Advent Of Cyber 2023 — Day 18

What is the name of the service that respawns the process after killing it?

commands: systemctl list-unit-files | grep enabled & systemctl list-unit-files | grep kill

a-unkillable.service

What is the path from where the process and service were running?

command:systemctl status a-unkillable.service

/etc/systemd/system/

The malware prints a taunting message. When is the message shown?

4

That’s it | Visit mansoorbarri.com for other hacking & IT related articles.