31628a457ccf9220d56ebdca431d1c2ed5ffd8dbe412b39ef12ac362c7f7a95b

persistence privilege_escalation defense_evasion

description	ioc	Process
File opened for modification	/var/spool/cron/crontabs/tmp.vRnCKl	crontab
File opened for modification	/etc/cron.d/reavernet	reaver.mips.elf
File opened for modification	/etc/cron.d/ntp-sync	reaver.mips.elf
File opened for modification	/etc/cron.d/network-dispatch	reaver.mips.elf

Creates/modifies environment variables 1 TTPs 10 IoCs

Creating/modifying environment variables is a common persistence mechanism.

Path Interception by PATH Environment Variable

description	ioc	Process
File opened for modification	/root/.bashrc	reaver.mips.elf
File opened for modification	/etc/profile	reaver.mips.elf
File opened for modification	/etc/bash.bashrc	reaver.mips.elf
File opened for modification	/home/admin/.profile	reaver.mips.elf
File opened for modification	/home/pi/.bashrc	reaver.mips.elf
File opened for modification	/home/user/.profile	reaver.mips.elf
File opened for modification	/root/.profile	reaver.mips.elf
File opened for modification	/home/admin/.bashrc	reaver.mips.elf
File opened for modification	/home/pi/.profile	reaver.mips.elf
File opened for modification	/home/user/.bashrc	reaver.mips.elf

Enumerates active TCP sockets 1 TTPs 64 IoCs

Gets active TCP sockets from /proc virtual filesystem.

System Network Connections Discovery

T1049

description	ioc	Process
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found

Modifies init.d 2 TTPs 1 IoCs

Adds/modifies system service, likely for persistence.

persistence

Boot or Logon Autostart Execution

RC Scripts

description	ioc	Process
File opened for modification	/etc/init.d/logrotate-svc	reaver.mips.elf

Modifies rc script 2 TTPs 1 IoCs

Adding/modifying system rc scripts is a common persistence mechanism.

persistence

Boot or Logon Autostart Execution

RC Scripts

persistence privilege_escalation

description	ioc	Process
File opened for modification	/etc/rc.local	reaver.mips.elf

Modifies systemd 2 TTPs 2 IoCs

Adds/ modifies systemd service files. Likely to achieve persistence.

XDG Autostart Entries

T1547.013

Systemd Service

T1543.002

description	ioc	Process
File opened for modification	/etc/systemd/system/logrotate-svc.service	reaver.mips.elf
File opened for modification	/etc/systemd/system/network-dispatch.service	reaver.mips.elf

Modifies Bash startup script 2 TTPs 10 IoCs

persistence

Boot or Logon Autostart Execution

Unix Shell Configuration Modification

T1546.004

description	ioc	Process
File opened for modification	/root/.bashrc	reaver.mips.elf
File opened for modification	/root/.profile	reaver.mips.elf
File opened for modification	/etc/profile	reaver.mips.elf
File opened for modification	/etc/bash.bashrc	reaver.mips.elf
File opened for modification	/home/admin/.profile	reaver.mips.elf
File opened for modification	/home/pi/.bashrc	reaver.mips.elf
File opened for modification	/home/pi/.profile	reaver.mips.elf
File opened for modification	/home/user/.bashrc	reaver.mips.elf
File opened for modification	/home/admin/.bashrc	reaver.mips.elf
File opened for modification	/home/user/.profile	reaver.mips.elf

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/files/fstream-1.dat	upx

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	kernfs5918	715	reaver.mips.elf

Reads system network configuration 1 TTPs 64 IoCs

Uses contents of /proc filesystem to enumerate network settings.

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	exe
File opened for reading	/proc/net/tcp	Process not Found
File opened for reading	/proc/net/tcp	Process not Found

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/exe	reaver.mips.elf
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/status	exe
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/status	exe
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/status	exe
File opened for reading	/proc/self/status	exe
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/status	exe
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/status	exe
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/status	exe
File opened for reading	/proc/self/status	exe
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/status	exe
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/filesystems	crontab
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/status	reaver.mips.elf
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/status	exe
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/status	exe
File opened for reading	/proc/self/status	exe
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/status	exe
File opened for reading	/proc/self/exe	exe
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/status	Process not Found
File opened for reading	/proc/self/exe	Process not Found
File opened for reading	/proc/self/status	Process not Found

System Network Configuration Discovery 1 TTPs 64 IoCs

Adversaries may gather information about the network configuration of a system.

System Network Configuration Discovery

T1016

pid	Process
1131	Process not Found
1118	Process not Found
1377	Process not Found
1217	Process not Found
1312	Process not Found
744	chattr
1327	Process not Found
1540	Process not Found
771	chattr
804	chattr
819	chattr
877	chattr
1120	Process not Found
1180	Process not Found
1241	Process not Found
735	chattr
902	chattr
925	chattr
1299	Process not Found
747	chattr
792	chattr
1168	Process not Found
1314	Process not Found
1488	Process not Found
831	chattr
984	chattr
1263	Process not Found
842	chattr
1167	Process not Found
1312	Process not Found
1107	Process not Found
783	chattr
853	chattr
1251	Process not Found
1302	Process not Found
1493	Process not Found
807	chattr
866	chattr
1180	Process not Found
795	chattr
1047	Process not Found
1178	Process not Found
1327	Process not Found
1362	Process not Found
1446	Process not Found
1526	Process not Found
891	chattr
1035	Process not Found
1035	Process not Found
1290	Process not Found
1024	Process not Found
1374	Process not Found
1516	Process not Found
938	chattr
951	chattr
1097	Process not Found
1157	Process not Found
1311	Process not Found
1023	Process not Found
1156	Process not Found
1166	Process not Found
1447	Process not Found
770	chattr
926	chattr

/tmp/reaver.mips.elf
/tmp/reaver.mips.elf
1⤵
- Deletes itself
- Modifies the /etc/hosts DNS resolution file
- Creates/modifies Cron job
- Creates/modifies environment variables
- Modifies init.d
- Modifies rc script
- Modifies systemd
- Modifies Bash startup script
- Changes its process name
- Reads runtime system information
PID:715
- /usr/local/sbin/chattr
  chattr +i /tmp/reaver.mips.elf
  2⤵
  PID:719
- /usr/local/sbin/chattr
  chattr +a /tmp/reaver.mips.elf
  2⤵
  PID:720
- /usr/local/bin/chattr
  chattr +i /tmp/reaver.mips.elf
  2⤵
  PID:719
- /usr/local/bin/chattr
  chattr +a /tmp/reaver.mips.elf
  2⤵
  PID:720
- /usr/sbin/chattr
  chattr +i /tmp/reaver.mips.elf
  2⤵
  PID:719
- /usr/sbin/chattr
  chattr +a /tmp/reaver.mips.elf
  2⤵
  PID:720
- /bin/sh
  sh -c "crontab -l 2>/dev/null"
  2⤵
  PID:721
- - /usr/bin/crontab
    crontab -l
    3⤵
    - Reads runtime system information
    PID:722
- /usr/bin/chattr
  chattr +a /tmp/reaver.mips.elf
  2⤵
  PID:720
- /usr/bin/chattr
  chattr +i /tmp/reaver.mips.elf
  2⤵
  PID:719
- /usr/local/sbin/chattr
  chattr +i "/tmp/reaver.mips.elf (deleted)"
  2⤵
  PID:723
- /usr/local/sbin/chattr
  chattr +a "/tmp/reaver.mips.elf (deleted)"
  2⤵
  PID:724
- /usr/local/bin/chattr
  chattr +i "/tmp/reaver.mips.elf (deleted)"
  2⤵
  PID:723
- /usr/sbin/chattr
  chattr +i "/tmp/reaver.mips.elf (deleted)"
  2⤵
  PID:723
- /usr/local/bin/chattr
  chattr +a "/tmp/reaver.mips.elf (deleted)"
  2⤵
  PID:724
- /bin/sh
  sh -c "(crontab -l 2>/dev/null; echo '@reboot /usr/lib/logrotate-svc') | crontab - 2>/dev/null"
  2⤵
  PID:725
- - /usr/bin/crontab
    crontab -
    3⤵
    - Creates/modifies Cron job
    PID:727
- - /usr/bin/crontab
    crontab -l
    3⤵
    PID:728
- /usr/sbin/chattr
  chattr +a "/tmp/reaver.mips.elf (deleted)"
  2⤵
  PID:724
- /usr/bin/chattr
  chattr +a "/tmp/reaver.mips.elf (deleted)"
  2⤵
  PID:724
- /usr/bin/chattr
  chattr +i "/tmp/reaver.mips.elf (deleted)"
  2⤵
  PID:723
- /proc/self/exe
  /proc/self/exe
  2⤵
  - Enumerates active TCP sockets
  - Reads system network configuration
  PID:718
- - /usr/local/sbin/chattr
    chattr +i "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:732
- - /usr/local/bin/chattr
    chattr +i "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:732
- - /usr/sbin/chattr
    chattr +i "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:732
- - /usr/bin/chattr
    chattr +i "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:732
- - /usr/local/sbin/chattr
    chattr +a "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:733
- - /usr/local/bin/chattr
    chattr +a "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:733
- - /usr/sbin/chattr
    chattr +a "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:733
- - /usr/bin/chattr
    chattr +a "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:733
- - /usr/local/sbin/chattr
    chattr +i "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:734
- - /usr/local/bin/chattr
    chattr +i "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:734
- - /usr/sbin/chattr
    chattr +i "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:734
- - /usr/bin/chattr
    chattr +i "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:734
- - /usr/local/sbin/chattr
    chattr +a "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:735
- - /usr/local/bin/chattr
    chattr +a "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:735
- - /usr/sbin/chattr
    chattr +a "/tmp/reaver.mips.elf (deleted)"
    3⤵
    PID:735
- - /usr/bin/chattr
    chattr +a "/tmp/reaver.mips.elf (deleted)"
    3⤵
    - System Network Configuration Discovery
    PID:735
- - /usr/local/sbin/chattr
    chattr +i /etc/cron.d/reavernet
    3⤵
    PID:736
- - /usr/local/bin/chattr
    chattr +i /etc/cron.d/reavernet
    3⤵
    PID:736
- - /usr/sbin/chattr
    chattr +i /etc/cron.d/reavernet
    3⤵
    PID:736
- - /usr/bin/chattr
    chattr +i /etc/cron.d/reavernet
    3⤵
    PID:736
- - /usr/local/sbin/chattr
    chattr +i /etc/cron.d/network-dispatch
    3⤵
    PID:737
- - /usr/local/bin/chattr
    chattr +i /etc/cron.d/network-dispatch
    3⤵
    PID:737
- - /usr/sbin/chattr
    chattr +i /etc/cron.d/network-dispatch
    3⤵
    PID:737
- - /usr/bin/chattr
    chattr +i /etc/cron.d/network-dispatch
    3⤵
    PID:737
- - /usr/local/sbin/chattr
    chattr +i /etc/cron.d/ntp-sync
    3⤵
    PID:738
- - /usr/local/bin/chattr
    chattr +i /etc/cron.d/ntp-sync
    3⤵
    PID:738
- - /usr/sbin/chattr
    chattr +i /etc/cron.d/ntp-sync
    3⤵
    PID:738
- - /usr/bin/chattr
    chattr +i /etc/cron.d/ntp-sync
    3⤵
    PID:738
- - /proc/self/exe
    /proc/self/exe
    3⤵
    - Enumerates active TCP sockets
    - Reads system network configuration
    PID:731
  - - /usr/local/sbin/chattr
      chattr +i /etc/cron.d/reavernet
      4⤵
      PID:739
  - - /usr/local/bin/chattr
      chattr +i /etc/cron.d/reavernet
      4⤵
      PID:739
  - - /usr/sbin/chattr
      chattr +i /etc/cron.d/reavernet
      4⤵
      PID:739
  - - /usr/bin/chattr
      chattr +i /etc/cron.d/reavernet
      4⤵
      PID:739
  - - /usr/local/sbin/chattr
      chattr +i /etc/cron.d/network-dispatch
      4⤵
      PID:740
  - - /usr/local/bin/chattr
      chattr +i /etc/cron.d/network-dispatch
      4⤵
      PID:740
  - - /usr/sbin/chattr
      chattr +i /etc/cron.d/network-dispatch
      4⤵
      PID:740
  - - /usr/bin/chattr
      chattr +i /etc/cron.d/network-dispatch
      4⤵
      PID:740
  - - /usr/local/sbin/chattr
      chattr +i /etc/cron.d/ntp-sync
      4⤵
      PID:741
  - - /usr/local/bin/chattr
      chattr +i /etc/cron.d/ntp-sync
      4⤵
      PID:741
  - - /usr/sbin/chattr
      chattr +i /etc/cron.d/ntp-sync
      4⤵
      PID:741
  - - /usr/bin/chattr
      chattr +i /etc/cron.d/ntp-sync
      4⤵
      PID:741
  - - /usr/local/sbin/chattr
      chattr +i "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:744
  - - /usr/local/bin/chattr
      chattr +i "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:744
  - - /usr/sbin/chattr
      chattr +i "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:744
  - - /usr/bin/chattr
      chattr +i "/tmp/reaver.mips.elf (deleted)"
      4⤵
      System Network Configuration Discovery
      PID:744
  - - /usr/local/sbin/chattr
      chattr +a "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:745
  - - /usr/local/bin/chattr
      chattr +a "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:745
  - - /usr/sbin/chattr
      chattr +a "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:745
  - - /usr/bin/chattr
      chattr +a "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:745
  - - /usr/local/sbin/chattr
      chattr +i "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:746
  - - /usr/local/bin/chattr
      chattr +i "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:746
  - - /usr/sbin/chattr
      chattr +i "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:746
  - - /usr/bin/chattr
      chattr +i "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:746
  - - /usr/local/sbin/chattr
      chattr +a "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:747
  - - /usr/local/bin/chattr
      chattr +a "/tmp/reaver.mips.elf (deleted)"
      4⤵
      System Network Configuration Discovery
      PID:747
  - - /usr/sbin/chattr
      chattr +a "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:747
  - - /usr/bin/chattr
      chattr +a "/tmp/reaver.mips.elf (deleted)"
      4⤵
      PID:747
  - - /usr/local/sbin/chattr
      chattr +i /etc/cron.d/reavernet
      4⤵
      PID:748
  - - /usr/local/bin/chattr
      chattr +i /etc/cron.d/reavernet
      4⤵
      PID:748
  - - /usr/sbin/chattr
      chattr +i /etc/cron.d/reavernet
      4⤵
      PID:748
  - - /usr/bin/chattr
      chattr +i /etc/cron.d/reavernet
      4⤵
      PID:748
  - - /usr/local/sbin/chattr
      chattr +i /etc/cron.d/network-dispatch
      4⤵
      PID:749
  - - /usr/local/bin/chattr
      chattr +i /etc/cron.d/network-dispatch
      4⤵
      PID:749
  - - /usr/sbin/chattr
      chattr +i /etc/cron.d/network-dispatch
      4⤵
      PID:749
  - - /usr/bin/chattr
      chattr +i /etc/cron.d/network-dispatch
      4⤵
      PID:749
  - - /usr/local/sbin/chattr
      chattr +i /etc/cron.d/ntp-sync
      4⤵
      PID:750
  - - /usr/local/bin/chattr
      chattr +i /etc/cron.d/ntp-sync
      4⤵
      PID:750
  - - /usr/sbin/chattr
      chattr +i /etc/cron.d/ntp-sync
      4⤵
      PID:750
  - - /usr/bin/chattr
      chattr +i /etc/cron.d/ntp-sync
      4⤵
      PID:750
  - - /proc/self/exe
      /proc/self/exe
      4⤵
      Enumerates active TCP sockets
      Reads system network configuration
      Reads runtime system information
      PID:743
    - - /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        5⤵
        
        PID:751
    - - /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        5⤵
        
        PID:751
    - - /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        5⤵
        
        PID:751
    - - /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        5⤵
        
        PID:751
    - - /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        5⤵
        
        PID:752
    - - /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        5⤵
        
        PID:752
    - - /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        5⤵
        
        PID:752
    - - /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        5⤵
        
        PID:752
    - - /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        5⤵
        
        PID:753
    - - /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        5⤵
        
        PID:753
    - - /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        5⤵
        
        PID:753
    - - /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        5⤵
        
        PID:753
    - - /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:756
    - - /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:756
    - - /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:756
    - - /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:756
    - - /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:757
    - - /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:757
    - - /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:757
    - - /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:757
    - - /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:758
    - - /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:758
    - - /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:758
    - - /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:758
    - - /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:759
    - - /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:759
    - - /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:759
    - - /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        5⤵
        
        PID:759
    - - /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        5⤵
        
        PID:760
    - - /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        5⤵
        
        PID:760
    - - /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        5⤵
        
        PID:760
    - - /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        5⤵
        
        PID:760
    - - /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        5⤵
        
        PID:761
    - - /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        5⤵
        
        PID:761
    - - /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        5⤵
        
        PID:761
    - - /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        5⤵
        
        PID:761
    - - /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        5⤵
        
        PID:762
    - - /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        5⤵
        
        PID:762
    - - /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        5⤵
        
        PID:762
    - - /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        5⤵
        
        PID:762
    - - /proc/self/exe
        
        /proc/self/exe
        5⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:755
      - /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        6⤵
        
        PID:763
      - /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        6⤵
        
        PID:763
      - /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        6⤵
        
        PID:763
      - /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        6⤵
        
        PID:763
      - /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        6⤵
        
        PID:764
      - /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        6⤵
        
        PID:764
      - /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        6⤵
        
        PID:764
      - /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        6⤵
        
        PID:764
      - /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        6⤵
        
        PID:765
      - /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        6⤵
        
        PID:765
      - /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        6⤵
        
        PID:765
      - /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        6⤵
        
        PID:765
      - /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:768
      - /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:768
      - /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:768
      - /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:768
      - /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:769
      - /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:769
      - /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:769
      - /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:769
      - /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:770
      - /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:770
      - /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        6⤵
        System Network Configuration Discovery
        
        PID:770
      - /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:770
      - /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:771
      - /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        6⤵
        System Network Configuration Discovery
        
        PID:771
      - /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:771
      - /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        6⤵
        
        PID:771
      - /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        6⤵
        
        PID:772
      - /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        6⤵
        
        PID:772
      - /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        6⤵
        
        PID:772
      - /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        6⤵
        
        PID:772
      - /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        6⤵
        
        PID:773
      - /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        6⤵
        
        PID:773
      - /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        6⤵
        
        PID:773
      - /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        6⤵
        
        PID:773
      - /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        6⤵
        
        PID:774
      - /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        6⤵
        
        PID:774
      - /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        6⤵
        
        PID:774
      - /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        6⤵
        
        PID:774
      - /proc/self/exe
        
        /proc/self/exe
        6⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:767
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        7⤵
        
        PID:775
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        7⤵
        
        PID:775
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        7⤵
        
        PID:775
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        7⤵
        
        PID:775
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        7⤵
        
        PID:776
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        7⤵
        
        PID:776
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        7⤵
        
        PID:776
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        7⤵
        
        PID:776
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        7⤵
        
        PID:777
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        7⤵
        
        PID:777
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        7⤵
        
        PID:777
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        7⤵
        
        PID:777
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:780
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:780
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:780
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:780
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:781
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:781
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:781
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:781
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:782
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:782
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:782
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:782
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:783
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:783
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        7⤵
        
        PID:783
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        7⤵
        System Network Configuration Discovery
        
        PID:783
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        7⤵
        
        PID:784
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        7⤵
        
        PID:784
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        7⤵
        
        PID:784
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        7⤵
        
        PID:784
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        7⤵
        
        PID:785
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        7⤵
        
        PID:785
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        7⤵
        
        PID:785
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        7⤵
        
        PID:785
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        7⤵
        
        PID:786
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        7⤵
        
        PID:786
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        7⤵
        
        PID:786
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        7⤵
        
        PID:786
        
        /proc/self/exe
        
        /proc/self/exe
        7⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:779
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        8⤵
        
        PID:787
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        8⤵
        
        PID:787
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        8⤵
        
        PID:787
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        8⤵
        
        PID:787
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        8⤵
        
        PID:788
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        8⤵
        
        PID:788
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        8⤵
        
        PID:788
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        8⤵
        
        PID:788
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        8⤵
        
        PID:789
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        8⤵
        
        PID:789
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        8⤵
        
        PID:789
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        8⤵
        
        PID:789
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:792
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        8⤵
        System Network Configuration Discovery
        
        PID:792
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:792
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:792
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:793
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:793
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:793
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:793
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:794
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:794
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:794
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:794
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:795
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:795
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        8⤵
        System Network Configuration Discovery
        
        PID:795
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        8⤵
        
        PID:795
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        8⤵
        
        PID:796
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        8⤵
        
        PID:796
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        8⤵
        
        PID:796
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        8⤵
        
        PID:796
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        8⤵
        
        PID:797
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        8⤵
        
        PID:797
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        8⤵
        
        PID:797
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        8⤵
        
        PID:797
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        8⤵
        
        PID:798
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        8⤵
        
        PID:798
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        8⤵
        
        PID:798
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        8⤵
        
        PID:798
        
        /proc/self/exe
        
        /proc/self/exe
        8⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:791
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        9⤵
        
        PID:799
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        9⤵
        
        PID:799
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        9⤵
        
        PID:799
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        9⤵
        
        PID:799
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        9⤵
        
        PID:800
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        9⤵
        
        PID:800
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        9⤵
        
        PID:800
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        9⤵
        
        PID:800
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        9⤵
        
        PID:801
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        9⤵
        
        PID:801
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        9⤵
        
        PID:801
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        9⤵
        
        PID:801
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:804
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        9⤵
        System Network Configuration Discovery
        
        PID:804
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:804
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:804
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:805
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:805
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:805
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:805
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:806
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:806
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:806
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:806
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:807
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:807
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        9⤵
        
        PID:807
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        9⤵
        System Network Configuration Discovery
        
        PID:807
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        9⤵
        
        PID:808
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        9⤵
        
        PID:808
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        9⤵
        
        PID:808
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        9⤵
        
        PID:808
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        9⤵
        
        PID:809
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        9⤵
        
        PID:809
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        9⤵
        
        PID:809
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        9⤵
        
        PID:809
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        9⤵
        
        PID:810
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        9⤵
        
        PID:810
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        9⤵
        
        PID:810
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        9⤵
        
        PID:810
        
        /proc/self/exe
        
        /proc/self/exe
        9⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:803
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        10⤵
        
        PID:811
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        10⤵
        
        PID:811
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        10⤵
        
        PID:811
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        10⤵
        
        PID:811
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        10⤵
        
        PID:812
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        10⤵
        
        PID:812
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        10⤵
        
        PID:812
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        10⤵
        
        PID:812
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        10⤵
        
        PID:813
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        10⤵
        
        PID:813
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        10⤵
        
        PID:813
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        10⤵
        
        PID:813
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:816
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:816
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:816
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:816
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:817
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:817
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:817
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:817
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:818
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:818
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:818
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:818
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:819
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:819
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        10⤵
        System Network Configuration Discovery
        
        PID:819
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        10⤵
        
        PID:819
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        10⤵
        
        PID:820
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        10⤵
        
        PID:820
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        10⤵
        
        PID:820
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        10⤵
        
        PID:820
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        10⤵
        
        PID:821
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        10⤵
        
        PID:821
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        10⤵
        
        PID:821
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        10⤵
        
        PID:821
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        10⤵
        
        PID:822
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        10⤵
        
        PID:822
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        10⤵
        
        PID:822
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        10⤵
        
        PID:822
        
        /proc/self/exe
        
        /proc/self/exe
        10⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:815
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        11⤵
        
        PID:823
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        11⤵
        
        PID:823
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        11⤵
        
        PID:823
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        11⤵
        
        PID:823
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        11⤵
        
        PID:824
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        11⤵
        
        PID:824
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        11⤵
        
        PID:824
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        11⤵
        
        PID:824
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        11⤵
        
        PID:825
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        11⤵
        
        PID:825
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        11⤵
        
        PID:825
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        11⤵
        
        PID:825
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:828
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:828
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:828
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:828
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:829
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:829
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:829
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:829
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:830
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:830
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:830
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:830
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        11⤵
        System Network Configuration Discovery
        
        PID:831
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:831
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:831
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        11⤵
        
        PID:831
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        11⤵
        
        PID:832
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        11⤵
        
        PID:832
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        11⤵
        
        PID:832
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        11⤵
        
        PID:832
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        11⤵
        
        PID:833
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        11⤵
        
        PID:833
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        11⤵
        
        PID:833
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        11⤵
        
        PID:833
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        11⤵
        
        PID:834
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        11⤵
        
        PID:834
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        11⤵
        
        PID:834
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        11⤵
        
        PID:834
        
        /proc/self/exe
        
        /proc/self/exe
        11⤵
        Enumerates active TCP sockets
        Reads system network configuration
        
        PID:827
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        12⤵
        
        PID:835
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        12⤵
        
        PID:835
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        12⤵
        
        PID:835
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        12⤵
        
        PID:835
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        12⤵
        
        PID:836
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        12⤵
        
        PID:836
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        12⤵
        
        PID:836
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        12⤵
        
        PID:836
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        12⤵
        
        PID:837
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        12⤵
        
        PID:837
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        12⤵
        
        PID:837
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        12⤵
        
        PID:837
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:840
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:840
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:840
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:840
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:841
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:841
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:841
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:841
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:842
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:842
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:842
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        12⤵
        System Network Configuration Discovery
        
        PID:842
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:843
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:843
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:843
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        12⤵
        
        PID:843
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        12⤵
        
        PID:844
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        12⤵
        
        PID:844
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        12⤵
        
        PID:844
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        12⤵
        
        PID:844
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        12⤵
        
        PID:845
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        12⤵
        
        PID:845
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        12⤵
        
        PID:845
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        12⤵
        
        PID:845
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        12⤵
        
        PID:846
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        12⤵
        
        PID:846
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        12⤵
        
        PID:846
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        12⤵
        
        PID:846
        
        /proc/self/exe
        
        /proc/self/exe
        12⤵
        Enumerates active TCP sockets
        Reads system network configuration
        
        PID:839
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        13⤵
        
        PID:847
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        13⤵
        
        PID:847
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        13⤵
        
        PID:847
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        13⤵
        
        PID:847
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        13⤵
        
        PID:848
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        13⤵
        
        PID:848
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        13⤵
        
        PID:848
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        13⤵
        
        PID:848
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        13⤵
        
        PID:849
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        13⤵
        
        PID:849
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        13⤵
        
        PID:849
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        13⤵
        
        PID:849
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:852
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:852
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:852
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:852
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:853
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:853
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:853
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        13⤵
        System Network Configuration Discovery
        
        PID:853
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:854
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:854
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:854
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:854
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:855
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:855
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:855
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        13⤵
        
        PID:855
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        13⤵
        
        PID:856
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        13⤵
        
        PID:856
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        13⤵
        
        PID:856
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        13⤵
        
        PID:856
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        13⤵
        
        PID:857
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        13⤵
        
        PID:857
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        13⤵
        
        PID:857
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        13⤵
        
        PID:857
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        13⤵
        
        PID:858
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        13⤵
        
        PID:858
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        13⤵
        
        PID:858
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        13⤵
        
        PID:858
        
        /proc/self/exe
        
        /proc/self/exe
        13⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:851
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        14⤵
        
        PID:859
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        14⤵
        
        PID:859
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        14⤵
        
        PID:859
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        14⤵
        
        PID:859
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        14⤵
        
        PID:860
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        14⤵
        
        PID:860
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        14⤵
        
        PID:860
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        14⤵
        
        PID:860
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        14⤵
        
        PID:861
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        14⤵
        
        PID:861
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        14⤵
        
        PID:861
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        14⤵
        
        PID:861
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:864
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:864
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:864
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:864
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:865
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:865
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:865
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:865
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        14⤵
        System Network Configuration Discovery
        
        PID:866
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:866
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:866
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:866
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:867
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:867
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:867
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        14⤵
        
        PID:867
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        14⤵
        
        PID:868
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        14⤵
        
        PID:868
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        14⤵
        
        PID:868
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        14⤵
        
        PID:868
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        14⤵
        
        PID:869
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        14⤵
        
        PID:869
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        14⤵
        
        PID:869
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        14⤵
        
        PID:869
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        14⤵
        
        PID:870
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        14⤵
        
        PID:870
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        14⤵
        
        PID:870
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        14⤵
        
        PID:870
        
        /proc/self/exe
        
        /proc/self/exe
        14⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:863
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        15⤵
        
        PID:871
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        15⤵
        
        PID:871
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        15⤵
        
        PID:871
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        15⤵
        
        PID:871
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        15⤵
        
        PID:872
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        15⤵
        
        PID:872
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        15⤵
        
        PID:872
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        15⤵
        
        PID:872
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        15⤵
        
        PID:873
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        15⤵
        
        PID:873
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        15⤵
        
        PID:873
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        15⤵
        
        PID:873
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:876
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:876
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:876
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:876
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:877
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        15⤵
        System Network Configuration Discovery
        
        PID:877
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:877
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:877
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:878
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:878
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:878
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:878
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:879
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:879
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:879
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        15⤵
        
        PID:879
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        15⤵
        
        PID:880
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        15⤵
        
        PID:880
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        15⤵
        
        PID:880
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        15⤵
        
        PID:880
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        15⤵
        
        PID:881
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        15⤵
        
        PID:881
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        15⤵
        
        PID:881
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        15⤵
        
        PID:881
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        15⤵
        
        PID:882
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        15⤵
        
        PID:882
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        15⤵
        
        PID:882
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        15⤵
        
        PID:882
        
        /proc/self/exe
        
        /proc/self/exe
        15⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:875
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        16⤵
        
        PID:883
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        16⤵
        
        PID:883
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        16⤵
        
        PID:883
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        16⤵
        
        PID:883
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        16⤵
        
        PID:884
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        16⤵
        
        PID:884
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        16⤵
        
        PID:884
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        16⤵
        
        PID:884
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        16⤵
        
        PID:885
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        16⤵
        
        PID:885
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        16⤵
        
        PID:885
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        16⤵
        
        PID:885
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:888
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:888
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:888
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:888
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:889
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:889
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:889
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:889
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:890
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:890
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:890
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:890
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:891
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        16⤵
        System Network Configuration Discovery
        
        PID:891
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:891
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        16⤵
        
        PID:891
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        16⤵
        
        PID:892
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        16⤵
        
        PID:892
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        16⤵
        
        PID:892
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        16⤵
        
        PID:892
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        16⤵
        
        PID:893
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        16⤵
        
        PID:893
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        16⤵
        
        PID:893
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        16⤵
        
        PID:893
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        16⤵
        
        PID:894
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        16⤵
        
        PID:894
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        16⤵
        
        PID:894
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        16⤵
        
        PID:894
        
        /proc/self/exe
        
        /proc/self/exe
        16⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:887
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        17⤵
        
        PID:895
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        17⤵
        
        PID:895
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        17⤵
        
        PID:895
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        17⤵
        
        PID:895
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        17⤵
        
        PID:896
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        17⤵
        
        PID:896
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        17⤵
        
        PID:896
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        17⤵
        
        PID:896
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        17⤵
        
        PID:897
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        17⤵
        
        PID:897
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        17⤵
        
        PID:897
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        17⤵
        
        PID:897
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:900
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:900
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:900
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:900
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:901
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:901
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:901
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:901
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:902
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:902
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:902
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        17⤵
        System Network Configuration Discovery
        
        PID:902
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:903
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:903
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:903
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        17⤵
        
        PID:903
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        17⤵
        
        PID:904
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        17⤵
        
        PID:904
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        17⤵
        
        PID:904
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        17⤵
        
        PID:904
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        17⤵
        
        PID:905
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        17⤵
        
        PID:905
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        17⤵
        
        PID:905
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        17⤵
        
        PID:905
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        17⤵
        
        PID:906
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        17⤵
        
        PID:906
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        17⤵
        
        PID:906
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        17⤵
        
        PID:906
        
        /proc/self/exe
        
        /proc/self/exe
        17⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:899
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        18⤵
        
        PID:907
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        18⤵
        
        PID:907
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        18⤵
        
        PID:907
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        18⤵
        
        PID:907
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        18⤵
        
        PID:908
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        18⤵
        
        PID:908
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        18⤵
        
        PID:908
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        18⤵
        
        PID:908
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        18⤵
        
        PID:909
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        18⤵
        
        PID:909
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        18⤵
        
        PID:909
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        18⤵
        
        PID:909
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:912
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:912
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:912
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:912
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:913
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:913
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:913
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:913
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:914
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:914
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:914
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:914
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:915
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:915
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:915
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        18⤵
        
        PID:915
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        18⤵
        
        PID:916
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        18⤵
        
        PID:916
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        18⤵
        
        PID:916
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        18⤵
        
        PID:916
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        18⤵
        
        PID:917
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        18⤵
        
        PID:917
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        18⤵
        
        PID:917
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        18⤵
        
        PID:917
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        18⤵
        
        PID:918
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        18⤵
        
        PID:918
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        18⤵
        
        PID:918
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        18⤵
        
        PID:918
        
        /proc/self/exe
        
        /proc/self/exe
        18⤵
        Enumerates active TCP sockets
        Reads system network configuration
        
        PID:911
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        19⤵
        
        PID:919
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        19⤵
        
        PID:919
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        19⤵
        
        PID:919
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        19⤵
        
        PID:919
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        19⤵
        
        PID:920
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        19⤵
        
        PID:920
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        19⤵
        
        PID:920
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        19⤵
        
        PID:920
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        19⤵
        
        PID:921
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        19⤵
        
        PID:921
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        19⤵
        
        PID:921
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        19⤵
        
        PID:921
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:924
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:924
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:924
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:924
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:925
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        19⤵
        System Network Configuration Discovery
        
        PID:925
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:925
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:925
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:926
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:926
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        19⤵
        System Network Configuration Discovery
        
        PID:926
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:926
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:927
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:927
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:927
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        19⤵
        
        PID:927
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        19⤵
        
        PID:928
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        19⤵
        
        PID:928
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        19⤵
        
        PID:928
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        19⤵
        
        PID:928
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        19⤵
        
        PID:929
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        19⤵
        
        PID:929
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        19⤵
        
        PID:929
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        19⤵
        
        PID:929
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        19⤵
        
        PID:930
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        19⤵
        
        PID:930
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        19⤵
        
        PID:930
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        19⤵
        
        PID:930
        
        /proc/self/exe
        
        /proc/self/exe
        19⤵
        Enumerates active TCP sockets
        Reads system network configuration
        
        PID:923
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        20⤵
        
        PID:931
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        20⤵
        
        PID:931
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        20⤵
        
        PID:931
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        20⤵
        
        PID:931
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        20⤵
        
        PID:932
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        20⤵
        
        PID:932
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        20⤵
        
        PID:932
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        20⤵
        
        PID:932
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        20⤵
        
        PID:933
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        20⤵
        
        PID:933
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        20⤵
        
        PID:933
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        20⤵
        
        PID:933
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:936
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:936
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:936
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:936
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:937
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:937
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:937
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:937
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:938
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:938
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:938
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        20⤵
        System Network Configuration Discovery
        
        PID:938
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:939
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:939
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:939
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        20⤵
        
        PID:939
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        20⤵
        
        PID:940
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        20⤵
        
        PID:940
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        20⤵
        
        PID:940
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        20⤵
        
        PID:940
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        20⤵
        
        PID:941
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        20⤵
        
        PID:941
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        20⤵
        
        PID:941
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        20⤵
        
        PID:941
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        20⤵
        
        PID:942
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        20⤵
        
        PID:942
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        20⤵
        
        PID:942
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        20⤵
        
        PID:942
        
        /proc/self/exe
        
        /proc/self/exe
        20⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:935
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        21⤵
        
        PID:943
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        21⤵
        
        PID:943
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        21⤵
        
        PID:943
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        21⤵
        
        PID:943
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        21⤵
        
        PID:944
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        21⤵
        
        PID:944
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        21⤵
        
        PID:944
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        21⤵
        
        PID:944
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        21⤵
        
        PID:945
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        21⤵
        
        PID:945
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        21⤵
        
        PID:945
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        21⤵
        
        PID:945
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:948
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:948
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:948
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:948
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:949
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:949
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:949
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:949
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:950
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:950
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:950
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:950
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:951
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:951
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        21⤵
        
        PID:951
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        21⤵
        System Network Configuration Discovery
        
        PID:951
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        21⤵
        
        PID:952
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        21⤵
        
        PID:952
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        21⤵
        
        PID:952
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        21⤵
        
        PID:952
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        21⤵
        
        PID:953
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        21⤵
        
        PID:953
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        21⤵
        
        PID:953
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        21⤵
        
        PID:953
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        21⤵
        
        PID:954
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        21⤵
        
        PID:954
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        21⤵
        
        PID:954
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        21⤵
        
        PID:954
        
        /proc/self/exe
        
        /proc/self/exe
        21⤵
        Enumerates active TCP sockets
        Reads system network configuration
        
        PID:947
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        22⤵
        
        PID:955
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        22⤵
        
        PID:955
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        22⤵
        
        PID:955
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        22⤵
        
        PID:955
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        22⤵
        
        PID:956
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        22⤵
        
        PID:956
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        22⤵
        
        PID:956
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        22⤵
        
        PID:956
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        22⤵
        
        PID:957
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        22⤵
        
        PID:957
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        22⤵
        
        PID:957
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        22⤵
        
        PID:957
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:960
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:960
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:960
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:960
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:961
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:961
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:961
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:961
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:962
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:962
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:962
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:962
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:963
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:963
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:963
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        22⤵
        
        PID:963
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        22⤵
        
        PID:964
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        22⤵
        
        PID:964
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        22⤵
        
        PID:964
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        22⤵
        
        PID:964
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        22⤵
        
        PID:965
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        22⤵
        
        PID:965
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        22⤵
        
        PID:965
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        22⤵
        
        PID:965
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        22⤵
        
        PID:966
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        22⤵
        
        PID:966
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        22⤵
        
        PID:966
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        22⤵
        
        PID:966
        
        /proc/self/exe
        
        /proc/self/exe
        22⤵
        Enumerates active TCP sockets
        Reads system network configuration
        
        PID:959
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        23⤵
        
        PID:967
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        23⤵
        
        PID:967
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        23⤵
        
        PID:967
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        23⤵
        
        PID:968
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        23⤵
        
        PID:968
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        23⤵
        
        PID:968
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        23⤵
        
        PID:969
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        23⤵
        
        PID:969
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        23⤵
        
        PID:969
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:972
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:972
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:972
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:973
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:973
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:973
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:974
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:974
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:974
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:975
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:975
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:975
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        23⤵
        
        PID:976
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        23⤵
        
        PID:976
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        23⤵
        
        PID:976
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        23⤵
        
        PID:977
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        23⤵
        
        PID:977
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        23⤵
        
        PID:977
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        23⤵
        
        PID:978
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        23⤵
        
        PID:978
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        23⤵
        
        PID:978
        
        /proc/self/exe
        
        /proc/self/exe
        23⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:971
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        24⤵
        
        PID:979
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        24⤵
        
        PID:979
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        24⤵
        
        PID:979
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        24⤵
        
        PID:980
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        24⤵
        
        PID:980
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        24⤵
        
        PID:980
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        24⤵
        
        PID:981
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        24⤵
        
        PID:981
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        24⤵
        
        PID:981
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:984
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:984
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        24⤵
        System Network Configuration Discovery
        
        PID:984
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:985
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:985
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:985
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:986
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:986
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:986
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:987
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:987
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:987
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        24⤵
        
        PID:988
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        24⤵
        
        PID:988
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        24⤵
        
        PID:988
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        24⤵
        
        PID:989
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        24⤵
        
        PID:989
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        24⤵
        
        PID:989
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        24⤵
        
        PID:990
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        24⤵
        
        PID:990
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        24⤵
        
        PID:990
        
        /proc/self/exe
        
        /proc/self/exe
        24⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:983
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        25⤵
        
        PID:991
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:996
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:997
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        25⤵
        
        PID:993
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        25⤵
        
        PID:992
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:998
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:999
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        25⤵
        
        PID:991
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:996
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:997
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        25⤵
        
        PID:993
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        25⤵
        
        PID:992
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:998
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:999
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        25⤵
        
        PID:991
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:999
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:998
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        25⤵
        
        PID:992
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        25⤵
        
        PID:993
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:997
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:996
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        25⤵
        
        PID:1000
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        25⤵
        
        PID:1000
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        25⤵
        
        PID:1000
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        25⤵
        
        PID:1001
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        25⤵
        
        PID:1001
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        25⤵
        
        PID:1001
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        25⤵
        
        PID:1002
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        25⤵
        
        PID:1002
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        25⤵
        
        PID:1002
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        25⤵
        
        PID:1003
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        25⤵
        
        PID:1003
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        25⤵
        
        PID:1003
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        25⤵
        
        PID:1004
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        25⤵
        
        PID:1004
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        25⤵
        
        PID:1004
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        25⤵
        
        PID:1005
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        25⤵
        
        PID:1005
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        25⤵
        
        PID:1005
        
        /proc/self/exe
        
        /proc/self/exe
        25⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:995
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:1008
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:1008
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:1008
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:1009
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:1009
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:1009
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:1010
        
        /usr/local/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:1010
        
        /usr/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:1010
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:1011
        
        /usr/local/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:1011
        
        /usr/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:1011
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        26⤵
        
        PID:1012
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        26⤵
        
        PID:1012
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        26⤵
        
        PID:1012
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        26⤵
        
        PID:1013
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        26⤵
        
        PID:1013
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        26⤵
        
        PID:1013
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        26⤵
        
        PID:1014
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        26⤵
        
        PID:1014
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        26⤵
        
        PID:1014
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        26⤵
        
        PID:1014
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        26⤵
        
        PID:1013
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        26⤵
        
        PID:1012
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:1011
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:1010
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:1009
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:1008
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        26⤵
        
        PID:1005
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        26⤵
        
        PID:1004
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        26⤵
        
        PID:1003
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:998
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        26⤵
        
        PID:999
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        26⤵
        
        PID:1016
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        26⤵
        
        PID:1018
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        26⤵
        
        PID:1017
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        26⤵
        
        PID:1016
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        26⤵
        
        PID:1017
        
        /usr/local/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        26⤵
        
        PID:1018
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        26⤵
        
        PID:1016
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        26⤵
        
        PID:1018
        
        /usr/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        26⤵
        
        PID:1017
        
        /proc/self/exe
        
        /proc/self/exe
        26⤵
        Enumerates active TCP sockets
        Reads system network configuration
        
        PID:1007
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        27⤵
        
        PID:1018
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        27⤵
        
        PID:1016
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        27⤵
        
        PID:1017
        
        /proc/self/exe
        
        /proc/self/exe
        27⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:1020
        
        /proc/self/exe
        
        /proc/self/exe
        28⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:1032
        
        /proc/self/exe
        
        /proc/self/exe
        29⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:1044
        
        /proc/self/exe
        
        /proc/self/exe
        30⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:1056
        
        /proc/self/exe
        
        /proc/self/exe
        31⤵
        Enumerates active TCP sockets
        Reads system network configuration
        Reads runtime system information
        
        PID:1068
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        28⤵
        
        PID:1024
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        28⤵
        
        PID:1023
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        28⤵
        
        PID:1028
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        28⤵
        
        PID:1029
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        28⤵
        
        PID:1030
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        28⤵
        
        PID:1033
        
        /usr/local/sbin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        27⤵
        
        PID:1021
        
        /usr/local/sbin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        27⤵
        
        PID:1022
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/reavernet
        27⤵
        
        PID:1025
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        27⤵
        
        PID:1026
        
        /usr/local/sbin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        27⤵
        
        PID:1027
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        25⤵
        
        PID:1002
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        25⤵
        
        PID:1001
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        25⤵
        
        PID:1000
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        25⤵
        
        PID:991
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:996
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:997
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        25⤵
        
        PID:993
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        25⤵
        
        PID:992
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:986
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        25⤵
        
        PID:987
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        24⤵
        
        PID:990
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        24⤵
        
        PID:989
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:975
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:974
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        24⤵
        
        PID:979
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        24⤵
        
        PID:980
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        24⤵
        
        PID:981
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:984
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        24⤵
        
        PID:985
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        24⤵
        
        PID:988
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        23⤵
        
        PID:967
        
        /usr/bin/chattr
        
        chattr +a "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:973
        
        /usr/bin/chattr
        
        chattr +i "/tmp/reaver.mips.elf (deleted)"
        23⤵
        
        PID:972
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        23⤵
        
        PID:969
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        23⤵
        
        PID:968
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/network-dispatch
        23⤵
        
        PID:977
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/ntp-sync
        23⤵
        
        PID:978
        
        /usr/bin/chattr
        
        chattr +i /etc/cron.d/reavernet
        23⤵
        
        PID:976
- /bin/sh
  sh -c "nvram set rc_startup=\"/usr/lib/logrotate-svc &\" 2>/dev/null"
  2⤵
  PID:1015

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

T1053

Cron

Persistence

Boot or Logon Autostart Execution

XDG Autostart Entries

T1547.013

Boot or Logon Initialization Scripts

T1037

RC Scripts

Create or Modify System Process

T1543

Systemd Service

T1543.002

Event Triggered Execution

T1546

Unix Shell Configuration Modification

T1546.004

Hijack Execution Flow

T1574

Path Interception by PATH Environment Variable

Scheduled Task/Job

T1053

Cron

Privilege Escalation

Boot or Logon Autostart Execution

XDG Autostart Entries

T1547.013

Boot or Logon Initialization Scripts

T1037

RC Scripts

Create or Modify System Process

T1543

Systemd Service

T1543.002

Event Triggered Execution

T1546

Unix Shell Configuration Modification

T1546.004

Hijack Execution Flow

T1574

Path Interception by PATH Environment Variable

Scheduled Task/Job

T1053

Cron

Defense Evasion

Hijack Execution Flow

T1574

Path Interception by PATH Environment Variable