3c0242f1491a5bfa548c73301e172fad00ff6ad82ba6d0084c272ce55861f7d2

Analysis

max time kernel
149s
platform
debian-9_mips
resource
debian9-mipsbe-20240418-en
resource tags

arch:mipsimage:debian9-mipsbe-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
01-07-2024 10:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

.rsync/c/go
Size

296B
MD5

aad27afb36fd789a686eee2ab082e6bd
SHA1

424e81adf6bd2159c5872673222feb1aa4db801e
SHA256

054301f34ca331ed89b0fd7da73b2058b5c15e0ed2f36cad308a5e17fc8fe385
SHA512

3de61a046db9884efeaddf41d5b89454c08a687db1543bdf4619abcb3a90004dda480b4876d182e8caac4c5a4cdf25c91c3da949ba04e30c93cfa59d18b280a3

Score

3^/10

Malware Config

Signatures

Writes file to tmp directory 45 IoCs

Malware often drops required files in the /tmp directory.

Processes:

touchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouch

description	ioc	process
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch

/tmp/.rsync/c/go
/tmp/.rsync/c/go
1⤵
PID:726

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:729

/bin/rm
rm -rf p
2⤵
PID:730

/bin/rm
rm -rf ip
2⤵
PID:732

/bin/rm
rm -rf "xtr*"
2⤵
PID:737

/bin/rm
rm -rf a "a.*"
2⤵
PID:738

/bin/rm
rm -rf b "b.*"
2⤵
PID:739

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:740

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:742

/bin/sleep
sleep 3
2⤵
PID:743

/bin/rm
rm -rf "xtr*"
2⤵
PID:748

/bin/rm
rm -rf ip
2⤵
PID:749

/bin/rm
rm -rf p
2⤵
PID:750

/bin/rm
rm -rf .out
2⤵
PID:752

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:753

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:755

/bin/rm
rm -rf p
2⤵
PID:756

/bin/rm
rm -rf ip
2⤵
PID:758

/bin/rm
rm -rf "xtr*"
2⤵
PID:759

/bin/rm
rm -rf a "a.*"
2⤵
PID:761

/bin/rm
rm -rf b "b.*"
2⤵
PID:762

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:763

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:764

/bin/sleep
sleep 3
2⤵
PID:766

/bin/rm
rm -rf "xtr*"
2⤵
PID:799

/bin/rm
rm -rf ip
2⤵
PID:801

/bin/rm
rm -rf p
2⤵
PID:802

/bin/rm
rm -rf .out
2⤵
PID:803

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:804

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:806

/bin/rm
rm -rf p
2⤵
PID:807

/bin/rm
rm -rf ip
2⤵
PID:809

/bin/rm
rm -rf "xtr*"
2⤵
PID:810

/bin/rm
rm -rf a "a.*"
2⤵
PID:811

/bin/rm
rm -rf b "b.*"
2⤵
PID:812

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:814

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:815

/bin/sleep
sleep 3
2⤵
PID:817

/bin/rm
rm -rf "xtr*"
2⤵
PID:821

/bin/rm
rm -rf ip
2⤵
PID:822

/bin/rm
rm -rf p
2⤵
PID:823

/bin/rm
rm -rf .out
2⤵
PID:824

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:825

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:826

/bin/rm
rm -rf p
2⤵
PID:827

/bin/rm
rm -rf ip
2⤵
PID:828

/bin/rm
rm -rf "xtr*"
2⤵
PID:829

/bin/rm
rm -rf a "a.*"
2⤵
PID:830

/bin/rm
rm -rf b "b.*"
2⤵
PID:831

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:832

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:833

/bin/sleep
sleep 3
2⤵
PID:834

/bin/rm
rm -rf "xtr*"
2⤵
PID:864

/bin/rm
rm -rf ip
2⤵
PID:866

/bin/rm
rm -rf p
2⤵
PID:867

/bin/rm
rm -rf .out
2⤵
PID:868

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:869

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:870

/bin/rm
rm -rf p
2⤵
PID:871

/bin/rm
rm -rf ip
2⤵
PID:872

/bin/rm
rm -rf "xtr*"
2⤵
PID:873

/bin/rm
rm -rf a "a.*"
2⤵
PID:874

/bin/rm
rm -rf b "b.*"
2⤵
PID:875

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:876

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:877

/bin/sleep
sleep 3
2⤵
PID:878

/bin/rm
rm -rf "xtr*"
2⤵
PID:879

/bin/rm
rm -rf ip
2⤵
PID:880

/bin/rm
rm -rf p
2⤵
PID:881

/bin/rm
rm -rf .out
2⤵
PID:882

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:883

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:884

/bin/rm
rm -rf p
2⤵
PID:885

/bin/rm
rm -rf ip
2⤵
PID:886

/bin/rm
rm -rf "xtr*"
2⤵
PID:887

/bin/rm
rm -rf a "a.*"
2⤵
PID:888

/bin/rm
rm -rf b "b.*"
2⤵
PID:889

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:890

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:891

/bin/sleep
sleep 3
2⤵
PID:892

/bin/rm
rm -rf "xtr*"
2⤵
PID:893

/bin/rm
rm -rf ip
2⤵
PID:894

/bin/rm
rm -rf p
2⤵
PID:895

/bin/rm
rm -rf .out
2⤵
PID:896

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:897

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:898

/bin/rm
rm -rf p
2⤵
PID:899

/bin/rm
rm -rf ip
2⤵
PID:900

/bin/rm
rm -rf "xtr*"
2⤵
PID:901

/bin/rm
rm -rf a "a.*"
2⤵
PID:902

/bin/rm
rm -rf b "b.*"
2⤵
PID:903

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:904

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:905

/bin/sleep
sleep 3
2⤵
PID:906

/bin/rm
rm -rf "xtr*"
2⤵
PID:907

/bin/rm
rm -rf ip
2⤵
PID:908

/bin/rm
rm -rf p
2⤵
PID:909

/bin/rm
rm -rf .out
2⤵
PID:910

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:911

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:912

/bin/rm
rm -rf p
2⤵
PID:913

/bin/rm
rm -rf ip
2⤵
PID:914

/bin/rm
rm -rf "xtr*"
2⤵
PID:915

/bin/rm
rm -rf a "a.*"
2⤵
PID:916

/bin/rm
rm -rf b "b.*"
2⤵
PID:917

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:918

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:919

/bin/sleep
sleep 3
2⤵
PID:920

/bin/rm
rm -rf "xtr*"
2⤵
PID:924

/bin/rm
rm -rf ip
2⤵
PID:925

/bin/rm
rm -rf p
2⤵
PID:926

/bin/rm
rm -rf .out
2⤵
PID:927

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:928

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:929

/bin/rm
rm -rf p
2⤵
PID:930

/bin/rm
rm -rf ip
2⤵
PID:931

/bin/rm
rm -rf "xtr*"
2⤵
PID:932

/bin/rm
rm -rf a "a.*"
2⤵
PID:933

/bin/rm
rm -rf b "b.*"
2⤵
PID:934

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:935

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:936

/bin/sleep
sleep 3
2⤵
PID:937

/bin/rm
rm -rf "xtr*"
2⤵
PID:938

/bin/rm
rm -rf ip
2⤵
PID:939

/bin/rm
rm -rf p
2⤵
PID:940

/bin/rm
rm -rf .out
2⤵
PID:941

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:942

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:943

/bin/rm
rm -rf p
2⤵
PID:944

/bin/rm
rm -rf ip
2⤵
PID:945

/bin/rm
rm -rf "xtr*"
2⤵
PID:946

/bin/rm
rm -rf a "a.*"
2⤵
PID:947

/bin/rm
rm -rf b "b.*"
2⤵
PID:948

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:949

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:950

/bin/sleep
sleep 3
2⤵
PID:951

/bin/rm
rm -rf "xtr*"
2⤵
PID:952

/bin/rm
rm -rf ip
2⤵
PID:953

/bin/rm
rm -rf p
2⤵
PID:954

/bin/rm
rm -rf .out
2⤵
PID:955

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:956

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:957

/bin/rm
rm -rf p
2⤵
PID:958

/bin/rm
rm -rf ip
2⤵
PID:959

/bin/rm
rm -rf "xtr*"
2⤵
PID:960

/bin/rm
rm -rf a "a.*"
2⤵
PID:961

/bin/rm
rm -rf b "b.*"
2⤵
PID:962

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:963

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:964

/bin/sleep
sleep 3
2⤵
PID:965

/bin/rm
rm -rf "xtr*"
2⤵
PID:966

/bin/rm
rm -rf ip
2⤵
PID:967

/bin/rm
rm -rf p
2⤵
PID:968

/bin/rm
rm -rf .out
2⤵
PID:969

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:970

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:971

/bin/rm
rm -rf p
2⤵
PID:972

/bin/rm
rm -rf ip
2⤵
PID:973

/bin/rm
rm -rf "xtr*"
2⤵
PID:974

/bin/rm
rm -rf a "a.*"
2⤵
PID:975

/bin/rm
rm -rf b "b.*"
2⤵
PID:976

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:977

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:978

/bin/sleep
sleep 3
2⤵
PID:979

/bin/rm
rm -rf "xtr*"
2⤵
PID:980

/bin/rm
rm -rf ip
2⤵
PID:981

/bin/rm
rm -rf p
2⤵
PID:982

/bin/rm
rm -rf .out
2⤵
PID:983

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:984

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:985

/bin/rm
rm -rf p
2⤵
PID:986

/bin/rm
rm -rf ip
2⤵
PID:987

/bin/rm
rm -rf "xtr*"
2⤵
PID:988

/bin/rm
rm -rf a "a.*"
2⤵
PID:989

/bin/rm
rm -rf b "b.*"
2⤵
PID:990

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:991

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:992

/bin/sleep
sleep 3
2⤵
PID:993

/bin/rm
rm -rf "xtr*"
2⤵
PID:994

/bin/rm
rm -rf ip
2⤵
PID:995

/bin/rm
rm -rf p
2⤵
PID:996

/bin/rm
rm -rf .out
2⤵
PID:997

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:998

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:999

/bin/rm
rm -rf p
2⤵
PID:1000

/bin/rm
rm -rf ip
2⤵
PID:1001

/bin/rm
rm -rf "xtr*"
2⤵
PID:1002

/bin/rm
rm -rf a "a.*"
2⤵
PID:1003

/bin/rm
rm -rf b "b.*"
2⤵
PID:1004

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1005

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1006

/bin/sleep
sleep 3
2⤵
PID:1007

/bin/rm
rm -rf "xtr*"
2⤵
PID:1008

/bin/rm
rm -rf ip
2⤵
PID:1009

/bin/rm
rm -rf p
2⤵
PID:1010

/bin/rm
rm -rf .out
2⤵
PID:1011

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1012

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1013

/bin/rm
rm -rf p
2⤵
PID:1014

/bin/rm
rm -rf ip
2⤵
PID:1015

/bin/rm
rm -rf "xtr*"
2⤵
PID:1016

/bin/rm
rm -rf a "a.*"
2⤵
PID:1017

/bin/rm
rm -rf b "b.*"
2⤵
PID:1018

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1019

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1020

/bin/sleep
sleep 3
2⤵
PID:1021

/bin/rm
rm -rf "xtr*"
2⤵
PID:1022

/bin/rm
rm -rf ip
2⤵
PID:1023

/bin/rm
rm -rf p
2⤵
PID:1024

/bin/rm
rm -rf .out
2⤵
PID:1025

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1026

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1027

/bin/rm
rm -rf p
2⤵
PID:1028

/bin/rm
rm -rf ip
2⤵
PID:1029

/bin/rm
rm -rf "xtr*"
2⤵
PID:1030

/bin/rm
rm -rf a "a.*"
2⤵
PID:1031

/bin/rm
rm -rf b "b.*"
2⤵
PID:1032

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1033

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1034

/bin/sleep
sleep 3
2⤵
PID:1035

/bin/rm
rm -rf "xtr*"
2⤵
PID:1036

/bin/rm
rm -rf ip
2⤵
PID:1037

/bin/rm
rm -rf p
2⤵
PID:1038

/bin/rm
rm -rf .out
2⤵
PID:1039

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1040

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1041

/bin/rm
rm -rf p
2⤵
PID:1042

/bin/rm
rm -rf ip
2⤵
PID:1043

/bin/rm
rm -rf "xtr*"
2⤵
PID:1044

/bin/rm
rm -rf a "a.*"
2⤵
PID:1045

/bin/rm
rm -rf b "b.*"
2⤵
PID:1046

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1047

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1048

/bin/sleep
sleep 3
2⤵
PID:1049

/bin/rm
rm -rf "xtr*"
2⤵
PID:1050

/bin/rm
rm -rf ip
2⤵
PID:1051

/bin/rm
rm -rf p
2⤵
PID:1052

/bin/rm
rm -rf .out
2⤵
PID:1053

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1054

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1055

/bin/rm
rm -rf p
2⤵
PID:1056

/bin/rm
rm -rf ip
2⤵
PID:1057

/bin/rm
rm -rf "xtr*"
2⤵
PID:1058

/bin/rm
rm -rf a "a.*"
2⤵
PID:1059

/bin/rm
rm -rf b "b.*"
2⤵
PID:1060

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1061

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1062

/bin/sleep
sleep 3
2⤵
PID:1063

/bin/rm
rm -rf "xtr*"
2⤵
PID:1064

/bin/rm
rm -rf ip
2⤵
PID:1065

/bin/rm
rm -rf p
2⤵
PID:1066

/bin/rm
rm -rf .out
2⤵
PID:1067

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1068

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1069

/bin/rm
rm -rf p
2⤵
PID:1070

/bin/rm
rm -rf ip
2⤵
PID:1071

/bin/rm
rm -rf "xtr*"
2⤵
PID:1072

/bin/rm
rm -rf a "a.*"
2⤵
PID:1073

/bin/rm
rm -rf b "b.*"
2⤵
PID:1074

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1075

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1076

/bin/sleep
sleep 3
2⤵
PID:1077

/bin/rm
rm -rf "xtr*"
2⤵
PID:1078

/bin/rm
rm -rf ip
2⤵
PID:1079

/bin/rm
rm -rf p
2⤵
PID:1080

/bin/rm
rm -rf .out
2⤵
PID:1081

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1082

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1083

/bin/rm
rm -rf p
2⤵
PID:1084

/bin/rm
rm -rf ip
2⤵
PID:1085

/bin/rm
rm -rf "xtr*"
2⤵
PID:1086

/bin/rm
rm -rf a "a.*"
2⤵
PID:1087

/bin/rm
rm -rf b "b.*"
2⤵
PID:1088

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1089

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1090

/bin/sleep
sleep 3
2⤵
PID:1091

/bin/rm
rm -rf "xtr*"
2⤵
PID:1092

/bin/rm
rm -rf ip
2⤵
PID:1093

/bin/rm
rm -rf p
2⤵
PID:1094

/bin/rm
rm -rf .out
2⤵
PID:1095

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1096

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1097

/bin/rm
rm -rf p
2⤵
PID:1098

/bin/rm
rm -rf ip
2⤵
PID:1099

/bin/rm
rm -rf "xtr*"
2⤵
PID:1100

/bin/rm
rm -rf a "a.*"
2⤵
PID:1101

/bin/rm
rm -rf b "b.*"
2⤵
PID:1102

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1103

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1104

/bin/sleep
sleep 3
2⤵
PID:1105

/bin/rm
rm -rf "xtr*"
2⤵
PID:1106

/bin/rm
rm -rf ip
2⤵
PID:1107

/bin/rm
rm -rf p
2⤵
PID:1108

/bin/rm
rm -rf .out
2⤵
PID:1109

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1110

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1111

/bin/rm
rm -rf p
2⤵
PID:1112

/bin/rm
rm -rf ip
2⤵
PID:1113

/bin/rm
rm -rf "xtr*"
2⤵
PID:1114

/bin/rm
rm -rf a "a.*"
2⤵
PID:1115

/bin/rm
rm -rf b "b.*"
2⤵
PID:1116

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1117

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1118

/bin/sleep
sleep 3
2⤵
PID:1119

/bin/rm
rm -rf "xtr*"
2⤵
PID:1120

/bin/rm
rm -rf ip
2⤵
PID:1121

/bin/rm
rm -rf p
2⤵
PID:1122

/bin/rm
rm -rf .out
2⤵
PID:1123

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1124

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1125

/bin/rm
rm -rf p
2⤵
PID:1126

/bin/rm
rm -rf ip
2⤵
PID:1127

/bin/rm
rm -rf "xtr*"
2⤵
PID:1128

/bin/rm
rm -rf a "a.*"
2⤵
PID:1129

/bin/rm
rm -rf b "b.*"
2⤵
PID:1130

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1131

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1132

/bin/sleep
sleep 3
2⤵
PID:1133

/bin/rm
rm -rf "xtr*"
2⤵
PID:1134

/bin/rm
rm -rf ip
2⤵
PID:1135

/bin/rm
rm -rf p
2⤵
PID:1136

/bin/rm
rm -rf .out
2⤵
PID:1137

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1138

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1139

/bin/rm
rm -rf p
2⤵
PID:1140

/bin/rm
rm -rf ip
2⤵
PID:1141

/bin/rm
rm -rf "xtr*"
2⤵
PID:1142

/bin/rm
rm -rf a "a.*"
2⤵
PID:1143

/bin/rm
rm -rf b "b.*"
2⤵
PID:1144

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1145

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1146

/bin/sleep
sleep 3
2⤵
PID:1147

/bin/rm
rm -rf "xtr*"
2⤵
PID:1148

/bin/rm
rm -rf ip
2⤵
PID:1149

/bin/rm
rm -rf p
2⤵
PID:1150

/bin/rm
rm -rf .out
2⤵
PID:1151

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1152

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1153

/bin/rm
rm -rf p
2⤵
PID:1154

/bin/rm
rm -rf ip
2⤵
PID:1155

/bin/rm
rm -rf "xtr*"
2⤵
PID:1156

/bin/rm
rm -rf a "a.*"
2⤵
PID:1157

/bin/rm
rm -rf b "b.*"
2⤵
PID:1158

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1159

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1160

/bin/sleep
sleep 3
2⤵
PID:1161

/bin/rm
rm -rf "xtr*"
2⤵
PID:1162

/bin/rm
rm -rf ip
2⤵
PID:1163

/bin/rm
rm -rf p
2⤵
PID:1164

/bin/rm
rm -rf .out
2⤵
PID:1165

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1166

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1167

/bin/rm
rm -rf p
2⤵
PID:1168

/bin/rm
rm -rf ip
2⤵
PID:1169

/bin/rm
rm -rf "xtr*"
2⤵
PID:1170

/bin/rm
rm -rf a "a.*"
2⤵
PID:1171

/bin/rm
rm -rf b "b.*"
2⤵
PID:1172

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1173

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1174

/bin/sleep
sleep 3
2⤵
PID:1175

/bin/rm
rm -rf "xtr*"
2⤵
PID:1176

/bin/rm
rm -rf ip
2⤵
PID:1177

/bin/rm
rm -rf p
2⤵
PID:1178

/bin/rm
rm -rf .out
2⤵
PID:1179

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1180

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1181

/bin/rm
rm -rf p
2⤵
PID:1182

/bin/rm
rm -rf ip
2⤵
PID:1183

/bin/rm
rm -rf "xtr*"
2⤵
PID:1184

/bin/rm
rm -rf a "a.*"
2⤵
PID:1185

/bin/rm
rm -rf b "b.*"
2⤵
PID:1186

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1187

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1188

/bin/sleep
sleep 3
2⤵
PID:1189

/bin/rm
rm -rf "xtr*"
2⤵
PID:1190

/bin/rm
rm -rf ip
2⤵
PID:1191

/bin/rm
rm -rf p
2⤵
PID:1192

/bin/rm
rm -rf .out
2⤵
PID:1193

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1194

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1195

/bin/rm
rm -rf p
2⤵
PID:1196

/bin/rm
rm -rf ip
2⤵
PID:1197

/bin/rm
rm -rf "xtr*"
2⤵
PID:1198

/bin/rm
rm -rf a "a.*"
2⤵
PID:1199

/bin/rm
rm -rf b "b.*"
2⤵
PID:1200

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1201

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1202

/bin/sleep
sleep 3
2⤵
PID:1203

/bin/rm
rm -rf "xtr*"
2⤵
PID:1204

/bin/rm
rm -rf ip
2⤵
PID:1205

/bin/rm
rm -rf p
2⤵
PID:1206

/bin/rm
rm -rf .out
2⤵
PID:1207

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1208

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1209

/bin/rm
rm -rf p
2⤵
PID:1210

/bin/rm
rm -rf ip
2⤵
PID:1211

/bin/rm
rm -rf "xtr*"
2⤵
PID:1212

/bin/rm
rm -rf a "a.*"
2⤵
PID:1213

/bin/rm
rm -rf b "b.*"
2⤵
PID:1214

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1215

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1216

/bin/sleep
sleep 3
2⤵
PID:1217

/bin/rm
rm -rf "xtr*"
2⤵
PID:1218

/bin/rm
rm -rf ip
2⤵
PID:1219

/bin/rm
rm -rf p
2⤵
PID:1220

/bin/rm
rm -rf .out
2⤵
PID:1221

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1222

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1223

/bin/rm
rm -rf p
2⤵
PID:1224

/bin/rm
rm -rf ip
2⤵
PID:1225

/bin/rm
rm -rf "xtr*"
2⤵
PID:1226

/bin/rm
rm -rf a "a.*"
2⤵
PID:1227

/bin/rm
rm -rf b "b.*"
2⤵
PID:1228

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1229

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1230

/bin/sleep
sleep 3
2⤵
PID:1231

/bin/rm
rm -rf "xtr*"
2⤵
PID:1232

/bin/rm
rm -rf ip
2⤵
PID:1233

/bin/rm
rm -rf p
2⤵
PID:1234

/bin/rm
rm -rf .out
2⤵
PID:1235

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1236

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1237

/bin/rm
rm -rf p
2⤵
PID:1238

/bin/rm
rm -rf ip
2⤵
PID:1239

/bin/rm
rm -rf "xtr*"
2⤵
PID:1240

/bin/rm
rm -rf a "a.*"
2⤵
PID:1241

/bin/rm
rm -rf b "b.*"
2⤵
PID:1242

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1243

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1244

/bin/sleep
sleep 3
2⤵
PID:1245

/bin/rm
rm -rf "xtr*"
2⤵
PID:1246

/bin/rm
rm -rf ip
2⤵
PID:1247

/bin/rm
rm -rf p
2⤵
PID:1248

/bin/rm
rm -rf .out
2⤵
PID:1249

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1250

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1251

/bin/rm
rm -rf p
2⤵
PID:1252

/bin/rm
rm -rf ip
2⤵
PID:1253

/bin/rm
rm -rf "xtr*"
2⤵
PID:1254

/bin/rm
rm -rf a "a.*"
2⤵
PID:1255

/bin/rm
rm -rf b "b.*"
2⤵
PID:1256

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1257

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1258

/bin/sleep
sleep 3
2⤵
PID:1259

/bin/rm
rm -rf "xtr*"
2⤵
PID:1260

/bin/rm
rm -rf ip
2⤵
PID:1261

/bin/rm
rm -rf p
2⤵
PID:1262

/bin/rm
rm -rf .out
2⤵
PID:1263

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1264

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1265

/bin/rm
rm -rf p
2⤵
PID:1266

/bin/rm
rm -rf ip
2⤵
PID:1267

/bin/rm
rm -rf "xtr*"
2⤵
PID:1268

/bin/rm
rm -rf a "a.*"
2⤵
PID:1269

/bin/rm
rm -rf b "b.*"
2⤵
PID:1270

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1271

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1272

/bin/sleep
sleep 3
2⤵
PID:1273

/bin/rm
rm -rf "xtr*"
2⤵
PID:1274

/bin/rm
rm -rf ip
2⤵
PID:1275

/bin/rm
rm -rf p
2⤵
PID:1276

/bin/rm
rm -rf .out
2⤵
PID:1277

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1278

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1279

/bin/rm
rm -rf p
2⤵
PID:1280

/bin/rm
rm -rf ip
2⤵
PID:1281

/bin/rm
rm -rf "xtr*"
2⤵
PID:1282

/bin/rm
rm -rf a "a.*"
2⤵
PID:1283

/bin/rm
rm -rf b "b.*"
2⤵
PID:1284

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1285

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1286

/bin/sleep
sleep 3
2⤵
PID:1287

/bin/rm
rm -rf "xtr*"
2⤵
PID:1288

/bin/rm
rm -rf ip
2⤵
PID:1289

/bin/rm
rm -rf p
2⤵
PID:1290

/bin/rm
rm -rf .out
2⤵
PID:1291

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1292

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1293

/bin/rm
rm -rf p
2⤵
PID:1294

/bin/rm
rm -rf ip
2⤵
PID:1295

/bin/rm
rm -rf "xtr*"
2⤵
PID:1296

/bin/rm
rm -rf a "a.*"
2⤵
PID:1297

/bin/rm
rm -rf b "b.*"
2⤵
PID:1298

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1299

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1300

/bin/sleep
sleep 3
2⤵
PID:1301

/bin/rm
rm -rf "xtr*"
2⤵
PID:1302

/bin/rm
rm -rf ip
2⤵
PID:1303

/bin/rm
rm -rf p
2⤵
PID:1304

/bin/rm
rm -rf .out
2⤵
PID:1305

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1306

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1307

/bin/rm
rm -rf p
2⤵
PID:1308

/bin/rm
rm -rf ip
2⤵
PID:1309

/bin/rm
rm -rf "xtr*"
2⤵
PID:1310

/bin/rm
rm -rf a "a.*"
2⤵
PID:1311

/bin/rm
rm -rf b "b.*"
2⤵
PID:1312

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1313

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1314

/bin/sleep
sleep 3
2⤵
PID:1315

/bin/rm
rm -rf "xtr*"
2⤵
PID:1316

/bin/rm
rm -rf ip
2⤵
PID:1317

/bin/rm
rm -rf p
2⤵
PID:1318

/bin/rm
rm -rf .out
2⤵
PID:1319

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1320

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1321

/bin/rm
rm -rf p
2⤵
PID:1322

/bin/rm
rm -rf ip
2⤵
PID:1323

/bin/rm
rm -rf "xtr*"
2⤵
PID:1324

/bin/rm
rm -rf a "a.*"
2⤵
PID:1325

/bin/rm
rm -rf b "b.*"
2⤵
PID:1326

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1327

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1328

/bin/sleep
sleep 3
2⤵
PID:1329

/bin/rm
rm -rf "xtr*"
2⤵
PID:1330

/bin/rm
rm -rf ip
2⤵
PID:1331

/bin/rm
rm -rf p
2⤵
PID:1332

/bin/rm
rm -rf .out
2⤵
PID:1333

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1334

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1335

/bin/rm
rm -rf p
2⤵
PID:1336

/bin/rm
rm -rf ip
2⤵
PID:1337

/bin/rm
rm -rf "xtr*"
2⤵
PID:1338

/bin/rm
rm -rf a "a.*"
2⤵
PID:1339

/bin/rm
rm -rf b "b.*"
2⤵
PID:1340

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1341

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1342

/bin/sleep
sleep 3
2⤵
PID:1343

/bin/rm
rm -rf "xtr*"
2⤵
PID:1344

/bin/rm
rm -rf ip
2⤵
PID:1345

/bin/rm
rm -rf p
2⤵
PID:1346

/bin/rm
rm -rf .out
2⤵
PID:1347

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1348

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1349

/bin/rm
rm -rf p
2⤵
PID:1350

/bin/rm
rm -rf ip
2⤵
PID:1351

/bin/rm
rm -rf "xtr*"
2⤵
PID:1352

/bin/rm
rm -rf a "a.*"
2⤵
PID:1353

/bin/rm
rm -rf b "b.*"
2⤵
PID:1354

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1355

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1356

/bin/sleep
sleep 3
2⤵
PID:1357

/bin/rm
rm -rf "xtr*"
2⤵
PID:1358

/bin/rm
rm -rf ip
2⤵
PID:1359

/bin/rm
rm -rf p
2⤵
PID:1360

/bin/rm
rm -rf .out
2⤵
PID:1361

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1362

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1363

/bin/rm
rm -rf p
2⤵
PID:1364

/bin/rm
rm -rf ip
2⤵
PID:1365

/bin/rm
rm -rf "xtr*"
2⤵
PID:1366

/bin/rm
rm -rf a "a.*"
2⤵
PID:1367

/bin/rm
rm -rf b "b.*"
2⤵
PID:1368

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1369

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1370

/bin/sleep
sleep 3
2⤵
PID:1371

/bin/rm
rm -rf "xtr*"
2⤵
PID:1372

/bin/rm
rm -rf ip
2⤵
PID:1373

/bin/rm
rm -rf p
2⤵
PID:1374

/bin/rm
rm -rf .out
2⤵
PID:1375

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1376

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1377

/bin/rm
rm -rf p
2⤵
PID:1378

/bin/rm
rm -rf ip
2⤵
PID:1379

/bin/rm
rm -rf "xtr*"
2⤵
PID:1380

/bin/rm
rm -rf a "a.*"
2⤵
PID:1381

/bin/rm
rm -rf b "b.*"
2⤵
PID:1382

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1383

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1384

/bin/sleep
sleep 3
2⤵
PID:1385

/bin/rm
rm -rf "xtr*"
2⤵
PID:1386

/bin/rm
rm -rf ip
2⤵
PID:1387

/bin/rm
rm -rf p
2⤵
PID:1388

/bin/rm
rm -rf .out
2⤵
PID:1389

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1390

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1391

/bin/rm
rm -rf p
2⤵
PID:1392

/bin/rm
rm -rf ip
2⤵
PID:1393

/bin/rm
rm -rf "xtr*"
2⤵
PID:1394

/bin/rm
rm -rf a "a.*"
2⤵
PID:1395

/bin/rm
rm -rf b "b.*"
2⤵
PID:1396

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1397

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1398

/bin/sleep
sleep 3
2⤵
PID:1399

/bin/rm
rm -rf "xtr*"
2⤵
PID:1400

/bin/rm
rm -rf ip
2⤵
PID:1401

/bin/rm
rm -rf p
2⤵
PID:1402

/bin/rm
rm -rf .out
2⤵
PID:1403

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1404

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1405

/bin/rm
rm -rf p
2⤵
PID:1406

/bin/rm
rm -rf ip
2⤵
PID:1407

/bin/rm
rm -rf "xtr*"
2⤵
PID:1408

/bin/rm
rm -rf a "a.*"
2⤵
PID:1409

/bin/rm
rm -rf b "b.*"
2⤵
PID:1410

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1411

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1412

/bin/sleep
sleep 3
2⤵
PID:1413

/bin/rm
rm -rf "xtr*"
2⤵
PID:1414

/bin/rm
rm -rf ip
2⤵
PID:1415

/bin/rm
rm -rf p
2⤵
PID:1416

/bin/rm
rm -rf .out
2⤵
PID:1417

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1418

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1419

/bin/rm
rm -rf p
2⤵
PID:1420

/bin/rm
rm -rf ip
2⤵
PID:1421

/bin/rm
rm -rf "xtr*"
2⤵
PID:1422

/bin/rm
rm -rf a "a.*"
2⤵
PID:1423

/bin/rm
rm -rf b "b.*"
2⤵
PID:1424

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1425

/tmp/.rsync/c/tsm
./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
3⤵
PID:1426

/bin/sleep
sleep 3
2⤵
PID:1427

/bin/rm
rm -rf "xtr*"
2⤵
PID:1428

/bin/rm
rm -rf ip
2⤵
PID:1429

/bin/rm
rm -rf p
2⤵
PID:1430

/bin/rm
rm -rf .out
2⤵
PID:1431

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1432

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1433

/bin/rm
rm -rf p
2⤵
PID:1434

/bin/rm
rm -rf ip
2⤵
PID:1435

/bin/rm
rm -rf "xtr*"
2⤵
PID:1436

/bin/rm
rm -rf a "a.*"
2⤵
PID:1437

/bin/rm
rm -rf b "b.*"
2⤵
PID:1438

/usr/bin/timeout
timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip
2⤵
PID:1439

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads