IOC Report
la.bot.mips.elf

loading gif

Processes

Path
Cmdline
Malicious
/tmp/la.bot.mips.elf
/tmp/la.bot.mips.elf

URLs

Name
IP
Malicious
http:///wget.sh
unknown
http:///curl.sh
unknown

IPs

IP
Domain
Country
Malicious
109.202.202.202
unknown
Switzerland
91.189.91.43
unknown
United Kingdom
91.189.91.42
unknown
United Kingdom

Memdumps

Base Address
Regiontype
Protect
Malicious
7fa9bc32e000
page read and write
55b22cedf000
page execute and read and write
55b22df53000
page read and write
7fa9bbb18000
page read and write
55b22aee1000
page read and write
7fa9b4000000
page read and write
7fa9bcffa000
page read and write
7fa9bc320000
page read and write
7fa9bc9a2000
page read and write
7fa9bc9bf000
page read and write
7fa934419000
page execute read
55b22ac4f000
page execute read
7fa9bccf0000
page read and write
7fa9bced1000
page read and write
7fa93445a000
page read and write
7ffeeab8a000
page read and write
7fa9bd002000
page read and write
7fa9bc97f000
page read and write
7fa9bd047000
page read and write
7fa934461000
page read and write
55b22cef6000
page read and write
7fa9bc5de000
page read and write
7fa9b4021000
page read and write
55b22aed7000
page read and write
7ffeeaba9000
page execute read
There are 15 hidden memdumps, click here to show them.