
2⤵
PID:1687

/bin/rm
rm -rf p
2⤵
PID:1688

/bin/rm
rm -rf .out
2⤵
PID:1689

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1690

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1691

/bin/rm
rm -rf p
2⤵
PID:1692

/bin/rm
rm -rf ip
2⤵
PID:1693

/bin/rm
rm -rf "xtr*"
2⤵
PID:1694

/bin/rm
rm -rf a "a.*"
2⤵
PID:1695

/bin/rm
rm -rf b "b.*"
2⤵
PID:1696

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1697

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1698

/bin/sleep
sleep 3
2⤵
PID:1699

/bin/rm
rm -rf "xtr*"
2⤵
PID:1700

/bin/rm
rm -rf ip
2⤵
PID:1701

/bin/rm
rm -rf p
2⤵
PID:1702

/bin/rm
rm -rf .out
2⤵
PID:1703

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1704

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1705

/bin/rm
rm -rf p
2⤵
PID:1706

/bin/rm
rm -rf ip
2⤵
PID:1707

/bin/rm
rm -rf "xtr*"
2⤵
PID:1708

/bin/rm
rm -rf a "a.*"
2⤵
PID:1709

/bin/rm
rm -rf b "b.*"
2⤵
PID:1710

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1711

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1712

/bin/sleep
sleep 3
2⤵
PID:1713

/bin/rm
rm -rf "xtr*"
2⤵
PID:1714

/bin/rm
rm -rf ip
2⤵
PID:1715

/bin/rm
rm -rf p
2⤵
PID:1716

/bin/rm
rm -rf .out
2⤵
PID:1717

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1718

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1719

/bin/rm
rm -rf p
2⤵
PID:1720

/bin/rm
rm -rf ip
2⤵
PID:1721

/bin/rm
rm -rf "xtr*"
2⤵
PID:1722

/bin/rm
rm -rf a "a.*"
2⤵
PID:1723

/bin/rm
rm -rf b "b.*"
2⤵
PID:1724

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1725

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1726

/bin/sleep
sleep 3
2⤵
PID:1727

/bin/rm
rm -rf "xtr*"
2⤵
PID:1728

/bin/rm
rm -rf ip
2⤵
PID:1729

/bin/rm
rm -rf p
2⤵
PID:1730

/bin/rm
rm -rf .out
2⤵
PID:1731

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1732

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1733

/bin/rm
rm -rf p
2⤵
PID:1734

/bin/rm
rm -rf ip
2⤵
PID:1735

/bin/rm
rm -rf "xtr*"
2⤵
PID:1736

/bin/rm
rm -rf a "a.*"
2⤵
PID:1737

/bin/rm
rm -rf b "b.*"
2⤵
PID:1738

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1739

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1740

/bin/sleep
sleep 3
2⤵
PID:1741

/bin/rm
rm -rf "xtr*"
2⤵
PID:1742

/bin/rm
rm -rf ip
2⤵
PID:1743

/bin/rm
rm -rf p
2⤵
PID:1744

/bin/rm
rm -rf .out
2⤵
PID:1745

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1746

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1747

/bin/rm
rm -rf p
2⤵
PID:1748

/bin/rm
rm -rf ip
2⤵
PID:1749

/bin/rm
rm -rf "xtr*"
2⤵
PID:1750

/bin/rm
rm -rf a "a.*"
2⤵
PID:1751

/bin/rm
rm -rf b "b.*"
2⤵
PID:1752

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1753

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1754

/bin/sleep
sleep 3
2⤵
PID:1755

/bin/rm
rm -rf "xtr*"
2⤵
PID:1756

/bin/rm
rm -rf ip
2⤵
PID:1757

/bin/rm
rm -rf p
2⤵
PID:1758

/bin/rm
rm -rf .out
2⤵
PID:1759

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1760

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1761

/bin/rm
rm -rf p
2⤵
PID:1762

/bin/rm
rm -rf ip
2⤵
PID:1763

/bin/rm
rm -rf "xtr*"
2⤵
PID:1764

/bin/rm
rm -rf a "a.*"
2⤵
PID:1765

/bin/rm
rm -rf b "b.*"
2⤵
PID:1766

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1767

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1768

/bin/sleep
sleep 3
2⤵
PID:1769

/bin/rm
rm -rf "xtr*"
2⤵
PID:1770

/bin/rm
rm -rf ip
2⤵
PID:1771

/bin/rm
rm -rf p
2⤵
PID:1772

/bin/rm
rm -rf .out
2⤵
PID:1773

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1774

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1775

/bin/rm
rm -rf p
2⤵
PID:1776

/bin/rm
rm -rf ip
2⤵
PID:1777

/bin/rm
rm -rf "xtr*"
2⤵
PID:1778

/bin/rm
rm -rf a "a.*"
2⤵
PID:1779

/bin/rm
rm -rf b "b.*"
2⤵
PID:1780

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1781

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1782

/bin/sleep
sleep 3
2⤵
PID:1783

/bin/rm
rm -rf "xtr*"
2⤵
PID:1784

/bin/rm
rm -rf ip
2⤵
PID:1785

/bin/rm
rm -rf p
2⤵
PID:1786

/bin/rm
rm -rf .out
2⤵
PID:1787

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1788

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1789

/bin/rm
rm -rf p
2⤵
PID:1790

/bin/rm
rm -rf ip
2⤵
PID:1791

/bin/rm
rm -rf "xtr*"
2⤵
PID:1792

/bin/rm
rm -rf a "a.*"
2⤵
PID:1793

/bin/rm
rm -rf b "b.*"
2⤵
PID:1794

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1795

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1796

/bin/sleep
sleep 3
2⤵
PID:1797

/bin/rm
rm -rf "xtr*"
2⤵
PID:1798

/bin/rm
rm -rf ip
2⤵
PID:1799

/bin/rm
rm -rf p
2⤵
PID:1800

/bin/rm
rm -rf .out
2⤵
PID:1801

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1802

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1803

/bin/rm
rm -rf p
2⤵
PID:1804

/bin/rm
rm -rf ip
2⤵
PID:1805

/bin/rm
rm -rf "xtr*"
2⤵
PID:1806

/bin/rm
rm -rf a "a.*"
2⤵
PID:1807

/bin/rm
rm -rf b "b.*"
2⤵
PID:1808

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1809

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1810

/bin/sleep
sleep 3
2⤵
PID:1811

/bin/rm
rm -rf "xtr*"
2⤵
PID:1812

/bin/rm
rm -rf ip
2⤵
PID:1813

/bin/rm
rm -rf p
2⤵
PID:1814

/bin/rm
rm -rf .out
2⤵
PID:1815

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1816

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1817

/bin/rm
rm -rf p
2⤵
PID:1818

/bin/rm
rm -rf ip
2⤵
PID:1819

/bin/rm
rm -rf "xtr*"
2⤵
PID:1820

/bin/rm
rm -rf a "a.*"
2⤵
PID:1821

/bin/rm
rm -rf b "b.*"
2⤵
PID:1822

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1823

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1824

/bin/sleep
sleep 3
2⤵
PID:1825

/bin/rm
rm -rf "xtr*"
2⤵
PID:1826

/bin/rm
rm -rf ip
2⤵
PID:1827

/bin/rm
rm -rf p
2⤵
PID:1828

/bin/rm
rm -rf .out
2⤵
PID:1829

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1830

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1831

/bin/rm
rm -rf p
2⤵
PID:1832

/bin/rm
rm -rf ip
2⤵
PID:1833

/bin/rm
rm -rf "xtr*"
2⤵
PID:1834

/bin/rm
rm -rf a "a.*"
2⤵
PID:1835

/bin/rm
rm -rf b "b.*"
2⤵
PID:1836

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1837

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1838

/bin/sleep
sleep 3
2⤵
PID:1839

/bin/rm
rm -rf "xtr*"
2⤵
PID:1840

/bin/rm
rm -rf ip
2⤵
PID:1841

/bin/rm
rm -rf p
2⤵
PID:1842

/bin/rm
rm -rf .out
2⤵
PID:1843

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1844

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1845

/bin/rm
rm -rf p
2⤵
PID:1846

/bin/rm
rm -rf ip
2⤵
PID:1847

/bin/rm
rm -rf "xtr*"
2⤵
PID:1848

/bin/rm
rm -rf a "a.*"
2⤵
PID:1849

/bin/rm
rm -rf b "b.*"
2⤵
PID:1850

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1851

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1852

/bin/sleep
sleep 3
2⤵
PID:1853

/bin/rm
rm -rf "xtr*"
2⤵
PID:1854

/bin/rm
rm -rf ip
2⤵
PID:1855

/bin/rm
rm -rf p
2⤵
PID:1856

/bin/rm
rm -rf .out
2⤵
PID:1857

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1858

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1859

/bin/rm
rm -rf p
2⤵
PID:1860

/bin/rm
rm -rf ip
2⤵
PID:1861

/bin/rm
rm -rf "xtr*"
2⤵
PID:1862

/bin/rm
rm -rf a "a.*"
2⤵
PID:1863

/bin/rm
rm -rf b "b.*"
2⤵
PID:1864

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1865

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1866

/bin/sleep
sleep 3
2⤵
PID:1867

/bin/rm
rm -rf "xtr*"
2⤵
PID:1868

/bin/rm
rm -rf ip
2⤵
PID:1869

/bin/rm
rm -rf p
2⤵
PID:1870

/bin/rm
rm -rf .out
2⤵
PID:1871

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1872

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1873

/bin/rm
rm -rf p
2⤵
PID:1874

/bin/rm
rm -rf ip
2⤵
PID:1875

/bin/rm
rm -rf "xtr*"
2⤵
PID:1876

/bin/rm
rm -rf a "a.*"
2⤵
PID:1877

/bin/rm
rm -rf b "b.*"
2⤵
PID:1878

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1879

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1880

/bin/sleep
sleep 3
2⤵
PID:1881

/bin/rm
rm -rf "xtr*"
2⤵
PID:1882

/bin/rm
rm -rf ip
2⤵
PID:1883

/bin/rm
rm -rf p
2⤵
PID:1884

/bin/rm
rm -rf .out
2⤵
PID:1885

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1886

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1887

/bin/rm
rm -rf p
2⤵
PID:1888

/bin/rm
rm -rf ip
2⤵
PID:1889

/bin/rm
rm -rf "xtr*"
2⤵
PID:1890

/bin/rm
rm -rf a "a.*"
2⤵
PID:1891

/bin/rm
rm -rf b "b.*"
2⤵
PID:1892

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1893

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1894

/bin/sleep
sleep 3
2⤵
PID:1895

/bin/rm
rm -rf "xtr*"
2⤵
PID:1896

/bin/rm
rm -rf ip
2⤵
PID:1897

/bin/rm
rm -rf p
2⤵
PID:1898

/bin/rm
rm -rf .out
2⤵
PID:1899

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1900

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1901

/bin/rm
rm -rf p
2⤵
PID:1902

/bin/rm
rm -rf ip
2⤵
PID:1903

/bin/rm
rm -rf "xtr*"
2⤵
PID:1904

/bin/rm
rm -rf a "a.*"
2⤵
PID:1905

/bin/rm
rm -rf b "b.*"
2⤵
PID:1906

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1907

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1908

/bin/sleep
sleep 3
2⤵
PID:1909

/bin/rm
rm -rf "xtr*"
2⤵
PID:1910

/bin/rm
rm -rf ip
2⤵
PID:1911

/bin/rm
rm -rf p
2⤵
PID:1912

/bin/rm
rm -rf .out
2⤵
PID:1913

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1914

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1915

/bin/rm
rm -rf p
2⤵
PID:1916

/bin/rm
rm -rf ip
2⤵
PID:1917

/bin/rm
rm -rf "xtr*"
2⤵
PID:1918

/bin/rm
rm -rf a "a.*"
2⤵
PID:1919

/bin/rm
rm -rf b "b.*"
2⤵
PID:1920

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1921

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1922

/bin/sleep
sleep 3
2⤵
PID:1923

/bin/rm
rm -rf "xtr*"
2⤵
PID:1924

/bin/rm
rm -rf ip
2⤵
PID:1925

/bin/rm
rm -rf p
2⤵
PID:1926

/bin/rm
rm -rf .out
2⤵
PID:1927

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1928

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1929

/bin/rm
rm -rf p
2⤵
PID:1930

/bin/rm
rm -rf ip
2⤵
PID:1931

/bin/rm
rm -rf "xtr*"
2⤵
PID:1932

/bin/rm
rm -rf a "a.*"
2⤵
PID:1933

/bin/rm
rm -rf b "b.*"
2⤵
PID:1934

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1935

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1936

/bin/sleep
sleep 3
2⤵
PID:1937

/bin/rm
rm -rf "xtr*"
2⤵
PID:1938

/bin/rm
rm -rf ip
2⤵
PID:1939

/bin/rm
rm -rf p
2⤵
PID:1940

/bin/rm
rm -rf .out
2⤵
PID:1941

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1942

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1943

/bin/rm
rm -rf p
2⤵
PID:1944

/bin/rm
rm -rf ip
2⤵
PID:1945

/bin/rm
rm -rf "xtr*"
2⤵
PID:1946

/bin/rm
rm -rf a "a.*"
2⤵
PID:1947

/bin/rm
rm -rf b "b.*"
2⤵
PID:1948

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1949

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1950

/bin/sleep
sleep 3
2⤵
PID:1951

/bin/rm
rm -rf "xtr*"
2⤵
PID:1952

/bin/rm
rm -rf ip
2⤵
PID:1953

/bin/rm
rm -rf p
2⤵
PID:1954

/bin/rm
rm -rf .out
2⤵
PID:1955

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1956

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1957

/bin/rm
rm -rf p
2⤵
PID:1958

/bin/rm
rm -rf ip
2⤵
PID:1959

/bin/rm
rm -rf "xtr*"
2⤵
PID:1960

/bin/rm
rm -rf a "a.*"
2⤵
PID:1961

/bin/rm
rm -rf b "b.*"
2⤵
PID:1962

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1963

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1964

/bin/sleep
sleep 3
2⤵
PID:1965

/bin/rm
rm -rf "xtr*"
2⤵
PID:1966

/bin/rm
rm -rf ip
2⤵
PID:1967

/bin/rm
rm -rf p
2⤵
PID:1968

/bin/rm
rm -rf .out
2⤵
PID:1969

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1970

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1971

/bin/rm
rm -rf p
2⤵
PID:1972

/bin/rm
rm -rf ip
2⤵
PID:1973

/bin/rm
rm -rf "xtr*"
2⤵
PID:1974

/bin/rm
rm -rf a "a.*"
2⤵
PID:1975

/bin/rm
rm -rf b "b.*"
2⤵
PID:1976

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1977

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1978

/bin/sleep
sleep 3
2⤵
PID:1979

/bin/rm
rm -rf "xtr*"
2⤵
PID:1980

/bin/rm
rm -rf ip
2⤵
PID:1981

/bin/rm
rm -rf p
2⤵
PID:1982

/bin/rm
rm -rf .out
2⤵
PID:1983

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1984

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1985

/bin/rm
rm -rf p
2⤵
PID:1986

/bin/rm
rm -rf ip
2⤵
PID:1987

/bin/rm
rm -rf "xtr*"
2⤵
PID:1988

/bin/rm
rm -rf a "a.*"
2⤵
PID:1989

/bin/rm
rm -rf b "b.*"
2⤵
PID:1990

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1991

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1992

/bin/sleep
sleep 3
2⤵
PID:1993

/bin/rm
rm -rf "xtr*"
2⤵
PID:1994

/bin/rm
rm -rf ip
2⤵
PID:1995

/bin/rm
rm -rf p
2⤵
PID:1996

/bin/rm
rm -rf .out
2⤵
PID:1997

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1998

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1999

/bin/rm
rm -rf p
2⤵
PID:2000

/bin/rm
rm -rf ip
2⤵
PID:2001

/bin/rm
rm -rf "xtr*"
2⤵
PID:2002

/bin/rm
rm -rf a "a.*"
2⤵
PID:2003

/bin/rm
rm -rf b "b.*"
2⤵
PID:2004

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:2005

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:2006

/bin/sleep
sleep 3
2⤵
PID:2007

/bin/rm
rm -rf "xtr*"
2⤵
PID:2008

/bin/rm
rm -rf ip
2⤵
PID:2009

/bin/rm
rm -rf p
2⤵
PID:2010

/bin/rm
rm -rf .out
2⤵
PID:2011

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2012

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2013

/bin/rm
rm -rf p
2⤵
PID:2014

/bin/rm
rm -rf ip
2⤵
PID:2015

/bin/rm
rm -rf "xtr*"
2⤵
PID:2016

/bin/rm
rm -rf a "a.*"
2⤵
PID:2017

/bin/rm
rm -rf b "b.*"
2⤵
PID:2018

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:2019

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:2020

/bin/sleep
sleep 3
2⤵
PID:2021

/bin/rm
rm -rf "xtr*"
2⤵
PID:2022

/bin/rm
rm -rf ip
2⤵
PID:2023

/bin/rm
rm -rf p
2⤵
PID:2024

/bin/rm
rm -rf .out
2⤵
PID:2025

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2026

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2027

/bin/rm
rm -rf p
2⤵
PID:2028

/bin/rm
rm -rf ip
2⤵
PID:2029

/bin/rm
rm -rf "xtr*"
2⤵
PID:2030

/bin/rm
rm -rf a "a.*"
2⤵
PID:2031

/bin/rm
rm -rf b "b.*"
2⤵
PID:2032

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:2033

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:2034

/bin/sleep
sleep 3
2⤵
PID:2035

/bin/rm
rm -rf "xtr*"
2⤵
PID:2036

/bin/rm
rm -rf ip
2⤵
PID:2037

/bin/rm
rm -rf p
2⤵
PID:2038

/bin/rm
rm -rf .out
2⤵
PID:2039

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2040

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2041

/bin/rm
rm -rf p
2⤵
PID:2042

/bin/rm
rm -rf ip
2⤵
PID:2043

/bin/rm
rm -rf "xtr*"
2⤵
PID:2044

/bin/rm
rm -rf a "a.*"
2⤵
PID:2045

/bin/rm
rm -rf b "b.*"
2⤵
PID:2046

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:2047

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:2048

/bin/sleep
sleep 3
2⤵
PID:2049

/bin/rm
rm -rf "xtr*"
2⤵
PID:2050

/bin/rm
rm -rf ip
2⤵
PID:2051

/bin/rm
rm -rf p
2⤵
PID:2052

/bin/rm
rm -rf .out
2⤵
PID:2053

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2054

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2055

/bin/rm
rm -rf p
2⤵
PID:2056

/bin/rm
rm -rf ip
2⤵
PID:2057

/bin/rm
rm -rf "xtr*"
2⤵
PID:2058

/bin/rm
rm -rf a "a.*"
2⤵
PID:2059

/bin/rm
rm -rf b "b.*"
2⤵
PID:2060

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:2061

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:2062

/bin/sleep
sleep 3
2⤵
PID:2063

/bin/rm
rm -rf "xtr*"
2⤵
PID:2064

/bin/rm
rm -rf ip
2⤵
PID:2065

/bin/rm
rm -rf p
2⤵
PID:2066

/bin/rm
rm -rf .out
2⤵
PID:2067

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2068

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2069

/bin/rm
rm -rf p
2⤵
PID:2070

/bin/rm
rm -rf ip
2⤵
PID:2071

/bin/rm
rm -rf "xtr*"
2⤵
PID:2072

/bin/rm
rm -rf a "a.*"
2⤵
PID:2073

/bin/rm
rm -rf b "b.*"
2⤵
PID:2074

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:2075

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:2076

/bin/sleep
sleep 3
2⤵
PID:2077

/bin/rm
rm -rf "xtr*"
2⤵
PID:2078

/bin/rm
rm -rf ip
2⤵
PID:2079

/bin/rm
rm -rf p
2⤵
PID:2080

/bin/rm
rm -rf .out
2⤵
PID:2081

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2082

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2083

/bin/rm
rm -rf p
2⤵
PID:2084

/bin/rm
rm -rf ip
2⤵
PID:2085

/bin/rm
rm -rf "xtr*"
2⤵
PID:2086

/bin/rm
rm -rf a "a.*"
2⤵
PID:2087

/bin/rm
rm -rf b "b.*"
2⤵
PID:2088

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:2089

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:2090

/bin/sleep
sleep 3
2⤵
PID:2091

/bin/rm
rm -rf "xtr*"
2⤵
PID:2092

/bin/rm
rm -rf ip
2⤵
PID:2093

/bin/rm
rm -rf p
2⤵
PID:2094

/bin/rm
rm -rf .out
2⤵
PID:2095

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2096

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2097

/bin/rm
rm -rf p
2⤵
PID:2098

/bin/rm
rm -rf ip
2⤵
PID:2099

/bin/rm
rm -rf "xtr*"
2⤵
PID:2100

/bin/rm
rm -rf a "a.*"
2⤵
PID:2101

/bin/rm
rm -rf b "b.*"
2⤵
PID:2102

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:2103

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:2104

/bin/sleep
sleep 3
2⤵
PID:2105

/bin/rm
rm -rf "xtr*"
2⤵
PID:2106

/bin/rm
rm -rf ip
2⤵
PID:2107

/bin/rm
rm -rf p
2⤵
PID:2108

/bin/rm
rm -rf .out
2⤵
PID:2109

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2110

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2111

/bin/rm
rm -rf p
2⤵
PID:2112

/bin/rm
rm -rf ip
2⤵
PID:2113

/bin/rm
rm -rf "xtr*"
2⤵
PID:2114

/bin/rm
rm -rf a "a.*"
2⤵
PID:2115

/bin/rm
rm -rf b "b.*"
2⤵
PID:2116

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:2117

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:2118

/bin/sleep
sleep 3
2⤵
PID:2119

/bin/rm
rm -rf "xtr*"
2⤵
PID:2120

/bin/rm
rm -rf ip
2⤵
PID:2121

/bin/rm
rm -rf p
2⤵
PID:2122

/bin/rm
rm -rf .out
2⤵
PID:2123

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2124

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2125

/bin/rm
rm -rf p
2⤵
PID:2126

/bin/rm
rm -rf ip
2⤵
PID:2127

/bin/rm
rm -rf "xtr*"
2⤵
PID:2128

/bin/rm
rm -rf a "a.*"
2⤵
PID:2129

/bin/rm
rm -rf b "b.*"
2⤵
PID:2130

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:2131

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:2132

/bin/sleep
sleep 3
2⤵
PID:2133

/bin/rm
rm -rf "xtr*"
2⤵
PID:2134

/bin/rm
rm -rf ip
2⤵
PID:2135

/bin/rm
rm -rf p
2⤵
PID:2136

/bin/rm
rm -rf .out
2⤵
PID:2137

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2138

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2139

/bin/rm
rm -rf p
2⤵
PID:2140

/bin/rm
rm -rf ip
2⤵
PID:2141

/bin/rm
rm -rf "xtr*"
2⤵
PID:2142

/bin/rm
rm -rf a "a.*"
2⤵
PID:2143

/bin/rm
rm -rf b "b.*"
2⤵
PID:2144

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:2145

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:2146

/bin/sleep
sleep 3
2⤵
PID:2147

/bin/rm
rm -rf "xtr*"
2⤵
PID:2148

/bin/rm
rm -rf ip
2⤵
PID:2149

/bin/rm
rm -rf p
2⤵
PID:2150

/bin/rm
rm -rf .out
2⤵
PID:2151

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2152

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2153

/bin/rm
rm -rf p
2⤵
PID:2154

/bin/rm
rm -rf ip
2⤵
PID:2155

/bin/rm
rm -rf "xtr*"
2⤵
PID:2156

/bin/rm
rm -rf a "a.*"
2⤵
PID:2157

/bin/rm
rm -rf b "b.*"
2⤵
PID:2158

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:2159

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:2160

/bin/sleep
sleep 3
2⤵
PID:2161

/bin/rm
rm -rf "xtr*"
2⤵
PID:2162

/bin/rm
rm -rf ip
2⤵
PID:2163

/bin/rm
rm -rf p
2⤵
PID:2164

/bin/rm
rm -rf .out
2⤵
PID:2165

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2166

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2167

/bin/rm
rm -rf p
2⤵
PID:2168

/bin/rm
rm -rf ip
2⤵
PID:2169

/bin/rm
rm -rf "xtr*"
2⤵
PID:2170

/bin/rm
rm -rf a "a.*"
2⤵
PID:2171

/bin/rm
rm -rf b "b.*"
2⤵
PID:2172

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:2173

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:2174

/bin/sleep
sleep 3
2⤵
PID:2175

/bin/rm
rm -rf "xtr*"
2⤵
PID:2176

/bin/rm
rm -rf ip
2⤵
PID:2177

/bin/rm
rm -rf p
2⤵
PID:2178

/bin/rm
rm -rf .out
2⤵
PID:2179

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2180

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2181

/bin/rm
rm -rf p
2⤵
PID:2182

/bin/rm
rm -rf ip
2⤵
PID:2183

/bin/rm
rm -rf "xtr*"
2⤵
PID:2184

/bin/rm
rm -rf a "a.*"
2⤵
PID:2185

/bin/rm
rm -rf b "b.*"
2⤵
PID:2186

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:2187

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:2188

/bin/sleep
sleep 3
2⤵
PID:2189

/bin/rm
rm -rf "xtr*"
2⤵
PID:2190

/bin/rm
rm -rf ip
2⤵
PID:2191

/bin/rm
rm -rf p
2⤵
PID:2192

/bin/rm
rm -rf .out
2⤵
PID:2193

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2194

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2195

/bin/rm
rm -rf p
2⤵
PID:2196

/bin/rm
rm -rf ip
2⤵
PID:2197

/bin/rm
rm -rf "xtr*"
2⤵
PID:2198

/bin/rm
rm -rf a "a.*"
2⤵
PID:2199

/bin/rm
rm -rf b "b.*"
2⤵
PID:2200

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:2201

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:2202

/bin/sleep
sleep 3
2⤵
PID:2203

/bin/rm
rm -rf "xtr*"
2⤵
PID:2204

/bin/rm
rm -rf ip
2⤵
PID:2205

/bin/rm
rm -rf p
2⤵
PID:2206

/bin/rm
rm -rf .out
2⤵
PID:2207

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2208

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2209

/bin/rm
rm -rf p
2⤵
PID:2210

/bin/rm
rm -rf ip
2⤵
PID:2211

/bin/rm
rm -rf "xtr*"
2⤵
PID:2212

/bin/rm
rm -rf a "a.*"
2⤵
PID:2213

/bin/rm
rm -rf b "b.*"
2⤵
PID:2214

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:2215

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads