IOC Report
la.bot.sh4.elf

loading gif

Processes

Path
Cmdline
Malicious
/usr/bin/dash
-
/usr/bin/rm
rm -f /tmp/tmp.kkU7CiqvTh /tmp/tmp.xQcxDpi09D /tmp/tmp.m2PO41jOJE
/usr/bin/dash
-
/usr/bin/cat
cat /tmp/tmp.kkU7CiqvTh
/usr/bin/dash
-
/usr/bin/head
head -n 10
/usr/bin/dash
-
/usr/bin/tr
tr -d \\000-\\011\\013\\014\\016-\\037
/usr/bin/dash
-
/usr/bin/cut
cut -c -80
/usr/bin/dash
-
/usr/bin/cat
cat /tmp/tmp.kkU7CiqvTh
/usr/bin/dash
-
/usr/bin/head
head -n 10
/usr/bin/dash
-
/usr/bin/tr
tr -d \\000-\\011\\013\\014\\016-\\037
/usr/bin/dash
-
/usr/bin/cut
cut -c -80
/usr/bin/dash
-
/usr/bin/rm
rm -f /tmp/tmp.kkU7CiqvTh /tmp/tmp.xQcxDpi09D /tmp/tmp.m2PO41jOJE
/tmp/la.bot.sh4.elf
/tmp/la.bot.sh4.elf
/tmp/la.bot.sh4.elf
-
/tmp/la.bot.sh4.elf
-
/tmp/la.bot.sh4.elf
-
/tmp/la.bot.sh4.elf
-
/tmp/la.bot.sh4.elf
-
/tmp/la.bot.sh4.elf
-
/tmp/la.bot.sh4.elf
-
/tmp/la.bot.sh4.elf
-
/tmp/la.bot.sh4.elf
-
/tmp/la.bot.sh4.elf
-
/tmp/la.bot.sh4.elf
-
/tmp/la.bot.sh4.elf
-
/tmp/la.bot.sh4.elf
-
/tmp/la.bot.sh4.elf
-
There are 25 hidden processes, click here to show them.

URLs

Name
IP
Malicious
http:///wget.sh
unknown
http:///curl.sh
unknown

Memdumps

Base Address
Regiontype
Protect
Malicious
7f68dc021000
page read and write
55659fb5d000
page read and write
55659fb46000
page execute and read and write
7f685c410000
page execute read
55659db40000
page read and write
55659db48000
page read and write
5565a0847000
page read and write
5565a0847000
page read and write
7f68e16fe000
page read and write
7f68e21f6000
page read and write
7ffe3e212000
page read and write
55659d92a000
page execute read
7ffe3e212000
page read and write
55659db40000
page read and write
7f68e21f6000
page read and write
55659db48000
page read and write
7f68e21fe000
page read and write
55659fb5d000
page read and write
7f685c418000
page read and write
7f68e21fe000
page read and write
7f685c418000
page read and write
7f68dc000000
page read and write
7f68e0efb000
page read and write
7f68e170c000
page read and write
55659fb5d000
page read and write
7f685c418000
page read and write
7f68dc021000
page read and write
7f68e1d5d000
page read and write
7f68e20cd000
page read and write
7f68e21fe000
page read and write
7f68e170c000
page read and write
7f68e21f6000
page read and write
5565a0847000
page read and write
7ffe3e357000
page execute read
7f68e170c000
page read and write
7f68e199b000
page read and write
7f685c410000
page execute read
55659db48000
page read and write
55659fb46000
page execute and read and write
55659fb5d000
page read and write
7f68e1d82000
page read and write
7f68e170c000
page read and write
7f68e21f6000
page read and write
7f68e199b000
page read and write
55659d92a000
page execute read
7f68e1d82000
page read and write
7f68e0efb000
page read and write
7ffe3e357000
page execute read
7ffe3e357000
page execute read
7f68e20cd000
page read and write
5565a0847000
page read and write
7f68e16fe000
page read and write
55659fb46000
page execute and read and write
7f68e2243000
page read and write
7ffe3e357000
page execute read
7f68e0efb000
page read and write
7f68e20cd000
page read and write
7f68dc000000
page read and write
7f685c411000
page read and write
7f685c410000
page execute read
7ffe3e212000
page read and write
55659db40000
page read and write
7f68e170c000
page read and write
7f68e20cd000
page read and write
55659fb46000
page execute and read and write
7f68e20cd000
page read and write
7f68dc000000
page read and write
7f68e21f6000
page read and write
7f68e2243000
page read and write
55659d92a000
page execute read
55659fb46000
page execute and read and write
55659d92a000
page execute read
7f68e199b000
page read and write
7f68e0efb000
page read and write
7f68e1d5d000
page read and write
7f68dc000000
page read and write
55659db40000
page read and write
55659fb5d000
page read and write
7f68e0efb000
page read and write
5565a0867000
page read and write
7f68e2243000
page read and write
7ffe3e357000
page execute read
7f68e21fe000
page read and write
7f68e199b000
page read and write
7f68e1d82000
page read and write
55659d92a000
page execute read
7f68e21fe000
page read and write
7f68dc000000
page read and write
7ffe3e357000
page execute read
7f685c411000
page read and write
7f68e16fe000
page read and write
7f68e2243000
page read and write
7f68dc000000
page read and write
55659db48000
page read and write
7f68e170c000
page read and write
5565a0867000
page read and write
7ffe3e357000
page execute read
7f68e16fe000
page read and write
7f685c411000
page read and write
7f68e199b000
page read and write
55659fb46000
page execute and read and write
5565a0867000
page read and write
7f685c418000
page read and write
5565a0867000
page read and write
7f68e0efb000
page read and write
55659fb5d000
page read and write
5565a0847000
page read and write
7f68e2243000
page read and write
7f68e199b000
page read and write
55659db40000
page read and write
55659fb46000
page execute and read and write
55659db48000
page read and write
7f685c411000
page read and write
5565a0867000
page read and write
7f68e16fe000
page read and write
7f68dc000000
page read and write
7f68e2243000
page read and write
7f68e16fe000
page read and write
7f68e0efb000
page read and write
7f68e0efb000
page read and write
7ffe3e212000
page read and write
7f68e21f6000
page read and write
55659db40000
page read and write
7ffe3e357000
page execute read
7f68e1d5d000
page read and write
7f68e0efb000
page read and write
5565a0867000
page read and write
7f68dc021000
page read and write
7f68e21fe000
page read and write
5565a0847000
page read and write
7f685c410000
page execute read
7f68e21f6000
page read and write
7f685c418000
page read and write
7ffe3e357000
page execute read
55659db40000
page read and write
55659d92a000
page execute read
7f68dc021000
page read and write
7f68dc021000
page read and write
55659fb46000
page execute and read and write
55659db48000
page read and write
7f68e21fe000
page read and write
7f68e199b000
page read and write
55659fb46000
page execute and read and write
7f68e16fe000
page read and write
55659fb5d000
page read and write
7f68dc021000
page read and write
7f68e21fe000
page read and write
55659d92a000
page execute read
55659db48000
page read and write
7ffe3e212000
page read and write
7f68e20cd000
page read and write
7f685c410000
page execute read
7f68e1d5d000
page read and write
7f685c418000
page read and write
7f68e1d5d000
page read and write
7f685c411000
page read and write
7f68e1d82000
page read and write
7f68e2243000
page read and write
7f68dc021000
page read and write
7f685c410000
page execute read
7f68dc021000
page read and write
7ffe3e212000
page read and write
7f68e16fe000
page read and write
7f685c410000
page execute read
7f685c410000
page execute read
7f68e20cd000
page read and write
7f68e1d82000
page read and write
7f685c411000
page read and write
7f685c418000
page read and write
5565a0867000
page read and write
5565a0847000
page read and write
7f68dc000000
page read and write
7f68e199b000
page read and write
7f68e170c000
page read and write
7f68e199b000
page read and write
5565a0847000
page read and write
7f685c411000
page read and write
55659fb5d000
page read and write
7f68dc021000
page read and write
7f68e21f6000
page read and write
7f685c411000
page read and write
7f68e1d5d000
page read and write
7f685c418000
page read and write
7f68e21f6000
page read and write
55659db48000
page read and write
55659d92a000
page execute read
7f68e1d82000
page read and write
7ffe3e212000
page read and write
55659d92a000
page execute read
7f68e2243000
page read and write
55659db40000
page read and write
7f685c418000
page read and write
7f68e20cd000
page read and write
55659db48000
page read and write
7f68e1d82000
page read and write
7f68e21fe000
page read and write
7f68e20cd000
page read and write
5565a0847000
page read and write
7f685c410000
page execute read
7f68e1d5d000
page read and write
7f68e1d82000
page read and write
55659fb5d000
page read and write
7f68e1d5d000
page read and write
7f68e170c000
page read and write
5565a0867000
page read and write
7f68dc000000
page read and write
7ffe3e212000
page read and write
7f68e1d5d000
page read and write
7ffe3e212000
page read and write
7f68e1d82000
page read and write
7f68e2243000
page read and write
7f685c411000
page read and write
55659db40000
page read and write
7f68e170c000
page read and write
7f68e16fe000
page read and write
There are 205 hidden memdumps, click here to show them.