Source: unknown | TCP traffic detected without corresponding DNS query: 91.189.91.42 |
Source: unknown | TCP traffic detected without corresponding DNS query: 91.189.91.43 |
Source: unknown | TCP traffic detected without corresponding DNS query: 109.202.202.202 |
Source: unknown | TCP traffic detected without corresponding DNS query: 91.189.91.42 |
Source: unknown | TCP traffic detected without corresponding DNS query: 212.118.43.167 |
Source: unknown | TCP traffic detected without corresponding DNS query: 212.118.43.167 |
Source: unknown | TCP traffic detected without corresponding DNS query: 212.118.43.167 |
Source: unknown | TCP traffic detected without corresponding DNS query: 212.118.43.167 |
Source: unknown | TCP traffic detected without corresponding DNS query: 91.189.91.43 |
Source: unknown | TCP traffic detected without corresponding DNS query: 109.202.202.202 |
Source: unknown | TCP traffic detected without corresponding DNS query: 212.118.43.167 |
Source: unknown | TCP traffic detected without corresponding DNS query: 91.189.91.42 |
Source: unknown | UDP traffic detected without corresponding DNS query: 51.77.149.139 |
Source: unknown | UDP traffic detected without corresponding DNS query: 51.77.149.139 |
Source: unknown | UDP traffic detected without corresponding DNS query: 51.254.162.59 |
Source: unknown | UDP traffic detected without corresponding DNS query: 51.254.162.59 |
Source: unknown | UDP traffic detected without corresponding DNS query: 51.254.162.59 |
Source: unknown | UDP traffic detected without corresponding DNS query: 51.254.162.59 |
Source: unknown | UDP traffic detected without corresponding DNS query: 51.254.162.59 |
Source: unknown | UDP traffic detected without corresponding DNS query: 51.254.162.59 |
Source: unknown | UDP traffic detected without corresponding DNS query: 51.254.162.59 |
Source: unknown | UDP traffic detected without corresponding DNS query: 51.254.162.59 |
Source: unknown | UDP traffic detected without corresponding DNS query: 51.254.162.59 |
Source: unknown | UDP traffic detected without corresponding DNS query: 51.254.162.59 |
Source: unknown | UDP traffic detected without corresponding DNS query: 185.181.61.24 |
Source: unknown | UDP traffic detected without corresponding DNS query: 185.181.61.24 |
Source: unknown | UDP traffic detected without corresponding DNS query: 94.16.114.254 |
Source: unknown | UDP traffic detected without corresponding DNS query: 94.16.114.254 |
Source: unknown | UDP traffic detected without corresponding DNS query: 94.16.114.254 |
Source: unknown | UDP traffic detected without corresponding DNS query: 94.16.114.254 |
Source: unknown | UDP traffic detected without corresponding DNS query: 94.16.114.254 |
Source: unknown | UDP traffic detected without corresponding DNS query: 94.16.114.254 |
Source: unknown | UDP traffic detected without corresponding DNS query: 94.16.114.254 |
Source: unknown | UDP traffic detected without corresponding DNS query: 94.16.114.254 |
Source: unknown | UDP traffic detected without corresponding DNS query: 94.16.114.254 |
Source: unknown | UDP traffic detected without corresponding DNS query: 94.16.114.254 |
Source: unknown | UDP traffic detected without corresponding DNS query: 51.77.149.139 |
Source: unknown | UDP traffic detected without corresponding DNS query: 81.169.136.222 |
Source: unknown | UDP traffic detected without corresponding DNS query: 51.158.108.203 |
Source: unknown | UDP traffic detected without corresponding DNS query: 91.217.137.37 |
Source: unknown | UDP traffic detected without corresponding DNS query: 91.217.137.37 |
Source: unknown | UDP traffic detected without corresponding DNS query: 91.217.137.37 |
Source: unknown | UDP traffic detected without corresponding DNS query: 91.217.137.37 |
Source: unknown | UDP traffic detected without corresponding DNS query: 91.217.137.37 |
Source: unknown | UDP traffic detected without corresponding DNS query: 94.16.114.254 |
Source: unknown | UDP traffic detected without corresponding DNS query: 94.16.114.254 |
Source: unknown | UDP traffic detected without corresponding DNS query: 94.16.114.254 |
Source: unknown | UDP traffic detected without corresponding DNS query: 94.16.114.254 |
Source: unknown | UDP traffic detected without corresponding DNS query: 94.16.114.254 |
Source: unknown | UDP traffic detected without corresponding DNS query: 134.195.4.2 |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6334, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6376, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6379, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6382, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6331, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6427, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6429, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6422, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6430, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6471, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6473, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6468, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6475, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6474, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6478, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6479, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6517, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6525, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6526, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6503, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6533, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6534, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6559, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6604, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6633, result: no such process | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 796, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 799, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1349, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1389, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1463, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1465, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1477, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1489, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1579, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1582, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1586, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1594, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1599, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1622, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1623, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1627, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1629, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1632, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1633, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1638, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1639, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1642, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1648, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1654, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1656, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1661, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1664, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1668, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1698, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1699, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1809, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1888, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1890, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2009, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2018, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2033, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2038, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2077, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2078, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2079, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2080, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2083, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2084, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2114, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2128, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2129, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2146, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2156, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2180, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2195, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2208, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2226, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2235, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2242, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2275, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2281, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2285, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2289, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2294, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2307, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2637, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 3236, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 6241, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 6484, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 6531, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 6532, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 6534, result: no such process | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 6596, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 6633, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6334, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6376, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6379, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6382, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6331, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6427, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6429, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6422, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6430, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6471, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6473, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6468, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6475, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6474, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6478, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6479, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6517, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6525, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6526, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6503, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6533, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6534, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6559, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6604, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6295) | SIGKILL sent: pid: 6633, result: no such process | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 796, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 799, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1349, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1389, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1463, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1465, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1477, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1489, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1579, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1582, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1586, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1594, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1599, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1622, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1623, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1627, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1629, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1632, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1633, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1638, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1639, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1642, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1648, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1654, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1656, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1661, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1664, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1668, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1698, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1699, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1809, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1888, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 1890, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2009, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2018, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2033, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2038, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2077, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2078, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2079, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2080, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2083, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2084, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2114, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2128, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2129, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2146, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2156, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2180, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2195, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2208, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2226, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2235, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2242, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2275, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2281, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2285, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2289, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2294, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2307, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 2637, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 3236, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 6241, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 6484, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 6531, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 6532, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 6534, result: no such process | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 6596, result: successful | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6297) | SIGKILL sent: pid: 6633, result: successful | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/1582/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/1582/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/3088/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/3088/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/230/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/230/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/110/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/110/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/231/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/231/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/111/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/111/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/232/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/232/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/1579/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/1579/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/112/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/112/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/233/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/233/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/1699/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/1699/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/113/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/113/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/234/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/234/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/1335/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/1335/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/1698/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/1698/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/114/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/114/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/235/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/235/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/1334/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/1334/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/1576/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/1576/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/2302/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/2302/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/115/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/115/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/236/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/236/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/116/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/116/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/237/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/237/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/117/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/117/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/118/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/118/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/910/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/910/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/119/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/119/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/912/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/912/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/10/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/10/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/2307/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/2307/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/11/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/11/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/918/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/918/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/6241/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/6241/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/12/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/12/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/13/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/13/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/14/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/14/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/15/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/15/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/16/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/16/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/17/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/17/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/18/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/18/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/1594/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/1594/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/120/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/120/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/121/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/121/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/1349/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/1349/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/1/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/1/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/122/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/122/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/243/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/243/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/123/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/123/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/2/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/2/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/124/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/124/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/3/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/3/cmdline | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/4/status | Jump to behavior |
Source: /usr/bin/pkill (PID: 6254) | File opened: /proc/4/cmdline | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6219) | Shell command executed: sh -c "rm -rf /tmp/* /var/* /var/run/* /var/tmp/* /var/log/wtmp" | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6227) | Shell command executed: sh -c "rm -rf /tmp/*" | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6234) | Shell command executed: sh -c "iptables -F" | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6243) | Shell command executed: sh -c "pkill -9 busybox" | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6252) | Shell command executed: sh -c "pkill -9 perl" | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6256) | Shell command executed: sh -c "pkill -9 python" | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6261) | Shell command executed: sh -c "service iptables stop" | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6270) | Shell command executed: sh -c "/sbin/iptables -F; /sbin/iptables -X" | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6274) | Shell command executed: sh -c "service firewall stop" | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6286) | Shell command executed: sh -c "history -c" | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6288) | Shell command executed: sh -c "rm -rf ~/.bash_history" | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6291) | Shell command executed: sh -c "history -w" | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6302) | Shell command executed: sh -c "chmod +x /dev/ocmount" | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6332) | Shell command executed: sh -c "echo '* * * * * root /bin/bash /dev/ocmount' > /etc/cron.d/mount.sh" | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6380) | Shell command executed: sh -c /dev/ocmount | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6601) | Shell command executed: sh -c "iptables -A INPUT -p tcp --dport 26721 -j ACCEPT" | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6635) | Shell command executed: sh -c "/bin/busybox iptables -A INPUT -p tcp --dport 26721 -j ACCEPT" | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6638) | Shell command executed: sh -c "/bin/iptables -A INPUT -p tcp --dport 26721 -j ACCEPT" | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6641) | Shell command executed: sh -c "/usr/bin/iptables -A INPUT -p tcp --dport 26721 -j ACCEPT" | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6644) | Shell command executed: sh -c "busybox iptables -A INPUT -p tcp --dport 26721 -j ACCEPT" | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6584) | Shell command executed: sh -c "iptables -A INPUT -p tcp --dport 26721 -j ACCEPT" | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6621) | Shell command executed: sh -c "/bin/busybox iptables -A INPUT -p tcp --dport 26721 -j ACCEPT" | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6625) | Shell command executed: sh -c "/bin/iptables -A INPUT -p tcp --dport 26721 -j ACCEPT" | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6628) | Shell command executed: sh -c "/usr/bin/iptables -A INPUT -p tcp --dport 26721 -j ACCEPT" | Jump to behavior |
Source: /tmp/arm5.elf (PID: 6631) | Shell command executed: sh -c "busybox iptables -A INPUT -p tcp --dport 26721 -j ACCEPT" | Jump to behavior |