IOC Report
wNJM6XQwaZ.elf

loading gif

Processes

Path
Cmdline
Malicious
/tmp/wNJM6XQwaZ.elf
/tmp/wNJM6XQwaZ.elf
/tmp/wNJM6XQwaZ.elf
-
/tmp/wNJM6XQwaZ.elf
-
/tmp/wNJM6XQwaZ.elf
-
/tmp/wNJM6XQwaZ.elf
-
/tmp/wNJM6XQwaZ.elf
-
/tmp/wNJM6XQwaZ.elf
-
/tmp/wNJM6XQwaZ.elf
-
/tmp/wNJM6XQwaZ.elf
-
/tmp/wNJM6XQwaZ.elf
-
/tmp/wNJM6XQwaZ.elf
-
/tmp/wNJM6XQwaZ.elf
-
/tmp/wNJM6XQwaZ.elf
-
/tmp/wNJM6XQwaZ.elf
-
/tmp/wNJM6XQwaZ.elf
-
/tmp/wNJM6XQwaZ.elf
-
There are 6 hidden processes, click here to show them.

URLs

Name
IP
Malicious
http://upx.sf.net
unknown
 malicious

IPs

IP
Domain
Country
Malicious
222.112.249.252
unknown
Korea Republic of
157.159.2.12
unknown
France
198.222.27.55
unknown
United States
151.131.142.192
unknown
United States
80.189.219.79
unknown
United Kingdom
193.105.194.7
unknown
United Kingdom
166.135.50.235
unknown
United States
249.17.141.75
unknown
Reserved
13.209.34.137
unknown
United States
35.6.69.137
unknown
United States
75.34.40.56
unknown
United States
167.177.234.84
unknown
United States
5.201.64.106
unknown
Poland
103.207.37.125
unknown
Viet Nam
254.248.117.91
unknown
Reserved
158.160.21.6
unknown
Venezuela
57.179.76.88
unknown
Belgium
130.225.89.225
unknown
Denmark
199.34.73.10
unknown
Canada
178.134.55.152
unknown
Georgia
74.184.166.182
unknown
United States
182.61.27.102
unknown
China
209.245.20.114
unknown
United States
254.137.224.197
unknown
Reserved
18.92.85.240
unknown
United States
171.34.167.197
unknown
China
68.201.76.33
unknown
United States
125.194.199.248
unknown
Japan
65.72.198.90
unknown
United States
18.146.49.141
unknown
United States
67.80.151.78
unknown
United States
122.249.144.149
unknown
Japan
147.200.0.237
unknown
Australia
130.234.121.114
unknown
Finland
57.119.20.168
unknown
Belgium
98.126.6.63
unknown
United States
249.81.149.50
unknown
Reserved
123.30.215.217
unknown
Viet Nam
243.234.199.98
unknown
Reserved
163.125.252.87
unknown
China
70.37.100.44
unknown
United States
198.60.21.142
unknown
United States
167.93.80.81
unknown
United States
184.108.65.235
unknown
United States
161.195.174.59
unknown
United States
143.28.20.53
unknown
United States
193.162.116.19
unknown
Denmark
161.10.197.21
unknown
Colombia
118.135.88.107
unknown
China
75.159.38.93
unknown
Canada
250.32.103.220
unknown
Reserved
75.20.117.181
unknown
United States
191.175.230.200
unknown
Brazil
243.250.83.136
unknown
Reserved
247.250.141.60
unknown
Reserved
44.73.199.103
unknown
United States
17.6.122.204
unknown
United States
59.2.205.7
unknown
Korea Republic of
121.216.13.178
unknown
Australia
180.91.109.215
unknown
China
220.234.178.186
unknown
China
119.177.215.217
unknown
China
20.10.177.167
unknown
United States
217.217.226.241
unknown
Spain
139.235.224.179
unknown
United States
166.68.79.118
unknown
United States
152.75.141.106
unknown
United States
186.7.126.155
unknown
Dominican Republic
12.113.56.195
unknown
United States
108.6.54.185
unknown
United States
223.199.214.232
unknown
China
75.180.146.199
unknown
United States
124.135.242.48
unknown
China
197.31.187.169
unknown
Tunisia
89.85.144.138
unknown
France
222.106.198.180
unknown
Korea Republic of
62.141.160.96
unknown
Germany
200.137.211.254
unknown
Brazil
34.96.145.73
unknown
United States
4.131.82.69
unknown
United States
176.161.210.30
unknown
France
196.15.169.2
unknown
South Africa
78.158.226.197
unknown
Norway
135.113.97.68
unknown
United States
124.110.28.51
unknown
Japan
93.77.161.15
unknown
Russian Federation
135.237.84.117
unknown
United States
117.229.75.255
unknown
India
86.221.210.166
unknown
France
192.70.138.96
unknown
United States
23.26.70.87
unknown
United States
146.194.60.180
unknown
United Kingdom
206.49.36.77
unknown
United States
220.8.36.255
unknown
Japan
203.225.168.192
unknown
Korea Republic of
5.249.45.205
unknown
Portugal
63.175.201.10
unknown
United States
178.192.36.160
unknown
Switzerland
44.93.204.219
unknown
United States
185.237.138.34
unknown
Spain
There are 90 hidden IPs, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
7f38c4014000
page execute read
7f38c4007000
page execute and read and write
7f38c4002000
page execute read
7f39baa1e000
page read and write
7f39bb563000
page read and write
7f38c4015000
page execute and read and write
560f417e2000
page read and write
560f417cc000
page execute and read and write
560f3f543000
page execute read
7ffcee69c000
page read and write
7f39b4021000
page read and write
7f39baa1e000
page read and write
7f39bb0a2000
page read and write
560f42769000
page read and write
560f3f7c6000
page read and write
7f38c4028000
page execute and read and write
7f39ba21b000
page read and write
7f39bb563000
page read and write
7f38c400b000
page execute and read and write
7f38c4007000
page execute and read and write
560f417cc000
page execute and read and write
560f3f7ce000
page read and write
7f38c4002000
page execute read
7f39bb0a2000
page read and write
560f417e2000
page read and write
7f39bacbb000
page read and write
7f39bb51e000
page read and write
560f417cc000
page execute and read and write
7f39bb0a2000
page read and write
560f3f543000
page execute read
7f39baa2c000
page read and write
7f38c4009000
page execute read
7f38c4014000
page execute read
560f3f7ce000
page read and write
7f39bb516000
page read and write
7f39baa2c000
page read and write
7f39bb0a2000
page read and write
7f39ba21b000
page read and write
7f38c4015000
page execute and read and write
7f39bb3ed000
page read and write
7ffcee7f6000
page execute read
7f39b4000000
page read and write
7ffcee7f6000
page execute read
7f38c402a000
page read and write
7f38c400b000
page execute and read and write
7f39bb516000
page read and write
7f39ba21b000
page read and write
560f3f7ce000
page read and write
7f39bb516000
page read and write
7f39b4000000
page read and write
7f38c4009000
page execute read
7f39bb3ed000
page read and write
7f38c402b000
page read and write
560f3f7ce000
page read and write
7f38c402a000
page read and write
7f39bb51e000
page read and write
7ffcee7f6000
page execute read
7f39bb51e000
page read and write
560f417cc000
page execute and read and write
7f39bb51e000
page read and write
7f39ba21b000
page read and write
560f417cc000
page execute and read and write
7f38c4014000
page execute read
7f39b4021000
page read and write
7f38c4002000
page execute read
7f38c402a000
page read and write
7f39bacbb000
page read and write
7f38c4002000
page execute read
7f39bacbb000
page read and write
7f38c402a000
page read and write
7f39bacbb000
page read and write
7f39bb563000
page read and write
7f38c4009000
page execute read
7f39bb563000
page read and write
7f39bb07d000
page read and write
7f38c4007000
page execute and read and write
7f38c4002000
page execute read
7ffcee69c000
page read and write
7f39bb3ed000
page read and write
7f39b4000000
page read and write
560f417e2000
page read and write
7f39bb3ed000
page read and write
560f4278a000
page read and write
7f38c4007000
page execute and read and write
7f38c4009000
page execute read
7f39bb07d000
page read and write
7f39b4000000
page read and write
7f39baa2c000
page read and write
7f39bb563000
page read and write
7f39bb07d000
page read and write
7f38c4002000
page execute read
7f39b4000000
page read and write
7f38c4015000
page execute and read and write
7f39baa1e000
page read and write
560f42769000
page read and write
7f38c400b000
page execute and read and write
7f39b4021000
page read and write
7f39bb07d000
page read and write
7f39b4000000
page read and write
7ffcee69c000
page read and write
7f38c4007000
page execute and read and write
7f39bb3ed000
page read and write
560f42769000
page read and write
560f3f7ce000
page read and write
560f42769000
page read and write
560f4278a000
page read and write
560f417e2000
page read and write
7f38c4009000
page execute read
7f39bb516000
page read and write
560f3f543000
page execute read
7f38c4015000
page execute and read and write
7f39bb07d000
page read and write
7f39bb51e000
page read and write
7f38c402b000
page read and write
7f38c400b000
page execute and read and write
7f38c4015000
page execute and read and write
7f39bb563000
page read and write
7f38c4014000
page execute read
7f38c4028000
page execute and read and write
7f39bacbb000
page read and write
7f39baa1e000
page read and write
7f38c4028000
page execute and read and write
560f4278a000
page read and write
7f39baa2c000
page read and write
7f39baa1e000
page read and write
7f39baa2c000
page read and write
7f39bb516000
page read and write
7f39bb51e000
page read and write
7f38c402a000
page read and write
7f38c4014000
page execute read
7f38c4009000
page execute read
560f42769000
page read and write
7f38c4028000
page execute and read and write
7f39ba21b000
page read and write
560f417cc000
page execute and read and write
7f38c4028000
page execute and read and write
560f417cc000
page execute and read and write
7f38c4028000
page execute and read and write
7ffcee7f6000
page execute read
560f3f543000
page execute read
7f39baa1e000
page read and write
7f39bb3ed000
page read and write
7f38c4002000
page execute read
7f39bb51e000
page read and write
7ffcee7f6000
page execute read
7f38c4028000
page execute and read and write
7f39b4000000
page read and write
7f38c4002000
page execute read
7f39b4021000
page read and write
7f39b4021000
page read and write
7f39b4021000
page read and write
560f42769000
page read and write
7f39bb51e000
page read and write
7f38c4007000
page execute and read and write
7f38c4007000
page execute and read and write
7f39bb516000
page read and write
7f39bb563000
page read and write
560f4278a000
page read and write
560f3f7ce000
page read and write
7f39b4000000
page read and write
7f39bacbb000
page read and write
7f38c402a000
page read and write
7f39ba21b000
page read and write
7f39ba21b000
page read and write
7ffcee7f6000
page execute read
7f39baa2c000
page read and write
7f39ba21b000
page read and write
7f39b4021000
page read and write
560f417cc000
page execute and read and write
7ffcee69c000
page read and write
7f39bb3ed000
page read and write
7f38c402b000
page read and write
7ffcee69c000
page read and write
7f38c4007000
page execute and read and write
7f38c402a000
page read and write
7f39baa2c000
page read and write
560f3f543000
page execute read
7f38c4014000
page execute read
560f3f7ce000
page read and write
7f39bb07d000
page read and write
560f3f543000
page execute read
7f38c402b000
page read and write
560f42769000
page read and write
560f417e2000
page read and write
7f38c4009000
page execute read
560f417e2000
page read and write
560f3f7c6000
page read and write
560f3f7c6000
page read and write
7f39baa2c000
page read and write
7ffcee7f6000
page execute read
7f39bacbb000
page read and write
7f38c402a000
page read and write
7f39bacbb000
page read and write
560f3f7c6000
page read and write
7f38c4015000
page execute and read and write
7f38c4014000
page execute read
7f39bb07d000
page read and write
560f417e2000
page read and write
560f3f543000
page execute read
7f39bb0a2000
page read and write
560f3f7c6000
page read and write
7f38c400b000
page execute and read and write
7ffcee7f6000
page execute read
7f38c4009000
page execute read
7f39baa1e000
page read and write
560f3f543000
page execute read
7f38c4014000
page execute read
7f39bb563000
page read and write
560f3f7c6000
page read and write
7f39bb0a2000
page read and write
7f39bb516000
page read and write
7f39bb516000
page read and write
7f39bb0a2000
page read and write
7f38c400b000
page execute and read and write
560f3f7c6000
page read and write
7f38c4015000
page execute and read and write
7ffcee69c000
page read and write
7f38c4015000
page execute and read and write
7f38c400b000
page execute and read and write
560f4278a000
page read and write
560f417e2000
page read and write
7f38c400b000
page execute and read and write
7f38c402b000
page read and write
7f38c4028000
page execute and read and write
7ffcee69c000
page read and write
560f3f7c6000
page read and write
560f42769000
page read and write
7ffcee69c000
page read and write
7f39bb0a2000
page read and write
7f39bb07d000
page read and write
7f39b4021000
page read and write
7f39baa1e000
page read and write
7f39bb3ed000
page read and write
560f3f7ce000
page read and write
There are 224 hidden memdumps, click here to show them.