IOC Report
jwwofba5.elf

loading gif

Processes

Path
Cmdline
Malicious
/tmp/jwwofba5.elf
/tmp/jwwofba5.elf

IPs

IP
Domain
Country
Malicious
109.202.202.202
unknown
Switzerland
91.189.91.43
unknown
United Kingdom
91.189.91.42
unknown
United Kingdom

Memdumps

Base Address
Regiontype
Protect
Malicious
558ed518c000
page read and write
7f930bfd2000
page read and write
558ed5176000
page execute and read and write
7f9304021000
page read and write
558ed316e000
page read and write
7f9204046000
page read and write
7f920404a000
page read and write
7f930c8b8000
page read and write
7fffbbbda000
page execute read
7f930c3cc000
page read and write
7f930bc70000
page read and write
558ed5b56000
page read and write
558ed2f1d000
page execute read
7f9204039000
page execute read
7f930b3d6000
page read and write
7f930c5ae000
page read and write
7fffbba25000
page read and write
558ed3177000
page read and write
7f930c23d000
page read and write
7f930c8dc000
page read and write
7f930c921000
page read and write
7f930c260000
page read and write
7f930bbde000
page read and write
7f930c78f000
page read and write
There are 14 hidden memdumps, click here to show them.