534500x800000000000000091068460Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:38:38.318{ec28c72e-bb8e-62e2-f096-97e96d550000}20423/usr/bin/xcliproot 154100x800000000000000091068456Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:38:38.312{ec28c72e-bb8e-62e2-f096-97e96d550000}20423/usr/bin/xclip-----xclip -sel clip/home/ubunturoot{ec28c72e-0000-0000-0000-000000000000}0727no level-{ec28c72e-aa51-62e2-4884-26945b550000}19852/bin/bashbashroot 154100x800000000000000091068220Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:38:32.720{ec28c72e-bb88-62e2-6802-8fa86a550000}20421/bin/dash-----/bin/sh /usr/bin/which xclip/home/ubunturoot{ec28c72e-0000-0000-0000-000000000000}0727no level-{ec28c72e-aa51-62e2-4884-26945b550000}19852/bin/bashbashroot 534500x800000000000000091067912Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:38:24.143{ec28c72e-bb80-62e2-f086-6ae533560000}20420/usr/bin/xcliproot 154100x800000000000000091067911Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:38:24.140{ec28c72e-bb80-62e2-f086-6ae533560000}20420/usr/bin/xclip-----xclip -sel clip .bashrc/home/ubunturoot{ec28c72e-0000-0000-0000-000000000000}0727no level-{ec28c72e-aa51-62e2-4884-26945b550000}19852/bin/bashbashroot 534500x800000000000000091025962Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:20:15.301{ec28c72e-b73f-62e2-f0b6-560074550000}20395/usr/bin/xcliproot 154100x800000000000000091025955Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:20:15.297{ec28c72e-b73f-62e2-f0b6-560074550000}20395/usr/bin/xclip-----xclip -o/home/ubunturoot{ec28c72e-0000-0000-0000-000000000000}0727no level-{ec28c72e-aa51-62e2-4884-26945b550000}19852/bin/bashbashroot 534500x800000000000000091025911Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:20:09.917{ec28c72e-b739-62e2-f0c6-a4bb7c550000}20394/usr/bin/xcliproot 154100x800000000000000091025908Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:20:09.913{ec28c72e-b739-62e2-f0c6-a4bb7c550000}20394/usr/bin/xclip-----xclip -loops 10 -verbose /etc/motd/home/ubunturoot{ec28c72e-0000-0000-0000-000000000000}0727no level-{ec28c72e-aa51-62e2-4884-26945b550000}19852/bin/bashbashroot 534500x800000000000000091020088Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:18:45.323{ec28c72e-b6e5-62e2-f026-6fe406560000}20389/usr/bin/xcliproot 154100x800000000000000091020087Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:18:45.320{ec28c72e-b6e5-62e2-f026-6fe406560000}20389/usr/bin/xclip-----xclip -d/home/ubunturoot{ec28c72e-0000-0000-0000-000000000000}0727no level-{ec28c72e-aa51-62e2-4884-26945b550000}19852/bin/bashbashroot 534500x800000000000000091019747Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:18:36.136{ec28c72e-b6dc-62e2-f006-725765550000}20388/usr/bin/xcliproot 154100x800000000000000091019746Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:18:36.133{ec28c72e-b6dc-62e2-f006-725765550000}20388/usr/bin/xclip-----xclip -o/home/ubunturoot{ec28c72e-0000-0000-0000-000000000000}0727no level-{ec28c72e-aa51-62e2-4884-26945b550000}19852/bin/bashbashroot 534500x800000000000000091019693Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:18:34.266{ec28c72e-b6da-62e2-f086-a7d73d560000}20387/usr/bin/xcliproot 154100x800000000000000091019692Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:18:34.265{ec28c72e-b6da-62e2-f086-a7d73d560000}20387/usr/bin/xclip-----xclip/home/ubunturoot{ec28c72e-0000-0000-0000-000000000000}0727no level-{ec28c72e-aa51-62e2-4884-26945b550000}19852/bin/bashbashroot 534500x800000000000000091019637Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:18:31.761{ec28c72e-b6d7-62e2-f0a6-f9493e560000}20386/usr/bin/xcliproot 154100x800000000000000091019635Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:18:31.758{ec28c72e-b6d7-62e2-f0a6-f9493e560000}20386/usr/bin/xclip-----xclip/home/ubunturoot{ec28c72e-0000-0000-0000-000000000000}0727no level-{ec28c72e-aa51-62e2-4884-26945b550000}19852/bin/bashbashroot 534500x800000000000000091016444Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:17:31.907{ec28c72e-b69b-62e2-f086-9c0257550000}20382/usr/bin/xcliproot 154100x800000000000000091016443Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:17:31.905{ec28c72e-b69b-62e2-f086-9c0257550000}20382/usr/bin/xclip-----xclip -selection clip -o file/home/ubunturoot{ec28c72e-0000-0000-0000-000000000000}0727no level-{ec28c72e-aa51-62e2-4884-26945b550000}19852/bin/bashbashroot 534500x800000000000000091015720Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:17:22.018{ec28c72e-b692-62e2-f026-fecc91550000}20381/usr/bin/xcliproot 154100x800000000000000091015719Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:17:22.015{ec28c72e-b692-62e2-f026-fecc91550000}20381/usr/bin/xclip-----xclip -selection clip/home/ubunturoot{ec28c72e-0000-0000-0000-000000000000}0727no level-{ec28c72e-aa51-62e2-4884-26945b550000}19852/bin/bashbashroot 534500x800000000000000091015568Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:17:19.594{ec28c72e-b68f-62e2-f076-192209560000}20380/usr/bin/xcliproot 154100x800000000000000091015567Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:17:19.591{ec28c72e-b68f-62e2-f076-192209560000}20380/usr/bin/xclip-----xclip -selection clipboard/home/ubunturoot{ec28c72e-0000-0000-0000-000000000000}0727no level-{ec28c72e-aa51-62e2-4884-26945b550000}19852/bin/bashbashroot 534500x800000000000000091014263Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:16:49.800{ec28c72e-b671-62e2-f0f6-7011f9550000}20376/usr/bin/xcliproot 154100x800000000000000091014249Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:16:49.797{ec28c72e-b671-62e2-f0f6-7011f9550000}20376/usr/bin/xclip-----xclip -o/home/ubunturoot{ec28c72e-0000-0000-0000-000000000000}0727no level-{ec28c72e-aa51-62e2-4884-26945b550000}19852/bin/bashbashroot 534500x800000000000000091014144Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:16:44.165{ec28c72e-b66c-62e2-f096-74727c550000}20374/usr/bin/xcliproot 154100x800000000000000091014136Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:16:44.151{ec28c72e-b66c-62e2-f096-74727c550000}20374/usr/bin/xclip-----xclip -o/home/ubunturoot{ec28c72e-0000-0000-0000-000000000000}0727no level-{ec28c72e-aa51-62e2-4884-26945b550000}19852/bin/bashbashroot 154100x800000000000000090982180Linux-Sysmon/Operationalsysmonlinux-mhaag-attack-range-8786-2022-07-28 16:01:36.573{ec28c72e-b2e0-62e2-30f2-fc4fe9550000}20334/usr/bin/man-----man xclip/home/ubunturoot{ec28c72e-0000-0000-0000-000000000000}0727no level-{ec28c72e-aa51-62e2-4884-26945b550000}19852/bin/bashbashroot