7a7bfa4f84e073d45b33ca6d4e5f263d31aa512d124bc6c682029f2b831c7c08

General

Target

.rsync/c/go
Size

362B
MD5

78cbdcbdbf2e61bee3fc793b3da935ae
SHA1

44e3a92d0dc75a5bafa868a44249965b1c372f52
SHA256

73b0e0ba690cd999f339186a5e503db21ae70ffa87505ff7bbdc5879b1ede7bf
SHA512

ae8f90f0572f27fd78a49c964a44b4ca64a418eaad1296dbdc5b51d3532b2b12aea2a0a4b7d453dda7fb6220cfef485c9c551c1c093814f17c03c51a9c063f3e

Score

3^/10

Malware Config

Signatures

Writes file to tmp directory 50 IoCs

Malware often drops required files in the /tmp directory.

Processes:

touchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouchtouch

description	ioc	process
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch
File opened for modification	/tmp/.rsync/c/v	touch

/tmp/.rsync/c/go
/tmp/.rsync/c/go
1⤵
PID:1498

/bin/uname
uname -m
2⤵
PID:1500

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1501

/bin/rm
rm -rf p
2⤵
PID:1502

/bin/rm
rm -rf ip
2⤵
PID:1503

/bin/rm
rm -rf "xtr*"
2⤵
PID:1504

/bin/rm
rm -rf a "a.*"
2⤵
PID:1505

/bin/rm
rm -rf b "b.*"
2⤵
PID:1506

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1507

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1508

/bin/sleep
sleep 3
2⤵
PID:1509

/bin/rm
rm -rf "xtr*"
2⤵
PID:1513

/bin/rm
rm -rf ip
2⤵
PID:1514

/bin/rm
rm -rf p
2⤵
PID:1515

/bin/rm
rm -rf .out
2⤵
PID:1516

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1517

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1518

/bin/rm
rm -rf p
2⤵
PID:1519

/bin/rm
rm -rf ip
2⤵
PID:1520

/bin/rm
rm -rf "xtr*"
2⤵
PID:1521

/bin/rm
rm -rf a "a.*"
2⤵
PID:1522

/bin/rm
rm -rf b "b.*"
2⤵
PID:1523

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1524

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1525

/bin/sleep
sleep 3
2⤵
PID:1526

/bin/rm
rm -rf "xtr*"
2⤵
PID:1527

/bin/rm
rm -rf ip
2⤵
PID:1528

/bin/rm
rm -rf p
2⤵
PID:1529

/bin/rm
rm -rf .out
2⤵
PID:1530

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1531

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1532

/bin/rm
rm -rf p
2⤵
PID:1533

/bin/rm
rm -rf ip
2⤵
PID:1534

/bin/rm
rm -rf "xtr*"
2⤵
PID:1535

/bin/rm
rm -rf a "a.*"
2⤵
PID:1536

/bin/rm
rm -rf b "b.*"
2⤵
PID:1537

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1538

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1539

/bin/sleep
sleep 3
2⤵
PID:1540

/bin/rm
rm -rf "xtr*"
2⤵
PID:1541

/bin/rm
rm -rf ip
2⤵
PID:1542

/bin/rm
rm -rf p
2⤵
PID:1543

/bin/rm
rm -rf .out
2⤵
PID:1544

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1545

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1546

/bin/rm
rm -rf p
2⤵
PID:1547

/bin/rm
rm -rf ip
2⤵
PID:1548

/bin/rm
rm -rf "xtr*"
2⤵
PID:1549

/bin/rm
rm -rf a "a.*"
2⤵
PID:1550

/bin/rm
rm -rf b "b.*"
2⤵
PID:1551

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1552

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1553

/bin/sleep
sleep 3
2⤵
PID:1554

/bin/rm
rm -rf "xtr*"
2⤵
PID:1555

/bin/rm
rm -rf ip
2⤵
PID:1556

/bin/rm
rm -rf p
2⤵
PID:1557

/bin/rm
rm -rf .out
2⤵
PID:1558

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1559

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1560

/bin/rm
rm -rf p
2⤵
PID:1561

/bin/rm
rm -rf ip
2⤵
PID:1562

/bin/rm
rm -rf "xtr*"
2⤵
PID:1563

/bin/rm
rm -rf a "a.*"
2⤵
PID:1564

/bin/rm
rm -rf b "b.*"
2⤵
PID:1565

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1566

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1567

/bin/sleep
sleep 3
2⤵
PID:1568

/bin/rm
rm -rf "xtr*"
2⤵
PID:1569

/bin/rm
rm -rf ip
2⤵
PID:1570

/bin/rm
rm -rf p
2⤵
PID:1571

/bin/rm
rm -rf .out
2⤵
PID:1572

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1573

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1574

/bin/rm
rm -rf p
2⤵
PID:1575

/bin/rm
rm -rf ip
2⤵
PID:1576

/bin/rm
rm -rf "xtr*"
2⤵
PID:1577

/bin/rm
rm -rf a "a.*"
2⤵
PID:1578

/bin/rm
rm -rf b "b.*"
2⤵
PID:1579

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1580

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1581

/bin/sleep
sleep 3
2⤵
PID:1582

/bin/rm
rm -rf "xtr*"
2⤵
PID:1583

/bin/rm
rm -rf ip
2⤵
PID:1584

/bin/rm
rm -rf p
2⤵
PID:1585

/bin/rm
rm -rf .out
2⤵
PID:1586

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1587

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1588

/bin/rm
rm -rf p
2⤵
PID:1589

/bin/rm
rm -rf ip
2⤵
PID:1590

/bin/rm
rm -rf "xtr*"
2⤵
PID:1591

/bin/rm
rm -rf a "a.*"
2⤵
PID:1592

/bin/rm
rm -rf b "b.*"
2⤵
PID:1593

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1594

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1595

/bin/sleep
sleep 3
2⤵
PID:1596

/bin/rm
rm -rf "xtr*"
2⤵
PID:1597

/bin/rm
rm -rf ip
2⤵
PID:1598

/bin/rm
rm -rf p
2⤵
PID:1599

/bin/rm
rm -rf .out
2⤵
PID:1600

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1601

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1602

/bin/rm
rm -rf p
2⤵
PID:1603

/bin/rm
rm -rf ip
2⤵
PID:1604

/bin/rm
rm -rf "xtr*"
2⤵
PID:1605

/bin/rm
rm -rf a "a.*"
2⤵
PID:1606

/bin/rm
rm -rf b "b.*"
2⤵
PID:1607

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1608

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1609

/bin/sleep
sleep 3
2⤵
PID:1610

/bin/rm
rm -rf "xtr*"
2⤵
PID:1611

/bin/rm
rm -rf ip
2⤵
PID:1612

/bin/rm
rm -rf p
2⤵
PID:1613

/bin/rm
rm -rf .out
2⤵
PID:1614

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1615

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1616

/bin/rm
rm -rf p
2⤵
PID:1617

/bin/rm
rm -rf ip
2⤵
PID:1618

/bin/rm
rm -rf "xtr*"
2⤵
PID:1619

/bin/rm
rm -rf a "a.*"
2⤵
PID:1620

/bin/rm
rm -rf b "b.*"
2⤵
PID:1621

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1622

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1623

/bin/sleep
sleep 3
2⤵
PID:1624

/bin/rm
rm -rf "xtr*"
2⤵
PID:1625

/bin/rm
rm -rf ip
2⤵
PID:1626

/bin/rm
rm -rf p
2⤵
PID:1627

/bin/rm
rm -rf .out
2⤵
PID:1628

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1629

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1630

/bin/rm
rm -rf p
2⤵
PID:1631

/bin/rm
rm -rf ip
2⤵
PID:1632

/bin/rm
rm -rf "xtr*"
2⤵
PID:1633

/bin/rm
rm -rf a "a.*"
2⤵
PID:1634

/bin/rm
rm -rf b "b.*"
2⤵
PID:1635

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1636

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1637

/bin/sleep
sleep 3
2⤵
PID:1638

/bin/rm
rm -rf "xtr*"
2⤵
PID:1641

/bin/rm
rm -rf ip
2⤵
PID:1642

/bin/rm
rm -rf p
2⤵
PID:1643

/bin/rm
rm -rf .out
2⤵
PID:1644

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1645

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1646

/bin/rm
rm -rf p
2⤵
PID:1647

/bin/rm
rm -rf ip
2⤵
PID:1648

/bin/rm
rm -rf "xtr*"
2⤵
PID:1649

/bin/rm
rm -rf a "a.*"
2⤵
PID:1650

/bin/rm
rm -rf b "b.*"
2⤵
PID:1651

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1652

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1653

/bin/sleep
sleep 3
2⤵
PID:1654

/bin/rm
rm -rf "xtr*"
2⤵
PID:1655

/bin/rm
rm -rf ip
2⤵
PID:1656

/bin/rm
rm -rf p
2⤵
PID:1657

/bin/rm
rm -rf .out
2⤵
PID:1658

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1659

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1660

/bin/rm
rm -rf p
2⤵
PID:1661

/bin/rm
rm -rf ip
2⤵
PID:1662

/bin/rm
rm -rf "xtr*"
2⤵
PID:1663

/bin/rm
rm -rf a "a.*"
2⤵
PID:1664

/bin/rm
rm -rf b "b.*"
2⤵
PID:1665

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1666

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1667

/bin/sleep
sleep 3
2⤵
PID:1668

/bin/rm
rm -rf "xtr*"
2⤵
PID:1669

/bin/rm
rm -rf ip
2⤵
PID:1670

/bin/rm
rm -rf p
2⤵
PID:1671

/bin/rm
rm -rf .out
2⤵
PID:1672

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1673

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1674

/bin/rm
rm -rf p
2⤵
PID:1675

/bin/rm
rm -rf ip
2⤵
PID:1676

/bin/rm
rm -rf "xtr*"
2⤵
PID:1677

/bin/rm
rm -rf a "a.*"
2⤵
PID:1678

/bin/rm
rm -rf b "b.*"
2⤵
PID:1679

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1680

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1681

/bin/sleep
sleep 3
2⤵
PID:1682

/bin/rm
rm -rf "xtr*"
2⤵
PID:1683

/bin/rm
rm -rf ip
2⤵
PID:1684

/bin/rm
rm -rf p
2⤵
PID:1685

/bin/rm
rm -rf .out
2⤵
PID:1686

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1687

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1688

/bin/rm
rm -rf p
2⤵
PID:1689

/bin/rm
rm -rf ip
2⤵
PID:1690

/bin/rm
rm -rf "xtr*"
2⤵
PID:1691

/bin/rm
rm -rf a "a.*"
2⤵
PID:1692

/bin/rm
rm -rf b "b.*"
2⤵
PID:1693

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1694

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1695

/bin/sleep
sleep 3
2⤵
PID:1696

/bin/rm
rm -rf "xtr*"
2⤵
PID:1697

/bin/rm
rm -rf ip
2⤵
PID:1698

/bin/rm
rm -rf p
2⤵
PID:1699

/bin/rm
rm -rf .out
2⤵
PID:1700

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1701

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1702

/bin/rm
rm -rf p
2⤵
PID:1703

/bin/rm
rm -rf ip
2⤵
PID:1704

/bin/rm
rm -rf "xtr*"
2⤵
PID:1705

/bin/rm
rm -rf a "a.*"
2⤵
PID:1706

/bin/rm
rm -rf b "b.*"
2⤵
PID:1707

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1708

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1709

/bin/sleep
sleep 3
2⤵
PID:1710

/bin/rm
rm -rf "xtr*"
2⤵
PID:1711

/bin/rm
rm -rf ip
2⤵
PID:1712

/bin/rm
rm -rf p
2⤵
PID:1713

/bin/rm
rm -rf .out
2⤵
PID:1714

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1715

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1716

/bin/rm
rm -rf p
2⤵
PID:1717

/bin/rm
rm -rf ip
2⤵
PID:1718

/bin/rm
rm -rf "xtr*"
2⤵
PID:1719

/bin/rm
rm -rf a "a.*"
2⤵
PID:1720

/bin/rm
rm -rf b "b.*"
2⤵
PID:1721

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1722

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1723

/bin/sleep
sleep 3
2⤵
PID:1724

/bin/rm
rm -rf "xtr*"
2⤵
PID:1725

/bin/rm
rm -rf ip
2⤵
PID:1726

/bin/rm
rm -rf p
2⤵
PID:1727

/bin/rm
rm -rf .out
2⤵
PID:1728

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1729

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1730

/bin/rm
rm -rf p
2⤵
PID:1731

/bin/rm
rm -rf ip
2⤵
PID:1732

/bin/rm
rm -rf "xtr*"
2⤵
PID:1733

/bin/rm
rm -rf a "a.*"
2⤵
PID:1734

/bin/rm
rm -rf b "b.*"
2⤵
PID:1735

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1736

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1737

/bin/sleep
sleep 3
2⤵
PID:1738

/bin/rm
rm -rf "xtr*"
2⤵
PID:1739

/bin/rm
rm -rf ip
2⤵
PID:1740

/bin/rm
rm -rf p
2⤵
PID:1741

/bin/rm
rm -rf .out
2⤵
PID:1742

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1743

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1744

/bin/rm
rm -rf p
2⤵
PID:1745

/bin/rm
rm -rf ip
2⤵
PID:1746

/bin/rm
rm -rf "xtr*"
2⤵
PID:1747

/bin/rm
rm -rf a "a.*"
2⤵
PID:1748

/bin/rm
rm -rf b "b.*"
2⤵
PID:1749

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1750

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1751

/bin/sleep
sleep 3
2⤵
PID:1752

/bin/rm
rm -rf "xtr*"
2⤵
PID:1753

/bin/rm
rm -rf ip
2⤵
PID:1754

/bin/rm
rm -rf p
2⤵
PID:1755

/bin/rm
rm -rf .out
2⤵
PID:1756

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1757

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1758

/bin/rm
rm -rf p
2⤵
PID:1759

/bin/rm
rm -rf ip
2⤵
PID:1760

/bin/rm
rm -rf "xtr*"
2⤵
PID:1761

/bin/rm
rm -rf a "a.*"
2⤵
PID:1762

/bin/rm
rm -rf b "b.*"
2⤵
PID:1763

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1764

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1765

/bin/sleep
sleep 3
2⤵
PID:1766

/bin/rm
rm -rf "xtr*"
2⤵
PID:1767

/bin/rm
rm -rf ip
2⤵
PID:1768

/bin/rm
rm -rf p
2⤵
PID:1769

/bin/rm
rm -rf .out
2⤵
PID:1770

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1771

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1772

/bin/rm
rm -rf p
2⤵
PID:1773

/bin/rm
rm -rf ip
2⤵
PID:1774

/bin/rm
rm -rf "xtr*"
2⤵
PID:1775

/bin/rm
rm -rf a "a.*"
2⤵
PID:1776

/bin/rm
rm -rf b "b.*"
2⤵
PID:1777

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1778

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1779

/bin/sleep
sleep 3
2⤵
PID:1780

/bin/rm
rm -rf "xtr*"
2⤵
PID:1781

/bin/rm
rm -rf ip
2⤵
PID:1782

/bin/rm
rm -rf p
2⤵
PID:1783

/bin/rm
rm -rf .out
2⤵
PID:1784

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1785

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1786

/bin/rm
rm -rf p
2⤵
PID:1787

/bin/rm
rm -rf ip
2⤵
PID:1788

/bin/rm
rm -rf "xtr*"
2⤵
PID:1789

/bin/rm
rm -rf a "a.*"
2⤵
PID:1790

/bin/rm
rm -rf b "b.*"
2⤵
PID:1791

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1792

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1793

/bin/sleep
sleep 3
2⤵
PID:1794

/bin/rm
rm -rf "xtr*"
2⤵
PID:1795

/bin/rm
rm -rf ip
2⤵
PID:1796

/bin/rm
rm -rf p
2⤵
PID:1797

/bin/rm
rm -rf .out
2⤵
PID:1798

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1799

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1800

/bin/rm
rm -rf p
2⤵
PID:1801

/bin/rm
rm -rf ip
2⤵
PID:1802

/bin/rm
rm -rf "xtr*"
2⤵
PID:1803

/bin/rm
rm -rf a "a.*"
2⤵
PID:1804

/bin/rm
rm -rf b "b.*"
2⤵
PID:1805

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1806

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1807

/bin/sleep
sleep 3
2⤵
PID:1808

/bin/rm
rm -rf "xtr*"
2⤵
PID:1809

/bin/rm
rm -rf ip
2⤵
PID:1810

/bin/rm
rm -rf p
2⤵
PID:1811

/bin/rm
rm -rf .out
2⤵
PID:1812

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1813

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1814

/bin/rm
rm -rf p
2⤵
PID:1815

/bin/rm
rm -rf ip
2⤵
PID:1816

/bin/rm
rm -rf "xtr*"
2⤵
PID:1817

/bin/rm
rm -rf a "a.*"
2⤵
PID:1818

/bin/rm
rm -rf b "b.*"
2⤵
PID:1819

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1820

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1821

/bin/sleep
sleep 3
2⤵
PID:1822

/bin/rm
rm -rf "xtr*"
2⤵
PID:1823

/bin/rm
rm -rf ip
2⤵
PID:1824

/bin/rm
rm -rf p
2⤵
PID:1825

/bin/rm
rm -rf .out
2⤵
PID:1826

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1827

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1828

/bin/rm
rm -rf p
2⤵
PID:1829

/bin/rm
rm -rf ip
2⤵
PID:1830

/bin/rm
rm -rf "xtr*"
2⤵
PID:1831

/bin/rm
rm -rf a "a.*"
2⤵
PID:1832

/bin/rm
rm -rf b "b.*"
2⤵
PID:1833

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1834

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1835

/bin/sleep
sleep 3
2⤵
PID:1836

/bin/rm
rm -rf "xtr*"
2⤵
PID:1837

/bin/rm
rm -rf ip
2⤵
PID:1838

/bin/rm
rm -rf p
2⤵
PID:1839

/bin/rm
rm -rf .out
2⤵
PID:1840

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1841

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1842

/bin/rm
rm -rf p
2⤵
PID:1843

/bin/rm
rm -rf ip
2⤵
PID:1844

/bin/rm
rm -rf "xtr*"
2⤵
PID:1845

/bin/rm
rm -rf a "a.*"
2⤵
PID:1846

/bin/rm
rm -rf b "b.*"
2⤵
PID:1847

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1848

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1849

/bin/sleep
sleep 3
2⤵
PID:1850

/bin/rm
rm -rf "xtr*"
2⤵
PID:1851

/bin/rm
rm -rf ip
2⤵
PID:1852

/bin/rm
rm -rf p
2⤵
PID:1853

/bin/rm
rm -rf .out
2⤵
PID:1854

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1855

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1856

/bin/rm
rm -rf p
2⤵
PID:1857

/bin/rm
rm -rf ip
2⤵
PID:1858

/bin/rm
rm -rf "xtr*"
2⤵
PID:1859

/bin/rm
rm -rf a "a.*"
2⤵
PID:1860

/bin/rm
rm -rf b "b.*"
2⤵
PID:1861

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1862

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1863

/bin/sleep
sleep 3
2⤵
PID:1864

/bin/rm
rm -rf "xtr*"
2⤵
PID:1865

/bin/rm
rm -rf ip
2⤵
PID:1866

/bin/rm
rm -rf p
2⤵
PID:1867

/bin/rm
rm -rf .out
2⤵
PID:1868

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1869

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1870

/bin/rm
rm -rf p
2⤵
PID:1871

/bin/rm
rm -rf ip
2⤵
PID:1872

/bin/rm
rm -rf "xtr*"
2⤵
PID:1873

/bin/rm
rm -rf a "a.*"
2⤵
PID:1874

/bin/rm
rm -rf b "b.*"
2⤵
PID:1875

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1876

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1877

/bin/sleep
sleep 3
2⤵
PID:1878

/bin/rm
rm -rf "xtr*"
2⤵
PID:1879

/bin/rm
rm -rf ip
2⤵
PID:1880

/bin/rm
rm -rf p
2⤵
PID:1881

/bin/rm
rm -rf .out
2⤵
PID:1882

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1883

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1884

/bin/rm
rm -rf p
2⤵
PID:1885

/bin/rm
rm -rf ip
2⤵
PID:1886

/bin/rm
rm -rf "xtr*"
2⤵
PID:1887

/bin/rm
rm -rf a "a.*"
2⤵
PID:1888

/bin/rm
rm -rf b "b.*"
2⤵
PID:1889

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1890

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1891

/bin/sleep
sleep 3
2⤵
PID:1892

/bin/rm
rm -rf "xtr*"
2⤵
PID:1893

/bin/rm
rm -rf ip
2⤵
PID:1894

/bin/rm
rm -rf p
2⤵
PID:1895

/bin/rm
rm -rf .out
2⤵
PID:1896

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1897

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1898

/bin/rm
rm -rf p
2⤵
PID:1899

/bin/rm
rm -rf ip
2⤵
PID:1900

/bin/rm
rm -rf "xtr*"
2⤵
PID:1901

/bin/rm
rm -rf a "a.*"
2⤵
PID:1902

/bin/rm
rm -rf b "b.*"
2⤵
PID:1903

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1904

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1905

/bin/sleep
sleep 3
2⤵
PID:1906

/bin/rm
rm -rf "xtr*"
2⤵
PID:1907

/bin/rm
rm -rf ip
2⤵
PID:1908

/bin/rm
rm -rf p
2⤵
PID:1909

/bin/rm
rm -rf .out
2⤵
PID:1910

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1911

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1912

/bin/rm
rm -rf p
2⤵
PID:1913

/bin/rm
rm -rf ip
2⤵
PID:1914

/bin/rm
rm -rf "xtr*"
2⤵
PID:1915

/bin/rm
rm -rf a "a.*"
2⤵
PID:1916

/bin/rm
rm -rf b "b.*"
2⤵
PID:1917

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1918

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1919

/bin/sleep
sleep 3
2⤵
PID:1920

/bin/rm
rm -rf "xtr*"
2⤵
PID:1921

/bin/rm
rm -rf ip
2⤵
PID:1922

/bin/rm
rm -rf p
2⤵
PID:1923

/bin/rm
rm -rf .out
2⤵
PID:1924

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1925

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1926

/bin/rm
rm -rf p
2⤵
PID:1927

/bin/rm
rm -rf ip
2⤵
PID:1928

/bin/rm
rm -rf "xtr*"
2⤵
PID:1929

/bin/rm
rm -rf a "a.*"
2⤵
PID:1930

/bin/rm
rm -rf b "b.*"
2⤵
PID:1931

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1932

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1933

/bin/sleep
sleep 3
2⤵
PID:1934

/bin/rm
rm -rf "xtr*"
2⤵
PID:1935

/bin/rm
rm -rf ip
2⤵
PID:1936

/bin/rm
rm -rf p
2⤵
PID:1937

/bin/rm
rm -rf .out
2⤵
PID:1938

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1939

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1940

/bin/rm
rm -rf p
2⤵
PID:1941

/bin/rm
rm -rf ip
2⤵
PID:1942

/bin/rm
rm -rf "xtr*"
2⤵
PID:1943

/bin/rm
rm -rf a "a.*"
2⤵
PID:1944

/bin/rm
rm -rf b "b.*"
2⤵
PID:1945

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1946

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1947

/bin/sleep
sleep 3
2⤵
PID:1948

/bin/rm
rm -rf "xtr*"
2⤵
PID:1949

/bin/rm
rm -rf ip
2⤵
PID:1950

/bin/rm
rm -rf p
2⤵
PID:1951

/bin/rm
rm -rf .out
2⤵
PID:1952

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1953

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1954

/bin/rm
rm -rf p
2⤵
PID:1955

/bin/rm
rm -rf ip
2⤵
PID:1956

/bin/rm
rm -rf "xtr*"
2⤵
PID:1957

/bin/rm
rm -rf a "a.*"
2⤵
PID:1958

/bin/rm
rm -rf b "b.*"
2⤵
PID:1959

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1960

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1961

/bin/sleep
sleep 3
2⤵
PID:1962

/bin/rm
rm -rf "xtr*"
2⤵
PID:1963

/bin/rm
rm -rf ip
2⤵
PID:1964

/bin/rm
rm -rf p
2⤵
PID:1965

/bin/rm
rm -rf .out
2⤵
PID:1966

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1967

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1968

/bin/rm
rm -rf p
2⤵
PID:1969

/bin/rm
rm -rf ip
2⤵
PID:1970

/bin/rm
rm -rf "xtr*"
2⤵
PID:1971

/bin/rm
rm -rf a "a.*"
2⤵
PID:1972

/bin/rm
rm -rf b "b.*"
2⤵
PID:1973

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1974

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1975

/bin/sleep
sleep 3
2⤵
PID:1976

/bin/rm
rm -rf "xtr*"
2⤵
PID:1977

/bin/rm
rm -rf ip
2⤵
PID:1978

/bin/rm
rm -rf p
2⤵
PID:1979

/bin/rm
rm -rf .out
2⤵
PID:1980

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1981

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1982

/bin/rm
rm -rf p
2⤵
PID:1983

/bin/rm
rm -rf ip
2⤵
PID:1984

/bin/rm
rm -rf "xtr*"
2⤵
PID:1985

/bin/rm
rm -rf a "a.*"
2⤵
PID:1986

/bin/rm
rm -rf b "b.*"
2⤵
PID:1987

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:1988

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:1989

/bin/sleep
sleep 3
2⤵
PID:1990

/bin/rm
rm -rf "xtr*"
2⤵
PID:1991

/bin/rm
rm -rf ip
2⤵
PID:1992

/bin/rm
rm -rf p
2⤵
PID:1993

/bin/rm
rm -rf .out
2⤵
PID:1994

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:1995

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:1996

/bin/rm
rm -rf p
2⤵
PID:1997

/bin/rm
rm -rf ip
2⤵
PID:1998

/bin/rm
rm -rf "xtr*"
2⤵
PID:1999

/bin/rm
rm -rf a "a.*"
2⤵
PID:2000

/bin/rm
rm -rf b "b.*"
2⤵
PID:2001

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:2002

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:2003

/bin/sleep
sleep 3
2⤵
PID:2004

/bin/rm
rm -rf "xtr*"
2⤵
PID:2005

/bin/rm
rm -rf ip
2⤵
PID:2006

/bin/rm
rm -rf p
2⤵
PID:2007

/bin/rm
rm -rf .out
2⤵
PID:2008

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2009

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2010

/bin/rm
rm -rf p
2⤵
PID:2011

/bin/rm
rm -rf ip
2⤵
PID:2012

/bin/rm
rm -rf "xtr*"
2⤵
PID:2013

/bin/rm
rm -rf a "a.*"
2⤵
PID:2014

/bin/rm
rm -rf b "b.*"
2⤵
PID:2015

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:2016

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:2017

/bin/sleep
sleep 3
2⤵
PID:2018

/bin/rm
rm -rf "xtr*"
2⤵
PID:2019

/bin/rm
rm -rf ip
2⤵
PID:2020

/bin/rm
rm -rf p
2⤵
PID:2021

/bin/rm
rm -rf .out
2⤵
PID:2022

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2023

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2024

/bin/rm
rm -rf p
2⤵
PID:2025

/bin/rm
rm -rf ip
2⤵
PID:2026

/bin/rm
rm -rf "xtr*"
2⤵
PID:2027

/bin/rm
rm -rf a "a.*"
2⤵
PID:2028

/bin/rm
rm -rf b "b.*"
2⤵
PID:2029

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:2030

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:2031

/bin/sleep
sleep 3
2⤵
PID:2032

/bin/rm
rm -rf "xtr*"
2⤵
PID:2033

/bin/rm
rm -rf ip
2⤵
PID:2034

/bin/rm
rm -rf p
2⤵
PID:2035

/bin/rm
rm -rf .out
2⤵
PID:2036

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2037

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2038

/bin/rm
rm -rf p
2⤵
PID:2039

/bin/rm
rm -rf ip
2⤵
PID:2040

/bin/rm
rm -rf "xtr*"
2⤵
PID:2041

/bin/rm
rm -rf a "a.*"
2⤵
PID:2042

/bin/rm
rm -rf b "b.*"
2⤵
PID:2043

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:2044

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:2045

/bin/sleep
sleep 3
2⤵
PID:2046

/bin/rm
rm -rf "xtr*"
2⤵
PID:2047

/bin/rm
rm -rf ip
2⤵
PID:2048

/bin/rm
rm -rf p
2⤵
PID:2049

/bin/rm
rm -rf .out
2⤵
PID:2050

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2051

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2052

/bin/rm
rm -rf p
2⤵
PID:2053

/bin/rm
rm -rf ip
2⤵
PID:2054

/bin/rm
rm -rf "xtr*"
2⤵
PID:2055

/bin/rm
rm -rf a "a.*"
2⤵
PID:2056

/bin/rm
rm -rf b "b.*"
2⤵
PID:2057

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:2058

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:2059

/bin/sleep
sleep 3
2⤵
PID:2060

/bin/rm
rm -rf "xtr*"
2⤵
PID:2061

/bin/rm
rm -rf ip
2⤵
PID:2062

/bin/rm
rm -rf p
2⤵
PID:2063

/bin/rm
rm -rf .out
2⤵
PID:2064

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2065

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2066

/bin/rm
rm -rf p
2⤵
PID:2067

/bin/rm
rm -rf ip
2⤵
PID:2068

/bin/rm
rm -rf "xtr*"
2⤵
PID:2069

/bin/rm
rm -rf a "a.*"
2⤵
PID:2070

/bin/rm
rm -rf b "b.*"
2⤵
PID:2071

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:2072

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:2073

/bin/sleep
sleep 3
2⤵
PID:2074

/bin/rm
rm -rf "xtr*"
2⤵
PID:2075

/bin/rm
rm -rf ip
2⤵
PID:2076

/bin/rm
rm -rf p
2⤵
PID:2077

/bin/rm
rm -rf .out
2⤵
PID:2078

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2079

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2080

/bin/rm
rm -rf p
2⤵
PID:2081

/bin/rm
rm -rf ip
2⤵
PID:2082

/bin/rm
rm -rf "xtr*"
2⤵
PID:2083

/bin/rm
rm -rf a "a.*"
2⤵
PID:2084

/bin/rm
rm -rf b "b.*"
2⤵
PID:2085

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:2086

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:2087

/bin/sleep
sleep 3
2⤵
PID:2088

/bin/rm
rm -rf "xtr*"
2⤵
PID:2089

/bin/rm
rm -rf ip
2⤵
PID:2090

/bin/rm
rm -rf p
2⤵
PID:2091

/bin/rm
rm -rf .out
2⤵
PID:2092

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2093

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2094

/bin/rm
rm -rf p
2⤵
PID:2095

/bin/rm
rm -rf ip
2⤵
PID:2096

/bin/rm
rm -rf "xtr*"
2⤵
PID:2097

/bin/rm
rm -rf a "a.*"
2⤵
PID:2098

/bin/rm
rm -rf b "b.*"
2⤵
PID:2099

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:2100

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:2101

/bin/sleep
sleep 3
2⤵
PID:2102

/bin/rm
rm -rf "xtr*"
2⤵
PID:2103

/bin/rm
rm -rf ip
2⤵
PID:2104

/bin/rm
rm -rf p
2⤵
PID:2105

/bin/rm
rm -rf .out
2⤵
PID:2106

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2107

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2108

/bin/rm
rm -rf p
2⤵
PID:2109

/bin/rm
rm -rf ip
2⤵
PID:2110

/bin/rm
rm -rf "xtr*"
2⤵
PID:2111

/bin/rm
rm -rf a "a.*"
2⤵
PID:2112

/bin/rm
rm -rf b "b.*"
2⤵
PID:2113

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:2114

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:2115

/bin/sleep
sleep 3
2⤵
PID:2116

/bin/rm
rm -rf "xtr*"
2⤵
PID:2117

/bin/rm
rm -rf ip
2⤵
PID:2118

/bin/rm
rm -rf p
2⤵
PID:2119

/bin/rm
rm -rf .out
2⤵
PID:2120

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2121

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2122

/bin/rm
rm -rf p
2⤵
PID:2123

/bin/rm
rm -rf ip
2⤵
PID:2124

/bin/rm
rm -rf "xtr*"
2⤵
PID:2125

/bin/rm
rm -rf a "a.*"
2⤵
PID:2126

/bin/rm
rm -rf b "b.*"
2⤵
PID:2127

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:2128

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:2129

/bin/sleep
sleep 3
2⤵
PID:2130

/bin/rm
rm -rf "xtr*"
2⤵
PID:2131

/bin/rm
rm -rf ip
2⤵
PID:2132

/bin/rm
rm -rf p
2⤵
PID:2133

/bin/rm
rm -rf .out
2⤵
PID:2134

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2135

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2136

/bin/rm
rm -rf p
2⤵
PID:2137

/bin/rm
rm -rf ip
2⤵
PID:2138

/bin/rm
rm -rf "xtr*"
2⤵
PID:2139

/bin/rm
rm -rf a "a.*"
2⤵
PID:2140

/bin/rm
rm -rf b "b.*"
2⤵
PID:2141

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:2142

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:2143

/bin/sleep
sleep 3
2⤵
PID:2144

/bin/rm
rm -rf "xtr*"
2⤵
PID:2145

/bin/rm
rm -rf ip
2⤵
PID:2146

/bin/rm
rm -rf p
2⤵
PID:2147

/bin/rm
rm -rf .out
2⤵
PID:2148

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2149

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2150

/bin/rm
rm -rf p
2⤵
PID:2151

/bin/rm
rm -rf ip
2⤵
PID:2152

/bin/rm
rm -rf "xtr*"
2⤵
PID:2153

/bin/rm
rm -rf a "a.*"
2⤵
PID:2154

/bin/rm
rm -rf b "b.*"
2⤵
PID:2155

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:2156

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:2157

/bin/sleep
sleep 3
2⤵
PID:2158

/bin/rm
rm -rf "xtr*"
2⤵
PID:2159

/bin/rm
rm -rf ip
2⤵
PID:2160

/bin/rm
rm -rf p
2⤵
PID:2161

/bin/rm
rm -rf .out
2⤵
PID:2162

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2163

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2164

/bin/rm
rm -rf p
2⤵
PID:2165

/bin/rm
rm -rf ip
2⤵
PID:2166

/bin/rm
rm -rf "xtr*"
2⤵
PID:2167

/bin/rm
rm -rf a "a.*"
2⤵
PID:2168

/bin/rm
rm -rf b "b.*"
2⤵
PID:2169

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:2170

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:2171

/bin/sleep
sleep 3
2⤵
PID:2172

/bin/rm
rm -rf "xtr*"
2⤵
PID:2173

/bin/rm
rm -rf ip
2⤵
PID:2174

/bin/rm
rm -rf p
2⤵
PID:2175

/bin/rm
rm -rf .out
2⤵
PID:2176

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2177

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2178

/bin/rm
rm -rf p
2⤵
PID:2179

/bin/rm
rm -rf ip
2⤵
PID:2180

/bin/rm
rm -rf "xtr*"
2⤵
PID:2181

/bin/rm
rm -rf a "a.*"
2⤵
PID:2182

/bin/rm
rm -rf b "b.*"
2⤵
PID:2183

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:2184

/tmp/.rsync/c/tsm
./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
3⤵
PID:2185

/bin/sleep
sleep 3
2⤵
PID:2186

/bin/rm
rm -rf "xtr*"
2⤵
PID:2187

/bin/rm
rm -rf ip
2⤵
PID:2188

/bin/rm
rm -rf p
2⤵
PID:2189

/bin/rm
rm -rf .out
2⤵
PID:2190

/bin/rm
rm -rf "/tmp/t*"
2⤵
PID:2191

/usr/bin/touch
touch v
2⤵
- Writes file to tmp directory
PID:2192

/bin/rm
rm -rf p
2⤵
PID:2193

/bin/rm
rm -rf ip
2⤵
PID:2194

/bin/rm
rm -rf "xtr*"
2⤵
PID:2195

/bin/rm
rm -rf a "a.*"
2⤵
PID:2196

/bin/rm
rm -rf b "b.*"
2⤵
PID:2197

/usr/bin/timeout
timeout 24h ./tsm -t 505 -f 1 -s 12 -S 8 -p 0 -d 1 p ip
2⤵
PID:2198

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads