Analysis Overview
SHA256
628a4a3d5b1f134676431472700ee2240630e63e0732d3542f5c99163628f9b6
Threat Level: Known bad
The file 628a4a3d5b1f134676431472700ee2240630e63e0732d3542f5c99163628f9b6.elf was found to be: Known bad.
Malicious Activity Summary
Kaiji
Kaiji family
Executes dropped EXE
Creates/modifies Cron job
Enumerates kernel/hardware configuration
Reads runtime system information
Command and Scripting Interpreter: Unix Shell
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-11-03 13:38
Signatures
Kaiji
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Kaiji family
Analysis: behavioral1
Detonation Overview
Submitted
2024-11-03 13:38
Reported
2024-11-03 13:41
Platform
debian9-mipsel-20240418-en
Max time kernel
149s
Max time network
151s
Command Line
Signatures
Kaiji
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Kaiji family
Executes dropped EXE
| Description | Indicator | Process | Target |
| N/A | /etc/32676 | /etc/32676 | N/A |
| N/A | /etc/opt.services.cfg | /etc/opt.services.cfg | N/A |
| N/A | /etc/opt.services.cfg | /etc/opt.services.cfg | N/A |
| N/A | /etc/opt.services.cfg | /etc/opt.services.cfg | N/A |
| N/A | /etc/opt.services.cfg | /etc/opt.services.cfg | N/A |
Creates/modifies Cron job
| Description | Indicator | Process | Target |
| File opened for modification | /etc/crontab | /bin/sh | N/A |
Command and Scripting Interpreter: Unix Shell
| Description | Indicator | Process | Target |
| N/A | N/A | /bin/sh | N/A |
| N/A | N/A | /bin/sh | N/A |
Enumerates kernel/hardware configuration
| Description | Indicator | Process | Target |
| File opened for reading | /sys/kernel/mm/transparent_hugepage/hpage_pmd_size | /etc/opt.services.cfg | N/A |
| File opened for reading | /sys/kernel/mm/transparent_hugepage/hpage_pmd_size | /etc/opt.services.cfg | N/A |
| File opened for reading | /sys/kernel/mm/transparent_hugepage/hpage_pmd_size | /tmp/628a4a3d5b1f134676431472700ee2240630e63e0732d3542f5c99163628f9b6.elf | N/A |
| File opened for reading | /sys/fs/kdbus/0-system/bus | /bin/systemctl | N/A |
| File opened for reading | /sys/fs/kdbus/0-system/bus | /bin/systemctl | N/A |
| File opened for reading | /sys/fs/kdbus/0-system/bus | /bin/systemctl | N/A |
| File opened for reading | /sys/fs/kdbus/0-system/bus | /bin/systemctl | N/A |
| File opened for reading | /sys/kernel/mm/transparent_hugepage/hpage_pmd_size | /etc/opt.services.cfg | N/A |
| File opened for reading | /sys/kernel/mm/transparent_hugepage/hpage_pmd_size | /etc/opt.services.cfg | N/A |
| File opened for reading | /sys/kernel/mm/transparent_hugepage/hpage_pmd_size | /tmp/628a4a3d5b1f134676431472700ee2240630e63e0732d3542f5c99163628f9b6.elf | N/A |
| File opened for reading | /sys/fs/kdbus/0-system/bus | /bin/systemctl | N/A |
| File opened for reading | /sys/fs/kdbus/0-system/bus | /bin/systemctl | N/A |
| File opened for reading | /sys/fs/kdbus/0-system/bus | /bin/systemctl | N/A |
Reads runtime system information
| Description | Indicator | Process | Target |
| File opened for reading | /proc/cmdline | /bin/systemctl | N/A |
| File opened for reading | /proc/self/stat | /bin/systemctl | N/A |
| File opened for reading | /proc/filesystems | /bin/systemctl | N/A |
| File opened for reading | /proc/1/environ | /bin/systemctl | N/A |
| File opened for reading | /proc/cmdline | /bin/systemctl | N/A |
| File opened for reading | /proc/filesystems | /bin/systemctl | N/A |
| File opened for reading | /proc/self/stat | /bin/systemctl | N/A |
| File opened for reading | /proc/cmdline | /bin/systemctl | N/A |
| File opened for reading | /proc/filesystems | /bin/sed | N/A |
| File opened for reading | /proc/1/environ | /bin/systemctl | N/A |
| File opened for reading | /proc/filesystems | /bin/systemctl | N/A |
| File opened for reading | /proc/self/stat | /bin/systemctl | N/A |
| File opened for reading | /proc/cmdline | /bin/systemctl | N/A |
| File opened for reading | /proc/self/stat | /bin/systemctl | N/A |
| File opened for reading | /proc/filesystems | /bin/sed | N/A |
| File opened for reading | /proc/cmdline | /bin/systemctl | N/A |
| File opened for reading | /proc/self/stat | /bin/systemctl | N/A |
| File opened for reading | /proc/filesystems | /bin/mount | N/A |
| File opened for reading | /proc/filesystems | /bin/systemctl | N/A |
| File opened for reading | /proc/1/environ | /bin/systemctl | N/A |
| File opened for reading | /proc/1/environ | /bin/systemctl | N/A |
| File opened for reading | /proc/filesystems | /bin/systemctl | N/A |
| File opened for reading | /proc/1/environ | /bin/systemctl | N/A |
| File opened for reading | /proc/self/stat | /bin/systemctl | N/A |
| File opened for reading | /proc/cmdline | /bin/systemctl | N/A |
| File opened for reading | /proc/1/environ | /bin/systemctl | N/A |
| File opened for reading | /proc/self/stat | /bin/systemctl | N/A |
| File opened for reading | /proc/1/environ | /bin/systemctl | N/A |
| File opened for reading | /proc/filesystems | /bin/systemctl | N/A |
| File opened for reading | /proc/cmdline | /bin/systemctl | N/A |
| File opened for reading | /proc/filesystems | /bin/systemctl | N/A |
Processes
/tmp/628a4a3d5b1f134676431472700ee2240630e63e0732d3542f5c99163628f9b6.elf
[/tmp/628a4a3d5b1f134676431472700ee2240630e63e0732d3542f5c99163628f9b6.elf]
/tmp/628a4a3d5b1f134676431472700ee2240630e63e0732d3542f5c99163628f9b6.elf
[/tmp/628a4a3d5b1f134676431472700ee2240630e63e0732d3542f5c99163628f9b6.elf ]
/bin/sh
[/bin/sh -c /etc/32676&]
/etc/32676
[/etc/32676]
/usr/sbin/service
[service crond start]
/bin/sleep
[sleep 60]
/usr/bin/basename
[basename /usr/sbin/service]
/usr/bin/basename
[basename /usr/sbin/service]
/bin/systemctl
[systemctl --quiet is-active multi-user.target]
/bin/systemctl
[systemctl list-unit-files --full --type=socket]
/bin/sed
[sed -ne s/\.socket\s*[a-z]*\s*$/.socket/p]
/usr/local/sbin/systemctl
[systemctl --job-mode=ignore-dependencies start crond.service]
/usr/local/bin/systemctl
[systemctl --job-mode=ignore-dependencies start crond.service]
/usr/sbin/systemctl
[systemctl --job-mode=ignore-dependencies start crond.service]
/usr/bin/systemctl
[systemctl --job-mode=ignore-dependencies start crond.service]
/sbin/systemctl
[systemctl --job-mode=ignore-dependencies start crond.service]
/bin/systemctl
[systemctl --job-mode=ignore-dependencies start crond.service]
/bin/sh
[/bin/sh -c echo "*/1 * * * * root /.mod " >> /etc/crontab]
/usr/bin/renice
[renice -20 722]
/bin/mount
[mount -o bind /tmp/ /proc/722]
/usr/sbin/service
[service cron start]
/usr/bin/basename
[basename /usr/sbin/service]
/usr/bin/basename
[basename /usr/sbin/service]
/bin/systemctl
[systemctl --quiet is-active multi-user.target]
/bin/sed
[sed -ne s/\.socket\s*[a-z]*\s*$/.socket/p]
/bin/systemctl
[systemctl list-unit-files --full --type=socket]
/usr/local/sbin/systemctl
[systemctl --job-mode=ignore-dependencies start cron.service]
/usr/local/bin/systemctl
[systemctl --job-mode=ignore-dependencies start cron.service]
/usr/sbin/systemctl
[systemctl --job-mode=ignore-dependencies start cron.service]
/usr/bin/systemctl
[systemctl --job-mode=ignore-dependencies start cron.service]
/sbin/systemctl
[systemctl --job-mode=ignore-dependencies start cron.service]
/bin/systemctl
[systemctl --job-mode=ignore-dependencies start cron.service]
/bin/systemctl
[systemctl start crond.service]
/etc/opt.services.cfg
[/etc/opt.services.cfg]
/etc/opt.services.cfg
[/etc/opt.services.cfg ]
/bin/sleep
[sleep 60]
/etc/opt.services.cfg
[/etc/opt.services.cfg]
/etc/opt.services.cfg
[/etc/opt.services.cfg ]
/bin/sleep
[sleep 60]
Network
| Country | Destination | Domain | Proto |
| US | 1.1.1.1:53 | www.google.com | udp |
| US | 1.1.1.1:53 | www.google.com | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
| US | 1.1.1.1:53 | ss.us-tv.top | udp |
Files
/etc/.walk
| MD5 | 96f5f469ad0e1108eede96fa9f1c4794 |
| SHA1 | 6a764218b4ce28f06892bf7efe7d3ffe21b2f77d |
| SHA256 | f31bf9e8af9cd69e039f460c98339aa87d7ccb125b6a96a818431d6a5ee438a4 |
| SHA512 | 64def3bcedecb894f954793f0fd5c1a217dac2f036c38a42d30234122763aa6c010bef1997243683f81a88d7ec08f08bb3a54ca28535b4bd580d128dca7a3988 |
/etc/opt.services.cfg
| MD5 | 2e553ae934700ad207d20da88ada397d |
| SHA1 | 83701c9fee81fbe26834a27993c1e683c1b100b5 |
| SHA256 | 628a4a3d5b1f134676431472700ee2240630e63e0732d3542f5c99163628f9b6 |
| SHA512 | 9d44c2aad90ee0a7bf203c01c190593f0c0f8316a277fc020b441e99234902106870e9df50a2001f0fb20cc349ecf1a27a2617c68424648d2ec1f121ee37523d |
/etc/32676
| MD5 | 47684525bfdf26f49fd1cf742b17c015 |
| SHA1 | c4ab14ba22420ff9acadfc698a38d0cd99e9fbfa |
| SHA256 | b7ce294613dd2c237a4a50548bfcd5c14d166107f2d2e965499bc78695300d5b |
| SHA512 | 948f9c519ae9afe1c821c5d58da2e584e50356dabef597ccd408853a9038560b9fb1c5894900e2725b48977ffd49d18a439436bb4946e2164ac9fcf2a8637621 |
/.mod
| MD5 | f5a3713282e43c200f30342f5ff5e2ea |
| SHA1 | 2b2ce1a207e2b691a074c6f78f71c4785aae426a |
| SHA256 | 6ab64e727571458d4884fb2fe82c27c467db0699cb8f648b3f0217c35d2b7511 |
| SHA512 | 5bcb8cd360409147a486755f90e0cdd97183af02ce8de5135b7c6a8a010deb9ef12dcd5ee9a2a8fd2e159347f68e72d6b7fd75e943b4fcd928d7a74b97476013 |
/usr/bin/include/find
| MD5 | bb4edcad76062a76284c69f5fe4e50ea |
| SHA1 | 86055be4ce94fa3cffa9924e7b511e95df636606 |
| SHA256 | b7e25e128c130473f33c5135c78f591f35d7c4a7c5e1246c12eaa298db453474 |
| SHA512 | 254acc62d2f83f5a4686adcf3fe6ad4697f392c288c5baa323830bb6f2466c303fd7bc9f237e98b2ca76bc3abb6b4c264e042be8c4291ae5cc21b2189d996521 |
/etc/profile.d/gateway.sh
| MD5 | 37b6ee30182cc160ca264b462b4c9c92 |
| SHA1 | f36aedf44dae78c30d1a6dba8f2c105888efd3a5 |
| SHA256 | 32e48764684278116d72b924ad0fac11720d7ea39ea9e13ea87f0028971a5b9e |
| SHA512 | 3a5a8a686e9468a19b5a0973654d83ede07ae3543844697d434d8db512c74b72d7f39f7a86bd3c26b42f0115e7d837116139bbd03f55f0a9585dca0500ffad28 |