Overview

overview

6

Static

static

1

2026-06-04...pcrypt

ubuntu-18.04-amd64

6

Analysis

  • max time kernel
    148s
  • max time network
    129s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20260513-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    04/06/2026, 16:19

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-06-04_b5406905df7440465c90243e315d2da9_dosia_glassworm_poet-rat_qnapcrypt
  • Size 6.0MB
  • Sample260604-tsk92sax9v
  • SHA256 bba5237524953323dee285bf8709d9debb18c2ee1f52c37e4c58f049182f5818
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
antivmdiscovery

Malware Config

Signatures

  • Enumerates active TCP sockets 1 TTPs 64 IoCs

    Gets active TCP sockets from /proc virtual filesystem.

    discovery
  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Checks CPU configuration 1 TTPs 1 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

    antivm
  • Reads CPU attributes 1 TTPs 64 IoCs
    discovery
  • Reads system network configuration 1 TTPs 64 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

    discovery
  • Enumerates kernel/hardware configuration 1 TTPs 3 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

    discovery
  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /tmp/2026-06-04_b5406905df7440465c90243e315d2da9_dosia_glassworm_poet-rat_qnapcrypt
    /tmp/2026-06-04_b5406905df7440465c90243e315d2da9_dosia_glassworm_poet-rat_qnapcrypt
    1⤵
    • Checks CPU configuration
    • Enumerates kernel/hardware configuration
    • Reads runtime system information
    PID:1482
    • /bin/ps
      ps -eo "pid,%cpu" --no-headers
      2⤵
        PID:1494
      • /usr/bin/lsof
        lsof -iTCP -sTCP:LISTEN -nP -F pcn
        2⤵
        • Enumerates active TCP sockets
        • Reads system network configuration
        • Reads runtime system information
        PID:1495
      • /bin/ps
        ps -eo "pid,%cpu" --no-headers
        2⤵
        • Reads CPU attributes
        PID:1496
      • /usr/bin/lsof
        lsof -iTCP -sTCP:LISTEN -nP -F pcn
        2⤵
        • Enumerates active TCP sockets
        • Reads system network configuration
        • Reads runtime system information
        PID:1497
      • /bin/ps
        ps -eo "pid,%cpu" --no-headers
        2⤵
        • Reads CPU attributes
        PID:1498
      • /usr/bin/lsof
        lsof -iTCP -sTCP:LISTEN -nP -F pcn
        2⤵
        • Enumerates active TCP sockets
        • Reads runtime system information
        PID:1499
      • /bin/ps
        ps -eo "pid,%cpu" --no-headers
        2⤵
        • Reads CPU attributes
        PID:1500
      • /usr/bin/lsof
        lsof -iTCP -sTCP:LISTEN -nP -F pcn
        2⤵
        • Enumerates active TCP sockets
        • Reads runtime system information
        PID:1501
      • /bin/ps
        ps -eo "pid,%cpu" --no-headers
        2⤵
        • Reads CPU attributes
        PID:1502
      • /usr/bin/lsof
        lsof -iTCP -sTCP:LISTEN -nP -F pcn
        2⤵
        • Enumerates active TCP sockets
        • Reads system network configuration
        PID:1503
      • /bin/ps
        ps -eo "pid,%cpu" --no-headers
        2⤵
        • Reads CPU attributes
        PID:1504
      • /usr/bin/lsof
        lsof -iTCP -sTCP:LISTEN -nP -F pcn
        2⤵
        • Enumerates active TCP sockets
        • Reads system network configuration
        PID:1505
      • /bin/ps
        ps -eo "pid,%cpu" --no-headers
        2⤵
          PID:1506
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Enumerates active TCP sockets
          • Reads system network configuration
          • Reads runtime system information
          PID:1507
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          PID:1508
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Enumerates active TCP sockets
          • Reads runtime system information
          PID:1509
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          PID:1510
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Enumerates active TCP sockets
          • Reads runtime system information
          PID:1511
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          PID:1512
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Enumerates active TCP sockets
          • Reads system network configuration
          • Reads runtime system information
          PID:1513
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          PID:1514
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Reads system network configuration
          PID:1515
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          • Reads runtime system information
          PID:1516
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Enumerates active TCP sockets
          • Reads runtime system information
          PID:1517
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          • Reads runtime system information
          PID:1518
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Enumerates active TCP sockets
          • Reads system network configuration
          PID:1519
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          PID:1520
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Enumerates active TCP sockets
          • Reads runtime system information
          PID:1521
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          PID:1524
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Enumerates active TCP sockets
          PID:1525
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          PID:1526
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Enumerates active TCP sockets
          • Reads system network configuration
          • Reads runtime system information
          PID:1527
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          PID:1528
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Enumerates active TCP sockets
          • Reads system network configuration
          • Reads runtime system information
          PID:1529
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          PID:1530
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Reads system network configuration
          • Reads runtime system information
          PID:1531
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          PID:1532
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Enumerates active TCP sockets
          • Reads runtime system information
          PID:1533
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          PID:1534
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Enumerates active TCP sockets
          • Reads system network configuration
          • Reads runtime system information
          PID:1535
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          PID:1536
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Enumerates active TCP sockets
          • Reads system network configuration
          • Reads runtime system information
          PID:1537
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          PID:1538
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Enumerates active TCP sockets
          • Reads system network configuration
          • Reads runtime system information
          PID:1539
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          PID:1540
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Enumerates active TCP sockets
          • Reads system network configuration
          • Reads runtime system information
          PID:1541
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          PID:1542
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Enumerates active TCP sockets
          • Reads system network configuration
          • Reads runtime system information
          PID:1543
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          PID:1544
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Enumerates active TCP sockets
          • Reads system network configuration
          PID:1545
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          • Reads runtime system information
          PID:1546
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Enumerates active TCP sockets
          • Reads system network configuration
          PID:1547
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          • Reads runtime system information
          PID:1548
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Enumerates active TCP sockets
          • Reads system network configuration
          PID:1549
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          PID:1550
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Enumerates active TCP sockets
          • Reads system network configuration
          PID:1551
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          PID:1552
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Reads system network configuration
          • Reads runtime system information
          PID:1553
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          PID:1554
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Enumerates active TCP sockets
          • Reads runtime system information
          PID:1555
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          PID:1556
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Enumerates active TCP sockets
          • Reads runtime system information
          PID:1557
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          PID:1558
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Enumerates active TCP sockets
          PID:1559
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
          • Reads CPU attributes
          PID:1560
        • /usr/bin/lsof
          lsof -iTCP -sTCP:LISTEN -nP -F pcn
          2⤵
          • Enumerates active TCP sockets
          • Reads runtime system information
          PID:1561
        • /bin/ps
          ps -eo "pid,%cpu" --no-headers
          2⤵
            PID:1562
          • /usr/bin/lsof
            lsof -iTCP -sTCP:LISTEN -nP -F pcn
            2⤵
            • Enumerates active TCP sockets
            PID:1563
          • /bin/ps
            ps -eo "pid,%cpu" --no-headers
            2⤵
            • Reads CPU attributes
            PID:1564
          • /usr/bin/lsof
            lsof -iTCP -sTCP:LISTEN -nP -F pcn
            2⤵
            • Enumerates active TCP sockets
            • Reads system network configuration
            • Reads runtime system information
            PID:1565
          • /bin/ps
            ps -eo "pid,%cpu" --no-headers
            2⤵
            • Reads CPU attributes
            PID:1566
          • /usr/bin/lsof
            lsof -iTCP -sTCP:LISTEN -nP -F pcn
            2⤵
            • Reads system network configuration
            • Reads runtime system information
            PID:1567
          • /bin/ps
            ps -eo "pid,%cpu" --no-headers
            2⤵
            • Reads CPU attributes
            PID:1568
          • /usr/bin/lsof
            lsof -iTCP -sTCP:LISTEN -nP -F pcn
            2⤵
            • Enumerates active TCP sockets
            • Reads system network configuration
            • Reads runtime system information
            PID:1569
          • /bin/ps
            ps -eo "pid,%cpu" --no-headers
            2⤵
            • Reads runtime system information
            PID:1570
          • /usr/bin/lsof
            lsof -iTCP -sTCP:LISTEN -nP -F pcn
            2⤵
            • Enumerates active TCP sockets
            • Reads system network configuration
            • Reads runtime system information
            PID:1571
          • /bin/ps
            ps -eo "pid,%cpu" --no-headers
            2⤵
            • Reads CPU attributes
            PID:1572
          • /usr/bin/lsof
            lsof -iTCP -sTCP:LISTEN -nP -F pcn
            2⤵
            • Enumerates active TCP sockets
            • Reads system network configuration
            PID:1573
          • /bin/ps
            ps -eo "pid,%cpu" --no-headers
            2⤵
            • Reads CPU attributes
            PID:1574
          • /usr/bin/lsof
            lsof -iTCP -sTCP:LISTEN -nP -F pcn
            2⤵
            • Enumerates active TCP sockets
            PID:1575
          • /bin/ps
            ps -eo "pid,%cpu" --no-headers
            2⤵
            • Reads CPU attributes
            PID:1576
          • /usr/bin/lsof
            lsof -iTCP -sTCP:LISTEN -nP -F pcn
            2⤵
            • Enumerates active TCP sockets
            • Reads system network configuration
            PID:1577
          • /bin/ps
            ps -eo "pid,%cpu" --no-headers
            2⤵
            • Reads CPU attributes
            • Reads runtime system information
            PID:1578
          • /usr/bin/lsof
            lsof -iTCP -sTCP:LISTEN -nP -F pcn
            2⤵
            • Enumerates active TCP sockets
            • Reads system network configuration
            PID:1579
          • /bin/ps
            ps -eo "pid,%cpu" --no-headers
            2⤵
            • Reads CPU attributes
            PID:1580
          • /usr/bin/lsof
            lsof -iTCP -sTCP:LISTEN -nP -F pcn
            2⤵
            • Enumerates active TCP sockets
            PID:1581
          • /bin/ps
            ps -eo "pid,%cpu" --no-headers
            2⤵
            • Reads CPU attributes
            PID:1582
          • /usr/bin/lsof
            lsof -iTCP -sTCP:LISTEN -nP -F pcn
            2⤵
            • Enumerates active TCP sockets
            PID:1583
          • /bin/ps
            ps -eo "pid,%cpu" --no-headers
            2⤵
            • Reads CPU attributes
            • Reads runtime system information
            PID:1584
          • /usr/bin/lsof
            lsof -iTCP -sTCP:LISTEN -nP -F pcn
            2⤵
            • Enumerates active TCP sockets
            PID:1585
          • /bin/ps
            ps -eo "pid,%cpu" --no-headers
            2⤵
            • Reads CPU attributes
            PID:1586
          • /usr/bin/lsof
            lsof -iTCP -sTCP:LISTEN -nP -F pcn
            2⤵
            • Enumerates active TCP sockets
            • Reads system network configuration
            • Reads runtime system information
            PID:1587
          • /bin/ps
            ps -eo "pid,%cpu" --no-headers
            2⤵
            • Reads CPU attributes
            PID:1588
          • /usr/bin/lsof
            lsof -iTCP -sTCP:LISTEN -nP -F pcn
            2⤵
            • Enumerates active TCP sockets
            • Reads system network configuration
            PID:1589
          • /bin/ps
            ps -eo "pid,%cpu" --no-headers
            2⤵
            • Reads CPU attributes
            PID:1590
          • /usr/bin/lsof
            lsof -iTCP -sTCP:LISTEN -nP -F pcn
            2⤵
            • Enumerates active TCP sockets
            • Reads system network configuration
            PID:1591
          • /bin/ps
            ps -eo "pid,%cpu" --no-headers
            2⤵
            • Reads CPU attributes
            PID:1592
          • /usr/bin/lsof
            lsof -iTCP -sTCP:LISTEN -nP -F pcn
            2⤵
            • Enumerates active TCP sockets
            PID:1593
          • /bin/ps
            ps -eo "pid,%cpu" --no-headers
            2⤵
            • Reads CPU attributes
            • Reads runtime system information
            PID:1594
          • /usr/bin/lsof
            lsof -iTCP -sTCP:LISTEN -nP -F pcn
            2⤵
            • Reads runtime system information
            PID:1595
          • /bin/ps
            ps -eo "pid,%cpu" --no-headers
            2⤵
            • Reads CPU attributes
            PID:1596
          • /usr/bin/lsof
            lsof -iTCP -sTCP:LISTEN -nP -F pcn
            2⤵
            • Enumerates active TCP sockets
            • Reads system network configuration
            PID:1597
          • /bin/ps
            ps -eo "pid,%cpu" --no-headers
            2⤵
            • Reads CPU attributes
            PID:1598
          • /usr/bin/lsof
            lsof -iTCP -sTCP:LISTEN -nP -F pcn
            2⤵
            • Enumerates active TCP sockets
            PID:1599
          • /bin/ps
            ps -eo "pid,%cpu" --no-headers
            2⤵
            • Reads CPU attributes
            PID:1600
          • /usr/bin/lsof
            lsof -iTCP -sTCP:LISTEN -nP -F pcn
            2⤵
            • Enumerates active TCP sockets
            • Reads system network configuration
            PID:1601
          • /bin/ps
            ps -eo "pid,%cpu" --no-headers
            2⤵
              PID:1602
            • /usr/bin/lsof
              lsof -iTCP -sTCP:LISTEN -nP -F pcn
              2⤵
              • Enumerates active TCP sockets
              • Reads system network configuration
              PID:1603
            • /bin/ps
              ps -eo "pid,%cpu" --no-headers
              2⤵
              • Reads CPU attributes
              PID:1604
            • /usr/bin/lsof
              lsof -iTCP -sTCP:LISTEN -nP -F pcn
              2⤵
              • Enumerates active TCP sockets
              • Reads system network configuration
              • Reads runtime system information
              PID:1605
            • /bin/ps
              ps -eo "pid,%cpu" --no-headers
              2⤵
              • Reads CPU attributes
              PID:1606
            • /usr/bin/lsof
              lsof -iTCP -sTCP:LISTEN -nP -F pcn
              2⤵
              • Enumerates active TCP sockets
              • Reads runtime system information
              PID:1607
            • /bin/ps
              ps -eo "pid,%cpu" --no-headers
              2⤵
              • Reads CPU attributes
              PID:1608
            • /usr/bin/lsof
              lsof -iTCP -sTCP:LISTEN -nP -F pcn
              2⤵
              • Enumerates active TCP sockets
              • Reads system network configuration
              • Reads runtime system information
              PID:1609
            • /bin/ps
              ps -eo "pid,%cpu" --no-headers
              2⤵
              • Reads CPU attributes
              PID:1610
            • /usr/bin/lsof
              lsof -iTCP -sTCP:LISTEN -nP -F pcn
              2⤵
              • Enumerates active TCP sockets
              PID:1611
            • /bin/ps
              ps -eo "pid,%cpu" --no-headers
              2⤵
              • Reads CPU attributes
              PID:1612
            • /usr/bin/lsof
              lsof -iTCP -sTCP:LISTEN -nP -F pcn
              2⤵
              • Enumerates active TCP sockets
              • Reads system network configuration
              PID:1613
            • /bin/ps
              ps -eo "pid,%cpu" --no-headers
              2⤵
              • Reads CPU attributes
              PID:1614
            • /usr/bin/lsof
              lsof -iTCP -sTCP:LISTEN -nP -F pcn
              2⤵
              • Enumerates active TCP sockets
              • Reads system network configuration
              PID:1615
            • /bin/ps
              ps -eo "pid,%cpu" --no-headers
              2⤵
              • Reads CPU attributes
              • Reads runtime system information
              PID:1616
            • /usr/bin/lsof
              lsof -iTCP -sTCP:LISTEN -nP -F pcn
              2⤵
              • Enumerates active TCP sockets
              • Reads runtime system information
              PID:1617
            • /bin/ps
              ps -eo "pid,%cpu" --no-headers
              2⤵
              • Reads CPU attributes
              PID:1618
            • /usr/bin/lsof
              lsof -iTCP -sTCP:LISTEN -nP -F pcn
              2⤵
              • Enumerates active TCP sockets
              PID:1619
            • /bin/ps
              ps -eo "pid,%cpu" --no-headers
              2⤵
              • Reads CPU attributes
              • Reads runtime system information
              PID:1620
            • /usr/bin/lsof
              lsof -iTCP -sTCP:LISTEN -nP -F pcn
              2⤵
              • Enumerates active TCP sockets
              PID:1621
            • /bin/ps
              ps -eo "pid,%cpu" --no-headers
              2⤵
              • Reads CPU attributes
              PID:1622
            • /usr/bin/lsof
              lsof -iTCP -sTCP:LISTEN -nP -F pcn
              2⤵
              • Enumerates active TCP sockets
              • Reads system network configuration
              PID:1623
            • /bin/ps
              ps -eo "pid,%cpu" --no-headers
              2⤵
              • Reads CPU attributes
              PID:1624
            • /usr/bin/lsof
              lsof -iTCP -sTCP:LISTEN -nP -F pcn
              2⤵
              • Enumerates active TCP sockets
              PID:1625
            • /bin/ps
              ps -eo "pid,%cpu" --no-headers
              2⤵
              • Reads CPU attributes
              PID:1626
            • /usr/bin/lsof
              lsof -iTCP -sTCP:LISTEN -nP -F pcn
              2⤵
              • Enumerates active TCP sockets
              PID:1627
            • /bin/ps
              ps -eo "pid,%cpu" --no-headers
              2⤵
              • Reads CPU attributes
              PID:1628
            • /usr/bin/lsof
              lsof -iTCP -sTCP:LISTEN -nP -F pcn
              2⤵
              • Enumerates active TCP sockets
              PID:1629
            • /bin/ps
              ps -eo "pid,%cpu" --no-headers
              2⤵
              • Reads CPU attributes
              PID:1630
            • /usr/bin/lsof
              lsof -iTCP -sTCP:LISTEN -nP -F pcn
              2⤵
              • Enumerates active TCP sockets
              PID:1631
            • /bin/ps
              ps -eo "pid,%cpu" --no-headers
              2⤵
              • Reads CPU attributes
              PID:1632
            • /usr/bin/lsof
              lsof -iTCP -sTCP:LISTEN -nP -F pcn
              2⤵
              • Enumerates active TCP sockets
              PID:1633

          Network

                MITRE ATT&CK Enterprise v16

                Replay Monitor

                Loading Replay Monitor...

                Downloads