IOC Report
la.bot.arm6.elf

loading gif

Processes

Path
Cmdline
Malicious
/tmp/la.bot.arm6.elf
/tmp/la.bot.arm6.elf

URLs

Name
IP
Malicious
http:///wget.sh
unknown
http:///curl.sh
unknown

Domains

Name
IP
Malicious
daisy.ubuntu.com
162.213.35.25

Memdumps

Base Address
Regiontype
Protect
Malicious
7fd7bf1e7000
page read and write
55b111be2000
page read and write
7fd7bf22c000
page read and write
7fd7beb48000
page read and write
7fd7becd7000
page read and write
7fd7bf09a000
page read and write
7fd7be4e9000
page read and write
55b10dcc5000
page read and write
7fd6b802b000
page execute read
7fd6b803c000
page read and write
7ffe4818b000
page read and write
7fd7beeb9000
page read and write
7fd7be57b000
page read and write
55b10fcda000
page read and write
7fd7b8021000
page read and write
7fd7bdce1000
page read and write
7fd7beb6b000
page read and write
7fd7be8dd000
page read and write
55b10fcc3000
page execute and read and write
7fd6b8034000
page read and write
55b10da6b000
page execute read
7fd7bf1c3000
page read and write
55b10dcbc000
page read and write
7fd7b7fff000
page read and write
7ffe481d1000
page execute read
There are 15 hidden memdumps, click here to show them.