Demo entry 6351013

test

   

Submitted by anonymous on Mar 16, 2017 at 08:47
Language: XML. Code size: 961 Bytes.

行为描述:	装载新程序
详情信息:	
execve: /tmp/bin/****.elf
execve:
execve: -c ln -s /etc/init.d/DbSecuritySpt /etc/rc1.d/S97DbSecuritySpt
execve: -c ln -s /etc/init.d/DbSecuritySpt /etc/rc2.d/S97DbSecuritySpt
execve: -c ln -s /etc/init.d/DbSecuritySpt /etc/rc3.d/S97DbSecuritySpt
execve: -c ln -s /etc/init.d/DbSecuritySpt /etc/rc4.d/S97DbSecuritySpt
execve: -c ln -s /etc/init.d/DbSecuritySpt /etc/rc5.d/S97DbSecuritySpt
execve: -c mkdir -p /usr/bin/bsd-port
execve: -c cp -f /tmp/bin/****.elf /usr/bin/bsd-port/getty
execve: -c /usr/bin/bsd-port/getty
行为描述:	进程结束
详情信息:	
procexit status=0
行为描述:	clone系统调用
详情信息:	
clone: nil (PID=2400)
clone: nil (PID=2417)
clone: nil (PID=2418)
clone: nil (PID=2419)
clone: nil (PID=2420)
clone: nil (PID=2421)
clone: nil (PID=2422)
clone: nil (PID=2423)
clone: nil (PID=2424)
clone: nil (PID=2425)
clone: nil (PID=2426)
clone: nil (PID=2427)
clone: nil (PID=2428)
clone: nil (PID=2429)
clone: nil (PID=2430)

This snippet took 0.00 seconds to highlight.

Back to the Entry List or Home.

Delete this entry (admin only).