Overview

overview

6

Static

static

1

data_mipsel.elf

debian-12-mipsel

6

Analysis

  • max time kernel
    151s
  • max time network
    154s
  • platform
    debian-12_mipsel
  • resource
    debian12-mipsel-20260513-en
  • resource tags

    arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
  • submitted
    20/08/2026, 15:32

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    data_mipsel.elf
  • Size 339KB
  • Sample260820-sypc8aeb99
  • SHA256 1fe5cb991fc57e2439d2691ed2ac57d4992da555a55c968e4b35be014529823f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
credential_accessdiscovery

Malware Config

Signatures

  • Enumerates active TCP sockets 1 TTPs 1 IoCs

    Gets active TCP sockets from /proc virtual filesystem.

    discovery
  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Reads process memory 1 TTPs 64 IoCs

    Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.

    credential_access
  • Changes its process name 3 IoCs
  • Reads system network configuration 1 TTPs 2 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

    discovery
  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

    discovery
  • System Network Configuration Discovery 1 TTPs 64 IoCs

    Adversaries may gather information about the network configuration of a system.

    discovery
  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/data_mipsel.elf
    /tmp/data_mipsel.elf
    1⤵
    • Enumerates active TCP sockets
    • Reads process memory
    • Changes its process name
    • Reads system network configuration
    • Reads runtime system information
    • System Network Configuration Discovery
    • Writes file to tmp directory
    PID:800
    • /bin/sh
      sh -c "iptables -F 2>/dev/null"
      2⤵
        PID:810
      • /bin/sh
        sh -c "iptables -X 2>/dev/null"
        2⤵
        • System Network Configuration Discovery
        PID:814
      • /bin/sh
        sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
        2⤵
        • System Network Configuration Discovery
        PID:816
      • /bin/sh
        sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
        2⤵
        • System Network Configuration Discovery
        PID:820
      • /bin/sh
        sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
        2⤵
        • System Network Configuration Discovery
        PID:822
      • /bin/sh
        sh -c "iptables -A OUTPUT -d 209.126.6.26 -j ACCEPT 2>/dev/null"
        2⤵
          PID:824
        • /bin/sh
          sh -c "iptables -A INPUT -s 209.126.6.26 -j ACCEPT 2>/dev/null"
          2⤵
            PID:826
          • /bin/sh
            sh -c "iptables -F 2>/dev/null"
            2⤵
              PID:848
            • /bin/sh
              sh -c "iptables -X 2>/dev/null"
              2⤵
                PID:850
              • /bin/sh
                sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                2⤵
                  PID:851
                • /bin/sh
                  sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                  2⤵
                    PID:852
                  • /bin/sh
                    sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                    2⤵
                      PID:853
                    • /bin/sh
                      sh -c "iptables -A OUTPUT -d 209.126.6.26 -j ACCEPT 2>/dev/null"
                      2⤵
                        PID:854
                      • /bin/sh
                        sh -c "iptables -A INPUT -s 209.126.6.26 -j ACCEPT 2>/dev/null"
                        2⤵
                          PID:855
                        • /bin/sh
                          sh -c "iptables -F 2>/dev/null"
                          2⤵
                            PID:858
                          • /bin/sh
                            sh -c "iptables -X 2>/dev/null"
                            2⤵
                            • System Network Configuration Discovery
                            PID:859
                          • /bin/sh
                            sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                            2⤵
                            • System Network Configuration Discovery
                            PID:860
                          • /bin/sh
                            sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                            2⤵
                            • System Network Configuration Discovery
                            PID:861
                          • /bin/sh
                            sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                            2⤵
                              PID:862
                            • /bin/sh
                              sh -c "iptables -A OUTPUT -d 169.58.180.190 -j ACCEPT 2>/dev/null"
                              2⤵
                                PID:863
                              • /bin/sh
                                sh -c "iptables -A INPUT -s 169.58.180.190 -j ACCEPT 2>/dev/null"
                                2⤵
                                  PID:864
                                • /bin/sh
                                  sh -c "iptables -F 2>/dev/null"
                                  2⤵
                                  • System Network Configuration Discovery
                                  PID:865
                                • /bin/sh
                                  sh -c "iptables -X 2>/dev/null"
                                  2⤵
                                  • System Network Configuration Discovery
                                  PID:866
                                • /bin/sh
                                  sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                                  2⤵
                                    PID:867
                                  • /bin/sh
                                    sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                                    2⤵
                                    • System Network Configuration Discovery
                                    PID:868
                                  • /bin/sh
                                    sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                                    2⤵
                                    • System Network Configuration Discovery
                                    PID:869
                                  • /bin/sh
                                    sh -c "iptables -A OUTPUT -d 209.126.6.26 -j ACCEPT 2>/dev/null"
                                    2⤵
                                      PID:870
                                    • /bin/sh
                                      sh -c "iptables -A INPUT -s 209.126.6.26 -j ACCEPT 2>/dev/null"
                                      2⤵
                                        PID:871
                                      • /bin/sh
                                        sh -c "iptables -F 2>/dev/null"
                                        2⤵
                                          PID:872
                                        • /bin/sh
                                          sh -c "iptables -X 2>/dev/null"
                                          2⤵
                                            PID:873
                                          • /bin/sh
                                            sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                                            2⤵
                                              PID:874
                                            • /bin/sh
                                              sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                                              2⤵
                                              • System Network Configuration Discovery
                                              PID:875
                                            • /bin/sh
                                              sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                                              2⤵
                                              • System Network Configuration Discovery
                                              PID:876
                                            • /bin/sh
                                              sh -c "iptables -A OUTPUT -d 169.58.180.190 -j ACCEPT 2>/dev/null"
                                              2⤵
                                                PID:877
                                              • /bin/sh
                                                sh -c "iptables -A INPUT -s 169.58.180.190 -j ACCEPT 2>/dev/null"
                                                2⤵
                                                  PID:878
                                                • /bin/sh
                                                  sh -c "iptables -F 2>/dev/null"
                                                  2⤵
                                                    PID:879
                                                  • /bin/sh
                                                    sh -c "iptables -X 2>/dev/null"
                                                    2⤵
                                                      PID:880
                                                    • /bin/sh
                                                      sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                                                      2⤵
                                                        PID:881
                                                      • /bin/sh
                                                        sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                                                        2⤵
                                                          PID:882
                                                        • /bin/sh
                                                          sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                                                          2⤵
                                                          • System Network Configuration Discovery
                                                          PID:883
                                                        • /bin/sh
                                                          sh -c "iptables -A OUTPUT -d 209.126.6.26 -j ACCEPT 2>/dev/null"
                                                          2⤵
                                                            PID:884
                                                          • /bin/sh
                                                            sh -c "iptables -A INPUT -s 209.126.6.26 -j ACCEPT 2>/dev/null"
                                                            2⤵
                                                              PID:885
                                                            • /bin/sh
                                                              sh -c "iptables -F 2>/dev/null"
                                                              2⤵
                                                                PID:888
                                                              • /bin/sh
                                                                sh -c "iptables -X 2>/dev/null"
                                                                2⤵
                                                                  PID:889
                                                                • /bin/sh
                                                                  sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                                                                  2⤵
                                                                    PID:890
                                                                  • /bin/sh
                                                                    sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                                                                    2⤵
                                                                    • System Network Configuration Discovery
                                                                    PID:891
                                                                  • /bin/sh
                                                                    sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                                                                    2⤵
                                                                    • System Network Configuration Discovery
                                                                    PID:892
                                                                  • /bin/sh
                                                                    sh -c "iptables -A OUTPUT -d 169.58.180.190 -j ACCEPT 2>/dev/null"
                                                                    2⤵
                                                                      PID:893
                                                                    • /bin/sh
                                                                      sh -c "iptables -A INPUT -s 169.58.180.190 -j ACCEPT 2>/dev/null"
                                                                      2⤵
                                                                        PID:894
                                                                      • /bin/sh
                                                                        sh -c "iptables -F 2>/dev/null"
                                                                        2⤵
                                                                          PID:895
                                                                        • /bin/sh
                                                                          sh -c "iptables -X 2>/dev/null"
                                                                          2⤵
                                                                          • System Network Configuration Discovery
                                                                          PID:896
                                                                        • /bin/sh
                                                                          sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                                                                          2⤵
                                                                          • System Network Configuration Discovery
                                                                          PID:897
                                                                        • /bin/sh
                                                                          sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                                                                          2⤵
                                                                            PID:898
                                                                          • /bin/sh
                                                                            sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                                                                            2⤵
                                                                            • System Network Configuration Discovery
                                                                            PID:899
                                                                          • /bin/sh
                                                                            sh -c "iptables -A OUTPUT -d 209.126.6.26 -j ACCEPT 2>/dev/null"
                                                                            2⤵
                                                                              PID:900
                                                                            • /bin/sh
                                                                              sh -c "iptables -A INPUT -s 209.126.6.26 -j ACCEPT 2>/dev/null"
                                                                              2⤵
                                                                                PID:901
                                                                              • /bin/sh
                                                                                sh -c "iptables -F 2>/dev/null"
                                                                                2⤵
                                                                                  PID:902
                                                                                • /bin/sh
                                                                                  sh -c "iptables -X 2>/dev/null"
                                                                                  2⤵
                                                                                    PID:903
                                                                                  • /bin/sh
                                                                                    sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                                                                                    2⤵
                                                                                    • System Network Configuration Discovery
                                                                                    PID:904
                                                                                  • /bin/sh
                                                                                    sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                                                                                    2⤵
                                                                                    • System Network Configuration Discovery
                                                                                    PID:905
                                                                                  • /bin/sh
                                                                                    sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                                                                                    2⤵
                                                                                    • System Network Configuration Discovery
                                                                                    PID:906
                                                                                  • /bin/sh
                                                                                    sh -c "iptables -A OUTPUT -d 169.58.180.190 -j ACCEPT 2>/dev/null"
                                                                                    2⤵
                                                                                      PID:907
                                                                                    • /bin/sh
                                                                                      sh -c "iptables -A INPUT -s 169.58.180.190 -j ACCEPT 2>/dev/null"
                                                                                      2⤵
                                                                                        PID:908
                                                                                      • /bin/sh
                                                                                        sh -c "iptables -F 2>/dev/null"
                                                                                        2⤵
                                                                                          PID:909
                                                                                        • /bin/sh
                                                                                          sh -c "iptables -X 2>/dev/null"
                                                                                          2⤵
                                                                                          • System Network Configuration Discovery
                                                                                          PID:910
                                                                                        • /bin/sh
                                                                                          sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                                                                                          2⤵
                                                                                          • System Network Configuration Discovery
                                                                                          PID:911
                                                                                        • /bin/sh
                                                                                          sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                                                                                          2⤵
                                                                                          • System Network Configuration Discovery
                                                                                          PID:912
                                                                                        • /bin/sh
                                                                                          sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                                                                                          2⤵
                                                                                            PID:913
                                                                                          • /bin/sh
                                                                                            sh -c "iptables -A OUTPUT -d 209.126.6.26 -j ACCEPT 2>/dev/null"
                                                                                            2⤵
                                                                                              PID:914
                                                                                            • /bin/sh
                                                                                              sh -c "iptables -A INPUT -s 209.126.6.26 -j ACCEPT 2>/dev/null"
                                                                                              2⤵
                                                                                                PID:915
                                                                                              • /bin/sh
                                                                                                sh -c "iptables -F 2>/dev/null"
                                                                                                2⤵
                                                                                                • System Network Configuration Discovery
                                                                                                PID:916
                                                                                              • /bin/sh
                                                                                                sh -c "iptables -X 2>/dev/null"
                                                                                                2⤵
                                                                                                • System Network Configuration Discovery
                                                                                                PID:917
                                                                                              • /bin/sh
                                                                                                sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                                                                                                2⤵
                                                                                                  PID:918
                                                                                                • /bin/sh
                                                                                                  sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                                                                                                  2⤵
                                                                                                    PID:919
                                                                                                  • /bin/sh
                                                                                                    sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                                                                                                    2⤵
                                                                                                      PID:920
                                                                                                    • /bin/sh
                                                                                                      sh -c "iptables -A OUTPUT -d 169.58.180.190 -j ACCEPT 2>/dev/null"
                                                                                                      2⤵
                                                                                                        PID:921
                                                                                                      • /bin/sh
                                                                                                        sh -c "iptables -A INPUT -s 169.58.180.190 -j ACCEPT 2>/dev/null"
                                                                                                        2⤵
                                                                                                          PID:922
                                                                                                        • /bin/sh
                                                                                                          sh -c "iptables -F 2>/dev/null"
                                                                                                          2⤵
                                                                                                          • System Network Configuration Discovery
                                                                                                          PID:923
                                                                                                        • /bin/sh
                                                                                                          sh -c "iptables -X 2>/dev/null"
                                                                                                          2⤵
                                                                                                          • System Network Configuration Discovery
                                                                                                          PID:924
                                                                                                        • /bin/sh
                                                                                                          sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                                                                                                          2⤵
                                                                                                            PID:925
                                                                                                          • /bin/sh
                                                                                                            sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                                                                                                            2⤵
                                                                                                              PID:926
                                                                                                            • /bin/sh
                                                                                                              sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                                                                                                              2⤵
                                                                                                              • System Network Configuration Discovery
                                                                                                              PID:927
                                                                                                            • /bin/sh
                                                                                                              sh -c "iptables -A OUTPUT -d 209.126.6.26 -j ACCEPT 2>/dev/null"
                                                                                                              2⤵
                                                                                                                PID:928
                                                                                                              • /bin/sh
                                                                                                                sh -c "iptables -A INPUT -s 209.126.6.26 -j ACCEPT 2>/dev/null"
                                                                                                                2⤵
                                                                                                                  PID:929
                                                                                                                • /bin/sh
                                                                                                                  sh -c "iptables -F 2>/dev/null"
                                                                                                                  2⤵
                                                                                                                    PID:930
                                                                                                                  • /bin/sh
                                                                                                                    sh -c "iptables -X 2>/dev/null"
                                                                                                                    2⤵
                                                                                                                      PID:931
                                                                                                                    • /bin/sh
                                                                                                                      sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                                                                                                                      2⤵
                                                                                                                        PID:932
                                                                                                                      • /bin/sh
                                                                                                                        sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                                                                                                                        2⤵
                                                                                                                          PID:933
                                                                                                                        • /bin/sh
                                                                                                                          sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                                                                                                                          2⤵
                                                                                                                          • System Network Configuration Discovery
                                                                                                                          PID:934
                                                                                                                        • /bin/sh
                                                                                                                          sh -c "iptables -A OUTPUT -d 169.58.180.190 -j ACCEPT 2>/dev/null"
                                                                                                                          2⤵
                                                                                                                            PID:935
                                                                                                                          • /bin/sh
                                                                                                                            sh -c "iptables -A INPUT -s 169.58.180.190 -j ACCEPT 2>/dev/null"
                                                                                                                            2⤵
                                                                                                                              PID:936
                                                                                                                            • /bin/sh
                                                                                                                              sh -c "iptables -F 2>/dev/null"
                                                                                                                              2⤵
                                                                                                                              • System Network Configuration Discovery
                                                                                                                              PID:937
                                                                                                                            • /bin/sh
                                                                                                                              sh -c "iptables -X 2>/dev/null"
                                                                                                                              2⤵
                                                                                                                                PID:938
                                                                                                                              • /bin/sh
                                                                                                                                sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                                                                                                                                2⤵
                                                                                                                                • System Network Configuration Discovery
                                                                                                                                PID:939
                                                                                                                              • /bin/sh
                                                                                                                                sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                                                                                                                                2⤵
                                                                                                                                • System Network Configuration Discovery
                                                                                                                                PID:940
                                                                                                                              • /bin/sh
                                                                                                                                sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                                                                                                                                2⤵
                                                                                                                                  PID:941
                                                                                                                                • /bin/sh
                                                                                                                                  sh -c "iptables -A OUTPUT -d 209.126.6.26 -j ACCEPT 2>/dev/null"
                                                                                                                                  2⤵
                                                                                                                                    PID:942
                                                                                                                                  • /bin/sh
                                                                                                                                    sh -c "iptables -A INPUT -s 209.126.6.26 -j ACCEPT 2>/dev/null"
                                                                                                                                    2⤵
                                                                                                                                      PID:943
                                                                                                                                    • /bin/sh
                                                                                                                                      sh -c "iptables -F 2>/dev/null"
                                                                                                                                      2⤵
                                                                                                                                      • System Network Configuration Discovery
                                                                                                                                      PID:944
                                                                                                                                    • /bin/sh
                                                                                                                                      sh -c "iptables -X 2>/dev/null"
                                                                                                                                      2⤵
                                                                                                                                      • System Network Configuration Discovery
                                                                                                                                      PID:945
                                                                                                                                    • /bin/sh
                                                                                                                                      sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                                                                                                                                      2⤵
                                                                                                                                        PID:946
                                                                                                                                      • /bin/sh
                                                                                                                                        sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                                                                                                                                        2⤵
                                                                                                                                          PID:947
                                                                                                                                        • /bin/sh
                                                                                                                                          sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                                                                                                                                          2⤵
                                                                                                                                            PID:948
                                                                                                                                          • /bin/sh
                                                                                                                                            sh -c "iptables -A OUTPUT -d 169.58.180.190 -j ACCEPT 2>/dev/null"
                                                                                                                                            2⤵
                                                                                                                                              PID:949
                                                                                                                                            • /bin/sh
                                                                                                                                              sh -c "iptables -A INPUT -s 169.58.180.190 -j ACCEPT 2>/dev/null"
                                                                                                                                              2⤵
                                                                                                                                                PID:950
                                                                                                                                              • /bin/sh
                                                                                                                                                sh -c "iptables -F 2>/dev/null"
                                                                                                                                                2⤵
                                                                                                                                                • System Network Configuration Discovery
                                                                                                                                                PID:951
                                                                                                                                              • /bin/sh
                                                                                                                                                sh -c "iptables -X 2>/dev/null"
                                                                                                                                                2⤵
                                                                                                                                                • System Network Configuration Discovery
                                                                                                                                                PID:952
                                                                                                                                              • /bin/sh
                                                                                                                                                sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                                                                                                                                                2⤵
                                                                                                                                                  PID:953
                                                                                                                                                • /bin/sh
                                                                                                                                                  sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                                                                                                                                                  2⤵
                                                                                                                                                    PID:954
                                                                                                                                                  • /bin/sh
                                                                                                                                                    sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                                                                                                                                                    2⤵
                                                                                                                                                      PID:955
                                                                                                                                                    • /bin/sh
                                                                                                                                                      sh -c "iptables -A OUTPUT -d 209.126.6.26 -j ACCEPT 2>/dev/null"
                                                                                                                                                      2⤵
                                                                                                                                                        PID:956
                                                                                                                                                      • /bin/sh
                                                                                                                                                        sh -c "iptables -A INPUT -s 209.126.6.26 -j ACCEPT 2>/dev/null"
                                                                                                                                                        2⤵
                                                                                                                                                          PID:957
                                                                                                                                                        • /bin/sh
                                                                                                                                                          sh -c "iptables -F 2>/dev/null"
                                                                                                                                                          2⤵
                                                                                                                                                          • System Network Configuration Discovery
                                                                                                                                                          PID:958
                                                                                                                                                        • /bin/sh
                                                                                                                                                          sh -c "iptables -X 2>/dev/null"
                                                                                                                                                          2⤵
                                                                                                                                                            PID:959
                                                                                                                                                          • /bin/sh
                                                                                                                                                            sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                                                                                                                                                            2⤵
                                                                                                                                                            • System Network Configuration Discovery
                                                                                                                                                            PID:960
                                                                                                                                                          • /bin/sh
                                                                                                                                                            sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                                                                                                                                                            2⤵
                                                                                                                                                              PID:961
                                                                                                                                                            • /bin/sh
                                                                                                                                                              sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                                                                                                                                                              2⤵
                                                                                                                                                              • System Network Configuration Discovery
                                                                                                                                                              PID:962
                                                                                                                                                            • /bin/sh
                                                                                                                                                              sh -c "iptables -A OUTPUT -d 169.58.180.190 -j ACCEPT 2>/dev/null"
                                                                                                                                                              2⤵
                                                                                                                                                                PID:963
                                                                                                                                                              • /bin/sh
                                                                                                                                                                sh -c "iptables -A INPUT -s 169.58.180.190 -j ACCEPT 2>/dev/null"
                                                                                                                                                                2⤵
                                                                                                                                                                  PID:964
                                                                                                                                                                • /bin/sh
                                                                                                                                                                  sh -c "iptables -F 2>/dev/null"
                                                                                                                                                                  2⤵
                                                                                                                                                                  • System Network Configuration Discovery
                                                                                                                                                                  PID:965
                                                                                                                                                                • /bin/sh
                                                                                                                                                                  sh -c "iptables -X 2>/dev/null"
                                                                                                                                                                  2⤵
                                                                                                                                                                    PID:966
                                                                                                                                                                  • /bin/sh
                                                                                                                                                                    sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                                                                                                                                                                    2⤵
                                                                                                                                                                      PID:967
                                                                                                                                                                    • /bin/sh
                                                                                                                                                                      sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                                                                                                                                                                      2⤵
                                                                                                                                                                        PID:968
                                                                                                                                                                      • /bin/sh
                                                                                                                                                                        sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                                                                                                                                                                        2⤵
                                                                                                                                                                          PID:969
                                                                                                                                                                        • /bin/sh
                                                                                                                                                                          sh -c "iptables -A OUTPUT -d 209.126.6.26 -j ACCEPT 2>/dev/null"
                                                                                                                                                                          2⤵
                                                                                                                                                                            PID:970
                                                                                                                                                                          • /bin/sh
                                                                                                                                                                            sh -c "iptables -A INPUT -s 209.126.6.26 -j ACCEPT 2>/dev/null"
                                                                                                                                                                            2⤵
                                                                                                                                                                              PID:971
                                                                                                                                                                            • /bin/sh
                                                                                                                                                                              sh -c "iptables -F 2>/dev/null"
                                                                                                                                                                              2⤵
                                                                                                                                                                                PID:972
                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                sh -c "iptables -X 2>/dev/null"
                                                                                                                                                                                2⤵
                                                                                                                                                                                • System Network Configuration Discovery
                                                                                                                                                                                PID:973
                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                                                                                                                                                                                2⤵
                                                                                                                                                                                  PID:974
                                                                                                                                                                                • /bin/sh
                                                                                                                                                                                  sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                                                                                                                                                                                  2⤵
                                                                                                                                                                                  • System Network Configuration Discovery
                                                                                                                                                                                  PID:975
                                                                                                                                                                                • /bin/sh
                                                                                                                                                                                  sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                                                                                                                                                                                  2⤵
                                                                                                                                                                                    PID:976
                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                    sh -c "iptables -A OUTPUT -d 169.58.180.190 -j ACCEPT 2>/dev/null"
                                                                                                                                                                                    2⤵
                                                                                                                                                                                      PID:977
                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                      sh -c "iptables -A INPUT -s 169.58.180.190 -j ACCEPT 2>/dev/null"
                                                                                                                                                                                      2⤵
                                                                                                                                                                                        PID:978
                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                        sh -c "iptables -F 2>/dev/null"
                                                                                                                                                                                        2⤵
                                                                                                                                                                                          PID:979
                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                          sh -c "iptables -X 2>/dev/null"
                                                                                                                                                                                          2⤵
                                                                                                                                                                                          • System Network Configuration Discovery
                                                                                                                                                                                          PID:980
                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                          sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                                                                                                                                                                                          2⤵
                                                                                                                                                                                            PID:981
                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                            sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • System Network Configuration Discovery
                                                                                                                                                                                            PID:982
                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                            sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • System Network Configuration Discovery
                                                                                                                                                                                            PID:983
                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                            sh -c "iptables -A OUTPUT -d 209.126.6.26 -j ACCEPT 2>/dev/null"
                                                                                                                                                                                            2⤵
                                                                                                                                                                                              PID:984
                                                                                                                                                                                            • /bin/sh
                                                                                                                                                                                              sh -c "iptables -A INPUT -s 209.126.6.26 -j ACCEPT 2>/dev/null"
                                                                                                                                                                                              2⤵
                                                                                                                                                                                                PID:985
                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                sh -c "iptables -F 2>/dev/null"
                                                                                                                                                                                                2⤵
                                                                                                                                                                                                • System Network Configuration Discovery
                                                                                                                                                                                                PID:986
                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                sh -c "iptables -X 2>/dev/null"
                                                                                                                                                                                                2⤵
                                                                                                                                                                                                • System Network Configuration Discovery
                                                                                                                                                                                                PID:987
                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                                                                                                                                                                                                2⤵
                                                                                                                                                                                                • System Network Configuration Discovery
                                                                                                                                                                                                PID:988
                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                                                                                                                                                                                                2⤵
                                                                                                                                                                                                  PID:989
                                                                                                                                                                                                • /bin/sh
                                                                                                                                                                                                  sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                  • System Network Configuration Discovery
                                                                                                                                                                                                  PID:990
                                                                                                                                                                                                • /bin/sh
                                                                                                                                                                                                  sh -c "iptables -A OUTPUT -d 169.58.180.190 -j ACCEPT 2>/dev/null"
                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                    PID:991
                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                    sh -c "iptables -A INPUT -s 169.58.180.190 -j ACCEPT 2>/dev/null"
                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                      PID:992
                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                      sh -c "iptables -F 2>/dev/null"
                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                      • System Network Configuration Discovery
                                                                                                                                                                                                      PID:993
                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                      sh -c "iptables -X 2>/dev/null"
                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                        PID:994
                                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                                        sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                        • System Network Configuration Discovery
                                                                                                                                                                                                        PID:995
                                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                                        sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                          PID:996
                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                          sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                            PID:997
                                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                                            sh -c "iptables -A OUTPUT -d 209.126.6.26 -j ACCEPT 2>/dev/null"
                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                              PID:998
                                                                                                                                                                                                            • /bin/sh
                                                                                                                                                                                                              sh -c "iptables -A INPUT -s 209.126.6.26 -j ACCEPT 2>/dev/null"
                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                PID:999
                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                sh -c "iptables -F 2>/dev/null"
                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                  PID:1000
                                                                                                                                                                                                                • /bin/sh
                                                                                                                                                                                                                  sh -c "iptables -X 2>/dev/null"
                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                  • System Network Configuration Discovery
                                                                                                                                                                                                                  PID:1001
                                                                                                                                                                                                                • /bin/sh
                                                                                                                                                                                                                  sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                    PID:1002
                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                    sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                      PID:1003
                                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                                      sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                      • System Network Configuration Discovery
                                                                                                                                                                                                                      PID:1004
                                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                                      sh -c "iptables -A OUTPUT -d 169.58.180.190 -j ACCEPT 2>/dev/null"
                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                        PID:1005
                                                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                                                        sh -c "iptables -A INPUT -s 169.58.180.190 -j ACCEPT 2>/dev/null"
                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                          PID:1006
                                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                                          sh -c "iptables -F 2>/dev/null"
                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                          • System Network Configuration Discovery
                                                                                                                                                                                                                          PID:1007
                                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                                          sh -c "iptables -X 2>/dev/null"
                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                          • System Network Configuration Discovery
                                                                                                                                                                                                                          PID:1008
                                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                                          sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                            PID:1009
                                                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                                                            sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                              PID:1010
                                                                                                                                                                                                                            • /bin/sh
                                                                                                                                                                                                                              sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                PID:1011
                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                sh -c "iptables -A OUTPUT -d 209.126.6.26 -j ACCEPT 2>/dev/null"
                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                  PID:1012
                                                                                                                                                                                                                                • /bin/sh
                                                                                                                                                                                                                                  sh -c "iptables -A INPUT -s 209.126.6.26 -j ACCEPT 2>/dev/null"
                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                    PID:1013
                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                    sh -c "iptables -F 2>/dev/null"
                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                    • System Network Configuration Discovery
                                                                                                                                                                                                                                    PID:1014
                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                    sh -c "iptables -X 2>/dev/null"
                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                    • System Network Configuration Discovery
                                                                                                                                                                                                                                    PID:1015
                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                    sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                    • System Network Configuration Discovery
                                                                                                                                                                                                                                    PID:1016
                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                    sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                      PID:1017
                                                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                                                      sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                        PID:1018
                                                                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                                                                        sh -c "iptables -A OUTPUT -d 169.58.180.190 -j ACCEPT 2>/dev/null"
                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                          PID:1019
                                                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                                                          sh -c "iptables -A INPUT -s 169.58.180.190 -j ACCEPT 2>/dev/null"
                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                            PID:1020
                                                                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                                                                            sh -c "iptables -F 2>/dev/null"
                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                            • System Network Configuration Discovery
                                                                                                                                                                                                                                            PID:1022
                                                                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                                                                            sh -c "iptables -X 2>/dev/null"
                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                              PID:1023
                                                                                                                                                                                                                                            • /bin/sh
                                                                                                                                                                                                                                              sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                PID:1024
                                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                                sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                • System Network Configuration Discovery
                                                                                                                                                                                                                                                PID:1025
                                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                                sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                  PID:1026
                                                                                                                                                                                                                                                • /bin/sh
                                                                                                                                                                                                                                                  sh -c "iptables -A OUTPUT -d 209.126.6.26 -j ACCEPT 2>/dev/null"
                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                    PID:1027
                                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                                    sh -c "iptables -A INPUT -s 209.126.6.26 -j ACCEPT 2>/dev/null"
                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                      PID:1028
                                                                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                                                                      sh -c "iptables -F 2>/dev/null"
                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                        PID:1029
                                                                                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                                                                                        sh -c "iptables -X 2>/dev/null"
                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                        • System Network Configuration Discovery
                                                                                                                                                                                                                                                        PID:1030
                                                                                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                                                                                        sh -c "iptables -P INPUT ACCEPT 2>/dev/null"
                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                          PID:1031
                                                                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                                                                          sh -c "iptables -P FORWARD ACCEPT 2>/dev/null"
                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                            PID:1032
                                                                                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                                                                                            sh -c "iptables -P OUTPUT ACCEPT 2>/dev/null"
                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                              PID:1033
                                                                                                                                                                                                                                                            • /bin/sh
                                                                                                                                                                                                                                                              sh -c "iptables -A OUTPUT -d 169.58.180.190 -j ACCEPT 2>/dev/null"
                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                PID:1034
                                                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                                                sh -c "iptables -A INPUT -s 169.58.180.190 -j ACCEPT 2>/dev/null"
                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                  PID:1035

                                                                                                                                                                                                                                                              Network

                                                                                                                                                                                                                                                                    MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                                                                    Replay Monitor

                                                                                                                                                                                                                                                                    Loading Replay Monitor...

                                                                                                                                                                                                                                                                    Downloads