IOC Report
la.bot.arm5.elf

loading gif

Processes

Path
Cmdline
Malicious
/tmp/la.bot.arm5.elf
/tmp/la.bot.arm5.elf
/tmp/la.bot.arm5.elf
-
/tmp/la.bot.arm5.elf
-
/tmp/la.bot.arm5.elf
-
/tmp/la.bot.arm5.elf
-
/tmp/la.bot.arm5.elf
-
/tmp/la.bot.arm5.elf
-
/tmp/la.bot.arm5.elf
-

URLs

Name
IP
Malicious
http:///wget.sh
unknown
http:///curl.sh
unknown

Memdumps

Base Address
Regiontype
Protect
Malicious
559f7b171000
page execute read
7f9e5a5f1000
page read and write
559f7f20e000
page read and write
559f7b171000
page execute read
7f9d54039000
page read and write
7f9e5b1ed000
page read and write
7f9e5bad3000
page read and write
7f9e54021000
page read and write
7ffc072a3000
page execute read
559f7d3e0000
page read and write
559f7d3c9000
page execute and read and write
559f7d3c9000
page execute and read and write
7f9e5b9aa000
page read and write
7f9e53fff000
page read and write
7f9e54021000
page read and write
7ffc0728e000
page read and write
7f9e5b7c9000
page read and write
7f9d54029000
page execute read
7f9e5bb3c000
page read and write
7f9e5baf7000
page read and write
7ffc072a3000
page execute read
7f9e5ae8b000
page read and write
7f9e5adf9000
page read and write
7f9d54039000
page read and write
7f9e5b1ed000
page read and write
7ffc072a3000
page execute read
7f9e5b47b000
page read and write
559f7b3c2000
page read and write
7ffc0728e000
page read and write
7f9d54029000
page execute read
7f9e5bb3c000
page read and write
7f9e5b5e7000
page read and write
559f7f20e000
page read and write
7f9e53fff000
page read and write
559f7b3cb000
page read and write
559f7b3cb000
page read and write
559f7d3c9000
page execute and read and write
7f9e54021000
page read and write
7f9d54032000
page read and write
559f7b171000
page execute read
7f9e5adf9000
page read and write
7f9d54032000
page read and write
7f9e5ae8b000
page read and write
7ffc0728e000
page read and write
559f7b3c2000
page read and write
7f9e5b458000
page read and write
7f9e5b9aa000
page read and write
7f9e5a5f1000
page read and write
7f9e5a5f1000
page read and write
559f7b3cb000
page read and write
7f9e5b47b000
page read and write
7f9e5b5e7000
page read and write
559f7d3e0000
page read and write
7f9e5b458000
page read and write
7f9e5b5e7000
page read and write
7f9e5bad3000
page read and write
7f9e5ae8b000
page read and write
7f9d54032000
page read and write
559f7d3e0000
page read and write
7f9e5baf7000
page read and write
7f9e5bb3c000
page read and write
7f9e5baf7000
page read and write
7f9e5b1ed000
page read and write
7f9e5b7c9000
page read and write
7f9e5b9aa000
page read and write
7f9e5b47b000
page read and write
7f9e53fff000
page read and write
7f9e5adf9000
page read and write
7f9e5b458000
page read and write
7f9e5b7c9000
page read and write
559f7b3c2000
page read and write
559f7f20e000
page read and write
7f9d54039000
page read and write
7f9e5bad3000
page read and write
7f9d54029000
page execute read
There are 65 hidden memdumps, click here to show them.