mrblack | 9fbcea7ba6259f843ac2cbee1ea2579e199d8fcf614d41fc1c9358d906c21094

Analysis

max time kernel
149s
max time network
153s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
26-08-2024 16:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c35ac2353cc09213e331997c75bcd8aa_JaffaCakes118
Size

1.2MB
MD5

c35ac2353cc09213e331997c75bcd8aa
SHA1

2af9f46f665b7ee45d716fda2ba92c76168804b4
SHA256

9fbcea7ba6259f843ac2cbee1ea2579e199d8fcf614d41fc1c9358d906c21094
SHA512

ac02e169955d4840c3cccb63381625151d8fbafffd865e46437400090aae04b8d753abb9f2068404b9621b2a3f2fb4d0450a69efab410b2a0cd93779052197c8
SSDEEP

24576:e845rGHu6gVJKG75oFpA0VWIX4n2y1q2rJp0:745vRVJKGtSA0VWIo2u9p0

Score

10^/10

mrblack antivm botnet persistence trojan

Malware Config

Signatures

MrBlack Trojan
IoT botnet which infects routers to be used for DDoS attacks.
trojan botnet mrblack

MrBlack trojan 1 IoCs

Processes:

resource	yara_rule
behavioral1/files/fstream-4.dat	family_mrblack

Executes dropped EXE 2 IoCs

Processes:

getty.sshd

ioc	pid	Process
/usr/bin/bsd-port/getty	1628	getty
/usr/bin/.sshd	1646	.sshd

Modifies init.d 1 TTPs 2 IoCs

Adds/modifies system service, likely for persistence.

persistence

Boot or Logon Autostart Execution

T1547

Processes:

gettyc35ac2353cc09213e331997c75bcd8aa_JaffaCakes118

description	ioc	Process
File opened for modification	/etc/init.d/selinux	getty
File opened for modification	/etc/init.d/DbSecuritySpt	c35ac2353cc09213e331997c75bcd8aa_JaffaCakes118

Write file to user bin folder 1 TTPs 11 IoCs

Hijack Execution Flow

T1574

Processes:

c35ac2353cc09213e331997c75bcd8aa_JaffaCakes118gettycpcpcpcpcpcpcpcp

description	ioc	Process
File opened for modification	/usr/bin/bsd-port/getty.lock	c35ac2353cc09213e331997c75bcd8aa_JaffaCakes118
File opened for modification	/usr/bin/bsd-port/udevd.lock	c35ac2353cc09213e331997c75bcd8aa_JaffaCakes118
File opened for modification	/usr/bin/bsd-port/getty.lock	getty
File opened for modification	/usr/bin/dpkgd/ps	cp
File opened for modification	/usr/bin/lsof	cp
File opened for modification	/usr/bin/ss	cp
File opened for modification	/usr/bin/bsd-port/getty	cp
File opened for modification	/usr/bin/.sshd	cp
File opened for modification	/usr/bin/dpkgd/lsof	cp
File opened for modification	/usr/bin/dpkgd/ss	cp
File opened for modification	/usr/bin/ps	cp

Writes file to system bin folder 1 TTPs 3 IoCs

Hijack Execution Flow

T1574

Processes:

cpcpcp

description	ioc	Process
File opened for modification	/bin/lsof	cp
File opened for modification	/bin/ps	cp
File opened for modification	/bin/ss	cp

Checks CPU configuration 1 TTPs 2 IoCs

Checks CPU information which indicate if the system is a virtual machine.

antivm

Virtualization/Sandbox Evasion

T1497

Processes:

c35ac2353cc09213e331997c75bcd8aa_JaffaCakes118getty

description	ioc	Process
File opened for reading	/proc/cpuinfo	c35ac2353cc09213e331997c75bcd8aa_JaffaCakes118
File opened for reading	/proc/cpuinfo	getty

Reads system network configuration 1 TTPs 2 IoCs

Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery

T1016

Processes:

c35ac2353cc09213e331997c75bcd8aa_JaffaCakes118getty

description	ioc	Process
File opened for reading	/proc/net/dev	c35ac2353cc09213e331997c75bcd8aa_JaffaCakes118
File opened for reading	/proc/net/dev	getty

Reads runtime system information 37 IoCs

Reads data from /proc virtual filesystem.

Processes:

mkdirmkdirc35ac2353cc09213e331997c75bcd8aa_JaffaCakes118mkdirgettymkdirmkdircpcpmkdirmkdirmkdircpcpmkdirmkdirmkdircp.sshdmkdircpmkdircpinsmodinsmodcpmkdircpmkdircpmkdirmkdircp

description	ioc	Process
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/meminfo	c35ac2353cc09213e331997c75bcd8aa_JaffaCakes118
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/stat	getty
File opened for reading	/proc/meminfo	getty
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	cp
File opened for reading	/proc/filesystems	cp
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	cp
File opened for reading	/proc/sys/kernel/version	c35ac2353cc09213e331997c75bcd8aa_JaffaCakes118
File opened for reading	/proc/sys/kernel/version	getty
File opened for reading	/proc/filesystems	cp
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	cp
File opened for reading	/proc/sys/kernel/version	.sshd
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	cp
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	cp
File opened for reading	/proc/stat	c35ac2353cc09213e331997c75bcd8aa_JaffaCakes118
File opened for reading	/proc/cmdline	insmod
File opened for reading	/proc/cmdline	insmod
File opened for reading	/proc/filesystems	cp
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	cp
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	cp
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	cp

Writes file to tmp directory 7 IoCs

Malware often drops required files in the /tmp directory.

Processes:

c35ac2353cc09213e331997c75bcd8aa_JaffaCakes118.sshd

description	ioc	Process
File opened for modification	/tmp/notify.file	c35ac2353cc09213e331997c75bcd8aa_JaffaCakes118
File opened for modification	/tmp/moni.lod	.sshd
File opened for modification	/tmp/notify.file	.sshd
File opened for modification	/tmp/gates.lod	.sshd
File opened for modification	/tmp/moni.lod	c35ac2353cc09213e331997c75bcd8aa_JaffaCakes118
File opened for modification	/tmp/bill.lock	c35ac2353cc09213e331997c75bcd8aa_JaffaCakes118
File opened for modification	/tmp/gates.lod	c35ac2353cc09213e331997c75bcd8aa_JaffaCakes118

/tmp/c35ac2353cc09213e331997c75bcd8aa_JaffaCakes118
/tmp/c35ac2353cc09213e331997c75bcd8aa_JaffaCakes118
1⤵
- Modifies init.d
- Write file to user bin folder
- Checks CPU configuration
- Reads system network configuration
- Reads runtime system information
- Writes file to tmp directory
PID:1584
- /bin/sh
  sh -c "ln -s /etc/init.d/DbSecuritySpt /etc/rc1.d/S97DbSecuritySpt"
  2⤵
  PID:1604
- - /usr/bin/ln
    ln -s /etc/init.d/DbSecuritySpt /etc/rc1.d/S97DbSecuritySpt
    3⤵
    PID:1605
- /bin/sh
  sh -c "ln -s /etc/init.d/DbSecuritySpt /etc/rc2.d/S97DbSecuritySpt"
  2⤵
  PID:1606
- - /usr/bin/ln
    ln -s /etc/init.d/DbSecuritySpt /etc/rc2.d/S97DbSecuritySpt
    3⤵
    PID:1607
- /bin/sh
  sh -c "ln -s /etc/init.d/DbSecuritySpt /etc/rc3.d/S97DbSecuritySpt"
  2⤵
  PID:1608
- - /usr/bin/ln
    ln -s /etc/init.d/DbSecuritySpt /etc/rc3.d/S97DbSecuritySpt
    3⤵
    PID:1609
- /bin/sh
  sh -c "ln -s /etc/init.d/DbSecuritySpt /etc/rc4.d/S97DbSecuritySpt"
  2⤵
  PID:1610
- - /usr/bin/ln
    ln -s /etc/init.d/DbSecuritySpt /etc/rc4.d/S97DbSecuritySpt
    3⤵
    PID:1611
- /bin/sh
  sh -c "ln -s /etc/init.d/DbSecuritySpt /etc/rc5.d/S97DbSecuritySpt"
  2⤵
  PID:1612
- - /usr/bin/ln
    ln -s /etc/init.d/DbSecuritySpt /etc/rc5.d/S97DbSecuritySpt
    3⤵
    PID:1613
- /bin/sh
  sh -c "mkdir -p /usr/bin/bsd-port"
  2⤵
  PID:1620
- - /usr/bin/mkdir
    mkdir -p /usr/bin/bsd-port
    3⤵
    - Reads runtime system information
    PID:1621
- /bin/sh
  sh -c "mkdir -p /usr/bin/bsd-port"
  2⤵
  PID:1622
- - /usr/bin/mkdir
    mkdir -p /usr/bin/bsd-port
    3⤵
    - Reads runtime system information
    PID:1623
- /bin/sh
  sh -c "cp -f /tmp/c35ac2353cc09213e331997c75bcd8aa_JaffaCakes118 /usr/bin/bsd-port/getty"
  2⤵
  PID:1624
- - /usr/bin/cp
    cp -f /tmp/c35ac2353cc09213e331997c75bcd8aa_JaffaCakes118 /usr/bin/bsd-port/getty
    3⤵
    - Write file to user bin folder
    - Reads runtime system information
    PID:1625
- /bin/sh
  sh -c /usr/bin/bsd-port/getty
  2⤵
  PID:1627
- - /usr/bin/bsd-port/getty
    /usr/bin/bsd-port/getty
    3⤵
    - Executes dropped EXE
    - Modifies init.d
    - Write file to user bin folder
    - Checks CPU configuration
    - Reads system network configuration
    - Reads runtime system information
    PID:1628
  - - /bin/sh
      sh -c "ln -s /etc/init.d/selinux /etc/rc1.d/S99selinux"
      4⤵
      PID:1636
    - - /usr/bin/ln
        
        ln -s /etc/init.d/selinux /etc/rc1.d/S99selinux
        5⤵
        
        PID:1637
  - - /bin/sh
      sh -c "ln -s /etc/init.d/selinux /etc/rc2.d/S99selinux"
      4⤵
      PID:1638
    - - /usr/bin/ln
        
        ln -s /etc/init.d/selinux /etc/rc2.d/S99selinux
        5⤵
        
        PID:1639
  - - /bin/sh
      sh -c "ln -s /etc/init.d/selinux /etc/rc3.d/S99selinux"
      4⤵
      PID:1640
    - - /usr/bin/ln
        
        ln -s /etc/init.d/selinux /etc/rc3.d/S99selinux
        5⤵
        
        PID:1641
  - - /bin/sh
      sh -c "ln -s /etc/init.d/selinux /etc/rc4.d/S99selinux"
      4⤵
      PID:1642
    - - /usr/bin/ln
        
        ln -s /etc/init.d/selinux /etc/rc4.d/S99selinux
        5⤵
        
        PID:1643
  - - /bin/sh
      sh -c "ln -s /etc/init.d/selinux /etc/rc5.d/S99selinux"
      4⤵
      PID:1647
    - - /usr/bin/ln
        
        ln -s /etc/init.d/selinux /etc/rc5.d/S99selinux
        5⤵
        
        PID:1648
  - - /bin/sh
      sh -c "mkdir -p /usr/bin/dpkgd"
      4⤵
      PID:1649
    - - /usr/bin/mkdir
        
        mkdir -p /usr/bin/dpkgd
        5⤵
        Reads runtime system information
        
        PID:1650
  - - /bin/sh
      sh -c "cp -f /bin/lsof /usr/bin/dpkgd/lsof"
      4⤵
      PID:1651
    - - /usr/bin/cp
        
        cp -f /bin/lsof /usr/bin/dpkgd/lsof
        5⤵
        Write file to user bin folder
        Reads runtime system information
        
        PID:1652
  - - /bin/sh
      sh -c "mkdir -p /bin"
      4⤵
      PID:1653
    - - /usr/bin/mkdir
        
        mkdir -p /bin
        5⤵
        Reads runtime system information
        
        PID:1654
  - - /bin/sh
      sh -c "mkdir -p /bin"
      4⤵
      PID:1655
    - - /usr/bin/mkdir
        
        mkdir -p /bin
        5⤵
        Reads runtime system information
        
        PID:1656
  - - /bin/sh
      sh -c "cp -f /usr/bin/bsd-port/getty /bin/lsof"
      4⤵
      PID:1657
    - - /usr/bin/cp
        
        cp -f /usr/bin/bsd-port/getty /bin/lsof
        5⤵
        Writes file to system bin folder
        Reads runtime system information
        
        PID:1658
  - - /bin/sh
      sh -c "chmod 0755 /bin/lsof"
      4⤵
      PID:1659
    - - /usr/bin/chmod
        
        chmod 0755 /bin/lsof
        5⤵
        
        PID:1660
  - - /bin/sh
      sh -c "cp -f /bin/ps /usr/bin/dpkgd/ps"
      4⤵
      PID:1661
    - - /usr/bin/cp
        
        cp -f /bin/ps /usr/bin/dpkgd/ps
        5⤵
        Write file to user bin folder
        Reads runtime system information
        
        PID:1662
  - - /bin/sh
      sh -c "mkdir -p /bin"
      4⤵
      PID:1663
    - - /usr/bin/mkdir
        
        mkdir -p /bin
        5⤵
        Reads runtime system information
        
        PID:1664
  - - /bin/sh
      sh -c "mkdir -p /bin"
      4⤵
      PID:1665
    - - /usr/bin/mkdir
        
        mkdir -p /bin
        5⤵
        Reads runtime system information
        
        PID:1666
  - - /bin/sh
      sh -c "cp -f /usr/bin/bsd-port/getty /bin/ps"
      4⤵
      PID:1667
    - - /usr/bin/cp
        
        cp -f /usr/bin/bsd-port/getty /bin/ps
        5⤵
        Writes file to system bin folder
        Reads runtime system information
        
        PID:1668
  - - /bin/sh
      sh -c "chmod 0755 /bin/ps"
      4⤵
      PID:1669
    - - /usr/bin/chmod
        
        chmod 0755 /bin/ps
        5⤵
        
        PID:1670
  - - /bin/sh
      sh -c "cp -f /bin/ss /usr/bin/dpkgd/ss"
      4⤵
      PID:1671
    - - /usr/bin/cp
        
        cp -f /bin/ss /usr/bin/dpkgd/ss
        5⤵
        Write file to user bin folder
        Reads runtime system information
        
        PID:1672
  - - /bin/sh
      sh -c "mkdir -p /bin"
      4⤵
      PID:1673
    - - /usr/bin/mkdir
        
        mkdir -p /bin
        5⤵
        Reads runtime system information
        
        PID:1674
  - - /bin/sh
      sh -c "mkdir -p /bin"
      4⤵
      PID:1675
    - - /usr/bin/mkdir
        
        mkdir -p /bin
        5⤵
        Reads runtime system information
        
        PID:1676
  - - /bin/sh
      sh -c "cp -f /usr/bin/bsd-port/getty /bin/ss"
      4⤵
      PID:1677
    - - /usr/bin/cp
        
        cp -f /usr/bin/bsd-port/getty /bin/ss
        5⤵
        Writes file to system bin folder
        Reads runtime system information
        
        PID:1678
  - - /bin/sh
      sh -c "chmod 0755 /bin/ss"
      4⤵
      PID:1679
    - - /usr/bin/chmod
        
        chmod 0755 /bin/ss
        5⤵
        
        PID:1680
  - - /bin/sh
      sh -c "mkdir -p /usr/bin"
      4⤵
      PID:1681
    - - /usr/bin/mkdir
        
        mkdir -p /usr/bin
        5⤵
        Reads runtime system information
        
        PID:1682
  - - /bin/sh
      sh -c "mkdir -p /usr/bin"
      4⤵
      PID:1683
    - - /usr/bin/mkdir
        
        mkdir -p /usr/bin
        5⤵
        Reads runtime system information
        
        PID:1684
  - - /bin/sh
      sh -c "cp -f /usr/bin/bsd-port/getty /usr/bin/lsof"
      4⤵
      PID:1685
    - - /usr/bin/cp
        
        cp -f /usr/bin/bsd-port/getty /usr/bin/lsof
        5⤵
        Write file to user bin folder
        Reads runtime system information
        
        PID:1686
  - - /bin/sh
      sh -c "chmod 0755 /usr/bin/lsof"
      4⤵
      PID:1687
    - - /usr/bin/chmod
        
        chmod 0755 /usr/bin/lsof
        5⤵
        
        PID:1688
  - - /bin/sh
      sh -c "mkdir -p /usr/bin"
      4⤵
      PID:1689
    - - /usr/bin/mkdir
        
        mkdir -p /usr/bin
        5⤵
        Reads runtime system information
        
        PID:1690
  - - /bin/sh
      sh -c "mkdir -p /usr/bin"
      4⤵
      PID:1691
    - - /usr/bin/mkdir
        
        mkdir -p /usr/bin
        5⤵
        Reads runtime system information
        
        PID:1692
  - - /bin/sh
      sh -c "cp -f /usr/bin/bsd-port/getty /usr/bin/ps"
      4⤵
      PID:1693
    - - /usr/bin/cp
        
        cp -f /usr/bin/bsd-port/getty /usr/bin/ps
        5⤵
        Write file to user bin folder
        Reads runtime system information
        
        PID:1694
  - - /bin/sh
      sh -c "chmod 0755 /usr/bin/ps"
      4⤵
      PID:1695
    - - /usr/bin/chmod
        
        chmod 0755 /usr/bin/ps
        5⤵
        
        PID:1696
  - - /bin/sh
      sh -c "mkdir -p /usr/bin"
      4⤵
      PID:1697
    - - /usr/bin/mkdir
        
        mkdir -p /usr/bin
        5⤵
        Reads runtime system information
        
        PID:1698
  - - /bin/sh
      sh -c "mkdir -p /usr/bin"
      4⤵
      PID:1699
    - - /usr/bin/mkdir
        
        mkdir -p /usr/bin
        5⤵
        Reads runtime system information
        
        PID:1700
  - - /bin/sh
      sh -c "cp -f /usr/bin/bsd-port/getty /usr/bin/ss"
      4⤵
      PID:1701
    - - /usr/bin/cp
        
        cp -f /usr/bin/bsd-port/getty /usr/bin/ss
        5⤵
        Write file to user bin folder
        Reads runtime system information
        
        PID:1702
  - - /bin/sh
      sh -c "chmod 0755 /usr/bin/ss"
      4⤵
      PID:1703
    - - /usr/bin/chmod
        
        chmod 0755 /usr/bin/ss
        5⤵
        
        PID:1704
  - - /bin/sh
      sh -c "insmod /usr/bin/bsd-port/xpacket.ko"
      4⤵
      PID:1709
    - - /usr/sbin/insmod
        
        insmod /usr/bin/bsd-port/xpacket.ko
        5⤵
        Reads runtime system information
        
        PID:1710
- /bin/sh
  sh -c "mkdir -p /usr/bin"
  2⤵
  PID:1630
- - /usr/bin/mkdir
    mkdir -p /usr/bin
    3⤵
    - Reads runtime system information
    PID:1631
- /bin/sh
  sh -c "mkdir -p /usr/bin"
  2⤵
  PID:1632
- - /usr/bin/mkdir
    mkdir -p /usr/bin
    3⤵
    - Reads runtime system information
    PID:1633
- /bin/sh
  sh -c "cp -f /tmp/c35ac2353cc09213e331997c75bcd8aa_JaffaCakes118 /usr/bin/.sshd"
  2⤵
  PID:1634
- - /usr/bin/cp
    cp -f /tmp/c35ac2353cc09213e331997c75bcd8aa_JaffaCakes118 /usr/bin/.sshd
    3⤵
    - Write file to user bin folder
    - Reads runtime system information
    PID:1635
- /bin/sh
  sh -c /usr/bin/.sshd
  2⤵
  PID:1645
- - /usr/bin/.sshd
    /usr/bin/.sshd
    3⤵
    - Executes dropped EXE
    - Reads runtime system information
    - Writes file to tmp directory
    PID:1646
- /bin/sh
  sh -c "insmod /tmp/xpacket.ko"
  2⤵
  PID:1707
- - /usr/sbin/insmod
    insmod /tmp/xpacket.ko
    3⤵
    - Reads runtime system information
    PID:1708

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Hijack Execution Flow

T1574

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Hijack Execution Flow

T1574

Defense Evasion

Hijack Execution Flow

T1574

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

System Network Configuration Discovery

T1016

Virtualization/Sandbox Evasion

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/etc/init.d/DbSecuritySpt

Filesize
64B

MD5
ab619b91fc2d4dafee7107a953627b7b

SHA1
2727ce51bd904015a97f4cca7cd6b3800f43cac1

SHA256
28d56875e5cc1b1861787119f88292f9677b5d98727cef9dab52d2b8ff24af3a

SHA512
18754796691b014835c22fc1a47ae391fd7a701c77892c640fc4644e8fb34cf088fd0f6211e0a06335793c75849822d46f8a403a0d13c26e27b77e336eaca2da

Download Submit
/etc/init.d/selinux

Filesize
36B

MD5
993cc15058142d96c3daf7852c3d5ee8

SHA1
0950b8b391b04dd3895ea33cd3141543ebd2525d

SHA256
8171d077918611803d93088409f220c66fae1c670b297e1aa5d8cbd548ce9208

SHA512
0c4256c00a3710f97e92581b552682b36b62afc35fe72622c491323c618c19ea62611ac04ccafc3dfcde2254a2ebbd93b69b66795b16e36332293bed83adb928

Download Submit
/tmp/gates.lod

Filesize
4B

MD5
228499b55310264a8ea0e27b6e7c6ab6

SHA1
178116e63a31913ab6da9ab6d92cb510dea7964c

SHA256
9c8dd327d0f259b6facd68100f664c432101f783d31ac9b78b6e9eaf9fa786b8

SHA512
2efeadcee6aa3eb7e370b8e05d12c7269d92180eda2f8665b8663888ed85a4caecf6ed31e5a070de68f43a76b7a24f4cb0b2e6f3f9c017df05f77e6a6bd93c0f

Download Submit
/tmp/moni.lod

Filesize
4B

MD5
2a27b8144ac02f67687f76782a3b5d8f

SHA1
b0305a80cc6fe62e26014101af72bb986061ee9a

SHA256
38bc3d1c4787dd15fb6b16dccd548786cb773da29ffeb075602c76d2ca87f9fd

SHA512
725d9f9a36178d886c71d610a8ac481d5f9623c91b48f9301abfab6817cb3e27e258aeaea40b85ebf06f684c931d1f71485276c0d04555c1406593e00bf08776

Download Submit
/tmp/notify.file

Filesize
51B

MD5
c26ce58b17c971ae6b4d3b0076be629f

SHA1
2f12340b9d130d681f918214046d56756eb03e8d

SHA256
f0d85fa26e13f1f368a2a42e6c271d9c262c11e7b250f1f0eccab7f20913943b

SHA512
301db23ca2c3f0411710400bb3f227bf9044281120e6880951057c59de704c421a9a70fc3c72a135cbcbf135b9e3362c34d89ff3465f102362839f32d0586f15

Download Submit
/usr/bin/bsd-port/getty

Filesize
1.2MB

MD5
c35ac2353cc09213e331997c75bcd8aa

SHA1
2af9f46f665b7ee45d716fda2ba92c76168804b4

SHA256
9fbcea7ba6259f843ac2cbee1ea2579e199d8fcf614d41fc1c9358d906c21094

SHA512
ac02e169955d4840c3cccb63381625151d8fbafffd865e46437400090aae04b8d753abb9f2068404b9621b2a3f2fb4d0450a69efab410b2a0cd93779052197c8

Download Submit
/usr/bin/dpkgd/lsof

Filesize
163KB

MD5
ab57b66cc531ae0f996963223e632b60

SHA1
bf7e5becd33f21c2539f5a75ffa0ab61c49c8795

SHA256
2484863a7bfda7f97b90bfd5dfceed4ec9f27dd51f9c5158c8daabbf4309b1df

SHA512
908acef13f3c1d80b7169ec3b16bb67006013453348fff75550bc3c6c2137e798b21d7990edbd5be63d756d9c41b06160aebf38aa80547e4bafa3a62596057f6

Download Submit
/usr/bin/dpkgd/ps

Filesize
138KB

MD5
8146139c2ad7e550b1d1f49480997446

SHA1
074db8890c3227bd8a588417f5b9bde637bcf3af

SHA256
207df9d438f75185ab3af2ab1173d104831a6631c28ef40d38b2ab43de27b40f

SHA512
b6d71d537f593b9af833e6f798e412e95fc486a313414ed8cca9639f61be7ac9dca700e9f861c0d07c7f65b3783127a67f829f422472cad8938ba01d397ab9de

Download Submit
/usr/bin/dpkgd/ss

Filesize
125KB

MD5
1b25ac945efae8520ba112b500e2d561

SHA1
8324c4d1d1427829266e82f203386232ff82af15

SHA256
5eb16d9a8bc81fe767725874e3f67623b8e86b46ec93546be49c5b09d3ab4636

SHA512
e191f967170ea4844f736c5ab75b7bf45fef3af34f0a4bef0d36475d646b0b089449fe39806664b9f6ce1984037687930cc368892230662c8c30f67fa3ac216e

Download Submit