Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
dlr.mips.elf
|
ELF 32-bit MSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, stripped
|
initial sample
|
 |
|
|
/tmp/dvrHelper
|
ELF 32-bit MSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, stripped
|
dropped
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
/tmp/dlr.mips.elf
|
/tmp/dlr.mips.elf
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
190.123.46.55
|
unknown
|
Panama
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7fc368021000
|
page read and write
|
|||
|
558facaaf000
|
page read and write
|
|||
|
558faaa9a000
|
page read and write
|
|||
|
7fc36fb2a000
|
page read and write
|
|||
|
558faaa90000
|
page read and write
|
|||
|
7fc36ee48000
|
page read and write
|
|||
|
7fc36fb22000
|
page read and write
|
|||
|
7fc36f9f9000
|
page read and write
|
|||
|
7fc36f4a7000
|
page read and write
|
|||
|
7ffd05935000
|
page read and write
|
|||
|
7fc36ee56000
|
page read and write
|
|||
|
558faca98000
|
page execute and read and write
|
|||
|
7fc36f818000
|
page read and write
|
|||
|
7ffd05991000
|
page execute read
|
|||
|
7fc36e640000
|
page read and write
|
|||
|
7fc36f4e7000
|
page read and write
|
|||
|
558fad5f4000
|
page read and write
|
|||
|
7fc36fb6f000
|
page read and write
|
|||
|
7fc36f106000
|
page read and write
|
|||
|
7fc368000000
|
page read and write
|
|||
|
7fc2e8441000
|
page read and write
|
|||
|
7fc36f4ca000
|
page read and write
|
|||
|
558faa808000
|
page execute read
|
|||
|
7fc2e8401000
|
page execute read
|
There are 14 hidden memdumps, click here to show them.