chisel

SUSPICIOUS. The footprint is internally consistent with Chisel, but the stated purpose is explicitly offensive: covert reverse tunnels, SOCKS pivoting, persistence, and evasion from a compromised host to an attacker-controlled server. No clear credential theft is shown, so this is not confirmed malware, but it is a high-risk security/exploit skill that enables unauthorized network access and stealthy post-compromise actions.