5d7d7c4c8f67db20efa5b5bc3ca2daae643daee229421d22969f9fcb270eba20

execution persistence privilege_escalation

description	ioc	Process
File opened for modification	/etc/ld.so.preload	reaver.mips.elf

Deletes itself 1 IoCs

pid	Process
704	reaver.mips.elf

Modifies the /etc/hosts DNS resolution file 1 TTPs 1 IoCs

Modifying the /etc/hosts name-resolution file changes IP routing, which can facilitate traffic hijacking or the blocking of (security update) endpoints.

Adversary-in-the-Middle

T1557

description	ioc	Process
File opened for modification	/etc/hosts	reaver.mips.elf

Creates/modifies Cron job 1 TTPs 6 IoCs

Cron allows running tasks on a schedule, and is commonly used for malware persistence.

Cron

persistence privilege_escalation defense_evasion

description	ioc	Process
File opened for modification	/var/spool/cron/crontabs/tmp.Kgeqqi	crontab
File opened for modification	/etc/cron.d/reavernet	reaver.mips.elf
File opened for modification	/etc/cron.d/ntp-sync	reaver.mips.elf
File opened for modification	/etc/cron.d/network-dispatch	reaver.mips.elf
File opened for modification	/etc/crontab	reaver.mips.elf
File opened for modification	/etc/cron.d/reavernet-heal	reaver.mips.elf

Creates/modifies environment variables 1 TTPs 11 IoCs

Creating/modifying environment variables is a common persistence mechanism.

Path Interception by PATH Environment Variable

description	ioc	Process
File opened for modification	/home/admin/.profile	reaver.mips.elf
File opened for modification	/home/pi/.bashrc	reaver.mips.elf
File opened for modification	/home/user/.bashrc	reaver.mips.elf
File opened for modification	/home/user/.profile	reaver.mips.elf
File opened for modification	/etc/profile.d/reavernet.sh	reaver.mips.elf
File opened for modification	/root/.bashrc	reaver.mips.elf
File opened for modification	/root/.profile	reaver.mips.elf
File opened for modification	/etc/bash.bashrc	reaver.mips.elf
File opened for modification	/home/admin/.bashrc	reaver.mips.elf
File opened for modification	/home/pi/.profile	reaver.mips.elf
File opened for modification	/etc/profile	reaver.mips.elf

Enumerates active TCP sockets 1 TTPs 64 IoCs

Gets active TCP sockets from /proc virtual filesystem.

System Network Connections Discovery

T1049

description	ioc	Process
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found

Modifies init.d 2 TTPs 1 IoCs

Adds/modifies system service, likely for persistence.

persistence

Boot or Logon Autostart Execution

RC Scripts

description	ioc	Process
File opened for modification	/etc/init.d/syslogd-rotate	reaver.mips.elf

Modifies rc script 2 TTPs 1 IoCs

Adding/modifying system rc scripts is a common persistence mechanism.

persistence

Boot or Logon Autostart Execution

RC Scripts

persistence privilege_escalation

description	ioc	Process
File opened for modification	/etc/rc.local	reaver.mips.elf

Modifies systemd 2 TTPs 2 IoCs

Adds/ modifies systemd service files. Likely to achieve persistence.

XDG Autostart Entries

T1547.013

Systemd Service

T1543.002

description	ioc	Process
File opened for modification	/etc/systemd/system/syslogd-rotate.service	reaver.mips.elf
File opened for modification	/etc/systemd/system/network-dispatch.service	reaver.mips.elf

Modifies Bash startup script 2 TTPs 11 IoCs

persistence

Boot or Logon Autostart Execution

Unix Shell Configuration Modification

T1546.004

description	ioc	Process
File opened for modification	/etc/bash.bashrc	reaver.mips.elf
File opened for modification	/home/admin/.bashrc	reaver.mips.elf
File opened for modification	/home/pi/.bashrc	reaver.mips.elf
File opened for modification	/home/pi/.profile	reaver.mips.elf
File opened for modification	/home/admin/.profile	reaver.mips.elf
File opened for modification	/home/user/.bashrc	reaver.mips.elf
File opened for modification	/home/user/.profile	reaver.mips.elf
File opened for modification	/etc/profile.d/reavernet.sh	reaver.mips.elf
File opened for modification	/root/.bashrc	reaver.mips.elf
File opened for modification	/root/.profile	reaver.mips.elf
File opened for modification	/etc/profile	reaver.mips.elf

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	kblockd222	704	reaver.mips.elf

Reads system network configuration 1 TTPs 64 IoCs

Uses contents of /proc filesystem to enumerate network settings.

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/status	exe
File opened for reading	/proc/self/status	exe
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/status	exe
File opened for reading	/proc/self/status	exe
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/status	exe
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/status	exe
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/status	exe
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/status	exe
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/filesystems	crontab
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/status	exe
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/status	exe
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/status	reaver.mips.elf
File opened for reading	/proc/self/status	exe
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/status	exe

System Network Configuration Discovery 1 TTPs 64 IoCs

Adversaries may gather information about the network configuration of a system.

System Network Configuration Discovery

T1016

pid	Process
990	chattr
1172	Process not Found
1255	Process not Found
1278	Process not Found
1491	Process not Found
821	chattr
846	chattr
871	chattr
1014	Process not Found
1246	Process not Found
1508	Process not Found
708	chattr
1194	Process not Found
1344	Process not Found
1530	Process not Found
1519	Process not Found
763	chattr
956	chattr
1121	Process not Found
1074	Process not Found
1038	Process not Found
1592	Process not Found
764	chattr
919	chattr
1549	Process not Found
1086	Process not Found
1038	Process not Found
797	chattr
1296	Process not Found
1520	Process not Found
1436	Process not Found
1604	Process not Found
870	chattr
907	chattr
1195	Process not Found
1194	Process not Found
1562	Process not Found
1638	Process not Found
1567	Process not Found
1478	Process not Found
1358	Process not Found
906	chattr
954	chattr
1102	Process not Found
1103	Process not Found
1297	Process not Found
1309	Process not Found
1592	Process not Found
929	chattr
944	chattr
1184	Process not Found
1337	Process not Found
955	chattr
1520	Process not Found
720	chattr
821	chattr
834	chattr
1637	Process not Found
1137	Process not Found
779	chattr
791	chattr
851	chattr
1015	Process not Found
1076	Process not Found

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/reaver.mips.elf (deleted).salt	reaver.mips.elf

/tmp/reaver.mips.elf
/tmp/reaver.mips.elf
1⤵
- Modifies the dynamic linker configuration file
- Deletes itself
- Modifies the /etc/hosts DNS resolution file
- Creates/modifies Cron job
- Creates/modifies environment variables
- Modifies init.d
- Modifies rc script
- Modifies systemd
- Modifies Bash startup script
- Changes its process name
- Reads runtime system information
- Writes file to tmp directory
PID:704
- /usr/local/sbin/chattr
  chattr +i /tmp/reaver.mips.elf
  2⤵
  PID:707
- /usr/local/sbin/chattr
  chattr +a /tmp/reaver.mips.elf
  2⤵
  PID:708
- /usr/local/bin/chattr
  chattr +a /tmp/reaver.mips.elf
  2⤵
  PID:708
- /usr/local/bin/chattr
  chattr +i /tmp/reaver.mips.elf
  2⤵
  PID:707
- /usr/sbin/chattr
  chattr +i /tmp/reaver.mips.elf
  2⤵
  PID:707
- /usr/sbin/chattr
  chattr +a /tmp/reaver.mips.elf
  2⤵
  - System Network Configuration Discovery
  PID:708
- /usr/bin/chattr
  chattr +a /tmp/reaver.mips.elf
  2⤵
  PID:708
- /bin/sh
  sh -c "crontab -l 2>/dev/null"
  2⤵
  PID:709
- - /usr/bin/crontab
    crontab -l
    3⤵
    PID:710
- /usr/bin/chattr
  chattr +i /tmp/reaver.mips.elf
  2⤵
  PID:707
- /bin/sh
  sh -c "(crontab -l 2>/dev/null; echo '@reboot /usr/lib/syslogd-rotate') | crontab - 2>/dev/null"
  2⤵
  PID:712
- - /usr/bin/crontab
    crontab -
    3⤵
    - Creates/modifies Cron job
    - Reads runtime system information
    PID:714
- - /usr/bin/crontab
    crontab -l
    3⤵
    PID:715
- /usr/local/sbin/chattr
  chattr +i "/tmp/reaver.mips.elf (deleted)"
  2⤵
  PID:711
- /usr/local/bin/chattr
  chattr +i "/tmp/reaver.mips.elf (deleted)"
  2⤵
  PID:711
- /usr/local/sbin/chattr
  chattr +a "/tmp/reaver.mips.elf (deleted)"
  2⤵
  PID:716
- /usr/sbin/chattr
  chattr +i "/tmp/reaver.mips.elf (deleted)"
  2⤵
  PID:711
- /usr/local/bin/chattr
  chattr +a "/tmp/reaver.mips.elf (deleted)"
  2⤵
  PID:716
- /usr/sbin/chattr
  chattr +a "/tmp/reaver.mips.elf (deleted)"
  2⤵
  PID:716
- /usr/bin/chattr
  chattr +i "/tmp/reaver.mips.elf (deleted)"
  2⤵
  PID:711
- /usr/bin/chattr
  chattr +a "/tmp/reaver.mips.elf (deleted)"
  2⤵
  PID:716
- /proc/self/exe
  /proc/self/exe
  2⤵
  - Enumerates active TCP sockets
  - Reads system network configuration
  PID:706
- - /usr/local/sbin/chattr
    chattr +i "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:719
- - /usr/local/bin/chattr
    chattr +i "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:719
- - /usr/sbin/chattr
    chattr +i "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:719
- - /usr/bin/chattr
    chattr +i "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:719
- - /usr/local/sbin/chattr
    chattr +a "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:720
- - /usr/local/bin/chattr
    chattr +a "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:720
- - /usr/sbin/chattr
    chattr +a "/tmp/reaver.mips.elf (deleted)"
    3⤵
    - System Network Configuration Discovery
    PID:720
- - /usr/bin/chattr
    chattr +a "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:720
- - /usr/local/sbin/chattr
    chattr +i "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:721
- - /usr/local/bin/chattr
    chattr +i "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:721
- - /usr/sbin/chattr
    chattr +i "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:721
- - /usr/bin/chattr
    chattr +i "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:721
- - /usr/local/sbin/chattr
    chattr +a "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:722
- - /usr/local/bin/chattr
    chattr +a "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:722
- - /usr/sbin/chattr
    chattr +a "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:722
- - /usr/bin/chattr
    chattr +a "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:722
- - /proc/self/exe
    /proc/self/exe
    3⤵
    - Enumerates active TCP sockets
    - Reads system network configuration
    PID:718
  - - /usr/local/sbin/chattr
      chattr +i "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:725
  - - /usr/local/bin/chattr
      chattr +i "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:725
  - - /usr/sbin/chattr
      chattr +i "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:725
  - - /usr/bin/chattr
      chattr +i "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:725
  - - /usr/local/sbin/chattr
      chattr +a "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:726
  - - /usr/local/bin/chattr
      chattr +a "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:726
  - - /usr/sbin/chattr
      chattr +a "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:726
  - - /usr/bin/chattr
      chattr +a "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:726
  - - /usr/local/sbin/chattr
      chattr +i "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:727
  - - /usr/local/bin/chattr
      chattr +i "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:727
  - - /usr/sbin/chattr
      chattr +i "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:727
  - - /usr/bin/chattr
      chattr +i "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:727
  - - /usr/local/sbin/chattr
      chattr +a "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:728
  - - /usr/local/bin/chattr
      chattr +a "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:728
  - - /usr/sbin/chattr
      chattr +a "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:728
  - - /usr/bin/chattr
      chattr +a "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:728
  - - /proc/self/exe
      /proc/self/exe
      4⤵
      Enumerates active TCP sockets
      Reads system network configuration
      Reads runtime system information
      PID:724
    - - /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:731
    - - /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:731
    - - /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:731
    - - /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:731
    - - /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:732
    - - /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:732
    - - /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:732
    - - /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:732
    - - /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:733
    - - /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:733
    - - /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:733
    - - /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:733
    - - /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:734
    - - /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:734
    - - /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:734
    - - /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:734
    - - /proc/self/exe
        
        /proc/self/exe
        5⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:730
      - /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:737
      - /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:737
      - /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:737
      - /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:737
      - /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:738
      - /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:738
      - /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:738
      - /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:738
      - /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:739
      - /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:739
      - /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:739
      - /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:739
      - /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:740
      - /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:740
      - /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:740
      - /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:740
      - /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        6⤵
        
        PID:741
      - /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        6⤵
        
        PID:741
      - /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        6⤵
        
        PID:741
      - /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        6⤵
        
        PID:741
      - /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        6⤵
        
        PID:742
      - /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        6⤵
        
        PID:742
      - /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        6⤵
        
        PID:742
      - /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        6⤵
        
        PID:742
      - /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        6⤵
        
        PID:743
      - /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        6⤵
        
        PID:743
      - /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        6⤵
        
        PID:743
      - /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        6⤵
        
        PID:743
      - /proc/self/exe
        
        /proc/self/exe
        6⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:736
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        7⤵
        
        PID:744
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        7⤵
        
        PID:744
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        7⤵
        
        PID:744
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        7⤵
        
        PID:744
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        7⤵
        
        PID:745
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        7⤵
        
        PID:745
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        7⤵
        
        PID:745
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        7⤵
        
        PID:745
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        7⤵
        
        PID:746
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        7⤵
        
        PID:746
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        7⤵
        
        PID:746
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        7⤵
        
        PID:746
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:749
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:749
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:749
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:749
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:750
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:750
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:750
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:750
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:751
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:751
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:751
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:751
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:752
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:752
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:752
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:752
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        7⤵
        
        PID:753
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        7⤵
        
        PID:753
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        7⤵
        
        PID:753
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        7⤵
        
        PID:753
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        7⤵
        
        PID:754
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        7⤵
        
        PID:754
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        7⤵
        
        PID:754
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        7⤵
        
        PID:754
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        7⤵
        
        PID:755
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        7⤵
        
        PID:755
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        7⤵
        
        PID:755
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        7⤵
        
        PID:755
        
        /proc/self/exe
        
        /proc/self/exe
        7⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:748
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        8⤵
        
        PID:756
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        8⤵
        
        PID:756
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        8⤵
        
        PID:756
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        8⤵
        
        PID:756
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        8⤵
        
        PID:757
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        8⤵
        
        PID:757
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        8⤵
        
        PID:757
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        8⤵
        
        PID:757
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        8⤵
        
        PID:758
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        8⤵
        
        PID:758
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        8⤵
        
        PID:758
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        8⤵
        
        PID:758
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:761
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:761
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:761
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:761
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:762
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:762
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:762
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:762
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:763
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        8⤵
        System Network Configuration Discovery
        
        PID:763
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:763
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:763
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        8⤵
        System Network Configuration Discovery
        
        PID:764
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:764
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:764
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:764
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        8⤵
        
        PID:765
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        8⤵
        
        PID:765
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        8⤵
        
        PID:765
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        8⤵
        
        PID:765
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        8⤵
        
        PID:766
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        8⤵
        
        PID:766
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        8⤵
        
        PID:766
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        8⤵
        
        PID:766
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        8⤵
        
        PID:767
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        8⤵
        
        PID:767
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        8⤵
        
        PID:767
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        8⤵
        
        PID:767
        
        /proc/self/exe
        
        /proc/self/exe
        8⤵
        Enumerates active TCP sockets
        Reads system network configuration
        
        PID:760
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        9⤵
        
        PID:768
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        9⤵
        
        PID:768
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        9⤵
        
        PID:768
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        9⤵
        
        PID:768
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        9⤵
        
        PID:769
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        9⤵
        
        PID:769
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        9⤵
        
        PID:769
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        9⤵
        
        PID:769
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        9⤵
        
        PID:770
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        9⤵
        
        PID:770
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        9⤵
        
        PID:770
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        9⤵
        
        PID:770
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:773
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:773
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:773
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:773
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:774
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:774
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:774
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:774
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        9⤵
        
        PID:775
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        9⤵
        
        PID:775
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        9⤵
        
        PID:775
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        9⤵
        
        PID:775
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        9⤵
        
        PID:776
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        9⤵
        
        PID:776
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        9⤵
        
        PID:776
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        9⤵
        
        PID:776
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        9⤵
        
        PID:777
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        9⤵
        
        PID:777
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        9⤵
        
        PID:777
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        9⤵
        
        PID:777
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:778
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:778
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:778
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:778
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:779
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:779
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:779
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        9⤵
        System Network Configuration Discovery
        
        PID:779
        
        /proc/self/exe
        
        /proc/self/exe
        9⤵
        Reads system network configuration
        Reads runtime system information
        
        PID:772
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        10⤵
        
        PID:780
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        10⤵
        
        PID:780
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        10⤵
        
        PID:780
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        10⤵
        
        PID:780
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        10⤵
        
        PID:781
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        10⤵
        
        PID:781
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        10⤵
        
        PID:781
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        10⤵
        
        PID:781
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        10⤵
        
        PID:782
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        10⤵
        
        PID:782
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        10⤵
        
        PID:782
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        10⤵
        
        PID:782
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:785
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:785
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:785
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:785
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:786
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:786
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:786
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:786
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        10⤵
        
        PID:787
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        10⤵
        
        PID:787
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        10⤵
        
        PID:787
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        10⤵
        
        PID:787
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        10⤵
        
        PID:788
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        10⤵
        
        PID:788
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        10⤵
        
        PID:788
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        10⤵
        
        PID:788
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        10⤵
        
        PID:789
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        10⤵
        
        PID:789
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        10⤵
        
        PID:789
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        10⤵
        
        PID:789
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:790
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:790
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:790
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:790
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:791
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        10⤵
        System Network Configuration Discovery
        
        PID:791
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:791
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:791
        
        /proc/self/exe
        
        /proc/self/exe
        10⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:784
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        11⤵
        
        PID:792
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        11⤵
        
        PID:792
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        11⤵
        
        PID:792
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        11⤵
        
        PID:792
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        11⤵
        
        PID:793
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        11⤵
        
        PID:793
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        11⤵
        
        PID:793
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        11⤵
        
        PID:793
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        11⤵
        
        PID:794
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        11⤵
        
        PID:794
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        11⤵
        
        PID:794
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        11⤵
        
        PID:794
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:797
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        11⤵
        System Network Configuration Discovery
        
        PID:797
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:797
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:797
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:798
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:798
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:798
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:798
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:799
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:799
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:799
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:799
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:800
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:800
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:800
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:800
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        11⤵
        
        PID:801
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        11⤵
        
        PID:801
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        11⤵
        
        PID:801
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        11⤵
        
        PID:801
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        11⤵
        
        PID:802
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        11⤵
        
        PID:802
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        11⤵
        
        PID:802
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        11⤵
        
        PID:802
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        11⤵
        
        PID:803
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        11⤵
        
        PID:803
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        11⤵
        
        PID:803
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        11⤵
        
        PID:803
        
        /proc/self/exe
        
        /proc/self/exe
        11⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:796
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        12⤵
        
        PID:804
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        12⤵
        
        PID:804
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        12⤵
        
        PID:804
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        12⤵
        
        PID:804
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        12⤵
        
        PID:805
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        12⤵
        
        PID:805
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        12⤵
        
        PID:805
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        12⤵
        
        PID:805
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        12⤵
        
        PID:806
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        12⤵
        
        PID:806
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        12⤵
        
        PID:806
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        12⤵
        
        PID:806
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:809
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:809
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:809
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:809
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:810
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:810
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:810
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:810
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        12⤵
        
        PID:811
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        12⤵
        
        PID:811
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        12⤵
        
        PID:811
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        12⤵
        
        PID:811
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        12⤵
        
        PID:812
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        12⤵
        
        PID:812
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        12⤵
        
        PID:812
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        12⤵
        
        PID:812
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        12⤵
        
        PID:813
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        12⤵
        
        PID:813
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        12⤵
        
        PID:813
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        12⤵
        
        PID:813
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:814
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:814
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:814
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:814
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:815
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:815
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:815
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:815
        
        /proc/self/exe
        
        /proc/self/exe
        12⤵
        Enumerates active TCP sockets
        Reads system network configuration
        
        PID:808
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        13⤵
        
        PID:816
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        13⤵
        
        PID:816
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        13⤵
        
        PID:816
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        13⤵
        
        PID:816
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        13⤵
        
        PID:817
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        13⤵
        
        PID:817
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        13⤵
        
        PID:817
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        13⤵
        
        PID:817
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        13⤵
        
        PID:818
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        13⤵
        
        PID:818
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        13⤵
        
        PID:818
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        13⤵
        
        PID:818
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:821
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        13⤵
        System Network Configuration Discovery
        
        PID:821
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:821
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        13⤵
        System Network Configuration Discovery
        
        PID:821
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:822
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:822
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:822
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:822
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:823
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:823
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:823
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:823
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:824
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:824
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:824
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:824
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        13⤵
        
        PID:825
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        13⤵
        
        PID:825
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        13⤵
        
        PID:825
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        13⤵
        
        PID:825
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        13⤵
        
        PID:826
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        13⤵
        
        PID:826
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        13⤵
        
        PID:826
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        13⤵
        
        PID:826
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        13⤵
        
        PID:827
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        13⤵
        
        PID:827
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        13⤵
        
        PID:827
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        13⤵
        
        PID:827
        
        /proc/self/exe
        
        /proc/self/exe
        13⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:820
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        14⤵
        
        PID:828
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        14⤵
        
        PID:828
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        14⤵
        
        PID:828
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        14⤵
        
        PID:828
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        14⤵
        
        PID:829
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        14⤵
        
        PID:829
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        14⤵
        
        PID:829
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        14⤵
        
        PID:829
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        14⤵
        
        PID:830
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        14⤵
        
        PID:830
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        14⤵
        
        PID:830
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        14⤵
        
        PID:830
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:833
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:833
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:833
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:833
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        14⤵
        System Network Configuration Discovery
        
        PID:834
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:834
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:834
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:834
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:835
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:835
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:835
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:835
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:836
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:836
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:836
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:836
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        14⤵
        
        PID:837
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        14⤵
        
        PID:837
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        14⤵
        
        PID:837
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        14⤵
        
        PID:837
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        14⤵
        
        PID:838
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        14⤵
        
        PID:838
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        14⤵
        
        PID:838
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        14⤵
        
        PID:838
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        14⤵
        
        PID:839
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        14⤵
        
        PID:839
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        14⤵
        
        PID:839
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        14⤵
        
        PID:839
        
        /proc/self/exe
        
        /proc/self/exe
        14⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:832
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        15⤵
        
        PID:840
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        15⤵
        
        PID:840
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        15⤵
        
        PID:840
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        15⤵
        
        PID:840
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        15⤵
        
        PID:841
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        15⤵
        
        PID:841
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        15⤵
        
        PID:841
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        15⤵
        
        PID:841
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        15⤵
        
        PID:842
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        15⤵
        
        PID:842
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        15⤵
        
        PID:842
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        15⤵
        
        PID:842
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:845
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:845
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:845
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:845
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:846
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:846
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        15⤵
        System Network Configuration Discovery
        
        PID:846
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:846
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        15⤵
        
        PID:847
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        15⤵
        
        PID:847
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        15⤵
        
        PID:847
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        15⤵
        
        PID:847
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        15⤵
        
        PID:848
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        15⤵
        
        PID:848
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        15⤵
        
        PID:848
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        15⤵
        
        PID:848
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        15⤵
        
        PID:849
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        15⤵
        
        PID:849
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        15⤵
        
        PID:849
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        15⤵
        
        PID:849
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:850
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:850
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:850
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:850
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:851
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        15⤵
        System Network Configuration Discovery
        
        PID:851
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:851
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:851
        
        /proc/self/exe
        
        /proc/self/exe
        15⤵
        Reads system network configuration
        Reads runtime system information
        
        PID:844
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        16⤵
        
        PID:852
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        16⤵
        
        PID:852
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        16⤵
        
        PID:852
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        16⤵
        
        PID:852
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        16⤵
        
        PID:853
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        16⤵
        
        PID:853
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        16⤵
        
        PID:853
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        16⤵
        
        PID:853
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        16⤵
        
        PID:854
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        16⤵
        
        PID:854
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        16⤵
        
        PID:854
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        16⤵
        
        PID:854
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:857
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:857
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:857
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:857
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:858
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:858
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:858
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:858
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        16⤵
        
        PID:859
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        16⤵
        
        PID:859
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        16⤵
        
        PID:859
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        16⤵
        
        PID:859
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        16⤵
        
        PID:860
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        16⤵
        
        PID:860
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        16⤵
        
        PID:860
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        16⤵
        
        PID:860
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        16⤵
        
        PID:861
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        16⤵
        
        PID:861
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        16⤵
        
        PID:861
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        16⤵
        
        PID:861
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:862
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:862
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:862
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:862
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:863
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:863
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:863
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:863
        
        /proc/self/exe
        
        /proc/self/exe
        16⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:856
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        17⤵
        
        PID:864
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        17⤵
        
        PID:864
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        17⤵
        
        PID:864
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        17⤵
        
        PID:864
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        17⤵
        
        PID:865
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        17⤵
        
        PID:865
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        17⤵
        
        PID:865
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        17⤵
        
        PID:865
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        17⤵
        
        PID:866
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        17⤵
        
        PID:866
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        17⤵
        
        PID:866
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        17⤵
        
        PID:866
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:869
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:869
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:869
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:869
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        17⤵
        System Network Configuration Discovery
        
        PID:870
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:870
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:870
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:870
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        17⤵
        System Network Configuration Discovery
        
        PID:871
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:871
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:871
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:871
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:872
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:872
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:872
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:872
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        17⤵
        
        PID:873
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        17⤵
        
        PID:873
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        17⤵
        
        PID:873
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        17⤵
        
        PID:873
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        17⤵
        
        PID:874
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        17⤵
        
        PID:874
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        17⤵
        
        PID:874
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        17⤵
        
        PID:874
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        17⤵
        
        PID:875
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        17⤵
        
        PID:875
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        17⤵
        
        PID:875
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        17⤵
        
        PID:875
        
        /proc/self/exe
        
        /proc/self/exe
        17⤵
        Reads system network configuration
        Reads runtime system information
        
        PID:868
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        18⤵
        
        PID:876
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        18⤵
        
        PID:876
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        18⤵
        
        PID:876
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        18⤵
        
        PID:876
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        18⤵
        
        PID:877
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        18⤵
        
        PID:877
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        18⤵
        
        PID:877
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        18⤵
        
        PID:877
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        18⤵
        
        PID:878
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        18⤵
        
        PID:878
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        18⤵
        
        PID:878
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        18⤵
        
        PID:878
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:881
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:881
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:881
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:881
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:882
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:882
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:882
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:882
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        18⤵
        
        PID:883
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        18⤵
        
        PID:883
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        18⤵
        
        PID:883
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        18⤵
        
        PID:883
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        18⤵
        
        PID:884
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        18⤵
        
        PID:884
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        18⤵
        
        PID:884
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        18⤵
        
        PID:884
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        18⤵
        
        PID:885
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        18⤵
        
        PID:885
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        18⤵
        
        PID:885
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        18⤵
        
        PID:885
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:886
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:886
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:886
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:886
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:887
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:887
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:887
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:887
        
        /proc/self/exe
        
        /proc/self/exe
        18⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:880
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        19⤵
        
        PID:888
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        19⤵
        
        PID:888
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        19⤵
        
        PID:888
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        19⤵
        
        PID:888
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        19⤵
        
        PID:889
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        19⤵
        
        PID:889
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        19⤵
        
        PID:889
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        19⤵
        
        PID:889
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        19⤵
        
        PID:890
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        19⤵
        
        PID:890
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        19⤵
        
        PID:890
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        19⤵
        
        PID:890
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:893
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:893
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:893
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:893
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:894
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:894
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:894
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:894
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        19⤵
        
        PID:895
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        19⤵
        
        PID:895
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        19⤵
        
        PID:895
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        19⤵
        
        PID:895
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        19⤵
        
        PID:896
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        19⤵
        
        PID:896
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        19⤵
        
        PID:896
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        19⤵
        
        PID:896
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        19⤵
        
        PID:897
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        19⤵
        
        PID:897
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        19⤵
        
        PID:897
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        19⤵
        
        PID:897
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:898
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:898
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:898
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:898
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:899
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:899
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:899
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:899
        
        /proc/self/exe
        
        /proc/self/exe
        19⤵
        Enumerates active TCP sockets
        Reads system network configuration
        
        PID:892
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        20⤵
        
        PID:900
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        20⤵
        
        PID:900
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        20⤵
        
        PID:900
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        20⤵
        
        PID:900
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        20⤵
        
        PID:901
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        20⤵
        
        PID:901
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        20⤵
        
        PID:901
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        20⤵
        
        PID:901
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        20⤵
        
        PID:902
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        20⤵
        
        PID:902
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        20⤵
        
        PID:902
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        20⤵
        
        PID:902
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:905
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:905
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:905
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:905
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:906
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        20⤵
        System Network Configuration Discovery
        
        PID:906
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:906
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:906
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        20⤵
        System Network Configuration Discovery
        
        PID:907
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:907
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:907
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:907
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:908
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:908
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:908
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:908
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        20⤵
        
        PID:909
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        20⤵
        
        PID:909
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        20⤵
        
        PID:909
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        20⤵
        
        PID:909
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        20⤵
        
        PID:910
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        20⤵
        
        PID:910
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        20⤵
        
        PID:910
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        20⤵
        
        PID:910
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        20⤵
        
        PID:911
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        20⤵
        
        PID:911
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        20⤵
        
        PID:911
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        20⤵
        
        PID:911
        
        /proc/self/exe
        
        /proc/self/exe
        20⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:904
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        21⤵
        
        PID:912
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        21⤵
        
        PID:912
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        21⤵
        
        PID:912
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        21⤵
        
        PID:912
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        21⤵
        
        PID:913
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        21⤵
        
        PID:913
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        21⤵
        
        PID:913
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        21⤵
        
        PID:913
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        21⤵
        
        PID:914
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        21⤵
        
        PID:914
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        21⤵
        
        PID:914
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        21⤵
        
        PID:914
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:917
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:917
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:917
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:917
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:918
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:918
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:918
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:918
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:919
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        21⤵
        System Network Configuration Discovery
        
        PID:919
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:919
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:919
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:920
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:920
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:920
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:920
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        21⤵
        
        PID:921
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        21⤵
        
        PID:921
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        21⤵
        
        PID:921
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        21⤵
        
        PID:921
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        21⤵
        
        PID:922
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        21⤵
        
        PID:922
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        21⤵
        
        PID:922
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        21⤵
        
        PID:922
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        21⤵
        
        PID:923
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        21⤵
        
        PID:923
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        21⤵
        
        PID:923
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        21⤵
        
        PID:923
        
        /proc/self/exe
        
        /proc/self/exe
        21⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:916
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        22⤵
        
        PID:924
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        22⤵
        
        PID:924
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        22⤵
        
        PID:924
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        22⤵
        
        PID:924
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        22⤵
        
        PID:925
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        22⤵
        
        PID:925
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        22⤵
        
        PID:925
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        22⤵
        
        PID:925
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        22⤵
        
        PID:926
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        22⤵
        
        PID:926
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        22⤵
        
        PID:926
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        22⤵
        
        PID:926
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:929
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:929
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:929
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        22⤵
        System Network Configuration Discovery
        
        PID:929
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:930
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:930
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:930
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:930
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        22⤵
        
        PID:931
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        22⤵
        
        PID:931
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        22⤵
        
        PID:931
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        22⤵
        
        PID:931
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        22⤵
        
        PID:932
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        22⤵
        
        PID:932
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        22⤵
        
        PID:932
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        22⤵
        
        PID:932
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        22⤵
        
        PID:933
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        22⤵
        
        PID:933
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        22⤵
        
        PID:933
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        22⤵
        
        PID:933
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:934
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:934
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:934
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:934
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:935
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:935
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:935
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:935
        
        /proc/self/exe
        
        /proc/self/exe
        22⤵
        Reads system network configuration
        Reads runtime system information
        
        PID:928
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        23⤵
        
        PID:936
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        23⤵
        
        PID:936
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        23⤵
        
        PID:936
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        23⤵
        
        PID:936
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        23⤵
        
        PID:937
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        23⤵
        
        PID:937
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        23⤵
        
        PID:937
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        23⤵
        
        PID:937
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        23⤵
        
        PID:938
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        23⤵
        
        PID:938
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        23⤵
        
        PID:938
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        23⤵
        
        PID:938
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:941
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:941
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:941
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:941
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:942
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:942
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:942
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:942
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:943
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:943
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:943
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:943
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:944
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:944
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        23⤵
        System Network Configuration Discovery
        
        PID:944
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:944
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        23⤵
        
        PID:945
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        23⤵
        
        PID:945
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        23⤵
        
        PID:945
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        23⤵
        
        PID:945
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        23⤵
        
        PID:946
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        23⤵
        
        PID:946
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        23⤵
        
        PID:946
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        23⤵
        
        PID:946
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        23⤵
        
        PID:947
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        23⤵
        
        PID:947
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        23⤵
        
        PID:947
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        23⤵
        
        PID:947
        
        /proc/self/exe
        
        /proc/self/exe
        23⤵
        Enumerates active TCP sockets
        
        PID:940
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        24⤵
        
        PID:948
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        24⤵
        
        PID:948
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        24⤵
        
        PID:948
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        24⤵
        
        PID:948
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        24⤵
        
        PID:949
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        24⤵
        
        PID:949
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        24⤵
        
        PID:949
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        24⤵
        
        PID:949
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        24⤵
        
        PID:950
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        24⤵
        
        PID:950
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        24⤵
        
        PID:950
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        24⤵
        
        PID:950
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:953
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:953
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:953
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:953
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        24⤵
        System Network Configuration Discovery
        
        PID:954
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:954
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:954
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:954
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        24⤵
        System Network Configuration Discovery
        
        PID:955
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:955
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:955
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:955
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:956
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        24⤵
        System Network Configuration Discovery
        
        PID:956
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:956
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:956
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        24⤵
        
        PID:957
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        24⤵
        
        PID:957
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        24⤵
        
        PID:957
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        24⤵
        
        PID:957
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        24⤵
        
        PID:958
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        24⤵
        
        PID:958
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        24⤵
        
        PID:958
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        24⤵
        
        PID:958
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        24⤵
        
        PID:959
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        24⤵
        
        PID:959
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        24⤵
        
        PID:959
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        24⤵
        
        PID:959
        
        /proc/self/exe
        
        /proc/self/exe
        24⤵
        Enumerates active TCP sockets
        Reads system network configuration
        
        PID:952
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        25⤵
        
        PID:960
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        25⤵
        
        PID:960
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        25⤵
        
        PID:960
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        25⤵
        
        PID:960
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        25⤵
        
        PID:961
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        25⤵
        
        PID:961
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        25⤵
        
        PID:961
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        25⤵
        
        PID:961
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        25⤵
        
        PID:962
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        25⤵
        
        PID:962
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        25⤵
        
        PID:962
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        25⤵
        
        PID:962
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:965
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:965
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:965
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:965
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:966
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:966
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:966
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:966
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:967
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:967
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:967
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:967
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:968
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:968
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:968
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:968
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        25⤵
        
        PID:969
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        25⤵
        
        PID:969
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        25⤵
        
        PID:969
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        25⤵
        
        PID:969
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        25⤵
        
        PID:970
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        25⤵
        
        PID:970
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        25⤵
        
        PID:970
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        25⤵
        
        PID:970
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        25⤵
        
        PID:971
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        25⤵
        
        PID:971
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        25⤵
        
        PID:971
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        25⤵
        
        PID:971
        
        /proc/self/exe
        
        /proc/self/exe
        25⤵
        Reads system network configuration
        
        PID:964
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        26⤵
        
        PID:972
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        26⤵
        
        PID:972
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        26⤵
        
        PID:972
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        26⤵
        
        PID:972
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        26⤵
        
        PID:973
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        26⤵
        
        PID:973
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        26⤵
        
        PID:973
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        26⤵
        
        PID:973
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        26⤵
        
        PID:974
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        26⤵
        
        PID:974
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        26⤵
        
        PID:974
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        26⤵
        
        PID:974
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:977
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:977
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:977
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:977
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:978
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:978
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:978
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:978
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:979
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:979
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:979
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:979
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:980
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:980
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:980
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:980
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        26⤵
        
        PID:981
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        26⤵
        
        PID:981
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        26⤵
        
        PID:981
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        26⤵
        
        PID:981
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        26⤵
        
        PID:982
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        26⤵
        
        PID:982
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        26⤵
        
        PID:982
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        26⤵
        
        PID:982
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        26⤵
        
        PID:983
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        26⤵
        
        PID:983
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        26⤵
        
        PID:983
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        26⤵
        
        PID:983
        
        /proc/self/exe
        
        /proc/self/exe
        26⤵
        Reads system network configuration
        
        PID:976
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        27⤵
        
        PID:984
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        27⤵
        
        PID:984
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        27⤵
        
        PID:984
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        27⤵
        
        PID:984
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        27⤵
        
        PID:985
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        27⤵
        
        PID:985
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        27⤵
        
        PID:985
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        27⤵
        
        PID:985
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        27⤵
        
        PID:986
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        27⤵
        
        PID:986
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        27⤵
        
        PID:986
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        27⤵
        
        PID:986
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        27⤵
        
        PID:989
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        27⤵
        
        PID:989
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        27⤵
        
        PID:989
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        27⤵
        
        PID:989
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        27⤵
        System Network Configuration Discovery
        
        PID:990
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        27⤵
        
        PID:990
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        27⤵
        
        PID:990
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        27⤵
        
        PID:990
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        27⤵
        
        PID:991
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        27⤵
        
        PID:991
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        27⤵
        
        PID:991
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        27⤵
        
        PID:991
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        27⤵
        
        PID:992
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        27⤵
        
        PID:992
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        27⤵
        
        PID:992
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        27⤵
        
        PID:992
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        27⤵
        
        PID:993
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        27⤵
        
        PID:993
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        27⤵
        
        PID:993
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        27⤵
        
        PID:993
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        27⤵
        
        PID:994
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        27⤵
        
        PID:994
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        27⤵
        
        PID:994
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        27⤵
        
        PID:994
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        27⤵
        
        PID:995
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        27⤵
        
        PID:995
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        27⤵
        
        PID:995
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        27⤵
        
        PID:995
        
        /proc/self/exe
        
        /proc/self/exe
        27⤵
        Enumerates active TCP sockets
        Reads system network configuration
        
        PID:988
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        28⤵
        
        PID:996
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        28⤵
        
        PID:996
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        28⤵
        
        PID:996
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        28⤵
        
        PID:997
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        28⤵
        
        PID:997
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        28⤵
        
        PID:997
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        28⤵
        
        PID:998
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        28⤵
        
        PID:998
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        28⤵
        
        PID:998
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        28⤵
        
        PID:1001
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        28⤵
        
        PID:1001
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        28⤵
        
        PID:1001
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        28⤵
        
        PID:1002
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        28⤵
        
        PID:1002
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        28⤵
        
        PID:1002
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        28⤵
        
        PID:1003
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        28⤵
        
        PID:1003
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        28⤵
        
        PID:1003
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        28⤵
        
        PID:1004
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        28⤵
        
        PID:1004
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        28⤵
        
        PID:1004
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        28⤵
        
        PID:1005
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        28⤵
        
        PID:1005
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        28⤵
        
        PID:1005
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        28⤵
        
        PID:1006
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        28⤵
        
        PID:1006
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        28⤵
        
        PID:1006
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        28⤵
        
        PID:1007
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        28⤵
        
        PID:1007
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        28⤵
        
        PID:1007
        
        /proc/self/exe
        
        /proc/self/exe
        28⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:1000
        
        /proc/self/exe
        
        /proc/self/exe
        29⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:1012
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        30⤵
        
        PID:1029
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        30⤵
        
        PID:1028
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        30⤵
        
        PID:1027
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        30⤵
        
        PID:1026
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        30⤵
        
        PID:1025
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        30⤵
        
        PID:1022
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        30⤵
        
        PID:1021
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        30⤵
        
        PID:1020
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        30⤵
        
        PID:1016
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        30⤵
        
        PID:1015
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        30⤵
        
        PID:1015
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        30⤵
        
        PID:1016
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        29⤵
        
        PID:1008
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        29⤵
        
        PID:1019
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        29⤵
        
        PID:1018
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        29⤵
        
        PID:1017
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        29⤵
        
        PID:1014
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        29⤵
        
        PID:1013
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        29⤵
        
        PID:1010
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        29⤵
        
        PID:1009
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        29⤵
        
        PID:1008
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        29⤵
        
        PID:1009
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        29⤵
        
        PID:1010
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        29⤵
        
        PID:1013
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        29⤵
        
        PID:1014
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        29⤵
        
        PID:1017
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        29⤵
        
        PID:1018
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        29⤵
        
        PID:1019

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

T1053

Cron

Shared Modules

T1129

Persistence

Boot or Logon Autostart Execution

XDG Autostart Entries

T1547.013

Boot or Logon Initialization Scripts

T1037

RC Scripts

Create or Modify System Process

T1543

Systemd Service

T1543.002

Event Triggered Execution

T1546

Unix Shell Configuration Modification

T1546.004

Hijack Execution Flow

T1574

Dynamic Linker Hijacking

Path Interception by PATH Environment Variable

Scheduled Task/Job

T1053

Cron

Privilege Escalation

Boot or Logon Autostart Execution

XDG Autostart Entries

T1547.013

Boot or Logon Initialization Scripts

T1037

RC Scripts

Create or Modify System Process

T1543

Systemd Service

T1543.002

Event Triggered Execution

T1546

Unix Shell Configuration Modification

T1546.004

Hijack Execution Flow

T1574

Dynamic Linker Hijacking

Path Interception by PATH Environment Variable

Scheduled Task/Job

T1053

Cron

Defense Evasion

Hijack Execution Flow

T1574

Dynamic Linker Hijacking

Path Interception by PATH Environment Variable