69b7d759eebde38fdae13bd3a60fee83856e5c6150131200084ee5cfab408ef6

Analysis

max time kernel
3s
max time network
128s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240729-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240729-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
29-07-2024 06:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3b6c38abc740623d1383cf17cf437a1a_JaffaCakes118
Size

180KB
MD5

3b6c38abc740623d1383cf17cf437a1a
SHA1

770b6ff6f99226b8b2df2eac7a2bd2ef293d86fd
SHA256

69b7d759eebde38fdae13bd3a60fee83856e5c6150131200084ee5cfab408ef6
SHA512

39854d31f2022c577663a9d59e14b6927209b83c5132ad511c30bbab60e1292a88598bb92426468eaca692c0e5777b2e5fb09951ca45e6cc50b96120a7e15111
SSDEEP

3072:UuIxLt36n7wOp/aTTWZ51C13FvD1rw2nbhdyPpMa4mqMv6Ds4JAz4kvnnqNd7i32:vIyi+xMVvD1r3UJdqMv8JEvvnnqNd7im

Score

6^/10

Malware Config

Signatures

Enumerates running processes
Discovers information about currently running processes on the system

Reads CPU attributes 1 TTPs 61 IoCs

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill
File opened for reading	/sys/devices/system/cpu/possible	pkill

Enumerates kernel/hardware configuration 1 TTPs 61 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill
File opened for reading	/sys/devices/system/node	pkill

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/2362/cmdline	pkill
File opened for reading	/proc/13/status	pkill
File opened for reading	/proc/20/cmdline	pkill
File opened for reading	/proc/2455/cmdline	pkill
File opened for reading	/proc/1976/stat	pkill
File opened for reading	/proc/1729/cgroup	pkill
File opened for reading	/proc/2362/cmdline	pkill
File opened for reading	/proc/1940/stat	pkill
File opened for reading	/proc/190/cmdline	pkill
File opened for reading	/proc/2269/cgroup	pkill
File opened for reading	/proc/1980/status	pkill
File opened for reading	/proc/42/cgroup	pkill
File opened for reading	/proc/1054/cmdline	pkill
File opened for reading	/proc/2035/status	pkill
File opened for reading	/proc/2455/ctty	pkill
File opened for reading	/proc/1/cmdline	pkill
File opened for reading	/proc/203/cmdline	pkill
File opened for reading	/proc/40/status	pkill
File opened for reading	/proc/763/cmdline	pkill
File opened for reading	/proc/592/cmdline	pkill
File opened for reading	/proc/1831/status	pkill
File opened for reading	/proc/39/stat	pkill
File opened for reading	/proc/2029/cgroup	pkill
File opened for reading	/proc/2322/status	pkill
File opened for reading	/proc/160/ctty	pkill
File opened for reading	/proc/26/stat	pkill
File opened for reading	/proc/201/ctty	pkill
File opened for reading	/proc/763/ctty	pkill
File opened for reading	/proc/2162/ctty	pkill
File opened for reading	/proc/15/cgroup	pkill
File opened for reading	/proc/1410/status	pkill
File opened for reading	/proc/1980/cgroup	pkill
File opened for reading	/proc/2269/cgroup	pkill
File opened for reading	/proc/1106/cmdline	pkill
File opened for reading	/proc/194/stat	pkill
File opened for reading	/proc/2055/stat	pkill
File opened for reading	/proc/1699/ctty	pkill
File opened for reading	/proc/2162/status	pkill
File opened for reading	/proc/778/status	pkill
File opened for reading	/proc/2452/ctty	pkill
File opened for reading	/proc/8/cgroup	pkill
File opened for reading	/proc/30/stat	pkill
File opened for reading	/proc/203/cmdline	pkill
File opened for reading	/proc/9/status	pkill
File opened for reading	/proc/28/cmdline	pkill
File opened for reading	/proc/30/ctty	pkill
File opened for reading	/proc/1729/cgroup	pkill
File opened for reading	/proc/40/ctty	pkill
File opened for reading	/proc/42/stat	pkill
File opened for reading	/proc/9/cmdline	pkill
File opened for reading	/proc/197/cgroup	pkill
File opened for reading	/proc/1065/ctty	pkill
File opened for reading	/proc/438/cmdline	pkill
File opened for reading	/proc/195/cmdline	pkill
File opened for reading	/proc/12/status	pkill
File opened for reading	/proc/2362/ctty	pkill
File opened for reading	/proc/2654/cgroup	pkill
File opened for reading	/proc/160/cmdline	pkill
File opened for reading	/proc/1084/cgroup	pkill
File opened for reading	/proc/25/stat	pkill
File opened for reading	/proc/26/cmdline	pkill
File opened for reading	/proc/2452/cmdline	pkill
File opened for reading	/proc/1811/ctty	pkill
File opened for reading	/proc/53/cgroup	pkill

/tmp/3b6c38abc740623d1383cf17cf437a1a_JaffaCakes118
/tmp/3b6c38abc740623d1383cf17cf437a1a_JaffaCakes118
1⤵
PID:2458
- /bin/sh
  sh -c "pkill -9 mips || busybox pkill -9 mips || /usr/busybox pkill -9 mips || /bin/busybox pkill -9 mips > /dev/null"
  2⤵
  PID:2461
- - /usr/bin/pkill
    pkill -9 mips
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    PID:2464
- - /usr/busybox
    /usr/busybox pkill -9 mips
    3⤵
    PID:2465
- - /bin/busybox
    /bin/busybox pkill -9 mips
    3⤵
    PID:2466
- /bin/sh
  sh -c "pkill -9 mips64 || busybox pkill -9 mips64 || /usr/busybox pkill -9 mips64 || /bin/busybox pkill -9 mips64 > /dev/null"
  2⤵
  PID:2467
- - /usr/bin/pkill
    pkill -9 mips64
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    PID:2468
- - /usr/busybox
    /usr/busybox pkill -9 mips64
    3⤵
    PID:2469
- - /bin/busybox
    /bin/busybox pkill -9 mips64
    3⤵
    PID:2470
- /bin/sh
  sh -c "pkill -9 mipsel || busybox pkill -9 mipsel || /usr/busybox pkill -9 mipsel || /bin/busybox pkill -9 mipsel > /dev/null"
  2⤵
  PID:2471
- - /usr/bin/pkill
    pkill -9 mipsel
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2472
- - /usr/busybox
    /usr/busybox pkill -9 mipsel
    3⤵
    PID:2476
- - /bin/busybox
    /bin/busybox pkill -9 mipsel
    3⤵
    PID:2477
- /bin/sh
  sh -c "pkill -9 sh2eb || busybox pkill -9 sh2eb || /usr/busybox pkill -9 sh2eb || /bin/busybox pkill -9 sh2eb > /dev/null"
  2⤵
  PID:2478
- - /usr/bin/pkill
    pkill -9 sh2eb
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2479
- - /usr/busybox
    /usr/busybox pkill -9 sh2eb
    3⤵
    PID:2480
- - /bin/busybox
    /bin/busybox pkill -9 sh2eb
    3⤵
    PID:2481
- /bin/sh
  sh -c "pkill -9 sh2elf || busybox pkill -9 sh2elf || /usr/busybox pkill -9 sh2elf || /bin/busybox pkill -9 sh2elf > /dev/null"
  2⤵
  PID:2482
- - /usr/bin/pkill
    pkill -9 sh2elf
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2483
- - /usr/busybox
    /usr/busybox pkill -9 sh2elf
    3⤵
    PID:2484
- - /bin/busybox
    /bin/busybox pkill -9 sh2elf
    3⤵
    PID:2485
- /bin/sh
  sh -c "pkill -9 sh4 || busybox pkill -9 sh4 || /usr/busybox pkill -9 sh4 || /bin/busybox pkill -9 sh4 > /dev/null"
  2⤵
  PID:2486
- - /usr/bin/pkill
    pkill -9 sh4
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    PID:2487
- - /usr/busybox
    /usr/busybox pkill -9 sh4
    3⤵
    PID:2488
- - /bin/busybox
    /bin/busybox pkill -9 sh4
    3⤵
    PID:2489
- /bin/sh
  sh -c "pkill -9 x86 || busybox pkill -9 x86 || /usr/busybox pkill -9 x86 || /bin/busybox pkill -9 x86 > /dev/null"
  2⤵
  PID:2490
- - /usr/bin/pkill
    pkill -9 x86
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2491
- - /usr/busybox
    /usr/busybox pkill -9 x86
    3⤵
    PID:2492
- - /bin/busybox
    /bin/busybox pkill -9 x86
    3⤵
    PID:2493
- /bin/sh
  sh -c "pkill -9 arm || busybox pkill -9 arm || /usr/busybox pkill -9 arm || /bin/busybox pkill -9 arm > /dev/null"
  2⤵
  PID:2494
- - /usr/bin/pkill
    pkill -9 arm
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2495
- /bin/sh
  sh -c "pkill -9 armv5 || busybox pkill -9 armv5 || /usr/busybox pkill -9 armv5 || /bin/busybox pkill -9 armv5 > /dev/null"
  2⤵
  PID:2496
- - /usr/bin/pkill
    pkill -9 armv5
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    PID:2497
- - /usr/busybox
    /usr/busybox pkill -9 armv5
    3⤵
    PID:2503
- - /bin/busybox
    /bin/busybox pkill -9 armv5
    3⤵
    PID:2504
- /bin/sh
  sh -c "pkill -9 armv4tl || busybox pkill -9 armv4tl || /usr/busybox pkill -9 armv4tl || /bin/busybox pkill -9 armv4tl > /dev/null"
  2⤵
  PID:2505
- - /usr/bin/pkill
    pkill -9 armv4tl
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2506
- - /usr/busybox
    /usr/busybox pkill -9 armv4tl
    3⤵
    PID:2507
- - /bin/busybox
    /bin/busybox pkill -9 armv4tl
    3⤵
    PID:2508
- /bin/sh
  sh -c "pkill -9 armv4 || busybox pkill -9 armv4 || /usr/busybox pkill -9 armv4 || /bin/busybox pkill -9 armv4 > /dev/null"
  2⤵
  PID:2509
- - /usr/bin/pkill
    pkill -9 armv4
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2510
- - /usr/busybox
    /usr/busybox pkill -9 armv4
    3⤵
    PID:2511
- - /bin/busybox
    /bin/busybox pkill -9 armv4
    3⤵
    PID:2512
- /bin/sh
  sh -c "pkill -9 armv6 || busybox pkill -9 armv6 || /usr/busybox pkill -9 armv6 || /bin/busybox pkill -9 armv6 > /dev/null"
  2⤵
  PID:2513
- - /usr/bin/pkill
    pkill -9 armv6
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2514
- - /usr/busybox
    /usr/busybox pkill -9 armv6
    3⤵
    PID:2515
- - /bin/busybox
    /bin/busybox pkill -9 armv6
    3⤵
    PID:2516
- /bin/sh
  sh -c "pkill -9 i686 || busybox pkill -9 i686 || /usr/busybox pkill -9 i686 || /bin/busybox pkill -9 i686 > /dev/null"
  2⤵
  PID:2517
- - /usr/bin/pkill
    pkill -9 i686
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2518
- - /usr/busybox
    /usr/busybox pkill -9 i686
    3⤵
    PID:2519
- - /bin/busybox
    /bin/busybox pkill -9 i686
    3⤵
    PID:2520
- /bin/sh
  sh -c "pkill -9 powerpc || busybox pkill -9 powerpc || /usr/busybox pkill -9 powerpc || /bin/busybox pkill -9 powerpc > /dev/null"
  2⤵
  PID:2521
- - /usr/bin/pkill
    pkill -9 powerpc
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    PID:2522
- - /usr/busybox
    /usr/busybox pkill -9 powerpc
    3⤵
    PID:2523
- - /bin/busybox
    /bin/busybox pkill -9 powerpc
    3⤵
    PID:2524
- /bin/sh
  sh -c "pkill -9 powerpc440fp || busybox pkill -9 powerpc440fp || /usr/busybox pkill -9 powerpc440fp || /bin/busybox pkill -9 powerpc440fp > /dev/null"
  2⤵
  PID:2525
- - /usr/bin/pkill
    pkill -9 powerpc440fp
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2526
- - /usr/busybox
    /usr/busybox pkill -9 powerpc440fp
    3⤵
    PID:2527
- - /bin/busybox
    /bin/busybox pkill -9 powerpc440fp
    3⤵
    PID:2528
- /bin/sh
  sh -c "pkill -9 i586 || busybox pkill -9 i586 || /usr/busybox pkill -9 i586 || /bin/busybox pkill -9 i586 > /dev/null"
  2⤵
  PID:2529
- - /usr/bin/pkill
    pkill -9 i586
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2530
- - /usr/busybox
    /usr/busybox pkill -9 i586
    3⤵
    PID:2531
- - /bin/busybox
    /bin/busybox pkill -9 i586
    3⤵
    PID:2532
- /bin/sh
  sh -c "pkill -9 m68k || busybox pkill -9 m68k || /usr/busybox pkill -9 m68k || /bin/busybox pkill -9 m68k > /dev/null"
  2⤵
  PID:2533
- - /usr/bin/pkill
    pkill -9 m68k
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2534
- - /usr/busybox
    /usr/busybox pkill -9 m68k
    3⤵
    PID:2535
- - /bin/busybox
    /bin/busybox pkill -9 m68k
    3⤵
    PID:2536
- /bin/sh
  sh -c "pkill -9 sparc || busybox pkill -9 sparc || /usr/busybox pkill -9 sparc || /bin/busybox pkill -9 sparc > /dev/null"
  2⤵
  PID:2537
- - /usr/bin/pkill
    pkill -9 sparc
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    PID:2538
- - /usr/busybox
    /usr/busybox pkill -9 sparc
    3⤵
    PID:2539
- - /bin/busybox
    /bin/busybox pkill -9 sparc
    3⤵
    PID:2540
- /bin/sh
  sh -c "pkill -9 x86_64 || busybox pkill -9 x86_64 || /usr/busybox pkill -9 x86_64 || /bin/busybox pkill -9 x86_64 > /dev/null"
  2⤵
  PID:2541
- - /usr/bin/pkill
    pkill -9 x86_64
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2542
- - /usr/busybox
    /usr/busybox pkill -9 x86_64
    3⤵
    PID:2543
- - /bin/busybox
    /bin/busybox pkill -9 x86_64
    3⤵
    PID:2544
- /bin/sh
  sh -c "pkill -9 jackmymips || busybox pkill -9 jackmymips || /usr/busybox pkill -9 jackmymips || /bin/busybox pkill -9 jackmymips > /dev/null"
  2⤵
  PID:2545
- - /usr/bin/pkill
    pkill -9 jackmymips
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2546
- - /usr/busybox
    /usr/busybox pkill -9 jackmymips
    3⤵
    PID:2547
- - /bin/busybox
    /bin/busybox pkill -9 jackmymips
    3⤵
    PID:2548
- /bin/sh
  sh -c "pkill -9 jackmymips64 || busybox pkill -9 jackmymips64 || /usr/busybox pkill -9 jackmymips64 || /bin/busybox pkill -9 jackmymips64 > /dev/null"
  2⤵
  PID:2549
- - /usr/bin/pkill
    pkill -9 jackmymips64
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2550
- - /usr/busybox
    /usr/busybox pkill -9 jackmymips64
    3⤵
    PID:2551
- - /bin/busybox
    /bin/busybox pkill -9 jackmymips64
    3⤵
    PID:2552
- /bin/sh
  sh -c "pkill -9 jackmymipsel || busybox pkill -9 jackmymipsel || /usr/busybox pkill -9 jackmymipsel || /bin/busybox pkill -9 jackmymipsel > /dev/null"
  2⤵
  PID:2553
- - /usr/bin/pkill
    pkill -9 jackmymipsel
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2554
- - /usr/busybox
    /usr/busybox pkill -9 jackmymipsel
    3⤵
    PID:2555
- - /bin/busybox
    /bin/busybox pkill -9 jackmymipsel
    3⤵
    PID:2556
- /bin/sh
  sh -c "pkill -9 jackmysh2eb || busybox pkill -9 jackmysh2eb || /usr/busybox pkill -9 jackmysh2eb || /bin/busybox pkill -9 jackmysh2eb > /dev/null"
  2⤵
  PID:2557
- - /usr/bin/pkill
    pkill -9 jackmysh2eb
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2558
- - /usr/busybox
    /usr/busybox pkill -9 jackmysh2eb
    3⤵
    PID:2559
- - /bin/busybox
    /bin/busybox pkill -9 jackmysh2eb
    3⤵
    PID:2560
- /bin/sh
  sh -c "pkill -9 jackmysh2elf || busybox pkill -9 jackmysh2elf || /usr/busybox pkill -9 jackmysh2elf || /bin/busybox pkill -9 jackmysh2elf > /dev/null"
  2⤵
  PID:2561
- - /usr/bin/pkill
    pkill -9 jackmysh2elf
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    PID:2562
- - /usr/busybox
    /usr/busybox pkill -9 jackmysh2elf
    3⤵
    PID:2563
- - /bin/busybox
    /bin/busybox pkill -9 jackmysh2elf
    3⤵
    PID:2564
- /bin/sh
  sh -c "pkill -9 jackmysh4 || busybox pkill -9 jackmysh4 || /usr/busybox pkill -9 jackmysh4 || /bin/busybox pkill -9 jackmysh4 > /dev/null"
  2⤵
  PID:2565
- - /usr/bin/pkill
    pkill -9 jackmysh4
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2566
- - /usr/busybox
    /usr/busybox pkill -9 jackmysh4
    3⤵
    PID:2567
- - /bin/busybox
    /bin/busybox pkill -9 jackmysh4
    3⤵
    PID:2568
- /bin/sh
  sh -c "pkill -9 jackmyx86 || busybox pkill -9 jackmyx86 || /usr/busybox pkill -9 jackmyx86 || /bin/busybox pkill -9 jackmyx86 > /dev/null"
  2⤵
  PID:2569
- - /usr/bin/pkill
    pkill -9 jackmyx86
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    PID:2570
- - /usr/busybox
    /usr/busybox pkill -9 jackmyx86
    3⤵
    PID:2571
- - /bin/busybox
    /bin/busybox pkill -9 jackmyx86
    3⤵
    PID:2572
- /bin/sh
  sh -c "pkill -9 jackmyarmv5 || busybox pkill -9 jackmyarmv5 || /usr/busybox pkill -9 jackmyarmv5 || /bin/busybox pkill -9 jackmyarmv5 > /dev/null"
  2⤵
  PID:2573
- - /usr/bin/pkill
    pkill -9 jackmyarmv5
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2574
- - /usr/busybox
    /usr/busybox pkill -9 jackmyarmv5
    3⤵
    PID:2575
- - /bin/busybox
    /bin/busybox pkill -9 jackmyarmv5
    3⤵
    PID:2576
- /bin/sh
  sh -c "pkill -9 jackmyarmv4tl || busybox pkill -9 jackmyarmv4tl || /usr/busybox pkill -9 jackmyarmv4tl || /bin/busybox pkill -9 jackmyarmv4tl > /dev/null"
  2⤵
  PID:2577
- - /usr/bin/pkill
    pkill -9 jackmyarmv4tl
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2578
- - /usr/busybox
    /usr/busybox pkill -9 jackmyarmv4tl
    3⤵
    PID:2579
- - /bin/busybox
    /bin/busybox pkill -9 jackmyarmv4tl
    3⤵
    PID:2580
- /bin/sh
  sh -c "pkill -9 jackmyarmv4 || busybox pkill -9 jackmyarmv4 || /usr/busybox pkill -9 jackmyarmv4 || /bin/busybox pkill -9 jackmyarmv4 > /dev/null"
  2⤵
  PID:2581
- - /usr/bin/pkill
    pkill -9 jackmyarmv4
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2582
- - /usr/busybox
    /usr/busybox pkill -9 jackmyarmv4
    3⤵
    PID:2583
- - /bin/busybox
    /bin/busybox pkill -9 jackmyarmv4
    3⤵
    PID:2584
- /bin/sh
  sh -c "pkill -9 jackmyarmv6 || busybox pkill -9 jackmyarmv6 || /usr/busybox pkill -9 jackmyarmv6 || /bin/busybox pkill -9 jackmyarmv6 > /dev/null"
  2⤵
  PID:2585
- - /usr/bin/pkill
    pkill -9 jackmyarmv6
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2586
- - /usr/busybox
    /usr/busybox pkill -9 jackmyarmv6
    3⤵
    PID:2587
- - /bin/busybox
    /bin/busybox pkill -9 jackmyarmv6
    3⤵
    PID:2588
- /bin/sh
  sh -c "pkill -9 jackmyi686 || busybox pkill -9 jackmyi686 || /usr/busybox pkill -9 jackmyi686 || /bin/busybox pkill -9 jackmyi686 > /dev/null"
  2⤵
  PID:2589
- - /usr/bin/pkill
    pkill -9 jackmyi686
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2590
- - /usr/busybox
    /usr/busybox pkill -9 jackmyi686
    3⤵
    PID:2591
- - /bin/busybox
    /bin/busybox pkill -9 jackmyi686
    3⤵
    PID:2592
- /bin/sh
  sh -c "pkill -9 jackmypowerpc || busybox pkill -9 jackmypowerpc || /usr/busybox pkill -9 jackmypowerpc || /bin/busybox pkill -9 jackmypowerpc > /dev/null"
  2⤵
  PID:2593
- - /usr/bin/pkill
    pkill -9 jackmypowerpc
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    PID:2594
- - /usr/busybox
    /usr/busybox pkill -9 jackmypowerpc
    3⤵
    PID:2595
- - /bin/busybox
    /bin/busybox pkill -9 jackmypowerpc
    3⤵
    PID:2596
- /bin/sh
  sh -c "pkill -9 jackmypowerpc440fp || busybox pkill -9 jackmypowerpc440fp || /usr/busybox pkill -9 jackmypowerpc440fp || /bin/busybox pkill -9 jackmypowerpc440fp > /dev/null"
  2⤵
  PID:2597
- - /usr/bin/pkill
    pkill -9 jackmypowerpc440fp
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2598
- - /usr/busybox
    /usr/busybox pkill -9 jackmypowerpc440fp
    3⤵
    PID:2599
- - /bin/busybox
    /bin/busybox pkill -9 jackmypowerpc440fp
    3⤵
    PID:2600
- /bin/sh
  sh -c "pkill -9 jackmyi586 || busybox pkill -9 jackmyi586 || /usr/busybox pkill -9 jackmyi586 || /bin/busybox pkill -9 jackmyi586 > /dev/null"
  2⤵
  PID:2601
- - /usr/bin/pkill
    pkill -9 jackmyi586
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    PID:2602
- - /usr/busybox
    /usr/busybox pkill -9 jackmyi586
    3⤵
    PID:2603
- - /bin/busybox
    /bin/busybox pkill -9 jackmyi586
    3⤵
    PID:2604
- /bin/sh
  sh -c "pkill -9 jackmym68k || busybox pkill -9 jackmym68k || /usr/busybox pkill -9 jackmym68k || /bin/busybox pkill -9 jackmym68k > /dev/null"
  2⤵
  PID:2605
- - /usr/bin/pkill
    pkill -9 jackmym68k
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2606
- - /usr/busybox
    /usr/busybox pkill -9 jackmym68k
    3⤵
    PID:2607
- - /bin/busybox
    /bin/busybox pkill -9 jackmym68k
    3⤵
    PID:2608
- /bin/sh
  sh -c "pkill -9 jackmysparc || busybox pkill -9 jackmysparc || /usr/busybox pkill -9 jackmysparc || /bin/busybox pkill -9 jackmysparc > /dev/null"
  2⤵
  PID:2609
- - /usr/bin/pkill
    pkill -9 jackmysparc
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    PID:2610
- - /usr/busybox
    /usr/busybox pkill -9 jackmysparc
    3⤵
    PID:2611
- - /bin/busybox
    /bin/busybox pkill -9 jackmysparc
    3⤵
    PID:2612
- /bin/sh
  sh -c "pkill -9 jackmyx86_64 || busybox pkill -9 jackmyx86_64 || /usr/busybox pkill -9 jackmyx86_64 || /bin/busybox pkill -9 jackmyx86_64 > /dev/null"
  2⤵
  PID:2613
- - /usr/bin/pkill
    pkill -9 jackmyx86_64
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2614
- - /usr/busybox
    /usr/busybox pkill -9 jackmyx86_64
    3⤵
    PID:2615
- - /bin/busybox
    /bin/busybox pkill -9 jackmyx86_64
    3⤵
    PID:2616
- /bin/sh
  sh -c "pkill -9 hackmymips || busybox pkill -9 hackmymips || /usr/busybox pkill -9 hackmymips || /bin/busybox pkill -9 hackmymips > /dev/null"
  2⤵
  PID:2617
- - /usr/bin/pkill
    pkill -9 hackmymips
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2618
- - /usr/busybox
    /usr/busybox pkill -9 hackmymips
    3⤵
    PID:2619
- - /bin/busybox
    /bin/busybox pkill -9 hackmymips
    3⤵
    PID:2620
- /bin/sh
  sh -c "pkill -9 hackmymips64 || busybox pkill -9 hackmymips64 || /usr/busybox pkill -9 hackmymips64 || /bin/busybox pkill -9 hackmymips64 > /dev/null"
  2⤵
  PID:2621
- - /usr/bin/pkill
    pkill -9 hackmymips64
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2622
- - /usr/busybox
    /usr/busybox pkill -9 hackmymips64
    3⤵
    PID:2623
- - /bin/busybox
    /bin/busybox pkill -9 hackmymips64
    3⤵
    PID:2624
- /bin/sh
  sh -c "pkill -9 hackmymipsel || busybox pkill -9 hackmymipsel || /usr/busybox pkill -9 hackmymipsel || /bin/busybox pkill -9 hackmymipsel > /dev/null"
  2⤵
  PID:2625
- - /usr/bin/pkill
    pkill -9 hackmymipsel
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    PID:2626
- - /usr/busybox
    /usr/busybox pkill -9 hackmymipsel
    3⤵
    PID:2627
- - /bin/busybox
    /bin/busybox pkill -9 hackmymipsel
    3⤵
    PID:2628
- /bin/sh
  sh -c "pkill -9 hackmysh2eb || busybox pkill -9 hackmysh2eb || /usr/busybox pkill -9 hackmysh2eb || /bin/busybox pkill -9 hackmysh2eb > /dev/null"
  2⤵
  PID:2629
- - /usr/bin/pkill
    pkill -9 hackmysh2eb
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2630
- - /usr/busybox
    /usr/busybox pkill -9 hackmysh2eb
    3⤵
    PID:2631
- - /bin/busybox
    /bin/busybox pkill -9 hackmysh2eb
    3⤵
    PID:2632
- /bin/sh
  sh -c "pkill -9 hackmysh2elf || busybox pkill -9 hackmysh2elf || /usr/busybox pkill -9 hackmysh2elf || /bin/busybox pkill -9 hackmysh2elf > /dev/null"
  2⤵
  PID:2633
- - /usr/bin/pkill
    pkill -9 hackmysh2elf
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2634
- - /usr/busybox
    /usr/busybox pkill -9 hackmysh2elf
    3⤵
    PID:2635
- - /bin/busybox
    /bin/busybox pkill -9 hackmysh2elf
    3⤵
    PID:2636
- /bin/sh
  sh -c "pkill -9 hackmysh4 || busybox pkill -9 hackmysh4 || /usr/busybox pkill -9 hackmysh4 || /bin/busybox pkill -9 hackmysh4 > /dev/null"
  2⤵
  PID:2637
- - /usr/bin/pkill
    pkill -9 hackmysh4
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2638
- - /usr/busybox
    /usr/busybox pkill -9 hackmysh4
    3⤵
    PID:2639
- - /bin/busybox
    /bin/busybox pkill -9 hackmysh4
    3⤵
    PID:2640
- /bin/sh
  sh -c "pkill -9 hackmyx86 || busybox pkill -9 hackmyx86 || /usr/busybox pkill -9 hackmyx86 || /bin/busybox pkill -9 hackmyx86 > /dev/null"
  2⤵
  PID:2641
- - /usr/bin/pkill
    pkill -9 hackmyx86
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    PID:2642
- - /usr/busybox
    /usr/busybox pkill -9 hackmyx86
    3⤵
    PID:2643
- - /bin/busybox
    /bin/busybox pkill -9 hackmyx86
    3⤵
    PID:2644
- /bin/sh
  sh -c "pkill -9 hackmyarmv5 || busybox pkill -9 hackmyarmv5 || /usr/busybox pkill -9 hackmyarmv5 || /bin/busybox pkill -9 hackmyarmv5 > /dev/null"
  2⤵
  PID:2645
- - /usr/bin/pkill
    pkill -9 hackmyarmv5
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    PID:2646
- - /usr/busybox
    /usr/busybox pkill -9 hackmyarmv5
    3⤵
    PID:2647
- - /bin/busybox
    /bin/busybox pkill -9 hackmyarmv5
    3⤵
    PID:2648
- /bin/sh
  sh -c "pkill -9 hackmyarmv4tl || busybox pkill -9 hackmyarmv4tl || /usr/busybox pkill -9 hackmyarmv4tl || /bin/busybox pkill -9 hackmyarmv4tl > /dev/null"
  2⤵
  PID:2649
- - /usr/bin/pkill
    pkill -9 hackmyarmv4tl
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2650
- - /usr/busybox
    /usr/busybox pkill -9 hackmyarmv4tl
    3⤵
    PID:2651
- - /bin/busybox
    /bin/busybox pkill -9 hackmyarmv4tl
    3⤵
    PID:2652
- /bin/sh
  sh -c "pkill -9 hackmyarmv4 || busybox pkill -9 hackmyarmv4 || /usr/busybox pkill -9 hackmyarmv4 || /bin/busybox pkill -9 hackmyarmv4 > /dev/null"
  2⤵
  PID:2653
- - /usr/bin/pkill
    pkill -9 hackmyarmv4
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2654
- - /usr/busybox
    /usr/busybox pkill -9 hackmyarmv4
    3⤵
    PID:2655
- - /bin/busybox
    /bin/busybox pkill -9 hackmyarmv4
    3⤵
    PID:2656
- /bin/sh
  sh -c "pkill -9 hackmyarmv6 || busybox pkill -9 hackmyarmv6 || /usr/busybox pkill -9 hackmyarmv6 || /bin/busybox pkill -9 hackmyarmv6 > /dev/null"
  2⤵
  PID:2657
- - /usr/bin/pkill
    pkill -9 hackmyarmv6
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2658
- - /usr/busybox
    /usr/busybox pkill -9 hackmyarmv6
    3⤵
    PID:2659
- - /bin/busybox
    /bin/busybox pkill -9 hackmyarmv6
    3⤵
    PID:2660
- /bin/sh
  sh -c "pkill -9 hackmyi686 || busybox pkill -9 hackmyi686 || /usr/busybox pkill -9 hackmyi686 || /bin/busybox pkill -9 hackmyi686 > /dev/null"
  2⤵
  PID:2661
- - /usr/bin/pkill
    pkill -9 hackmyi686
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    PID:2662
- - /usr/busybox
    /usr/busybox pkill -9 hackmyi686
    3⤵
    PID:2663
- - /bin/busybox
    /bin/busybox pkill -9 hackmyi686
    3⤵
    PID:2664
- /bin/sh
  sh -c "pkill -9 hackmypowerpc || busybox pkill -9 hackmypowerpc || /usr/busybox pkill -9 hackmypowerpc || /bin/busybox pkill -9 hackmypowerpc > /dev/null"
  2⤵
  PID:2665
- - /usr/bin/pkill
    pkill -9 hackmypowerpc
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2666
- - /usr/busybox
    /usr/busybox pkill -9 hackmypowerpc
    3⤵
    PID:2667
- - /bin/busybox
    /bin/busybox pkill -9 hackmypowerpc
    3⤵
    PID:2668
- /bin/sh
  sh -c "pkill -9 hackmypowerpc440fp || busybox pkill -9 hackmypowerpc440fp || /usr/busybox pkill -9 hackmypowerpc440fp || /bin/busybox pkill -9 hackmypowerpc440fp > /dev/null"
  2⤵
  PID:2669
- - /usr/bin/pkill
    pkill -9 hackmypowerpc440fp
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    PID:2670
- - /usr/busybox
    /usr/busybox pkill -9 hackmypowerpc440fp
    3⤵
    PID:2671
- - /bin/busybox
    /bin/busybox pkill -9 hackmypowerpc440fp
    3⤵
    PID:2672
- /bin/sh
  sh -c "pkill -9 hackmyi586 || busybox pkill -9 hackmyi586 || /usr/busybox pkill -9 hackmyi586 || /bin/busybox pkill -9 hackmyi586 > /dev/null"
  2⤵
  PID:2673
- - /usr/bin/pkill
    pkill -9 hackmyi586
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2674
- - /usr/busybox
    /usr/busybox pkill -9 hackmyi586
    3⤵
    PID:2675
- - /bin/busybox
    /bin/busybox pkill -9 hackmyi586
    3⤵
    PID:2676
- /bin/sh
  sh -c "pkill -9 hackmym68k || busybox pkill -9 hackmym68k || /usr/busybox pkill -9 hackmym68k || /bin/busybox pkill -9 hackmym68k > /dev/null"
  2⤵
  PID:2677
- - /usr/bin/pkill
    pkill -9 hackmym68k
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    PID:2678
- - /usr/busybox
    /usr/busybox pkill -9 hackmym68k
    3⤵
    PID:2679
- - /bin/busybox
    /bin/busybox pkill -9 hackmym68k
    3⤵
    PID:2680
- /bin/sh
  sh -c "pkill -9 hackmysparc || busybox pkill -9 hackmysparc || /usr/busybox pkill -9 hackmysparc || /bin/busybox pkill -9 hackmysparc > /dev/null"
  2⤵
  PID:2681
- - /usr/bin/pkill
    pkill -9 hackmysparc
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2682
- - /usr/busybox
    /usr/busybox pkill -9 hackmysparc
    3⤵
    PID:2683
- - /bin/busybox
    /bin/busybox pkill -9 hackmysparc
    3⤵
    PID:2684
- /bin/sh
  sh -c "pkill -9 hackmyx86_64 || busybox pkill -9 hackmyx86_64 || /usr/busybox pkill -9 hackmyx86_64 || /bin/busybox pkill -9 hackmyx86_64 > /dev/null"
  2⤵
  PID:2685
- - /usr/bin/pkill
    pkill -9 hackmyx86_64
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2686
- - /usr/busybox
    /usr/busybox pkill -9 hackmyx86_64
    3⤵
    PID:2687
- - /bin/busybox
    /bin/busybox pkill -9 hackmyx86_64
    3⤵
    PID:2688
- /bin/sh
  sh -c "pkill -9 b1 || busybox pkill -9 b1 || /usr/busybox pkill -9 b1 || /bin/busybox pkill -9 b1 > /dev/null"
  2⤵
  PID:2689
- - /usr/bin/pkill
    pkill -9 b1
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2690
- - /usr/busybox
    /usr/busybox pkill -9 b1
    3⤵
    PID:2691
- - /bin/busybox
    /bin/busybox pkill -9 b1
    3⤵
    PID:2692
- /bin/sh
  sh -c "pkill -9 b2 || busybox pkill -9 b2 || /usr/busybox pkill -9 b2 || /bin/busybox pkill -9 b2 > /dev/null"
  2⤵
  PID:2693
- - /usr/bin/pkill
    pkill -9 b2
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2694
- - /usr/busybox
    /usr/busybox pkill -9 b2
    3⤵
    PID:2695
- - /bin/busybox
    /bin/busybox pkill -9 b2
    3⤵
    PID:2696
- /bin/sh
  sh -c "pkill -9 b3 || busybox pkill -9 b3 || /usr/busybox pkill -9 b3 || /bin/busybox pkill -9 b3 > /dev/null"
  2⤵
  PID:2697
- - /usr/bin/pkill
    pkill -9 b3
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    PID:2698
- - /usr/busybox
    /usr/busybox pkill -9 b3
    3⤵
    PID:2699
- - /bin/busybox
    /bin/busybox pkill -9 b3
    3⤵
    PID:2700
- /bin/sh
  sh -c "pkill -9 b4 || busybox pkill -9 b4 || /usr/busybox pkill -9 b4 || /bin/busybox pkill -9 b4 > /dev/null"
  2⤵
  PID:2701
- - /usr/bin/pkill
    pkill -9 b4
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2702
- - /usr/busybox
    /usr/busybox pkill -9 b4
    3⤵
    PID:2703
- - /bin/busybox
    /bin/busybox pkill -9 b4
    3⤵
    PID:2704
- /bin/sh
  sh -c "pkill -9 b5 || busybox pkill -9 b5 || /usr/busybox pkill -9 b5 || /bin/busybox pkill -9 b5 > /dev/null"
  2⤵
  PID:2705
- - /usr/bin/pkill
    pkill -9 b5
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    - Reads runtime system information
    PID:2706
- - /usr/busybox
    /usr/busybox pkill -9 b5
    3⤵
    PID:2707
- - /bin/busybox
    /bin/busybox pkill -9 b5
    3⤵
    PID:2708
- /bin/sh
  sh -c "pkill -9 b6 || busybox pkill -9 b6 || /usr/busybox pkill -9 b6 || /bin/busybox pkill -9 b6 > /dev/null"
  2⤵
  PID:2709
- - /usr/bin/pkill
    pkill -9 b6
    3⤵
    - Reads CPU attributes
    - Enumerates kernel/hardware configuration
    PID:2710

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads