Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
/tmp/vmpcow.elf
|
/tmp/vmpcow.elf
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://github.com/robertdavidgraham/masscan)
|
unknown
|
||
|
http://pki.google.com/GIAG2.crt0
|
unknown
|
||
|
https://github.com/robertdavidgraham/masscan
|
unknown
|
||
|
https://github.com/robertdavidgraham/masscanCONF:
|
unknown
|
||
|
http://failsafe.fp.yahoo.com/404.html
|
unknown
|
||
|
http://nmap.org/svn/docs/nmap.xsl
|
unknown
|
||
|
http://nmap.org/svn/docs/nmap.xslCONF:
|
unknown
|
||
|
https://github.com/robertdavidgraham/
|
unknown
|
||
|
http://pki.google.com/GIAG2.crl0
|
unknown
|
||
|
http://bit.ly/14GZzcT)
|
unknown
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7f46d96f4000
|
page read and write
|
|||
|
4d5000
|
page read and write
|
|||
|
7ffe60e7f000
|
page read and write
|
|||
|
48a000
|
page execute read
|
|||
|
7f46d9714000
|
page read and write
|
|||
|
141f000
|
page read and write
|
|||
|
7ffe60f9b000
|
page execute read
|
|||
|
5dc000
|
page read and write
|