Overview
overview
4Static
static
1tsedio-tse...trc.js
windows7-x64
3tsedio-tse...trc.js
windows10-2004-x64
3tsedio-tse...wrk.sh
ubuntu-18.04-amd64
3tsedio-tse...wrk.sh
debian-9-armhf
3tsedio-tse...wrk.sh
debian-9-mips
4tsedio-tse...wrk.sh
debian-9-mipsel
4tsedio-tse...it-msg
ubuntu-18.04-amd64
1tsedio-tse...it-msg
debian-9-armhf
1tsedio-tse...it-msg
debian-9-mips
1tsedio-tse...it-msg
debian-9-mipsel
1tsedio-tse...commit
ubuntu-18.04-amd64
1tsedio-tse...commit
debian-9-armhf
1tsedio-tse...commit
debian-9-mips
1tsedio-tse...commit
debian-9-mipsel
1tsedio-tse...commit
ubuntu-18.04-amd64
1tsedio-tse...commit
debian-9-armhf
1tsedio-tse...commit
debian-9-mips
1tsedio-tse...commit
debian-9-mipsel
1tsedio-tse...nch.js
windows7-x64
3tsedio-tse...nch.js
windows10-2004-x64
3tsedio-tse...are.js
ubuntu-18.04-amd64
3tsedio-tse...are.js
debian-9-armhf
4tsedio-tse...are.js
debian-9-mips
1tsedio-tse...are.js
debian-9-mipsel
1tsedio-tse...ark.js
ubuntu-18.04-amd64
3tsedio-tse...ark.js
debian-9-armhf
4tsedio-tse...ark.js
debian-9-mips
1tsedio-tse...ark.js
debian-9-mipsel
1tsedio-tse...ter.js
windows7-x64
3tsedio-tse...ter.js
windows10-2004-x64
3tsedio-tse...ect.js
windows7-x64
3tsedio-tse...ect.js
windows10-2004-x64
3Analysis
-
max time kernel
150s -
max time network
172s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240418-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
31-08-2024 18:48
Static task
static1
Behavioral task
behavioral1
Sample
tsedio-tsed-59e79fd/.eslintrc.js
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
tsedio-tsed-59e79fd/.eslintrc.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral4
Sample
tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral5
Sample
tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral6
Sample
tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral7
Sample
tsedio-tsed-59e79fd/.husky/commit-msg
Resource
ubuntu1804-amd64-20240729-en
Behavioral task
behavioral8
Sample
tsedio-tsed-59e79fd/.husky/commit-msg
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral9
Sample
tsedio-tsed-59e79fd/.husky/commit-msg
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral10
Sample
tsedio-tsed-59e79fd/.husky/commit-msg
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral11
Sample
tsedio-tsed-59e79fd/.husky/post-commit
Resource
ubuntu1804-amd64-20240729-en
Behavioral task
behavioral12
Sample
tsedio-tsed-59e79fd/.husky/post-commit
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral13
Sample
tsedio-tsed-59e79fd/.husky/post-commit
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral14
Sample
tsedio-tsed-59e79fd/.husky/post-commit
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral15
Sample
tsedio-tsed-59e79fd/.husky/pre-commit
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral16
Sample
tsedio-tsed-59e79fd/.husky/pre-commit
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral17
Sample
tsedio-tsed-59e79fd/.husky/pre-commit
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral18
Sample
tsedio-tsed-59e79fd/.husky/pre-commit
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral19
Sample
tsedio-tsed-59e79fd/benchmarks/bin/benchmark-bench.js
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
tsedio-tsed-59e79fd/benchmarks/bin/benchmark-bench.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral22
Sample
tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral23
Sample
tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral24
Sample
tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral25
Sample
tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral26
Sample
tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral27
Sample
tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral28
Sample
tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral29
Sample
tsedio-tsed-59e79fd/benchmarks/frameworks/connect-router.js
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
tsedio-tsed-59e79fd/benchmarks/frameworks/connect-router.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
tsedio-tsed-59e79fd/benchmarks/frameworks/connect.js
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
tsedio-tsed-59e79fd/benchmarks/frameworks/connect.js
Resource
win10v2004-20240802-en
General
-
Target
tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh
-
Size
376B
-
MD5
84b9111907ddbbacf05300ddd986ef0a
-
SHA1
442bcee0ff10ea4d1709c8cca972e86bfb9c7cf1
-
SHA256
d15c14212e903b0c2881f840ad5d8989c1ec5b437197aa51203ff6b3924699a4
-
SHA512
7c11112dcff1f6057800b9326181b80b00bb60211755938d952e42bd990c27f285ca8ce29714cc8dbd3561270315ed6719bdc40c7c996177e3e242808fe39d6d
Malware Config
Signatures
-
Reads CPU attributes 1 TTPs 4 IoCs
description ioc Process File opened for reading /sys/devices/system/cpu/online exim4 File opened for reading /sys/devices/system/cpu/online exim4 File opened for reading /sys/devices/system/cpu/online exim4 File opened for reading /sys/devices/system/cpu/online exim4 -
Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/filesystems dpkg File opened for reading /proc/filesystems sudo File opened for reading /proc/sys/kernel/ngroups_max sudo File opened for reading /proc/sys/crypto/fips_enabled https File opened for reading /proc/filesystems dpkg File opened for reading /proc/filesystems cp File opened for reading /proc/filesystems sed File opened for reading /proc/sys/crypto/fips_enabled gpg-connect-agent File opened for reading /proc/filesystems dpkg File opened for reading /proc/sys/crypto/fips_enabled gpgv File opened for reading /proc/self/fd sudo File opened for reading /proc/filesystems dpkg File opened for reading /proc/filesystems sed File opened for reading /proc/filesystems dpkg File opened for reading /proc/sys/kernel/ngroups_max sendmail File opened for reading /proc/self/fd apt-get File opened for reading /proc/self/fd apt-config File opened for reading /proc/self/fd apt-config File opened for reading /proc/sys/crypto/fips_enabled gpgv File opened for reading /proc/filesystems dpkg File opened for reading /proc/filesystems cp File opened for reading /proc/filesystems dpkg File opened for reading /proc/sys/kernel/ngroups_max sudo File opened for reading /proc/self/stat sudo File opened for reading /proc/sys/kernel/ngroups_max apt-get File opened for reading /proc/self/fd apt-config File opened for reading /proc/self/fd apt-config File opened for reading /proc/self/fd apt-config File opened for reading /proc/self/fd apt-config File opened for reading /proc/self/fd apt-config File opened for reading /proc/sys/kernel/ngroups_max sendmail File opened for reading /proc/self/fd apt-config File opened for reading /proc/filesystems dpkg File opened for reading /proc/filesystems find File opened for reading /proc/filesystems dpkg File opened for reading /proc/self/stat sudo File opened for reading /proc/self/fd apt-config File opened for reading /proc/filesystems dpkg File opened for reading /proc/filesystems dpkg File opened for reading /proc/filesystems dpkg File opened for reading /proc/filesystems find File opened for reading /proc/filesystems sudo File opened for reading /proc/filesystems dpkg File opened for reading /proc/filesystems dpkg File opened for reading /proc/filesystems dpkg File opened for reading /proc/filesystems dpkg File opened for reading /proc/self/fd apt-config File opened for reading /proc/filesystems dpkg File opened for reading /proc/self/fd apt-config File opened for reading /proc/sys/kernel/ngroups_max apt-get File opened for reading /proc/filesystems dpkg File opened for reading /proc/sys/crypto/fips_enabled gpgconf File opened for reading /proc/filesystems dpkg File opened for reading /proc/filesystems dpkg File opened for reading /proc/filesystems sed File opened for reading /proc/filesystems dpkg File opened for reading /proc/sys/crypto/fips_enabled gpg-connect-agent File opened for reading /proc/self/fd apt-get File opened for reading /proc/self/fd sudo File opened for reading /proc/self/fd apt-config File opened for reading /proc/self/fd gpgconf File opened for reading /proc/self/fd apt-config File opened for reading /proc/self/fd apt-config File opened for reading /proc/self/fd gpgconf -
Writes file to tmp directory 25 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/apt-key-gpghome.w8ITN9dl0X/gpg.1.sh apt-key File opened for modification /tmp/fileutl.message.DZeaMk apt-get File opened for modification /tmp/apt.conf.5rcSNl gpgv File opened for modification /tmp/apt-key-gpghome.ZhEDiOTjGF/pubring.gpg touch File opened for modification /tmp/fileutl.message.nCmiJS apt-get File opened for modification /tmp/fileutl.message.Ajy2Ts apt-get File opened for modification /tmp/apt-key-gpghome.ZhEDiOTjGF/pubring.gpg apt-key File opened for modification /tmp/fileutl.message.cWW1cy apt-get File opened for modification /tmp/apt.sig.CAHpfW gpgv File opened for modification /tmp/fileutl.message.k7zEzW apt-get File opened for modification /tmp/apt.data.saHUio gpgv File opened for modification /tmp/fileutl.message.KpUKrU apt-get File opened for modification /tmp/fileutl.message.UDAE9r apt-get File opened for modification /tmp/fileutl.message.QVH4k3 apt-get File opened for modification /tmp/apt-key-gpghome.w8ITN9dl0X/pubring.gpg touch File opened for modification /tmp/apt-key-gpghome.w8ITN9dl0X/pubring.gpg apt-key File opened for modification /tmp/apt-key-gpghome.ZhEDiOTjGF/gpg.1.sh apt-key File opened for modification /tmp/fileutl.message.CSzHa0 apt-get File opened for modification /tmp/apt-key-gpghome.ZhEDiOTjGF/pubring.orig.gpg cp File opened for modification /tmp/fileutl.message.mXsppP apt-get File opened for modification /tmp/fileutl.message.8KDM4c apt-get File opened for modification /tmp/fileutl.message.fQQHRq apt-get File opened for modification /tmp/apt-key-gpghome.w8ITN9dl0X/pubring.orig.gpg cp File opened for modification /tmp/fileutl.message.0Vw2fd apt-get File opened for modification /tmp/apt.conf.GfHFiy gpgv
Processes
-
/tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh/tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh1⤵PID:732
-
/usr/local/sbin/shsh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh1⤵PID:732
-
/usr/local/bin/shsh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh1⤵PID:732
-
/usr/sbin/shsh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh1⤵PID:732
-
/usr/bin/shsh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh1⤵PID:732
-
/sbin/shsh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh1⤵PID:732
-
/bin/shsh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh1⤵PID:732
-
/usr/bin/dirnamedirname /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh2⤵PID:734
-
-
/usr/bin/sudosudo apt-get update2⤵
- Reads runtime system information
PID:736 -
/usr/sbin/sendmailsendmail -t3⤵PID:744
-
/usr/sbin/exim4/usr/sbin/exim4 -Mc 1skRHB-0000C0-FM4⤵
- Reads CPU attributes
PID:755
-
-
-
/usr/sbin/sendmailsendmail -t3⤵
- Reads runtime system information
PID:748 -
/usr/sbin/exim4/usr/sbin/exim4 -Mc 1skRHB-0000C4-HI4⤵
- Reads CPU attributes
PID:756
-
-
-
/usr/bin/apt-getapt-get update3⤵
- Reads runtime system information
- Writes file to tmp directory
PID:749 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures4⤵
- Reads runtime system information
PID:752
-
-
/usr/lib/apt/methods/http/usr/lib/apt/methods/http4⤵PID:758
-
-
/usr/lib/apt/methods/https/usr/lib/apt/methods/https4⤵PID:760
-
-
/usr/lib/apt/methods/https/usr/lib/apt/methods/https4⤵
- Reads runtime system information
PID:766
-
-
/usr/lib/apt/methods/http/usr/lib/apt/methods/http4⤵PID:769
-
-
/usr/lib/apt/methods/gpgv/usr/lib/apt/methods/gpgv4⤵PID:774
-
-
/usr/lib/apt/methods/gpgv/usr/lib/apt/methods/gpgv4⤵
- Writes file to tmp directory
PID:775 -
/usr/bin/apt-key/usr/bin/apt-key --quiet --readonly verify --status-fd 3 /tmp/apt.sig.CAHpfW /tmp/apt.data.saHUio5⤵
- Writes file to tmp directory
PID:779 -
/usr/bin/apt-configapt-config shell MASTER_KEYRING APT::Key::MasterKeyring6⤵
- Reads runtime system information
PID:782 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures7⤵
- Reads runtime system information
PID:784
-
-
-
/usr/bin/apt-configapt-config shell ARCHIVE_KEYRING APT::Key::ArchiveKeyring6⤵
- Reads runtime system information
PID:786 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures7⤵
- Reads runtime system information
PID:788
-
-
-
/usr/bin/apt-configapt-config shell REMOVED_KEYS APT::Key::RemovedKeys6⤵
- Reads runtime system information
PID:790 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures7⤵
- Reads runtime system information
PID:792
-
-
-
/usr/bin/apt-configapt-config shell ARCHIVE_KEYRING_URI APT::Key::ArchiveKeyringURI6⤵
- Reads runtime system information
PID:793 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures7⤵
- Reads runtime system information
PID:796
-
-
-
/usr/bin/apt-configapt-config shell TRUSTEDFILE Apt::GPGV::TrustedKeyring6⤵
- Reads runtime system information
PID:797 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures7⤵
- Reads runtime system information
PID:801
-
-
-
/usr/bin/apt-configapt-config shell TRUSTEDFILE Dir::Etc::Trusted/f6⤵
- Reads runtime system information
PID:803 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures7⤵
- Reads runtime system information
PID:805
-
-
-
/usr/bin/apt-configapt-config shell GPGV Apt::Key::gpgvcommand6⤵
- Reads runtime system information
PID:809 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures7⤵
- Reads runtime system information
PID:812
-
-
-
/bin/mktempmktemp --directory --tmpdir apt-key-gpghome.XXXXXXXXXX6⤵PID:814
-
-
/bin/chmodchmod 700 /tmp/apt-key-gpghome.w8ITN9dl0X6⤵PID:815
-
-
/bin/readlinkreadlink -f /tmp/apt-key-gpghome.w8ITN9dl0X6⤵PID:816
-
-
/bin/rmrm -f /tmp/apt-key-gpghome.w8ITN9dl0X/pubring.gpg6⤵PID:818
-
-
/usr/bin/touchtouch /tmp/apt-key-gpghome.w8ITN9dl0X/pubring.gpg6⤵
- Writes file to tmp directory
PID:820
-
-
/usr/bin/apt-configapt-config shell TRUSTEDPARTS Dir::Etc::TrustedParts/d6⤵
- Reads runtime system information
PID:821 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures7⤵
- Reads runtime system information
PID:823
-
-
-
/bin/readlinkreadlink -f /etc/apt/trusted.gpg.d/6⤵PID:825
-
-
/usr/bin/findfind /etc/apt/trusted.gpg.d -mindepth 1 -maxdepth 1 "(" -name "*.gpg" -o -name "*.asc" ")"6⤵
- Reads runtime system information
PID:827
-
-
/usr/bin/sortsort6⤵PID:830
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-buster-automatic.gpg6⤵PID:833
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-buster-security-automatic.gpg6⤵PID:835
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-buster-stable.gpg6⤵PID:837
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-jessie-automatic.gpg6⤵PID:839
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-jessie-security-automatic.gpg6⤵PID:841
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-jessie-stable.gpg6⤵PID:844
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-stretch-automatic.gpg6⤵PID:846
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-stretch-security-automatic.gpg6⤵PID:848
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-stretch-stable.gpg6⤵PID:850
-
-
/bin/cpcp -a /tmp/apt-key-gpghome.w8ITN9dl0X/pubring.gpg /tmp/apt-key-gpghome.w8ITN9dl0X/pubring.orig.gpg6⤵
- Reads runtime system information
- Writes file to tmp directory
PID:851
-
-
/bin/sedsed -e "s#'#'\"'\"'#g"6⤵
- Reads runtime system information
PID:857
-
-
/bin/sedsed -e "s#'#'\"'\"'#g"6⤵
- Reads runtime system information
PID:860
-
-
/usr/bin/gpgvgpgv --homedir /tmp/apt-key-gpghome.w8ITN9dl0X --keyring /tmp/apt-key-gpghome.w8ITN9dl0X/pubring.gpg --ignore-time-conflict --status-fd 3 /tmp/apt.sig.CAHpfW /tmp/apt.data.saHUio6⤵
- Reads runtime system information
PID:861
-
-
/usr/bin/gpgconfgpgconf --kill gpg-agent6⤵
- Reads runtime system information
PID:862 -
/usr/bin/gpg-connect-agentgpg-connect-agent --no-autostart KILLAGENT7⤵
- Reads runtime system information
PID:863
-
-
-
/bin/rmrm -rf /tmp/apt-key-gpghome.w8ITN9dl0X6⤵PID:864
-
-
-
/usr/bin/apt-key/usr/bin/apt-key --quiet --readonly verify --status-fd 3 /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_Release.gpg /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_Release5⤵
- Writes file to tmp directory
PID:866 -
/usr/bin/apt-configapt-config shell MASTER_KEYRING APT::Key::MasterKeyring6⤵
- Reads runtime system information
PID:868 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures7⤵
- Reads runtime system information
PID:869
-
-
-
/usr/bin/apt-configapt-config shell ARCHIVE_KEYRING APT::Key::ArchiveKeyring6⤵
- Reads runtime system information
PID:870 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures7⤵
- Reads runtime system information
PID:871
-
-
-
/usr/bin/apt-configapt-config shell REMOVED_KEYS APT::Key::RemovedKeys6⤵
- Reads runtime system information
PID:872 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures7⤵
- Reads runtime system information
PID:873
-
-
-
/usr/bin/apt-configapt-config shell ARCHIVE_KEYRING_URI APT::Key::ArchiveKeyringURI6⤵
- Reads runtime system information
PID:874 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures7⤵
- Reads runtime system information
PID:875
-
-
-
/usr/bin/apt-configapt-config shell TRUSTEDFILE Apt::GPGV::TrustedKeyring6⤵PID:876
-
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures7⤵
- Reads runtime system information
PID:877
-
-
-
/usr/bin/apt-configapt-config shell TRUSTEDFILE Dir::Etc::Trusted/f6⤵PID:878
-
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures7⤵
- Reads runtime system information
PID:881
-
-
-
/usr/bin/apt-configapt-config shell GPGV Apt::Key::gpgvcommand6⤵
- Reads runtime system information
PID:884 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures7⤵
- Reads runtime system information
PID:886
-
-
-
/bin/mktempmktemp --directory --tmpdir apt-key-gpghome.XXXXXXXXXX6⤵PID:887
-
-
/bin/chmodchmod 700 /tmp/apt-key-gpghome.ZhEDiOTjGF6⤵PID:889
-
-
/bin/readlinkreadlink -f /tmp/apt-key-gpghome.ZhEDiOTjGF6⤵PID:890
-
-
/bin/rmrm -f /tmp/apt-key-gpghome.ZhEDiOTjGF/pubring.gpg6⤵PID:892
-
-
/usr/bin/touchtouch /tmp/apt-key-gpghome.ZhEDiOTjGF/pubring.gpg6⤵
- Writes file to tmp directory
PID:893
-
-
/usr/bin/apt-configapt-config shell TRUSTEDPARTS Dir::Etc::TrustedParts/d6⤵
- Reads runtime system information
PID:894 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures7⤵
- Reads runtime system information
PID:897
-
-
-
/bin/readlinkreadlink -f /etc/apt/trusted.gpg.d/6⤵PID:898
-
-
/usr/bin/findfind /etc/apt/trusted.gpg.d -mindepth 1 -maxdepth 1 "(" -name "*.gpg" -o -name "*.asc" ")"6⤵
- Reads runtime system information
PID:899
-
-
/usr/bin/sortsort6⤵PID:904
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-buster-automatic.gpg6⤵PID:906
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-buster-security-automatic.gpg6⤵PID:908
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-buster-stable.gpg6⤵PID:911
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-jessie-automatic.gpg6⤵PID:914
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-jessie-security-automatic.gpg6⤵PID:916
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-jessie-stable.gpg6⤵PID:918
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-stretch-automatic.gpg6⤵PID:920
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-stretch-security-automatic.gpg6⤵PID:923
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-stretch-stable.gpg6⤵PID:925
-
-
/bin/cpcp -a /tmp/apt-key-gpghome.ZhEDiOTjGF/pubring.gpg /tmp/apt-key-gpghome.ZhEDiOTjGF/pubring.orig.gpg6⤵
- Reads runtime system information
- Writes file to tmp directory
PID:927
-
-
/bin/sedsed -e "s#'#'\"'\"'#g"6⤵
- Reads runtime system information
PID:930
-
-
/bin/sedsed -e "s#'#'\"'\"'#g"6⤵PID:934
-
-
/usr/bin/gpgvgpgv --homedir /tmp/apt-key-gpghome.ZhEDiOTjGF --keyring /tmp/apt-key-gpghome.ZhEDiOTjGF/pubring.gpg --ignore-time-conflict --status-fd 3 /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_Release.gpg /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_Release6⤵
- Reads runtime system information
PID:936
-
-
/usr/bin/gpgconfgpgconf --kill gpg-agent6⤵
- Reads runtime system information
PID:937 -
/usr/bin/gpg-connect-agentgpg-connect-agent --no-autostart KILLAGENT7⤵
- Reads runtime system information
PID:939
-
-
-
/bin/rmrm -rf /tmp/apt-key-gpghome.ZhEDiOTjGF6⤵PID:941
-
-
-
-
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures4⤵
- Reads runtime system information
PID:954
-
-
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures4⤵
- Reads runtime system information
PID:955
-
-
-
-
/usr/bin/sudosudo apt-get install build-essential libssl-dev git unzip -y2⤵
- Reads runtime system information
PID:956 -
/usr/sbin/sendmailsendmail -t3⤵
- Reads runtime system information
PID:959 -
/usr/sbin/exim4/usr/sbin/exim4 -Mc 1skRJN-0000FT-A24⤵
- Reads CPU attributes
PID:966
-
-
-
/usr/sbin/sendmailsendmail -t3⤵PID:962
-
/usr/sbin/exim4/usr/sbin/exim4 -Mc 1skRJN-0000FW-Ab4⤵
- Reads CPU attributes
PID:965
-
-
-
/usr/bin/apt-getapt-get install build-essential libssl-dev git unzip -y3⤵
- Reads runtime system information
- Writes file to tmp directory
PID:963 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures4⤵
- Reads runtime system information
PID:964
-
-
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures4⤵
- Reads runtime system information
PID:967
-
-
/usr/lib/apt/methods/http/usr/lib/apt/methods/http4⤵PID:970
-
-
/usr/lib/apt/methods/http/usr/lib/apt/methods/http4⤵PID:971
-
-
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82B
MD56bb0225a10e34193afb246c62d55cd51
SHA105048b1658074fa5c5cb5b0b71264c83eb1c3894
SHA256da2e463b67e1b77941377afe055ee9594621464be0ee1f8c80991aa8d5a0b220
SHA51290b6ce70cafb77fbeea88afe7e2a5c11f55fdfb4326bf23d278c7d819d02f74553373c3d9d1ab1ecdd6812d0954ffebaac020c89a661fe890257db4d45e90693
-
Filesize
82B
MD56715cb3a979fccbd6e5dcd32cb94614e
SHA128bf00b03b03acdefa2451ae15c5b4920a4f4560
SHA2565291f6e2a6abff7c79ca2001c85ff0ba6f03763f265daccb7aee37101e37d2a3
SHA51259e75998fb454c21f4215b46196bb29c7171bc6d2745ee891e0ef0c2e8d1db08734a9ba818664305f39f446e8566f45dd0355e9316df81625313283fc1cca9b4
-
Filesize
7KB
MD5b53e6ca4ed295fc38621315853f623d0
SHA145a416f014809735ec88854a3540c8e9e89eb102
SHA2566246307cc0130f6bd52510a477960f7c7be431b25979d7e20a88dc2fac58ac93
SHA51230b5d2571840c2319a4af3907afda8ab00cf2879c83aaee1048ca972c0d3ddbf7995a167a31b19c45195b636ab46e73b0534459c6ee79c557fac8bfc01d857ac
-
Filesize
15KB
MD52713b38b3d7345961d8b80f4463483b8
SHA1e6ec76aaebfea6a82f7984b57e07522a20365201
SHA256389d00b5cbd2f69f32065448000a0607aec056e39af958f62e89c4c7e6228248
SHA512ecee7b3045f49f7fa7443a8658602817bb2c8d2d07ae930536e3f2daaa5854903bf339af6c2fd4b02f8627f050ce360d2feddcf40569b58d304cfc459f418978
-
Filesize
18KB
MD5760d3ab91f417958475b9a6342a5b92e
SHA1137a06aea4b5c9e9ca11f0f5f1225da1c275c334
SHA25642b348802c4290af6f9f30f984513f22fdd342ac3561ccb82957561a6b7c291f
SHA5126cefcfae1c95c94b66b46d9242e62ddf7d7c65bd8d9bc9dc4e4c6230443ba33668ed160e1882f48a0b5daf59a46ccca09240ebe666017f059bd55e02fb1f2db6
-
Filesize
23KB
MD5d63fbab9dfb826d53f7b3aaea45dbfb5
SHA159841d8e5423f788292af76d4350a948f4e25f53
SHA256de329f1f48b751a7527f8ce3150452a4282ce69990e9318ab82d5b46b9f751ca
SHA51220118f98c87eb60f0abafd5b4c2ffb4b1faf92777ee7402b98c0f5dc42d492c83f94d6903bdeee006187ac344a57afeaa84b54a973b483ff13e49773071d8198
-
Filesize
47KB
MD5a4dc094481f22304cab5550218e6e4de
SHA1f5886a324c0c026d0168656f23d1d898a0e43bd6
SHA256eef8c4d7d518a986e4f1cfeec729b55369b863ed6b62a23cbe9d88aa56de5391
SHA5120f040c957db3d500ba18315db33cca6eb18f9c80d952710f839833a73dd89b72e2e01178084c17348e312a427a6b9150937199b4912e71dfd1a7e2dd43723f68
-
Filesize
7KB
MD5888b69612f796e76004b6312f7c07c5a
SHA18473a4114b60f4f93150e08c44f6908069943b43
SHA256b84b8be5406657e163fd2333afc00de1b91df4837563bfe330f34e30402456e2
SHA51276e05e08200975efbac0b1ebbc232135d35ad6b16bbe8b0238f01b6f9acf712a2479bf309aa81eb8eacfc3ee823a531b4e9b89cbf1364b1bf84c04abb90122bd
-
Filesize
56KB
MD5fd96c8ce5d0ef18d63bbe9ae17bb2659
SHA176b284743d95d3546df9d85c09712c830a30f614
SHA256ffc8a7a283b61633aac383ddf8f863df3f39ef241a07a4127f51a2495ef674b3
SHA5122486acdfc102f8f8498d8db2f205915115444dd118507369044202dc9a97109b4c738a2faf16c1f5ce5e4452ae0af17ae4691ac3bf5e7c5e2db271c0f40a4cb2
-
Filesize
1KB
MD570274ce622b0cc437ef7f0caddc9d232
SHA1124513a3ad2eb5aafa9be0920681e3bb8625979b
SHA2564055d2ccc7c4be062ed390944548206ece5ed7613eae114b9e53ef15f3905230
SHA512fed0054da258bb4a99e8adac359322d9ecc67caeee872309ea7d9863db6a1ec2a55497100e31538f42b43b9efc997e779e3774c8a0c6b0206254d7252d8699c8
-
Filesize
1.4MB
MD5598e45aaae9b4a1fa15c33e7654689b7
SHA195f84ed88514f6bc5804e275496c1c4fa366fdb6
SHA2564cf18759a5c56c53d5492f221e3c85a887da926fd815e03aed66c1bad5ec8673
SHA512d2b0f2f8057efb4b32108aded883bb5bdfe1da6295bd625ffd27284a3f3fc44a27388f2c8a1ff2b61395445fffa2610e59e70c19645aa78d0ca37d62094a271c
-
Filesize
2.2MB
MD5fb2fb600604f1756adf57ff1e73a6bcb
SHA1cb78fdb5954b2c3f1d3ef2473b1632042195f80a
SHA25685dd4f3d06025a2b0583e09a683c7b64918c3d9efd1375ad16d90c20c4a5b79b
SHA512659c1207704798e681df454c7edfc862254ba1e133381b4bb78984352604c31a0cb64c3294c7f1305c4f8a21550186deabf50c296c39f6589b944829a6716a2c
-
Filesize
26KB
MD505d1cb65f1b07aacba5fd9d52c54887e
SHA10699e48805bf83614ec99817b4aa5402ca8cbe60
SHA256d52c2cc940ff1c9b6d0c0bf81f8557084123ecb151377743fe06c0e13eb64674
SHA512d13561cc6b45ecba687d9f4d243aa6febd3fd0a5cd7e2dba4b5c0545a4fb883d84fc263ce5cf41ce55a1076777c8d8aa7ce74f9a9ad89f9099c7601b9052f657
-
Filesize
825B
MD5200502dbf46964501c816b0229978f80
SHA18446fe54d627a253cb3ed4cb9af3310c02b22891
SHA2568a7f6acb8194a90b93a14149e25920cf03f720767e8e7818b67c5c252fac3fbb
SHA51200b0c7373995124bb35db4a8617f8e322b706b30e04e27286ef34240f5b8842bba45444af0a8f337f35cd7c0857a45a9539b39961463637d7b0376563e969266
-
Filesize
1KB
MD5e17e4c6c7ab7536d15e7fcadd9a2a157
SHA10e7207c0ef316cb1430360b332adb42f329eb51d
SHA256da39c7b703ef081fddee26ac6cdacfd540d62d4348cea2d4ad0d0a92db473592
SHA512ad89617479081be26c597262237ad82b9765eaf9f9e7f73144dbbe98135a1df93f3b8a37388aad5132ea62e4717984d117950968b10498ad5820143d828e5cab
-
Filesize
2KB
MD5701db273d75b08cb227739fb07b5d036
SHA1bfd920241b1076ac4ea72afb37a7dba724e58279
SHA256c7a9d710f37e77914b30578980602867b23c3865e94461fdfbbaf28c14c7dfa0
SHA5124eb50787b3137e9f9b900f8f1bde460531eefa7ba41cd49eb20e63750a9376e6b47002c7bf56775cb823e03c98c2ecca565cdd9a61950d9bd8d25a08da23790a
-
Filesize
3KB
MD5a00161ef77bf0e3dccb87b95744c7912
SHA15a95ed029f2fbfa4d282367162c79f60090028ec
SHA256a941240c35aacbc74f7ff53c56886ef16a695e7b7a16f6325b6667466f71f7d8
SHA512c0d329777bfef5bf7dc88239cdfab73bb9d8b64ce87816ef773aade4c0c83aff7e7a902f9aee5bb3d4b9ef5c894078225d791cc2f96e14599129bfd2fbb8834e
-
Filesize
128B
MD52c70a16bf2d65bbf5a4281c599ec5246
SHA17b6346b3caa697090e6f65d22c113867daddbb65
SHA256efbfcf2bcd519a4b212b5929416002865e11b034b5fba88f94ae383ed90799b2
SHA5122e89cb0b3171e15f1f2820105991d953cdbb91cd00eb0688a7a9fa578efd0f7fdf649f9e0e7697bfd3cb7fdda8429fb1202c89d2b76c53d205da92699ca135f7
-
Filesize
34B
MD5d7d96d63d643a4ce3e408eba7dfcedc5
SHA1c53607f95c5c57beafc1d8266646797a035f76ea
SHA25621db3a59b2d0ce18fb250b787d6e2c85d12919f5fdf1448c8f48207c4083b159
SHA512703a03e54776a6ad9b8adc6c475bbc91c06502618fa3b6f495b1a01a4f6f7aa6fb65dc6ba6885ddc6af961627062f1ce1e1d66688288cbd3bef7754d249fa9b3
-
Filesize
146B
MD59c1f40bfb6b2aca3b1b4a99e0838c7a5
SHA1bb9b3ea738378f1139aa77d96e2b74b2bea7c647
SHA25693fdbe1c69d0f2424f0e8096ab90d63bd5f7c785004e7d550685e6d49c08960e
SHA512fa5a37cf59aa63dc8966eefc9b72fb1e220221effa2ffb8b9412344acb04a425e79314e6c8d722f01d43b4d85a7d98384df9e21cf2823958f76d31d653f81202
-
Filesize
128B
MD5b5f2b6f07400fe7799348cb9c09f4ee2
SHA11903f2e737174a02fdc9268c119d365794b87cdf
SHA256ee853e82af0f6b9f96a1f45bc0061110ba50ff5108672a7b4d096a5acab40901
SHA512f4e01e215e916310b5bfddabafe5c54c7dad3bee255b76066dd057232badaf6798c35be00180558dd1e8831f84061c4627814c4355efc69b14280b1750aaa7cd
-
Filesize
146B
MD5cdf22df2fdc2fbf6538ce5ca565381e7
SHA1bfdefc3d0611477b21fd75ba2fd4adcc1a24a007
SHA256dbc4a0b7d8ad05be9efa854603a492c108b9a59a547b8708b244d070964a01c6
SHA5126e65a98a0d2499e6caacaf6f2263129a7c04aeadcc0be623e2c6ca36dd748c7d71852836f8d434de48c4087df184554c99abd2d20884f0a5f13b47e8245800f0
-
Filesize
915B
MD5e5e0ccca93c942e92d4adaf60472cf72
SHA13fea140fee96bcbbfa23e0b675149970be9694f5
SHA256bf0b783981af9127f2263a6b8a39626176adccdeda870bc7a2a4ad11045f4be9
SHA51241e086e0b7c00ba18cc34b1ba946e6b4c77ec6e2e598c0260d0905d1e494a3268ac30f2d0f522503bbea86bb97b4b173adb40cf38bf2f8c8d4639425a1569c92
-
Filesize
915B
MD5185a6d7d87cdf1250a0d04d522f625ca
SHA1be746e54530cac36d27af9e31683ac80fd8dc74e
SHA25674e5475397674f818491d4620a56ed29d25f7d4cbe8cc4cb9c6fa65010413e75
SHA51203cfdc55728beb73b3a6cdef0e38cf883181be5dcdb3742073f9bb30a7807d0a46ace493e0df77d546a096a6d1d04bb1dfb2b1cc394d23ef36929502a6dcaf55
-
Filesize
915B
MD5cb628dace90b7b02a25fa83ffe94941f
SHA1a9fe56490a693ac831d61d9de5557174d5391ccc
SHA256dd8642f16dd98f7db4f97f519e4bcea03ae228777d101ca4d38ee03e923a11ef
SHA51268589751609999a3be0fee686d458616edd12cfabe88663560c86e5d80eb2c78580df90fe0e4cdef530b9e8e7b04d37b8d1ebe7df25efa3164b57d46bf606d14
-
Filesize
288B
MD5d4e466ba02cd16a7bd21a491cf7fe62a
SHA1c769bbf5edcd660dd3edf234833d2f4ab3ac126f
SHA256ee1682ef930716aff739c38d073011d8b39adb9c5b1c3cb55ee50c5fa58d9e03
SHA51275a38a6672381839072c537c7d3bb69d3c4123bf47313237afea3b3c009f9ac933730a7c8825770e9654f5ffa6254200c7d2562e413c6e7d1fa56fef86662c95
-
Filesize
89B
MD5c3f8d4799c07c526a53678b4c2714a29
SHA1a5cb0e84f71f8523ec96a6fa55e5ae8f796eaf01
SHA25682a887e6aff7afa7764d871f6ed039b2cb73c825bf87cf7cb81f92b12e71f68e
SHA512503dff5838d7e7cdc02556bac84ec8dcc4adfd3a5d424163c131277a6d58b4f674fd9193c44153d775ccabc0fb45e5e920eada9f24fe353c63ca44aa54699f21
-
Filesize
288B
MD5497327c9e52430f5c07da7628e8dfebf
SHA174987b458a47b06a53b9f86f0b99077cfff961b6
SHA256103a112974a824fb2fdfd77dfda16d0837b0e2f644902bbbbd37b0763be40812
SHA512f810c9d4a52328f90626c2463f0e99434c20afd4387ded79add37fe29b964e6f80b3920afd50842b4867c973021d41fc70dd28c2f36ad8c17c7a18aadd19abbb
-
Filesize
89B
MD51c58ef55a54ae50b982e9b383b740c7c
SHA115d99868e15588f167ff706ac2f0439a5bae2f63
SHA256d6c63ba0cdbfe2f8ca2cf3bdecf14399d83b7b934fceaf6d8cfa4a2616752ad7
SHA5128c929aa3db267853b4403b571a605f8513df6301bb817e87cb16ad21fab19c711e64089847a647f1f93c9a374219484b048c5bb47500138d714bb2546690be40
-
Filesize
89B
MD5fe7611953d668ba59b5028e8ccdc8f9f
SHA1ba198a8d6304d598813a7a60e1fe9995a0a468b7
SHA2568fbd51d2b0602899244c7cc8a8572ff0e2686b41bb8e1b02d66205f0d701b430
SHA512e19519f96bf5abe1976c88a2c8810efd22dc4652bb3eb091e1776c9ed856fc0ca829ebba40e91b0cede5a71d9219a80a9f047d76f78da69c20312c1e88fef235
-
Filesize
288B
MD56edfe6456b3d0da4954d1fd75eb67f63
SHA15c0e6a95650b85312d3238840d898954d094a6a3
SHA256e918da635578afcc1e21e8f20962f05c9f1aa4b390e49f6c63c5036911273498
SHA5124334063d8733e9e3da609e7a041cca973536644ebf1cab5f295025d15d3e92e7e33bc551b15ad8676324db78d2c653cf97469f6e97c25340b1e5df99959443b2
-
Filesize
89B
MD5e7c09cf408614ec21be1585cba32cfcf
SHA1ecb55af9db73540a2e987ce6dd4ed1261a68c97a
SHA25678a0ce1ae55c899907838420cde83452ba592416c9baf7c98b494f7f1e574d55
SHA512f16af526d9b00240fe112204d24a77a1ee9cf9d5ad69cb17bcafad648494f47fdcedd8009b95c2a41187a91ab7a4940eb65a48d33f5fb47da0c603268f2bba65
-
Filesize
288B
MD5ca052f8d0802775252139a1d6826d17f
SHA11de239282303313d1df0961dce95176662361686
SHA2564dca7091d83439e67d669dca52c0ca26c73d00adfb760332582ccfb919f3a208
SHA512ba9a21b34842605b9e84517047e76d1da7ef1c3f399ff7e508759840cf70d2dbaccf3b00acfa0703de7d2461b6b2aa66f7bac54f2521cd0193671c4db71d3a01