Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
/tmp/la.bot.arm6.elf
|
/tmp/la.bot.arm6.elf
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http:///wget.sh
|
unknown
|
||
|
http:///curl.sh
|
unknown
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
109.202.202.202
|
unknown
|
Switzerland
|
||
|
91.189.91.43
|
unknown
|
United Kingdom
|
||
|
91.189.91.42
|
unknown
|
United Kingdom
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7f2214021000
|
page read and write
|
|||
|
7f221ad5b000
|
page read and write
|
|||
|
55ff60a65000
|
page read and write
|
|||
|
7f221b5f5000
|
page read and write
|
|||
|
7ffce26cb000
|
page read and write
|
|||
|
7f221c114000
|
page read and write
|
|||
|
55ff5ea50000
|
page read and write
|
|||
|
7f221bd51000
|
page read and write
|
|||
|
7f221c2a6000
|
page read and write
|
|||
|
55ff60a4e000
|
page execute and read and write
|
|||
|
7f221b563000
|
page read and write
|
|||
|
7f211403b000
|
page read and write
|
|||
|
7f221bf33000
|
page read and write
|
|||
|
7f211402c000
|
page execute read
|
|||
|
55ff61961000
|
page read and write
|
|||
|
7f221b957000
|
page read and write
|
|||
|
55ff5ea47000
|
page read and write
|
|||
|
55ff5e7f6000
|
page execute read
|
|||
|
7f2114034000
|
page read and write
|
|||
|
7f2213fff000
|
page read and write
|
|||
|
7f221bbc2000
|
page read and write
|
|||
|
7f221c23d000
|
page read and write
|
|||
|
7f221c261000
|
page read and write
|
|||
|
7ffce2790000
|
page execute read
|
|||
|
7f221bbe5000
|
page read and write
|
There are 15 hidden memdumps, click here to show them.