Analysis
- max time kernel
149s - max time network
149s - platform
ubuntu-22.04_amd64 - resource
ubuntu2204-amd64-20240729-en - resource tags
arch:amd64arch:i386image:ubuntu2204-amd64-20240729-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system - submitted
08/11/2024, 01:45
Behavioral task
behavioral1
Sample
7d17800118eb9c9d811ef9cc42985382581291eabc3d0a01ab56fb28bbb6dd81.elf
Resource
ubuntu2204-amd64-20240729-en
4 signatures
150 seconds
General
- Target 7d17800118eb9c9d811ef9cc42985382581291eabc3d0a01ab56fb28bbb6dd81.elf
- Size 50KB
- Sample241108-b6c7gsself
- SHA256 7d17800118eb9c9d811ef9cc42985382581291eabc3d0a01ab56fb28bbb6dd81
- MD5 cccd69fac91b6f43a67920e4295d0a97
- SHA1 ade2a1c902b06bf9ccf63198339edf1325355f54
- SHA512 32c6c144c88443630eff289bbc8125eac3218283f8712ab4e6e8a7a0e3bc6b8c87663bc436fc7565ff3f8f2d7305dbafcf26a4dcfea9f757af0ec9bb0e654912
- SSDEEP 1536:bq7hxL+UuWf2GM43sr861jj/h/2Nznouy8DM5/f9cF3:bSyUf2K3sr1j8LoutDMZfE3
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Enumerates running processes
Discovers information about currently running processes on the system
- Reads CPU attributes 1 TTPs 64 IoCs
description ioc Process File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill -
description ioc Process File opened for reading /proc/20/cmdline pkill File opened for reading /proc/1238/cmdline pkill File opened for reading /proc/774/cmdline pkill File opened for reading /proc/811/cmdline pkill File opened for reading /proc/204/status pkill File opened for reading /proc/991/cmdline pkill File opened for reading /proc/9/status pkill File opened for reading /proc/1198/cmdline pkill File opened for reading /proc/98/status pkill File opened for reading /proc/741/status pkill File opened for reading /proc/764/cmdline pkill File opened for reading /proc/1/status pkill File opened for reading /proc/589/status pkill File opened for reading /proc/1079/cmdline pkill File opened for reading /proc/413/status pkill File opened for reading /proc/616/status pkill File opened for reading /proc/1190/cmdline pkill File opened for reading /proc/587/status pkill File opened for reading /proc/1159/status pkill File opened for reading /proc/935/cmdline pkill File opened for reading /proc/1167/cmdline pkill File opened for reading /proc/9/cmdline pkill File opened for reading /proc/1094/status pkill File opened for reading /proc/409/status pkill File opened for reading /proc/3/cmdline pkill File opened for reading /proc/1052/cmdline pkill File opened for reading /proc/1238/status pkill File opened for reading /proc/1061/status pkill File opened for reading /proc/1376/cmdline pkill File opened for reading /proc/585/cmdline pkill File opened for reading /proc/451/cmdline pkill File opened for reading /proc/110/status pkill File opened for reading /proc/17/status pkill File opened for reading /proc/807/cmdline pkill File opened for reading /proc/1248/status pkill File opened for reading /proc/1140/cmdline pkill File opened for reading /proc/7/status pkill File opened for reading /proc/788/cmdline pkill File opened for reading /proc/451/status pkill File opened for reading /proc/204/cmdline pkill File opened for reading /proc/85/cmdline pkill File opened for reading /proc/991/status pkill File opened for reading /proc/210/status pkill File opened for reading /proc/1053/cmdline pkill File opened for reading /proc/214/status pkill File opened for reading /proc/522/status pkill File opened for reading /proc/1158/cmdline pkill File opened for reading /proc/612/status pkill File opened for reading /proc/214/cmdline pkill File opened for reading /proc/965/cmdline pkill File opened for reading /proc/314/status pkill File opened for reading /proc/89/cmdline pkill File opened for reading /proc/1083/status pkill File opened for reading /proc/686/status pkill File opened for reading /proc/119/status pkill File opened for reading /proc/263/status pkill File opened for reading /proc/1079/cmdline pkill File opened for reading /proc/4/cmdline pkill File opened for reading /proc/1334/cmdline pkill File opened for reading /proc/1551/cmdline pkill File opened for reading /proc/163/cmdline pkill File opened for reading /proc/1427/cmdline pkill File opened for reading /proc/25/status pkill File opened for reading /proc/12/cmdline pkill - System Network Configuration Discovery 1 TTPs 2 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 1728 pkill 1727 sh
Processes
-
/tmp/7d17800118eb9c9d811ef9cc42985382581291eabc3d0a01ab56fb28bbb6dd81.elf/tmp/7d17800118eb9c9d811ef9cc42985382581291eabc3d0a01ab56fb28bbb6dd81.elf1⤵PID:1563
-
/bin/shsh -c "pkill -9 902i13 || busybox pkill -9 902i13"2⤵PID:1567
-
/usr/bin/pkillpkill -9 902i133⤵
- Reads CPU attributes
- Reads runtime system information
PID:1568
-
-
-
/bin/shsh -c "pkill -9 BzSxLxBxeY || busybox pkill -9 BzSxLxBxeY"2⤵PID:1579
-
/usr/bin/pkillpkill -9 BzSxLxBxeY3⤵
- Reads runtime system information
PID:1580
-
-
-
/bin/shsh -c "pkill -9 HOHO-LUGO7 || busybox pkill -9 HOHO-LUGO7"2⤵PID:1581
-
/usr/bin/pkillpkill -9 HOHO-LUGO73⤵PID:1582
-
-
-
/bin/shsh -c "pkill -9 HOHO-U79OL || busybox pkill -9 HOHO-U79OL"2⤵PID:1583
-
/usr/bin/pkillpkill -9 HOHO-U79OL3⤵PID:1584
-
-
-
/bin/shsh -c "pkill -9 JuYfouyf87 || busybox pkill -9 JuYfouyf87"2⤵PID:1585
-
/usr/bin/pkillpkill -9 JuYfouyf873⤵
- Reads runtime system information
PID:1586
-
-
-
/bin/shsh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"2⤵PID:1587
-
/usr/bin/pkillpkill -9 NiGGeR69xd3⤵
- Reads CPU attributes
PID:1588
-
-
-
/bin/shsh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"2⤵PID:1589
-
/usr/bin/pkillpkill -9 SO190Ij1X3⤵
- Reads CPU attributes
PID:1590
-
-
-
/bin/shsh -c "pkill -9 LOLKIKEEEDDE || busybox pkill -9 LOLKIKEEEDDE"2⤵PID:1591
-
/usr/bin/pkillpkill -9 LOLKIKEEEDDE3⤵
- Reads CPU attributes
PID:1592
-
-
-
/bin/shsh -c "pkill -9 ekjheory98e || busybox pkill -9 ekjheory98e"2⤵PID:1593
-
/usr/bin/pkillpkill -9 ekjheory98e3⤵
- Reads CPU attributes
PID:1594
-
-
-
/bin/shsh -c "pkill -9 scansh4 || busybox pkill -9 scansh4"2⤵PID:1595
-
/usr/bin/pkillpkill -9 scansh43⤵PID:1596
-
-
-
/bin/shsh -c "pkill -9 MDMA || busybox pkill -9 MDMA"2⤵PID:1597
-
/usr/bin/pkillpkill -9 MDMA3⤵
- Reads runtime system information
PID:1598
-
-
-
/bin/shsh -c "pkill -9 fdevalvex || busybox pkill -9 fdevalvex"2⤵PID:1599
-
/usr/bin/pkillpkill -9 fdevalvex3⤵
- Reads CPU attributes
PID:1600
-
-
-
/bin/shsh -c "pkill -9 scanspc || busybox pkill -9 scanspc"2⤵PID:1601
-
/usr/bin/pkillpkill -9 scanspc3⤵
- Reads runtime system information
PID:1602
-
-
-
/bin/shsh -c "pkill -9 MELTEDNINJAREALZ || busybox pkill -9 MELTEDNINJAREALZ"2⤵PID:1603
-
/usr/bin/pkillpkill -9 MELTEDNINJAREALZ3⤵
- Reads runtime system information
PID:1604
-
-
-
/bin/shsh -c "pkill -9 flexsonskids || busybox pkill -9 flexsonskids"2⤵PID:1605
-
/usr/bin/pkillpkill -9 flexsonskids3⤵
- Reads CPU attributes
PID:1606
-
-
-
/bin/shsh -c "pkill -9 scanx86 || busybox pkill -9 scanx86"2⤵PID:1607
-
/usr/bin/pkillpkill -9 scanx863⤵
- Reads CPU attributes
PID:1608
-
-
-
/bin/shsh -c "pkill -9 MISAKI-U79OL || busybox pkill -9 MISAKI-U79OL"2⤵PID:1609
-
/usr/bin/pkillpkill -9 MISAKI-U79OL3⤵PID:1610
-
-
-
/bin/shsh -c "pkill -9 foAxi102kxe || busybox pkill -9 foAxi102kxe"2⤵PID:1611
-
/usr/bin/pkillpkill -9 foAxi102kxe3⤵PID:1612
-
-
-
/bin/shsh -c "pkill -9 swodjwodjwoj || busybox pkill -9 swodjwodjwoj"2⤵PID:1613
-
/usr/bin/pkillpkill -9 swodjwodjwoj3⤵PID:1614
-
-
-
/bin/shsh -c "pkill -9 MmKiy7f87l || busybox pkill -9 MmKiy7f87l"2⤵PID:1615
-
/usr/bin/pkillpkill -9 MmKiy7f87l3⤵
- Reads runtime system information
PID:1616
-
-
-
/bin/shsh -c "pkill -9 freecookiex86 || busybox pkill -9 freecookiex86"2⤵PID:1617
-
/usr/bin/pkillpkill -9 freecookiex863⤵
- Reads runtime system information
PID:1618
-
-
-
/bin/shsh -c "pkill -9 sysgpu || busybox pkill -9 sysgpu"2⤵PID:1619
-
/usr/bin/pkillpkill -9 sysgpu3⤵
- Reads CPU attributes
- Reads runtime system information
PID:1620
-
-
-
/bin/shsh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"2⤵PID:1621
-
/usr/bin/pkillpkill -9 NiGGeR69xd3⤵
- Reads CPU attributes
PID:1622
-
-
-
/bin/shsh -c "pkill -9 frgege || busybox pkill -9 frgege"2⤵PID:1623
-
/usr/bin/pkillpkill -9 frgege3⤵
- Reads runtime system information
PID:1624
-
-
-
/bin/shsh -c "pkill -9 sysupdater || busybox pkill -9 sysupdater"2⤵PID:1625
-
/usr/bin/pkillpkill -9 sysupdater3⤵PID:1626
-
-
-
/bin/shsh -c "pkill -9 0DnAzepd || busybox pkill -9 0DnAzepd"2⤵PID:1627
-
/usr/bin/pkillpkill -9 0DnAzepd3⤵
- Reads CPU attributes
PID:1628
-
-
-
/bin/shsh -c "pkill -9 NiGGeRD0nks69 || busybox pkill -9 NiGGeRD0nks69"2⤵PID:1629
-
/usr/bin/pkillpkill -9 NiGGeRD0nks693⤵
- Reads CPU attributes
- Reads runtime system information
PID:1630
-
-
-
/bin/shsh -c "pkill -9 frgreu || busybox pkill -9 frgreu"2⤵PID:1631
-
/usr/bin/pkillpkill -9 frgreu3⤵
- Reads CPU attributes
PID:1632
-
-
-
/bin/shsh -c "pkill -9 telnetd || busybox pkill -9 telnetd"2⤵PID:1633
-
/usr/bin/pkillpkill -9 telnetd3⤵
- Reads CPU attributes
- Reads runtime system information
PID:1634
-
-
-
/bin/shsh -c "pkill -9 0x766f6964 || busybox pkill -9 0x766f6964"2⤵PID:1635
-
/usr/bin/pkillpkill -9 0x766f69643⤵
- Reads runtime system information
PID:1636
-
-
-
/bin/shsh -c "pkill -9 NiGGeRd0nks1337 || busybox pkill -9 NiGGeRd0nks1337"2⤵PID:1639
-
/usr/bin/pkillpkill -9 NiGGeRd0nks13373⤵PID:1640
-
-
-
/bin/shsh -c "pkill -9 gaft || busybox pkill -9 gaft"2⤵PID:1641
-
/usr/bin/pkillpkill -9 gaft3⤵
- Reads CPU attributes
PID:1642
-
-
-
/bin/shsh -c "pkill -9 urasgbsigboa || busybox pkill -9 urasgbsigboa"2⤵PID:1643
-
/usr/bin/pkillpkill -9 urasgbsigboa3⤵PID:1644
-
-
-
/bin/shsh -c "pkill -9 120i3UI49 || busybox pkill -9 120i3UI49"2⤵PID:1645
-
/usr/bin/pkillpkill -9 120i3UI493⤵PID:1646
-
-
-
/bin/shsh -c "pkill -9 OaF3 || busybox pkill -9 OaF3"2⤵PID:1647
-
/usr/bin/pkillpkill -9 OaF33⤵
- Reads runtime system information
PID:1648
-
-
-
/bin/shsh -c "pkill -9 geae || busybox pkill -9 geae"2⤵PID:1649
-
/usr/bin/pkillpkill -9 geae3⤵
- Reads CPU attributes
PID:1650
-
-
-
/bin/shsh -c "pkill -9 vaiolmao || busybox pkill -9 vaiolmao"2⤵PID:1651
-
/usr/bin/pkillpkill -9 vaiolmao3⤵
- Reads runtime system information
PID:1652
-
-
-
/bin/shsh -c "pkill -9 123123a || busybox pkill -9 123123a"2⤵PID:1653
-
/usr/bin/pkillpkill -9 123123a3⤵
- Reads runtime system information
PID:1654
-
-
-
/bin/shsh -c "pkill -9 Ofurain0n4H34D || busybox pkill -9 Ofurain0n4H34D"2⤵PID:1655
-
/usr/bin/pkillpkill -9 Ofurain0n4H34D3⤵
- Reads CPU attributes
PID:1656
-
-
-
/bin/shsh -c "pkill -9 ggTrex || busybox pkill -9 ggTrex"2⤵PID:1657
-
/usr/bin/pkillpkill -9 ggTrex3⤵
- Reads CPU attributes
PID:1658
-
-
-
/bin/shsh -c "pkill -9 wasads || busybox pkill -9 wasads"2⤵PID:1659
-
/usr/bin/pkillpkill -9 wasads3⤵PID:1660
-
-
-
/bin/shsh -c "pkill -9 1293194hjXD || busybox pkill -9 1293194hjXD"2⤵PID:1661
-
/usr/bin/pkillpkill -9 1293194hjXD3⤵PID:1662
-
-
-
/bin/shsh -c "pkill -9 OthLaLosn || busybox pkill -9 OthLaLosn"2⤵PID:1663
-
/usr/bin/pkillpkill -9 OthLaLosn3⤵
- Reads runtime system information
PID:1664
-
-
-
/bin/shsh -c "pkill -9 ggt || busybox pkill -9 ggt"2⤵PID:1665
-
/usr/bin/pkillpkill -9 ggt3⤵
- Reads CPU attributes
- Reads runtime system information
PID:1666
-
-
-
/bin/shsh -c "pkill -9 wget-log || busybox pkill -9 wget-log"2⤵PID:1667
-
/usr/bin/pkillpkill -9 wget-log3⤵PID:1668
-
-
-
/bin/shsh -c "pkill -9 1337SoraLOADER || busybox pkill -9 1337SoraLOADER"2⤵PID:1669
-
/usr/bin/pkillpkill -9 1337SoraLOADER3⤵
- Reads CPU attributes
PID:1670
-
-
-
/bin/shsh -c "pkill -9 SAIAKINA || busybox pkill -9 SAIAKINA"2⤵PID:1671
-
/usr/bin/pkillpkill -9 SAIAKINA3⤵
- Reads CPU attributes
- Reads runtime system information
PID:1672
-
-
-
/bin/shsh -c "pkill -9 ggtq || busybox pkill -9 ggtq"2⤵PID:1673
-
/usr/bin/pkillpkill -9 ggtq3⤵
- Reads runtime system information
PID:1674
-
-
-
/bin/shsh -c "pkill -9 1378bfp919GRB1Q2 || busybox pkill -9 1378bfp919GRB1Q2"2⤵PID:1675
-
/usr/bin/pkillpkill -9 1378bfp919GRB1Q23⤵
- Reads runtime system information
PID:1676
-
-
-
/bin/shsh -c "pkill -9 SAIAKUSO || busybox pkill -9 SAIAKUSO"2⤵PID:1677
-
/usr/bin/pkillpkill -9 SAIAKUSO3⤵PID:1678
-
-
-
/bin/shsh -c "pkill -9 ggtr || busybox pkill -9 ggtr"2⤵PID:1679
-
/usr/bin/pkillpkill -9 ggtr3⤵
- Reads CPU attributes
PID:1680
-
-
-
/bin/shsh -c "pkill -9 14Fa || busybox pkill -9 14Fa"2⤵PID:1681
-
/usr/bin/pkillpkill -9 14Fa3⤵
- Reads CPU attributes
- Reads runtime system information
PID:1682
-
-
-
/bin/shsh -c "pkill -9 SEXSLAVE1337 || busybox pkill -9 SEXSLAVE1337"2⤵PID:1683
-
/usr/bin/pkillpkill -9 SEXSLAVE13373⤵
- Reads CPU attributes
PID:1684
-
-
-
/bin/shsh -c "pkill -9 ggtt || busybox pkill -9 ggtt"2⤵PID:1685
-
/usr/bin/pkillpkill -9 ggtt3⤵
- Reads runtime system information
PID:1686
-
-
-
/bin/shsh -c "pkill -9 1902a3u912u3u4 || busybox pkill -9 1902a3u912u3u4"2⤵PID:1687
-
/usr/bin/pkillpkill -9 1902a3u912u3u43⤵
- Reads runtime system information
PID:1688
-
-
-
/bin/shsh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"2⤵PID:1689
-
/usr/bin/pkillpkill -9 SO190Ij1X3⤵PID:1690
-
-
-
/bin/shsh -c "pkill -9 haetrghbr || busybox pkill -9 haetrghbr"2⤵PID:1691
-
/usr/bin/pkillpkill -9 haetrghbr3⤵
- Reads CPU attributes
PID:1692
-
-
-
/bin/shsh -c "pkill -9 19ju3d || busybox pkill -9 19ju3d"2⤵PID:1693
-
/usr/bin/pkillpkill -9 19ju3d3⤵PID:1694
-
-
-
/bin/shsh -c "pkill -9 SORAojkf120 || busybox pkill -9 SORAojkf120"2⤵PID:1695
-
/usr/bin/pkillpkill -9 SORAojkf1203⤵
- Reads CPU attributes
PID:1696
-
-
-
/bin/shsh -c "pkill -9 hehahejeje92 || busybox pkill -9 hehahejeje92"2⤵PID:1697
-
/usr/bin/pkillpkill -9 hehahejeje923⤵PID:1698
-
-
-
/bin/shsh -c "pkill -9 2U2JDJA901F91 || busybox pkill -9 2U2JDJA901F91"2⤵PID:1699
-
/usr/bin/pkillpkill -9 2U2JDJA901F913⤵PID:1700
-
-
-
/bin/shsh -c "pkill -9 SlaVLav12 || busybox pkill -9 SlaVLav12"2⤵PID:1701
-
/usr/bin/pkillpkill -9 SlaVLav123⤵
- Reads CPU attributes
- Reads runtime system information
PID:1702
-
-
-
/bin/shsh -c "pkill -9 helpmedaddthhhhh || busybox pkill -9 helpmedaddthhhhh"2⤵PID:1703
-
/usr/bin/pkillpkill -9 helpmedaddthhhhh3⤵
- Reads runtime system information
PID:1704
-
-
-
/bin/shsh -c "pkill -9 2wgg9qphbq || busybox pkill -9 2wgg9qphbq"2⤵PID:1705
-
/usr/bin/pkillpkill -9 2wgg9qphbq3⤵PID:1706
-
-
-
/bin/shsh -c "pkill -9 Slav3Th3seD3vices || busybox pkill -9 Slav3Th3seD3vices"2⤵PID:1707
-
/usr/bin/pkillpkill -9 Slav3Th3seD3vices3⤵PID:1708
-
-
-
/bin/shsh -c "pkill -9 hzSmYZjYMQ || busybox pkill -9 hzSmYZjYMQ"2⤵PID:1709
-
/usr/bin/pkillpkill -9 hzSmYZjYMQ3⤵
- Reads CPU attributes
PID:1710
-
-
-
/bin/shsh -c "pkill -9 5Gbf || busybox pkill -9 5Gbf"2⤵PID:1711
-
/usr/bin/pkillpkill -9 5Gbf3⤵
- Reads CPU attributes
- Reads runtime system information
PID:1712
-
-
-
/bin/shsh -c "pkill -9 SoRAxD123LOL || busybox pkill -9 SoRAxD123LOL"2⤵PID:1713
-
/usr/bin/pkillpkill -9 SoRAxD123LOL3⤵
- Reads CPU attributes
PID:1714
-
-
-
/bin/shsh -c "pkill -9 iaGv || busybox pkill -9 iaGv"2⤵PID:1715
-
/usr/bin/pkillpkill -9 iaGv3⤵PID:1716
-
-
-
/bin/shsh -c "pkill -9 5aA3 || busybox pkill -9 5aA3"2⤵PID:1717
-
/usr/bin/pkillpkill -9 5aA33⤵PID:1718
-
-
-
/bin/shsh -c "pkill -9 SoRAxD420LOL || busybox pkill -9 SoRAxD420LOL"2⤵PID:1719
-
/usr/bin/pkillpkill -9 SoRAxD420LOL3⤵PID:1720
-
-
-
/bin/shsh -c "pkill -9 insomni || busybox pkill -9 insomni"2⤵PID:1721
-
/usr/bin/pkillpkill -9 insomni3⤵
- Reads CPU attributes
- Reads runtime system information
PID:1722
-
-
-
/bin/shsh -c "pkill -9 640277 || busybox pkill -9 640277"2⤵PID:1723
-
/usr/bin/pkillpkill -9 6402773⤵
- Reads runtime system information
PID:1724
-
-
-
/bin/shsh -c "pkill -9 SoraBeReppin1337 || busybox pkill -9 SoraBeReppin1337"2⤵PID:1725
-
/usr/bin/pkillpkill -9 SoraBeReppin13373⤵
- Reads runtime system information
PID:1726
-
-
-
/bin/shsh -c "pkill -9 ipcamCache || busybox pkill -9 ipcamCache"2⤵
- System Network Configuration Discovery
PID:1727 -
/usr/bin/pkillpkill -9 ipcamCache3⤵
- Reads runtime system information
- System Network Configuration Discovery
PID:1728
-
-
-
/bin/shsh -c "pkill -9 66tlGg9Q || busybox pkill -9 66tlGg9Q"2⤵PID:1729
-
/usr/bin/pkillpkill -9 66tlGg9Q3⤵
- Reads runtime system information
PID:1730
-
-
-
/bin/shsh -c "pkill -9 T || busybox pkill -9 T"2⤵PID:1731
-
/usr/bin/pkillpkill -9 T3⤵PID:1732
-
-
-
/bin/shsh -c "pkill -9 jUYfouyf87 || busybox pkill -9 jUYfouyf87"2⤵PID:1733
-
/usr/bin/pkillpkill -9 jUYfouyf873⤵
- Reads runtime system information
PID:1734
-
-
-
/bin/shsh -c "pkill -9 6ke3 || busybox pkill -9 6ke3"2⤵PID:1735
-
/usr/bin/pkillpkill -9 6ke33⤵
- Reads CPU attributes
PID:1736
-
-
-
/bin/shsh -c "pkill -9 TOKYO3 || busybox pkill -9 TOKYO3"2⤵PID:1737
-
/usr/bin/pkillpkill -9 TOKYO33⤵
- Reads CPU attributes
PID:1738
-
-
-
/bin/shsh -c "pkill -9 lyEeaXul2dULCVxh || busybox pkill -9 lyEeaXul2dULCVxh"2⤵PID:1739
-
/usr/bin/pkillpkill -9 lyEeaXul2dULCVxh3⤵PID:1740
-
-
-
/bin/shsh -c "pkill -9 93OfjHZ2z || busybox pkill -9 93OfjHZ2z"2⤵PID:1741
-
/usr/bin/pkillpkill -9 93OfjHZ2z3⤵
- Reads CPU attributes
PID:1742
-
-
-
/bin/shsh -c "pkill -9 TY2gD6MZvKc7KU6r || busybox pkill -9 TY2gD6MZvKc7KU6r"2⤵PID:1743
-
/usr/bin/pkillpkill -9 TY2gD6MZvKc7KU6r3⤵
- Reads runtime system information
PID:1744
-
-
-
/bin/shsh -c "pkill -9 mMkiy6f87l || busybox pkill -9 mMkiy6f87l"2⤵PID:1745
-
/usr/bin/pkillpkill -9 mMkiy6f87l3⤵
- Reads CPU attributes
PID:1746
-
-
-
/bin/shsh -c "pkill -9 A023UU4U24UIU || busybox pkill -9 A023UU4U24UIU"2⤵PID:1747
-
/usr/bin/pkillpkill -9 A023UU4U24UIU3⤵
- Reads CPU attributes
PID:1748
-
-
-
/bin/shsh -c "pkill -9 TheWeeknd || busybox pkill -9 TheWeeknd"2⤵PID:1749
-
/usr/bin/pkillpkill -9 TheWeeknd3⤵
- Reads runtime system information
PID:1750
-
-
-
/bin/shsh -c "pkill -9 mioribitches || busybox pkill -9 mioribitches"2⤵PID:1751
-
/usr/bin/pkillpkill -9 mioribitches3⤵
- Reads CPU attributes
PID:1752
-
-
-
/bin/shsh -c "pkill -9 A5p9 || busybox pkill -9 A5p9"2⤵PID:1753
-
/usr/bin/pkillpkill -9 A5p93⤵
- Reads CPU attributes
PID:1754
-
-
-
/bin/shsh -c "pkill -9 TheWeeknds || busybox pkill -9 TheWeeknds"2⤵PID:1755
-
/usr/bin/pkillpkill -9 TheWeeknds3⤵PID:1756
-
-
-
/bin/shsh -c "pkill -9 mnblkjpoi || busybox pkill -9 mnblkjpoi"2⤵PID:1757
-
/usr/bin/pkillpkill -9 mnblkjpoi3⤵
- Reads CPU attributes
PID:1758
-
-
-
/bin/shsh -c "pkill -9 AbAd || busybox pkill -9 AbAd"2⤵PID:1759
-
/usr/bin/pkillpkill -9 AbAd3⤵PID:1760
-
-
-
/bin/shsh -c "pkill -9 Tokyos || busybox pkill -9 Tokyos"2⤵PID:1761
-
/usr/bin/pkillpkill -9 Tokyos3⤵PID:1762
-
-
-
/bin/shsh -c "pkill -9 neb || busybox pkill -9 neb"2⤵PID:1763
-
/usr/bin/pkillpkill -9 neb3⤵
- Reads CPU attributes
PID:1764
-
-
-
/bin/shsh -c "pkill -9 Akiru || busybox pkill -9 Akiru"2⤵PID:1765
-
/usr/bin/pkillpkill -9 Akiru3⤵
- Reads CPU attributes
PID:1766
-
-
-
/bin/shsh -c "pkill -9 U8inTz || busybox pkill -9 U8inTz"2⤵PID:1767
-
/usr/bin/pkillpkill -9 U8inTz3⤵
- Reads CPU attributes
PID:1768
-
-
-
/bin/shsh -c "pkill -9 netstats || busybox pkill -9 netstats"2⤵PID:1769
-
/usr/bin/pkillpkill -9 netstats3⤵
- Reads CPU attributes
- Reads runtime system information
PID:1770
-
-
-
/bin/shsh -c "pkill -9 Alex || busybox pkill -9 Alex"2⤵PID:1771
-
/usr/bin/pkillpkill -9 Alex3⤵PID:1772
-
-
-
/bin/shsh -c "pkill -9 W9RCAKM20T || busybox pkill -9 W9RCAKM20T"2⤵PID:1773
-
/usr/bin/pkillpkill -9 W9RCAKM20T3⤵PID:1774
-
-
-
/bin/shsh -c "pkill -9 newnetword || busybox pkill -9 newnetword"2⤵PID:1775
-
/usr/bin/pkillpkill -9 newnetword3⤵
- Reads runtime system information
PID:1776
-
-
-
/bin/shsh -c "pkill -9 Ayo215 || busybox pkill -9 Ayo215"2⤵PID:1777
-
/usr/bin/pkillpkill -9 Ayo2153⤵PID:1778
-
-
-
/bin/shsh -c "pkill -9 Word || busybox pkill -9 Word"2⤵PID:1779
-
/usr/bin/pkillpkill -9 Word3⤵PID:1780
-
-
-
/bin/shsh -c "pkill -9 nloads || busybox pkill -9 nloads"2⤵PID:1781
-
/usr/bin/pkillpkill -9 nloads3⤵
- Reads CPU attributes
PID:1782
-
-
-
/bin/shsh -c "pkill -9 BAdAsV || busybox pkill -9 BAdAsV"2⤵PID:1783
-
/usr/bin/pkillpkill -9 BAdAsV3⤵PID:1784
-
-
-
/bin/shsh -c "pkill -9 Wordmane || busybox pkill -9 Wordmane"2⤵PID:1785
-
/usr/bin/pkillpkill -9 Wordmane3⤵PID:1786
-
-
-
/bin/shsh -c "pkill -9 notyakuzaa || busybox pkill -9 notyakuzaa"2⤵PID:1787
-
/usr/bin/pkillpkill -9 notyakuzaa3⤵
- Reads CPU attributes
- Reads runtime system information
PID:1788
-
-
-
/bin/shsh -c "pkill -9 Belch || busybox pkill -9 Belch"2⤵PID:1789
-
/usr/bin/pkillpkill -9 Belch3⤵
- Reads runtime system information
PID:1790
-
-
-
/bin/shsh -c "pkill -9 Wordnets || busybox pkill -9 Wordnets"2⤵PID:1791
-
/usr/bin/pkillpkill -9 Wordnets3⤵
- Reads CPU attributes
PID:1792
-
-
-
/bin/shsh -c "pkill -9 obp || busybox pkill -9 obp"2⤵PID:1793
-
/usr/bin/pkillpkill -9 obp3⤵
- Reads runtime system information
PID:1794
-
-
-
/bin/shsh -c "pkill -9 BigN0gg0r420 || busybox pkill -9 BigN0gg0r420"2⤵PID:1795
-
/usr/bin/pkillpkill -9 BigN0gg0r4203⤵
- Reads CPU attributes
PID:1796
-
-
-
/bin/shsh -c "pkill -9 X0102I34f || busybox pkill -9 X0102I34f"2⤵PID:1797
-
/usr/bin/pkillpkill -9 X0102I34f3⤵
- Reads CPU attributes
PID:1798
-
-
-
/bin/shsh -c "pkill -9 ofhasfhiafhoi || busybox pkill -9 ofhasfhiafhoi"2⤵PID:1799
-
/usr/bin/pkillpkill -9 ofhasfhiafhoi3⤵
- Reads CPU attributes
PID:1800
-
-
-
/bin/shsh -c "pkill -9 BzSxLxBxeY || busybox pkill -9 BzSxLxBxeY"2⤵PID:1801
-
/usr/bin/pkillpkill -9 BzSxLxBxeY3⤵PID:1802
-
-
-
/bin/shsh -c "pkill -9 X19I239124UIU || busybox pkill -9 X19I239124UIU"2⤵PID:1803
-
/usr/bin/pkillpkill -9 X19I239124UIU3⤵
- Reads CPU attributes
- Reads runtime system information
PID:1804
-
-
-
/bin/shsh -c "pkill -9 oism || busybox pkill -9 oism"2⤵PID:1805
-
/usr/bin/pkillpkill -9 oism3⤵
- Reads runtime system information
PID:1806
-
-
-
/bin/shsh -c "pkill -9 Deported || busybox pkill -9 Deported"2⤵PID:1807
-
/usr/bin/pkillpkill -9 Deported3⤵PID:1808
-
-
-
/bin/shsh -c "pkill -9 XSHJEHHEIIHWO || busybox pkill -9 XSHJEHHEIIHWO"2⤵PID:1809
-
/usr/bin/pkillpkill -9 XSHJEHHEIIHWO3⤵PID:1810
-
-
-
/bin/shsh -c "pkill -9 olsVNwo12 || busybox pkill -9 olsVNwo12"2⤵PID:1811
-
/usr/bin/pkillpkill -9 olsVNwo123⤵PID:1812
-
-
-
/bin/shsh -c "pkill -9 DeportedDeported || busybox pkill -9 DeportedDeported"2⤵PID:1816
-
/usr/bin/pkillpkill -9 DeportedDeported3⤵PID:1817
-
-
-
/bin/shsh -c "pkill -9 XkTer0GbA1 || busybox pkill -9 XkTer0GbA1"2⤵PID:1818
-
/usr/bin/pkillpkill -9 XkTer0GbA13⤵
- Reads CPU attributes
PID:1819
-
-
-
/bin/shsh -c "pkill -9 onry0v03 || busybox pkill -9 onry0v03"2⤵PID:1820
-
/usr/bin/pkillpkill -9 onry0v033⤵
- Reads runtime system information
PID:1821
-
-
-
/bin/shsh -c "pkill -9 FortniteDownLOLZ || busybox pkill -9 FortniteDownLOLZ"2⤵PID:1822
-
/usr/bin/pkillpkill -9 FortniteDownLOLZ3⤵PID:1823
-
-
-
/bin/shsh -c "pkill -9 Y0urM0mGay || busybox pkill -9 Y0urM0mGay"2⤵PID:1824
-
/usr/bin/pkillpkill -9 Y0urM0mGay3⤵
- Reads runtime system information
PID:1825
-
-
-
/bin/shsh -c "pkill -9 pussyfartlmaojk || busybox pkill -9 pussyfartlmaojk"2⤵PID:1826
-
/usr/bin/pkillpkill -9 pussyfartlmaojk3⤵PID:1827
-
-
-
/bin/shsh -c "pkill -9 GrAcEnIgGeRaNn || busybox pkill -9 GrAcEnIgGeRaNn"2⤵PID:1828
-
/usr/bin/pkillpkill -9 GrAcEnIgGeRaNn3⤵
- Reads CPU attributes
PID:1829
-
-
-
/bin/shsh -c "pkill -9 YvdGkqndCO || busybox pkill -9 YvdGkqndCO"2⤵PID:1830
-
/usr/bin/pkillpkill -9 YvdGkqndCO3⤵PID:1831
-
-
-
/bin/shsh -c "pkill -9 qGeoRBe6BE || busybox pkill -9 qGeoRBe6BE"2⤵PID:1832
-
/usr/bin/pkillpkill -9 qGeoRBe6BE3⤵PID:1833
-
-
-
/bin/shsh -c "pkill -9 GuiltyCrown || busybox pkill -9 GuiltyCrown"2⤵PID:1834
-
/usr/bin/pkillpkill -9 GuiltyCrown3⤵
- Reads CPU attributes
PID:1835
-
-
-
/bin/shsh -c "pkill -9 ZEuS69 || busybox pkill -9 ZEuS69"2⤵PID:1836
-
/usr/bin/pkillpkill -9 ZEuS693⤵
- Reads CPU attributes
PID:1837
-
-
-
/bin/shsh -c "pkill -9 s4beBsEQhd || busybox pkill -9 s4beBsEQhd"2⤵PID:1838
-
/usr/bin/pkillpkill -9 s4beBsEQhd3⤵
- Reads CPU attributes
PID:1839
-
-
-
/bin/shsh -c "pkill -9 HOHO-KSNDO || busybox pkill -9 HOHO-KSNDO"2⤵PID:1840
-
/usr/bin/pkillpkill -9 HOHO-KSNDO3⤵PID:1841
-
-
-
/bin/shsh -c "pkill -9 ZEuz69 || busybox pkill -9 ZEuz69"2⤵PID:1842
-
/usr/bin/pkillpkill -9 ZEuz693⤵PID:1843
-
-
-
/bin/shsh -c "pkill -9 sat1234 || busybox pkill -9 sat1234"2⤵PID:1844
-
/usr/bin/pkillpkill -9 sat12343⤵
- Reads CPU attributes
PID:1845
-
-
-
/bin/shsh -c "pkill -9 HOHO-LUGO7 || busybox pkill -9 HOHO-LUGO7"2⤵PID:1846
-
/usr/bin/pkillpkill -9 HOHO-LUGO73⤵PID:1847
-
-
-
/bin/shsh -c "pkill -9 aj93hJ23 || busybox pkill -9 aj93hJ23"2⤵PID:1848
-
/usr/bin/pkillpkill -9 aj93hJ233⤵
- Reads CPU attributes
PID:1849
-
-
-
/bin/shsh -c "pkill -9 scanHA || busybox pkill -9 scanHA"2⤵PID:1850
-
/usr/bin/pkillpkill -9 scanHA3⤵
- Reads CPU attributes
PID:1851
-
-
-
/bin/shsh -c "pkill -9 HOHO-U79OL || busybox pkill -9 HOHO-U79OL"2⤵PID:1852
-
/usr/bin/pkillpkill -9 HOHO-U79OL3⤵PID:1853
-
-
-
/bin/shsh -c "pkill -9 alie293z0k2L || busybox pkill -9 alie293z0k2L"2⤵PID:1854
-
/usr/bin/pkillpkill -9 alie293z0k2L3⤵PID:1855
-
-
-
/bin/shsh -c "pkill -9 scanJoshoARM || busybox pkill -9 scanJoshoARM"2⤵PID:1856
-
/usr/bin/pkillpkill -9 scanJoshoARM3⤵
- Reads CPU attributes
- Reads runtime system information
PID:1857
-
-
-
/bin/shsh -c "pkill -9 HellInSide || busybox pkill -9 HellInSide"2⤵PID:1858
-
/usr/bin/pkillpkill -9 HellInSide3⤵
- Reads CPU attributes
- Reads runtime system information
PID:1859
-
-
-
/bin/shsh -c "pkill -9 ayyyGangShit || busybox pkill -9 ayyyGangShit"2⤵PID:1860
-
/usr/bin/pkillpkill -9 ayyyGangShit3⤵PID:1861
-
-
-
/bin/shsh -c "pkill -9 scanJoshoARM5 || busybox pkill -9 scanJoshoARM5"2⤵PID:1862
-
/usr/bin/pkillpkill -9 scanJoshoARM53⤵PID:1863
-
-
-
/bin/shsh -c "pkill -9 HighFry || busybox pkill -9 HighFry"2⤵PID:1864
-
/usr/bin/pkillpkill -9 HighFry3⤵
- Reads CPU attributes
PID:1865
-
-
-
/bin/shsh -c "pkill -9 b1gl || busybox pkill -9 b1gl"2⤵PID:1866
-
/usr/bin/pkillpkill -9 b1gl3⤵
- Reads CPU attributes
- Reads runtime system information
PID:1867
-
-
-
/bin/shsh -c "pkill -9 scanJoshoARM6 || busybox pkill -9 scanJoshoARM6"2⤵PID:1868
-
/usr/bin/pkillpkill -9 scanJoshoARM63⤵PID:1869
-
-
-
/bin/shsh -c "pkill -9 IWhPyucDbJ || busybox pkill -9 IWhPyucDbJ"2⤵PID:1870
-
/usr/bin/pkillpkill -9 IWhPyucDbJ3⤵
- Reads CPU attributes
PID:1871
-
-
-
/bin/shsh -c "pkill -9 boatnetz || busybox pkill -9 boatnetz"2⤵PID:1872
-
/usr/bin/pkillpkill -9 boatnetz3⤵
- Reads CPU attributes
PID:1873
-
-
-
/bin/shsh -c "pkill -9 scanJoshoARM7 || busybox pkill -9 scanJoshoARM7"2⤵PID:1874
-
/usr/bin/pkillpkill -9 scanJoshoARM73⤵PID:1875
-
-
-
/bin/shsh -c "pkill -9 IuYgujeIqn || busybox pkill -9 IuYgujeIqn"2⤵PID:1876
-
/usr/bin/pkillpkill -9 IuYgujeIqn3⤵
- Reads runtime system information
PID:1877
-
-