Edit tour

Linux Analysis Report
waternetworkdns.elf

Overview

General Information

Sample name:	waternetworkdns.elf
Analysis ID:	1565965
MD5:	d877a05237ba43c64ef9abd55633cf6c
SHA1:	b2ca9cf4dee5c504fe5902ab5ae5aa50b36c5819
SHA256:	d06a042f54e256d62ae8026e2cb2a8f47775ce2d6cfa8f2df479b30c506ebc36
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	80
Range:	0 - 100
Whitelisted:	false

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Machine Learning detection for dropped file

Machine Learning detection for sample

Sample deletes itself

Sample tries to persist itself using cron

Sample tries to set files in /etc globally writable

Writes identical ELF files to multiple locations

Creates hidden files and/or directories

Sample and/or dropped files contains symbols with suspicious names

Sample tries to set the executable flag

Writes ELF files to disk

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1565965
Start date and time:	2024-12-01 03:28:37 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 8m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	waternetworkdns.elf
Detection:	MAL
Classification:	mal80.troj.evad.linELF@0/44@2/0

Warnings

VT rate limit hit for: /tmp/file4GTrSQ

Runtime Messages

Command:	/tmp/waternetworkdns.elf
PID:	5494
Exit Code:
Exit Code Info:
Killed:	True
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

waternetworkdns.elf (PID: 5494, Parent: 5417, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

waternetworkdns.elf New Fork (PID: 5497, Parent: 5494)

filejKuw5C (PID: 5497, Parent: 5494, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

filejKuw5C New Fork (PID: 5498, Parent: 5497)

file4GTrSQ (PID: 5498, Parent: 5497, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

file4GTrSQ New Fork (PID: 5501, Parent: 5498)

filef8ZZSV (PID: 5501, Parent: 5498, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

filef8ZZSV New Fork (PID: 5504, Parent: 5501)

filet2jLka (PID: 5504, Parent: 5501, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

filet2jLka New Fork (PID: 5527, Parent: 5504)

filetroeGo (PID: 5527, Parent: 5504, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

filetroeGo New Fork (PID: 5531, Parent: 5527)

filewuGbF8 (PID: 5531, Parent: 5527, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

filewuGbF8 New Fork (PID: 5534, Parent: 5531)

fileto6ECp (PID: 5534, Parent: 5531, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

fileto6ECp New Fork (PID: 5537, Parent: 5534)

fileHswVvD (PID: 5537, Parent: 5534, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

fileHswVvD New Fork (PID: 5540, Parent: 5537)

filezhjTVU (PID: 5540, Parent: 5537, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

filezhjTVU New Fork (PID: 5543, Parent: 5540)

fileSIETn8 (PID: 5543, Parent: 5540, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

fileSIETn8 New Fork (PID: 5549, Parent: 5543)

fileUGWp4l (PID: 5549, Parent: 5543, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

fileUGWp4l New Fork (PID: 5552, Parent: 5549)

filec48VVM (PID: 5552, Parent: 5549, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

filec48VVM New Fork (PID: 5555, Parent: 5552)

file6lgRJ1 (PID: 5555, Parent: 5552, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

file6lgRJ1 New Fork (PID: 5558, Parent: 5555)

filezimFUd (PID: 5558, Parent: 5555, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

filezimFUd New Fork (PID: 5561, Parent: 5558)

file3AXL0s (PID: 5561, Parent: 5558, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

file3AXL0s New Fork (PID: 5564, Parent: 5561)

filehKcCxF (PID: 5564, Parent: 5561, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

filehKcCxF New Fork (PID: 5567, Parent: 5564)

fileKHB58W (PID: 5567, Parent: 5564, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

fileKHB58W New Fork (PID: 5571, Parent: 5567)

filejuJZ28 (PID: 5571, Parent: 5567, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

filejuJZ28 New Fork (PID: 5574, Parent: 5571)

fileUJdw2s (PID: 5574, Parent: 5571, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

fileUJdw2s New Fork (PID: 5577, Parent: 5574)

fileVF2JLG (PID: 5577, Parent: 5574, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

fileVF2JLG New Fork (PID: 5580, Parent: 5577)

fileJJ6xTS (PID: 5580, Parent: 5577, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

fileJJ6xTS New Fork (PID: 5585, Parent: 5580)

file6pB1F9 (PID: 5585, Parent: 5580, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

file6pB1F9 New Fork (PID: 5589, Parent: 5585)

fileybgNyx (PID: 5589, Parent: 5585, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

fileybgNyx New Fork (PID: 5594, Parent: 5589)

fileZ7AjNP (PID: 5594, Parent: 5589, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

fileZ7AjNP New Fork (PID: 5597, Parent: 5594)

filektm6Sd (PID: 5597, Parent: 5594, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

filektm6Sd New Fork (PID: 5600, Parent: 5597)

fileSZl1Ip (PID: 5600, Parent: 5597, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

fileSZl1Ip New Fork (PID: 5603, Parent: 5600)

filecGjWUF (PID: 5603, Parent: 5600, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

filecGjWUF New Fork (PID: 5607, Parent: 5603)

filebWQPiU (PID: 5607, Parent: 5603, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

filebWQPiU New Fork (PID: 5610, Parent: 5607)

fileRSLoWa (PID: 5610, Parent: 5607, MD5: d877a05237ba43c64ef9abd55633cf6c) Arguments: /tmp/waternetworkdns.elf

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
waternetworkdns.elf	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x3659:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
waternetworkdns.elf	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C

Dropped Files

Source	Rule	Description	Author	Strings
/tmp/fileWxCD2o	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/file4GTrSQ	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/filejKuw5C	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/fileZ7AjNP	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/filePciSgW	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/filewuGbF8	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/fileSIETn8	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/filektm6Sd	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/file24icLZ	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/fileRSLoWa	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/fileSZl1Ip	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/file37RoKX	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/filentdV7I	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/fileKHB58W	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/fileBZcmru	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/file6pB1F9	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/fileBJ61uU	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/filetroeGo	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/filehKcCxF	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/fileUGWp4l	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/filecGjWUF	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/fileKpYTIE	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/filedpZAKa	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/fileUJdw2s	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/filezimFUd	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/fileVVTXDR	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/fileRJ2CMD	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/filef8ZZSV	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/fileto6ECp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/file9NIXMo	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/file6lgRJ1	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/fileFhYfEr	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/filezhjTVU	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/filebWQPiU	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/fileybgNyx	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/file3AXL0s	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/filee8BHzd	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/filec48VVM	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/fileJJ6xTS	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/fileNSEDrB	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/filet2jLka	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/fileVF2JLG	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/fileHswVvD	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
/tmp/filejuJZ28	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x1582:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
Click to see the 39 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5647.1.000055de49135000.000055de49137000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5494.1.0000563679c76000.0000563679c78000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5617.1.000055bf39984000.000055bf39986000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5497.1.0000556fb05f4000.0000556fb05f6000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5527.1.0000563c96631000.0000563c96633000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5574.1.0000558720c0e000.0000558720c10000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5534.1.000055f6f16d5000.000055f6f16d7000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5597.1.0000562ebe244000.0000562ebe246000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5497.1.0000556fb0910000.0000556fb094d000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x18ae2:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1e322:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5497.1.0000556fb0910000.0000556fb094d000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5638.1.00007f9f48db8000.00007f9f48ddd000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5617.1.00007f7416943000.00007f7416968000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5630.1.00005646549f0000.00005646549f2000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5564.1.00007f166b50f000.00007f166b534000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5660.1.00007fc155a2d000.00007fc155a52000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5589.1.00005581fe9c2000.00005581fe9c4000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5537.1.000055fcd7d15000.000055fcd7d80000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x29df9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x31719:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x39039:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x40959:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x461a2:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4dab9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5537.1.000055fcd7d15000.000055fcd7d80000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x27c57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2f577:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x36e97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3e7b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4b917:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5531.1.00005570d79f1000.00005570d79f3000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5504.1.000055840292e000.0000558402973000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x9a82:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x111b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x188f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x20219:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x27b39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x2f459:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5504.1.000055840292e000.0000558402973000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0xf017:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x16757:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x1e077:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x25997:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2d2b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5574.1.00007fea2cbbf000.00007fea2cbe4000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5647.1.00007f11e46c7000.00007f11e46ec000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5585.1.00007f2319b57000.00007f2319b7c000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5594.1.00007fbc43624000.00007fbc43649000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5571.1.000055c4b4090000.000055c4b4092000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5558.1.00007ff91a1da000.00007ff91a1ff000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5610.1.00007fc5aaf3e000.00007fc5aaf63000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5494.1.000056367b50b000.000056367b52c000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbdc9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x11432:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x16c72:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5494.1.000056367b50b000.000056367b52c000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x9c27:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5534.1.000055f6f3390000.000055f6f33fb000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x111c2:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x18ad9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x20219:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x27b39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x2f459:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x36d79:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x3e699:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x45fb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5534.1.000055f6f3390000.000055f6f33fb000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x16937:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x1e077:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x25997:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2d2b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x34bd7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3c4f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x43e17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5501.1.000055dd21893000.000055dd21895000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5577.1.000056176577e000.0000561765780000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5589.1.00007f3d30d94000.00007f3d30db9000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5607.1.000055d19e96c000.000055d19e96e000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5498.1.000055aba96c9000.000055aba96cb000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5585.1.000055cba206b000.000055cba206d000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5594.1.0000562521c8c000.0000562521c8e000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5567.1.00007fecc1a50000.00007fecc1a75000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5537.1.00007f7864258000.00007f786427d000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5501.1.000055dd22e11000.000055dd22e4e000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x18ae2:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x203f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x27b39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5501.1.000055dd22e11000.000055dd22e4e000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x1e257:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x25997:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5531.1.00005570d8fb3000.00005570d8ff8000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x111c2:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x18ad9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x20219:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x27b39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x2f459:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x36d79:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x3e699:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5531.1.00005570d8fb3000.00005570d8ff8000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x16937:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x1e077:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x25997:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2d2b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x34bd7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3c4f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5564.1.00005620d4e79000.00005620d4f09000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x29df9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x31719:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x39039:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x40959:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x461a2:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4dab9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x551f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5cb19:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x64439:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6bd59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x73679:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7af99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x828b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8a1d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5564.1.00005620d4e79000.00005620d4f09000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x27c57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2f577:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x36e97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3e7b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4b917:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x53057:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5a977:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x62297:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x69bb7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x714d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x78df7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x80717:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x88037:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5561.1.00007f690dddd000.00007f690de02000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5677.1.00007fe271c5f000.00007fe271c84000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5540.1.0000558c16377000.0000558c163e4000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x29df9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x31719:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x39039:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x40959:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x48279:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4dac2:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x553d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5540.1.0000558c16377000.0000558c163e4000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x27c57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2f577:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x36e97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3e7b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x460d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x53237:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5663.1.00007f18e3a75000.00007f18e3a9a000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5638.1.000055f9e78b9000.000055f9e78bb000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5644.1.0000558fed1e2000.0000558fed1e4000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5571.1.00007f91ca946000.00007f91ca96b000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5641.1.000055a410ad4000.000055a410ad6000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5567.1.000055dbe2bc4000.000055dbe2bc6000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5670.1.0000559d1bf7b000.0000559d1bf7d000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5653.1.00007f1436c48000.00007f1436c6d000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5561.1.000055fe082e0000.000055fe08370000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x29df9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x31719:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x39039:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x40959:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x48279:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4dac2:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x553d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5cb19:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x64439:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6bd59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x73679:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7af99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x828b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5561.1.000055fe082e0000.000055fe08370000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x27c57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2f577:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x36e97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3e7b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x460d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x53237:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5a977:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x62297:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x69bb7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x714d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x78df7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x80717:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5498.1.000055aba9ea8000.000055aba9ee5000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x18ae2:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x203f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5498.1.000055aba9ea8000.000055aba9ee5000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x1e257:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5558.1.0000565229ba7000.0000565229ba9000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5666.1.0000562c1fa13000.0000562c1fb63000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x29df9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x31719:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x39039:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x40959:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x48279:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4fb99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x574b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5edd9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x666f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6e019:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x75939:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7d259:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x84b79:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8c499:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x93db9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x9b6d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0xa2ff9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5666.1.0000562c1fa13000.0000562c1fb63000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x27c57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2f577:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x36e97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3e7b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x460d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4d9f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x55317:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5cc37:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x64557:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x6be77:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x73797:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x7b0b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x829d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8a2f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x91c17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x99537:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0xa0e57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5564.1.00005620d305e000.00005620d3060000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5549.1.0000562a58dc7000.0000562a58e32000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x29df9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x31719:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x39039:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x40959:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x461a2:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4dab9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x551f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5cb19:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x64439:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5549.1.0000562a58dc7000.0000562a58e32000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x27c57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2f577:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x36e97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3e7b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4b917:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x53057:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5a977:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x62297:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5580.1.000055d3fe064000.000055d3fe11a000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x111c2:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x18ad9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x20219:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x27b39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x2f459:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x36d79:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x3e699:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x45fb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4d8d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x551f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5cb19:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x64439:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6bd59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x73679:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7af99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x828b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8a1d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x91af9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x99419:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0xa0d39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5580.1.000055d3fe064000.000055d3fe11a000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x16937:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x1e077:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x25997:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2d2b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x34bd7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3c4f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x43e17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4b737:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x53057:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5a977:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x62297:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x69bb7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x714d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x78df7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x80717:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x88037:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8f957:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x97277:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x9eb97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0xa64b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5660.1.000055ab003fa000.000055ab003fc000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5677.1.0000556777c76000.0000556777c78000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5577.1.000056176690a000.00005617669b9000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x18ae2:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x203f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x27b39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x2f459:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x36d79:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x3e699:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x45fb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4d8d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x551f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5cb19:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x64439:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6bd59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x73679:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7af99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x828b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8a1d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x91af9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x99419:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0xa0d39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5577.1.000056176690a000.00005617669b9000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x1e257:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x25997:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2d2b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x34bd7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3c4f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x43e17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4b737:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x53057:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5a977:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x62297:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x69bb7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x714d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x78df7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x80717:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x88037:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8f957:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x97277:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x9eb97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0xa64b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5656.1.00007f62e1017000.00007f62e103c000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5681.1.0000561f71930000.0000561f71932000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5585.1.000055cba2ca0000.000055cba2d7c000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x9a82:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x111b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x188f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x20219:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x27b39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x2f459:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x36d79:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x3e699:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x45fb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4d8d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x551f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5cb19:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x64439:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6bd59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x73679:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7af99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x828b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8a1d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x91af9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x99419:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0xa0d39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5585.1.000055cba2ca0000.000055cba2d7c000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0xf017:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x16757:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x1e077:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x25997:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2d2b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x34bd7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3c4f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x43e17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4b737:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x53057:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5a977:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x62297:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x69bb7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x714d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x78df7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x80717:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x88037:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8f957:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x97277:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x9eb97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0xa64b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5549.1.0000562a5767c000.0000562a5767e000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5603.1.0000564c62ff2000.0000564c62ff4000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5577.1.00007f1c71c15000.00007f1c71c3a000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5603.1.00007f490ef2d000.00007f490ef52000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5610.1.000055d017fc3000.000055d017fc5000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5617.1.000055bf3a112000.000055bf3a214000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x29df9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x31719:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x39039:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x40959:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x48279:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4fb99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x574b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5edd9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x666f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6e019:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x75939:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7d259:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x84b79:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8c499:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x93db9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x9b6d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0xa2ff9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5617.1.000055bf3a112000.000055bf3a214000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x27c57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2f577:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x36e97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3e7b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x460d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4d9f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x55317:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5cc37:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x64557:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x6be77:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x73797:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x7b0b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x829d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8a2f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x91c17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x99537:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0xa0e57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5574.1.000055872198a000.0000558721a40000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x29df9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x31719:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x39039:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x40959:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x461a2:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4dab9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x551f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5cb19:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x64439:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6bd59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x73679:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7af99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x828b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8a1d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x91af9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x99419:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0xa0d39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5574.1.000055872198a000.0000558721a40000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x27c57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2f577:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x36e97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3e7b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4b917:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x53057:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5a977:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x62297:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x69bb7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x714d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x78df7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x80717:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x88037:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8f957:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x97277:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x9eb97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5597.1.00007f4d03b4b000.00007f4d03b70000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5537.1.000055fcd6729000.000055fcd672b000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5504.1.0000558402118000.000055840211a000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5552.1.000055ec1e51e000.000055ec1e520000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5613.1.000056196aa40000.000056196aa42000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5653.1.000055d10c29e000.000055d10c2a0000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5600.1.00007f852a553000.00007f852a578000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5540.1.0000558c145f0000.0000558c145f2000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5666.1.0000562c1df65000.0000562c1df67000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5558.1.000056522b1aa000.000056522b23a000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x9a82:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x111b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x188f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x20219:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x27b39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x2f459:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x36d79:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x3e699:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x45fb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4d8d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x551f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5cb19:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x64439:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6bd59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x73679:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7af99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5558.1.000056522b1aa000.000056522b23a000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0xf017:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x16757:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x1e077:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x25997:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2d2b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x34bd7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3c4f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x43e17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4b737:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x53057:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5a977:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x62297:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x69bb7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x714d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x78df7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5613.1.000056196b229000.000056196b32b000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x111c2:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x18ad9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x20219:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x27b39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x2f459:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x36d79:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x3e699:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x45fb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4d8d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x551f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5cb19:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x64439:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6bd59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x73679:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7af99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x828b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8a1d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x91af9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x99419:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0xa0d39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5613.1.000056196b229000.000056196b32b000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x16937:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x1e077:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x25997:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2d2b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x34bd7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3c4f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x43e17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4b737:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x53057:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5a977:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x62297:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x69bb7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x714d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x78df7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x80717:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x88037:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8f957:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x97277:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x9eb97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0xa64b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5580.1.00007f37e69fe000.00007f37e6a23000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5607.1.00007f7a5577b000.00007f7a557a0000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5663.1.000055d7b9cca000.000055d7b9ccc000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5644.1.00007f16886f6000.00007f168871b000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5580.1.000055d3fc6a3000.000055d3fc6a5000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5670.1.00007f4410fae000.00007f4410fd3000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5555.1.00007f2850891000.00007f28508b6000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5607.1.000055d19f7f0000.000055d19f8f2000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x9a82:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x111b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x188f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x20219:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x27b39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x2f459:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x36d79:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x3e699:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x45fb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4d8d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x551f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5cb19:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x64439:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6bd59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x73679:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7af99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x828b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8a1d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x91af9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x99419:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0xa0d39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5607.1.000055d19f7f0000.000055d19f8f2000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0xf017:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x16757:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x1e077:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x25997:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2d2b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x34bd7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3c4f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x43e17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4b737:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x53057:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5a977:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x62297:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x69bb7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x714d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x78df7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x80717:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x88037:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8f957:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x97277:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x9eb97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0xa64b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5610.1.000055d019688000.000055d01978a000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x29df9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x2f642:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x36f59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x3e699:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x45fb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4d8d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x551f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5cb19:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x64439:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6bd59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x73679:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7af99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x828b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8a1d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x91af9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x99419:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0xa0d39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5610.1.000055d019688000.000055d01978a000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x27c57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x34db7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3c4f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x43e17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4b737:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x53057:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5a977:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x62297:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x69bb7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x714d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x78df7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x80717:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x88037:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8f957:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x97277:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x9eb97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0xa64b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5656.1.000056176ea58000.000056176ea5a000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5589.1.00005581fed9c000.00005581fee78000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x9a82:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x111b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x188f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x20219:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x27b39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x2f459:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x36d79:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x3e699:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x45fb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4d8d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x551f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5cb19:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x64439:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6bd59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x73679:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7af99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x828b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8a1d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x91af9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x99419:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0xa0d39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5589.1.00005581fed9c000.00005581fee78000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0xf017:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x16757:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x1e077:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x25997:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2d2b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x34bd7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3c4f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x43e17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4b737:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x53057:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5a977:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x62297:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x69bb7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x714d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x78df7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x80717:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x88037:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8f957:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x97277:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x9eb97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0xa64b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5552.1.00007fc872bee000.00007fc872c13000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5613.1.00007fa2602ae000.00007fa2602d3000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5543.1.00005609673c3000.00005609673c5000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5561.1.000055fe0723e000.000055fe07240000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5630.1.00007f2954d22000.00007f2954d47000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5600.1.00005578e6df6000.00005578e6df8000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5555.1.0000564e95f07000.0000564e95f09000.r-x.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5549.1.00007f1134190000.00007f11341b5000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5653.1.000055d10dc98000.000055d10dde6000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x29df9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x31719:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x39039:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x40959:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x48279:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4fb99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x574b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5edd9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x666f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6e019:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x75939:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7d259:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x84b79:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8c499:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x91ce2:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x995f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0xa0d39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5653.1.000055d10dc98000.000055d10dde6000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x27c57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2f577:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x36e97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3e7b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x460d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4d9f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x55317:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5cc37:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x64557:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x6be77:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x73797:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x7b0b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x829d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8a2f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x97457:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x9eb97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0xa64b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5555.1.0000564e96ab4000.0000564e96b44000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x29df9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x31719:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x39039:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x40959:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x48279:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4dac2:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x553d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5cb19:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x64439:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6bd59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x73679:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5555.1.0000564e96ab4000.0000564e96b44000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x27c57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2f577:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x36e97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3e7b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x460d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x53237:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5a977:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x62297:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x69bb7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x714d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5527.1.0000563c9831e000.0000563c98363000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x111c2:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x18ad9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x20219:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x27b39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x2f459:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x36d79:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5527.1.0000563c9831e000.0000563c98363000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x16937:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x1e077:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x25997:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2d2b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x34bd7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5543.1.00005609680e8000.0000560968155000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x29df9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x31719:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x39039:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x40959:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x48279:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4fb99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x574b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5cd02:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x62542:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5543.1.00005609680e8000.0000560968155000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x27c57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2f577:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x36e97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3e7b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x460d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4d9f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x55317:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5666.1.00007fd2d9f8e000.00007fd2d9fb3000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5663.1.000055d7ba550000.000055d7ba696000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x29df9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x31719:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x39039:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x40959:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x48279:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4fb99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x574b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5edd9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x666f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6e019:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x75939:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7d259:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x84b79:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8c499:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x93db9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x9b6d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0xa2ff9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5663.1.000055d7ba550000.000055d7ba696000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x27c57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2f577:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x36e97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3e7b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x460d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4d9f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x55317:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5cc37:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x64557:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x6be77:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x73797:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x7b0b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x829d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8a2f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x91c17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x99537:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0xa0e57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5641.1.00007faa94b75000.00007faa94b9a000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x14c7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5552.1.000055ec1fca1000.000055ec1fd31000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x29df9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x2f642:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x36f59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x3e699:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x45fb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4d8d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x551f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5cb19:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x64439:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6bd59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5552.1.000055ec1fca1000.000055ec1fd31000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x27c57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x34db7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3c4f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x43e17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4b737:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x53057:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5a977:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x62297:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x69bb7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5567.1.000055dbe4a90000.000055dbe4b46000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x29df9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x31719:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x39039:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x40959:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x48279:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4fb99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x574b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5edd9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x666f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6bf42:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x73859:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7af99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x828b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8a1d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x91af9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5567.1.000055dbe4a90000.000055dbe4b46000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x27c57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2f577:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x36e97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3e7b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x460d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4d9f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x55317:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5cc37:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x64557:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x716b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x78df7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x80717:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x88037:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8f957:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5647.1.000055de4a14e000.000055de4a294000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x29df9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x31719:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x39039:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x40959:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x48279:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4fb99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x574b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5edd9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x666f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6e019:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x75939:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7d259:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x84b79:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8c499:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x93db9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x9b6d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0xa2ff9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5647.1.000055de4a14e000.000055de4a294000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x27c57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2f577:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x36e97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3e7b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x460d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4d9f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x55317:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5cc37:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x64557:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x6be77:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x73797:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x7b0b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x829d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8a2f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x91c17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x99537:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0xa0e57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5630.1.0000564655641000.0000564655769000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x27d22:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x2f639:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x36d79:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x3e699:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x45fb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4d8d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x551f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5cb19:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x64439:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6bd59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x73679:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7af99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x828b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8a1d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x91af9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x99419:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0xa0d39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5630.1.0000564655641000.0000564655769000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2d497:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x34bd7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3c4f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x43e17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4b737:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x53057:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5a977:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x62297:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x69bb7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x714d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x78df7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x80717:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x88037:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8f957:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x97277:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x9eb97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0xa64b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5641.1.000055a4116ef000.000055a41180f000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x29df9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x31719:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x39039:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x40959:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x48279:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4fb99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x574b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5edd9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x666f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6e019:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x75939:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7d259:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x84b79:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8c499:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x93db9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x9b6d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0xa2ff9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5641.1.000055a4116ef000.000055a41180f000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x27c57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2f577:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x36e97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3e7b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x460d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4d9f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x55317:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5cc37:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x64557:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x6be77:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x73797:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x7b0b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x829d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8a2f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x91c17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x99537:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0xa0e57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5571.1.000055c4b4ac6000.000055c4b4b7c000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x27d22:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x2f639:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x36d79:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x3e699:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x45fb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4d8d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x551f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5cb19:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x64439:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6bd59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x73679:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7af99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x828b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8a1d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x91af9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x99419:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5571.1.000055c4b4ac6000.000055c4b4b7c000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2d497:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x34bd7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3c4f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x43e17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4b737:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x53057:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5a977:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x62297:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x69bb7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x714d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x78df7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x80717:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x88037:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8f957:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x97277:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5670.1.0000559d1cdda000.0000559d1cf4d000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x27d22:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x2f639:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x36d79:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x3e699:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x45fb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4d8d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x551f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5cb19:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x64439:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6bd59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x73679:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7af99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x828b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8a1d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x91af9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x99419:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0xa0d39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5670.1.0000559d1cdda000.0000559d1cf4d000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2d497:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x34bd7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3c4f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x43e17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4b737:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x53057:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5a977:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x62297:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x69bb7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x714d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x78df7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x80717:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x88037:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8f957:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x97277:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x9eb97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0xa64b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5594.1.0000562522597000.0000562522673000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x29df9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x31719:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x39039:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x40959:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x48279:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4fb99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x574b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5edd9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x666f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6e019:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x75939:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7d259:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x84b79:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8c499:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x93db9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x99602:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0xa0f19:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5594.1.0000562522597000.0000562522673000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x27c57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2f577:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x36e97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3e7b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x460d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4d9f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x55317:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5cc37:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x64557:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x6be77:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x73797:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x7b0b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x829d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8a2f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x91c17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x9ed77:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0xa64b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5597.1.0000562ec0263000.0000562ec0341000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x29df9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x31719:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x39039:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x40959:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x48279:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4fb99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x574b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5edd9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x666f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6e019:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x75939:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7d259:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x84b79:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8c499:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x93db9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x9b6d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0xa2ff9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5597.1.0000562ec0263000.0000562ec0341000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x27c57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2f577:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x36e97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3e7b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x460d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4d9f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x55317:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5cc37:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x64557:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x6be77:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x73797:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x7b0b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x829d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8a2f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x91c17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x99537:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0xa0e57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5603.1.0000564c63265000.0000564c6335f000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x29df9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x31719:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x39039:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x3e882:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x46199:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4d8d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x551f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5cb19:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x64439:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6bd59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x73679:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7af99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x828b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8a1d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x91af9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x99419:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0xa0d39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5603.1.0000564c63265000.0000564c6335f000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x27c57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2f577:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x36e97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x43ff7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4b737:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x53057:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5a977:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x62297:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x69bb7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x714d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x78df7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x80717:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x88037:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8f957:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x97277:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x9eb97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0xa64b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5638.1.000055f9e8ba5000.000055f9e8ccd000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0x9a82:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x111b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x188f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x20219:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x27b39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x2f459:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x36d79:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x3e699:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x45fb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4d8d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x551f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5cb19:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x64439:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6bd59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x73679:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7af99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x828b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8a1d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x91af9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x99419:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0xa0d39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5638.1.000055f9e8ba5000.000055f9e8ccd000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0xf017:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x16757:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x1e077:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x25997:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2d2b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x34bd7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3c4f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x43e17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4b737:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x53057:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5a977:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x62297:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x69bb7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x714d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x78df7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x80717:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x88037:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8f957:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x97277:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x9eb97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0xa64b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5660.1.000055ab01002000.000055ab01148000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x18ae2:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x203f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x27b39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x2f459:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x36d79:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x3e699:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x45fb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4d8d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x551f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5cb19:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x64439:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6bd59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x73679:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7af99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x828b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8a1d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x91af9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x99419:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0xa0d39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5660.1.000055ab01002000.000055ab01148000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x1e257:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x25997:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2d2b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x34bd7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3c4f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x43e17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4b737:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x53057:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5a977:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x62297:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x69bb7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x714d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x78df7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x80717:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x88037:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8f957:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x97277:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x9eb97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0xa64b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5656.1.00005617709fc000.0000561770b4a000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x29df9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x31719:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x39039:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x40959:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x48279:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4fb99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x574b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5edd9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x666f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6e019:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x73862:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7b179:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x828b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8a1d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x91af9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x99419:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0xa0d39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5656.1.00005617709fc000.0000561770b4a000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x27c57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2f577:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x36e97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3e7b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x460d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4d9f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x55317:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5cc37:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x64557:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x6be77:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x78fd7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x80717:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x88037:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8f957:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x97277:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x9eb97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0xa64b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5600.1.00005578e8d43000.00005578e8e1f000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x29df9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x31719:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x39039:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x40959:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x48279:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4fb99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x574b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5edd9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x666f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6e019:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x73862:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7b179:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x828b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8a1d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x91af9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x99419:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0xa0d39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5600.1.00005578e8d43000.00005578e8e1f000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x27c57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2f577:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x36e97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3e7b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x460d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4d9f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x55317:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5cc37:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x64557:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x6be77:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x78fd7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x80717:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x88037:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8f957:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x97277:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x9eb97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0xa64b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5644.1.0000558fedbd2000.0000558fedcf2000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x29df9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x31719:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x39039:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x40959:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x48279:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4fb99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x574b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5edd9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x666f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6e019:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x75939:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7d259:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x84b79:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8c499:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x93db9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x9b6d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0xa2ff9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5644.1.0000558fedbd2000.0000558fedcf2000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x27c57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2f577:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x36e97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x3e7b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x460d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4d9f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x55317:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5cc37:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x64557:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x6be77:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x73797:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x7b0b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x829d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8a2f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x91c17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x99537:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0xa0e57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
5677.1.0000556778686000.0000556778780000.rw-.sdmp	Linux_Hacktool_Flooder_e63396f4	unknown	unknown	0xbb59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x13299:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x1abb9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x224d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x29df9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x31719:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x39039:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x3e882:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x46199:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x4d8d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x551f9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x5cb19:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x64439:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x6bd59:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x73679:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x7af99:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x828b9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x8a1d9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x91af9:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0x99419:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90 0xa0d39:$a: 02 83 45 FC 01 81 7D FC FF 0F 00 00 7E 98 90
5677.1.0000556778686000.0000556778780000.rw-.sdmp	Linux_Trojan_Ladvix_db41f9d2	unknown	unknown	0x99b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x110f7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x18a17:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x20337:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x27c57:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x2f577:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x36e97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x43ff7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x4b737:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x53057:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x5a977:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x62297:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x69bb7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x714d7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x78df7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x80717:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x88037:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x8f957:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x97277:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0x9eb97:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C 0xa64b7:$a: C0 49 89 C4 74 45 45 85 ED 7E 26 48 89 C3 41 8D 45 FF 4D 8D 7C
Click to see the 171 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: waternetworkdns.elf

Virustotal: Detection: 48%

Perma Link

Machine Learning detection for dropped file

Source: /tmp/file37RoKX	Joe Sandbox ML: detected
Source: /tmp/fileUGWp4l	Joe Sandbox ML: detected
Source: /tmp/fileUJdw2s	Joe Sandbox ML: detected
Source: /tmp/filecGjWUF	Joe Sandbox ML: detected
Source: /tmp/file24icLZ	Joe Sandbox ML: detected
Source: /tmp/fileKpYTIE	Joe Sandbox ML: detected
Source: /tmp/file9NIXMo	Joe Sandbox ML: detected
Source: /tmp/file6pB1F9	Joe Sandbox ML: detected
Source: /tmp/filedpZAKa	Joe Sandbox ML: detected
Source: /tmp/fileVVTXDR	Joe Sandbox ML: detected
Source: /tmp/fileBJ61uU	Joe Sandbox ML: detected
Source: /tmp/fileZ7AjNP	Joe Sandbox ML: detected
Source: /tmp/fileWxCD2o	Joe Sandbox ML: detected
Source: /tmp/fileFhYfEr	Joe Sandbox ML: detected
Source: /tmp/fileSIETn8	Joe Sandbox ML: detected
Source: /tmp/file4GTrSQ	Joe Sandbox ML: detected
Source: /tmp/fileRSLoWa	Joe Sandbox ML: detected
Source: /tmp/fileSZl1Ip	Joe Sandbox ML: detected
Source: /tmp/fileRJ2CMD	Joe Sandbox ML: detected
Source: /tmp/fileKHB58W	Joe Sandbox ML: detected
Source: /tmp/filePciSgW	Joe Sandbox ML: detected
Source: /tmp/fileBZcmru	Joe Sandbox ML: detected
Source: /tmp/file6lgRJ1	Joe Sandbox ML: detected
Source: /tmp/filebWQPiU	Joe Sandbox ML: detected
Source: /tmp/filee8BHzd	Joe Sandbox ML: detected
Source: /tmp/fileJJ6xTS	Joe Sandbox ML: detected
Source: /tmp/fileNSEDrB	Joe Sandbox ML: detected
Source: /tmp/file3AXL0s	Joe Sandbox ML: detected
Source: /tmp/filec48VVM	Joe Sandbox ML: detected
Source: /tmp/fileHswVvD	Joe Sandbox ML: detected
Source: /tmp/fileVF2JLG	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: waternetworkdns.elf

Joe Sandbox ML: detected

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: waternetworkdns.elf, 5494.1.000056367b50b000.000056367b52c000.rw-.sdmp	String found in binary or memory: http://cf0.pw/0/etc/cron.hourly/0
Source: waternetworkdns.elf, 5494.1.00007fdd403c4000.00007fdd403e7000.rw-.sdmp, waternetworkdns.elf, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp, fileSIETn8, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp	String found in binary or memory: https://gnu.org/licenses/gpl.html
Source: fileBJ61uU, 5677.1.00007fe271c5f000.00007fe271c84000.rw-.sdmp	String found in binary or memory: https://translationproject.org/team/
Source: waternetworkdns.elf, 5494.1.00007fdd403c4000.00007fdd403e7000.rw-.sdmp, waternetworkdns.elf, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp, fileSIETn8, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp	String found in binary or memory: https://wiki.xiph.org/MIME_Types_and_File_Extensions
Source: waternetworkdns.elf, 5494.1.00007fdd403c4000.00007fdd403e7000.rw-.sdmp, waternetworkdns.elf, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp, fileSIETn8, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp	String found in binary or memory: https://wiki.xiph.org/MIME_Types_and_File_Extensions.oga
Source: waternetworkdns.elf, 5494.1.00007fdd403c4000.00007fdd403e7000.rw-.sdmp, waternetworkdns.elf, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp, fileSIETn8, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp	String found in binary or memory: https://wiki.xiph.org/MIME_Types_and_File_Extensions.ogv
Source: waternetworkdns.elf, 5494.1.00007fdd403c4000.00007fdd403e7000.rw-.sdmp, waternetworkdns.elf, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp, fileSIETn8, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp	String found in binary or memory: https://www.gnu.org/gethelp/
Source: waternetworkdns.elf, 5494.1.00007fdd403c4000.00007fdd403e7000.rw-.sdmp, waternetworkdns.elf, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp, fileSIETn8, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp	String found in binary or memory: https://www.gnu.org/software/coreutils/
Source: waternetworkdns.elf, 5494.1.00007fdd403c4000.00007fdd403e7000.rw-.sdmp, waternetworkdns.elf, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp, fileSIETn8, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp	String found in binary or memory: https://www.gnu.org/software/coreutils/Report

System Summary

Malicious sample detected (through community Yara rule)

Source: waternetworkdns.elf, type: SAMPLE	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: waternetworkdns.elf, type: SAMPLE	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5647.1.000055de49135000.000055de49137000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5494.1.0000563679c76000.0000563679c78000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5617.1.000055bf39984000.000055bf39986000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5497.1.0000556fb05f4000.0000556fb05f6000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5527.1.0000563c96631000.0000563c96633000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5574.1.0000558720c0e000.0000558720c10000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5534.1.000055f6f16d5000.000055f6f16d7000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5597.1.0000562ebe244000.0000562ebe246000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5497.1.0000556fb0910000.0000556fb094d000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5497.1.0000556fb0910000.0000556fb094d000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5638.1.00007f9f48db8000.00007f9f48ddd000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5617.1.00007f7416943000.00007f7416968000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5630.1.00005646549f0000.00005646549f2000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5564.1.00007f166b50f000.00007f166b534000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5660.1.00007fc155a2d000.00007fc155a52000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5589.1.00005581fe9c2000.00005581fe9c4000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5537.1.000055fcd7d15000.000055fcd7d80000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5537.1.000055fcd7d15000.000055fcd7d80000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5531.1.00005570d79f1000.00005570d79f3000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5504.1.000055840292e000.0000558402973000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5504.1.000055840292e000.0000558402973000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5574.1.00007fea2cbbf000.00007fea2cbe4000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5647.1.00007f11e46c7000.00007f11e46ec000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5585.1.00007f2319b57000.00007f2319b7c000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5594.1.00007fbc43624000.00007fbc43649000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5571.1.000055c4b4090000.000055c4b4092000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5558.1.00007ff91a1da000.00007ff91a1ff000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5610.1.00007fc5aaf3e000.00007fc5aaf63000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5494.1.000056367b50b000.000056367b52c000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5494.1.000056367b50b000.000056367b52c000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5534.1.000055f6f3390000.000055f6f33fb000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5534.1.000055f6f3390000.000055f6f33fb000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5501.1.000055dd21893000.000055dd21895000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5577.1.000056176577e000.0000561765780000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5589.1.00007f3d30d94000.00007f3d30db9000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5607.1.000055d19e96c000.000055d19e96e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5498.1.000055aba96c9000.000055aba96cb000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5585.1.000055cba206b000.000055cba206d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5594.1.0000562521c8c000.0000562521c8e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5567.1.00007fecc1a50000.00007fecc1a75000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5501.1.000055dd22e11000.000055dd22e4e000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5501.1.000055dd22e11000.000055dd22e4e000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5531.1.00005570d8fb3000.00005570d8ff8000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5531.1.00005570d8fb3000.00005570d8ff8000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5564.1.00005620d4e79000.00005620d4f09000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5564.1.00005620d4e79000.00005620d4f09000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5561.1.00007f690dddd000.00007f690de02000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5677.1.00007fe271c5f000.00007fe271c84000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5540.1.0000558c16377000.0000558c163e4000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5540.1.0000558c16377000.0000558c163e4000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5663.1.00007f18e3a75000.00007f18e3a9a000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5638.1.000055f9e78b9000.000055f9e78bb000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5644.1.0000558fed1e2000.0000558fed1e4000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5571.1.00007f91ca946000.00007f91ca96b000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5641.1.000055a410ad4000.000055a410ad6000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5567.1.000055dbe2bc4000.000055dbe2bc6000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5670.1.0000559d1bf7b000.0000559d1bf7d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5653.1.00007f1436c48000.00007f1436c6d000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5561.1.000055fe082e0000.000055fe08370000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5561.1.000055fe082e0000.000055fe08370000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5498.1.000055aba9ea8000.000055aba9ee5000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5498.1.000055aba9ea8000.000055aba9ee5000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5558.1.0000565229ba7000.0000565229ba9000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5666.1.0000562c1fa13000.0000562c1fb63000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5666.1.0000562c1fa13000.0000562c1fb63000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5564.1.00005620d305e000.00005620d3060000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5549.1.0000562a58dc7000.0000562a58e32000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5549.1.0000562a58dc7000.0000562a58e32000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5580.1.000055d3fe064000.000055d3fe11a000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5580.1.000055d3fe064000.000055d3fe11a000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5660.1.000055ab003fa000.000055ab003fc000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5677.1.0000556777c76000.0000556777c78000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5577.1.000056176690a000.00005617669b9000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5577.1.000056176690a000.00005617669b9000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5656.1.00007f62e1017000.00007f62e103c000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5681.1.0000561f71930000.0000561f71932000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5585.1.000055cba2ca0000.000055cba2d7c000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5585.1.000055cba2ca0000.000055cba2d7c000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5549.1.0000562a5767c000.0000562a5767e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5603.1.0000564c62ff2000.0000564c62ff4000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5577.1.00007f1c71c15000.00007f1c71c3a000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5603.1.00007f490ef2d000.00007f490ef52000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5610.1.000055d017fc3000.000055d017fc5000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5617.1.000055bf3a112000.000055bf3a214000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5617.1.000055bf3a112000.000055bf3a214000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5574.1.000055872198a000.0000558721a40000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5574.1.000055872198a000.0000558721a40000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5597.1.00007f4d03b4b000.00007f4d03b70000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5537.1.000055fcd6729000.000055fcd672b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5504.1.0000558402118000.000055840211a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5552.1.000055ec1e51e000.000055ec1e520000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5613.1.000056196aa40000.000056196aa42000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5653.1.000055d10c29e000.000055d10c2a0000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5600.1.00007f852a553000.00007f852a578000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5540.1.0000558c145f0000.0000558c145f2000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5666.1.0000562c1df65000.0000562c1df67000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5558.1.000056522b1aa000.000056522b23a000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5558.1.000056522b1aa000.000056522b23a000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5613.1.000056196b229000.000056196b32b000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5613.1.000056196b229000.000056196b32b000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5580.1.00007f37e69fe000.00007f37e6a23000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5607.1.00007f7a5577b000.00007f7a557a0000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5663.1.000055d7b9cca000.000055d7b9ccc000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5644.1.00007f16886f6000.00007f168871b000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5580.1.000055d3fc6a3000.000055d3fc6a5000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5670.1.00007f4410fae000.00007f4410fd3000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5555.1.00007f2850891000.00007f28508b6000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5607.1.000055d19f7f0000.000055d19f8f2000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5607.1.000055d19f7f0000.000055d19f8f2000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5610.1.000055d019688000.000055d01978a000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5610.1.000055d019688000.000055d01978a000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5656.1.000056176ea58000.000056176ea5a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5589.1.00005581fed9c000.00005581fee78000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5589.1.00005581fed9c000.00005581fee78000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5552.1.00007fc872bee000.00007fc872c13000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5613.1.00007fa2602ae000.00007fa2602d3000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5543.1.00005609673c3000.00005609673c5000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5561.1.000055fe0723e000.000055fe07240000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5630.1.00007f2954d22000.00007f2954d47000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5600.1.00005578e6df6000.00005578e6df8000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5555.1.0000564e95f07000.0000564e95f09000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5549.1.00007f1134190000.00007f11341b5000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5653.1.000055d10dc98000.000055d10dde6000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5653.1.000055d10dc98000.000055d10dde6000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5555.1.0000564e96ab4000.0000564e96b44000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5555.1.0000564e96ab4000.0000564e96b44000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5527.1.0000563c9831e000.0000563c98363000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5527.1.0000563c9831e000.0000563c98363000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5543.1.00005609680e8000.0000560968155000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5543.1.00005609680e8000.0000560968155000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5666.1.00007fd2d9f8e000.00007fd2d9fb3000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5663.1.000055d7ba550000.000055d7ba696000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5663.1.000055d7ba550000.000055d7ba696000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5641.1.00007faa94b75000.00007faa94b9a000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5552.1.000055ec1fca1000.000055ec1fd31000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5552.1.000055ec1fca1000.000055ec1fd31000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5567.1.000055dbe4a90000.000055dbe4b46000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5567.1.000055dbe4a90000.000055dbe4b46000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5647.1.000055de4a14e000.000055de4a294000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5647.1.000055de4a14e000.000055de4a294000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5630.1.0000564655641000.0000564655769000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5630.1.0000564655641000.0000564655769000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5641.1.000055a4116ef000.000055a41180f000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5641.1.000055a4116ef000.000055a41180f000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5571.1.000055c4b4ac6000.000055c4b4b7c000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5571.1.000055c4b4ac6000.000055c4b4b7c000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5670.1.0000559d1cdda000.0000559d1cf4d000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5670.1.0000559d1cdda000.0000559d1cf4d000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5594.1.0000562522597000.0000562522673000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5594.1.0000562522597000.0000562522673000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5597.1.0000562ec0263000.0000562ec0341000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5597.1.0000562ec0263000.0000562ec0341000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5603.1.0000564c63265000.0000564c6335f000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5603.1.0000564c63265000.0000564c6335f000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5638.1.000055f9e8ba5000.000055f9e8ccd000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5638.1.000055f9e8ba5000.000055f9e8ccd000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5660.1.000055ab01002000.000055ab01148000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5660.1.000055ab01002000.000055ab01148000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5656.1.00005617709fc000.0000561770b4a000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5656.1.00005617709fc000.0000561770b4a000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5600.1.00005578e8d43000.00005578e8e1f000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5600.1.00005578e8d43000.00005578e8e1f000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5644.1.0000558fedbd2000.0000558fedcf2000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5644.1.0000558fedbd2000.0000558fedcf2000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: 5677.1.0000556778686000.0000556778780000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: 5677.1.0000556778686000.0000556778780000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 Author: unknown
Source: /tmp/fileWxCD2o, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/file4GTrSQ, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/filejKuw5C, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/fileZ7AjNP, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/filePciSgW, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/filewuGbF8, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/fileSIETn8, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/filektm6Sd, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/file24icLZ, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/fileRSLoWa, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/fileSZl1Ip, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/file37RoKX, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/filentdV7I, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/fileKHB58W, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/fileBZcmru, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/file6pB1F9, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/fileBJ61uU, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/filetroeGo, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/filehKcCxF, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/fileUGWp4l, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/filecGjWUF, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/fileKpYTIE, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/filedpZAKa, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/fileUJdw2s, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/filezimFUd, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/fileVVTXDR, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/fileRJ2CMD, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/filef8ZZSV, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/fileto6ECp, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/file9NIXMo, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/file6lgRJ1, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/fileFhYfEr, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/filezhjTVU, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/filebWQPiU, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/fileybgNyx, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/file3AXL0s, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/filee8BHzd, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/filec48VVM, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/fileJJ6xTS, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/fileNSEDrB, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/filet2jLka, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/fileVF2JLG, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/fileHswVvD, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown
Source: /tmp/filejuJZ28, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 Author: unknown

Source: filejKuw5C.12.dr	ELF static info symbol of dropped file: PAYLOAD
Source: filejKuw5C.12.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: file4GTrSQ.14.dr	ELF static info symbol of dropped file: PAYLOAD
Source: file4GTrSQ.14.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: filef8ZZSV.16.dr	ELF static info symbol of dropped file: PAYLOAD
Source: filef8ZZSV.16.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: filet2jLka.18.dr	ELF static info symbol of dropped file: PAYLOAD
Source: filet2jLka.18.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: filetroeGo.20.dr	ELF static info symbol of dropped file: PAYLOAD
Source: filetroeGo.20.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: filewuGbF8.22.dr	ELF static info symbol of dropped file: PAYLOAD
Source: filewuGbF8.22.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: fileto6ECp.24.dr	ELF static info symbol of dropped file: PAYLOAD
Source: fileto6ECp.24.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: fileHswVvD.26.dr	ELF static info symbol of dropped file: PAYLOAD
Source: fileHswVvD.26.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: filezhjTVU.28.dr	ELF static info symbol of dropped file: PAYLOAD
Source: filezhjTVU.28.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: fileSIETn8.30.dr	ELF static info symbol of dropped file: PAYLOAD
Source: fileSIETn8.30.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: fileUGWp4l.32.dr	ELF static info symbol of dropped file: PAYLOAD
Source: fileUGWp4l.32.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: filec48VVM.34.dr	ELF static info symbol of dropped file: PAYLOAD
Source: filec48VVM.34.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: file6lgRJ1.36.dr	ELF static info symbol of dropped file: PAYLOAD
Source: file6lgRJ1.36.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: filezimFUd.38.dr	ELF static info symbol of dropped file: PAYLOAD
Source: filezimFUd.38.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: file3AXL0s.40.dr	ELF static info symbol of dropped file: PAYLOAD
Source: file3AXL0s.40.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: filehKcCxF.42.dr	ELF static info symbol of dropped file: PAYLOAD
Source: filehKcCxF.42.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: fileKHB58W.44.dr	ELF static info symbol of dropped file: PAYLOAD
Source: fileKHB58W.44.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: filejuJZ28.46.dr	ELF static info symbol of dropped file: PAYLOAD
Source: filejuJZ28.46.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: fileUJdw2s.48.dr	ELF static info symbol of dropped file: PAYLOAD
Source: fileUJdw2s.48.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: fileVF2JLG.50.dr	ELF static info symbol of dropped file: PAYLOAD
Source: fileVF2JLG.50.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: fileJJ6xTS.52.dr	ELF static info symbol of dropped file: PAYLOAD
Source: fileJJ6xTS.52.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: file6pB1F9.54.dr	ELF static info symbol of dropped file: PAYLOAD
Source: file6pB1F9.54.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: fileybgNyx.56.dr	ELF static info symbol of dropped file: PAYLOAD
Source: fileybgNyx.56.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: fileZ7AjNP.58.dr	ELF static info symbol of dropped file: PAYLOAD
Source: fileZ7AjNP.58.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: filektm6Sd.60.dr	ELF static info symbol of dropped file: PAYLOAD
Source: filektm6Sd.60.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: fileSZl1Ip.62.dr	ELF static info symbol of dropped file: PAYLOAD
Source: fileSZl1Ip.62.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: filecGjWUF.64.dr	ELF static info symbol of dropped file: PAYLOAD
Source: filecGjWUF.64.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: filebWQPiU.66.dr	ELF static info symbol of dropped file: PAYLOAD
Source: filebWQPiU.66.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: fileRSLoWa.68.dr	ELF static info symbol of dropped file: PAYLOAD
Source: fileRSLoWa.68.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: file9NIXMo.70.dr	ELF static info symbol of dropped file: PAYLOAD
Source: file9NIXMo.70.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: fileRJ2CMD.72.dr	ELF static info symbol of dropped file: PAYLOAD
Source: fileRJ2CMD.72.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: file37RoKX.74.dr	ELF static info symbol of dropped file: PAYLOAD
Source: file37RoKX.74.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: filePciSgW.80.dr	ELF static info symbol of dropped file: PAYLOAD
Source: filePciSgW.80.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: fileBZcmru.82.dr	ELF static info symbol of dropped file: PAYLOAD
Source: fileBZcmru.82.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: filentdV7I.84.dr	ELF static info symbol of dropped file: PAYLOAD
Source: filentdV7I.84.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: file24icLZ.86.dr	ELF static info symbol of dropped file: PAYLOAD
Source: file24icLZ.86.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: filedpZAKa.88.dr	ELF static info symbol of dropped file: PAYLOAD
Source: filedpZAKa.88.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: fileKpYTIE.90.dr	ELF static info symbol of dropped file: PAYLOAD
Source: fileKpYTIE.90.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: fileVVTXDR.92.dr	ELF static info symbol of dropped file: PAYLOAD
Source: fileVVTXDR.92.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: filee8BHzd.94.dr	ELF static info symbol of dropped file: PAYLOAD
Source: filee8BHzd.94.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: fileWxCD2o.96.dr	ELF static info symbol of dropped file: PAYLOAD
Source: fileWxCD2o.96.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: fileNSEDrB.98.dr	ELF static info symbol of dropped file: PAYLOAD
Source: fileNSEDrB.98.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: fileBJ61uU.100.dr	ELF static info symbol of dropped file: PAYLOAD
Source: fileBJ61uU.100.dr	ELF static info symbol of dropped file: PAYLOADSIZE
Source: fileFhYfEr.102.dr	ELF static info symbol of dropped file: PAYLOAD
Source: fileFhYfEr.102.dr	ELF static info symbol of dropped file: PAYLOADSIZE

Source: waternetworkdns.elf, type: SAMPLE	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: waternetworkdns.elf, type: SAMPLE	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5647.1.000055de49135000.000055de49137000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5494.1.0000563679c76000.0000563679c78000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5617.1.000055bf39984000.000055bf39986000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5497.1.0000556fb05f4000.0000556fb05f6000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5527.1.0000563c96631000.0000563c96633000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5574.1.0000558720c0e000.0000558720c10000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5534.1.000055f6f16d5000.000055f6f16d7000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5597.1.0000562ebe244000.0000562ebe246000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5497.1.0000556fb0910000.0000556fb094d000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5497.1.0000556fb0910000.0000556fb094d000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5638.1.00007f9f48db8000.00007f9f48ddd000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5617.1.00007f7416943000.00007f7416968000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5630.1.00005646549f0000.00005646549f2000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5564.1.00007f166b50f000.00007f166b534000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5660.1.00007fc155a2d000.00007fc155a52000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5589.1.00005581fe9c2000.00005581fe9c4000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5537.1.000055fcd7d15000.000055fcd7d80000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5537.1.000055fcd7d15000.000055fcd7d80000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5531.1.00005570d79f1000.00005570d79f3000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5504.1.000055840292e000.0000558402973000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5504.1.000055840292e000.0000558402973000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5574.1.00007fea2cbbf000.00007fea2cbe4000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5647.1.00007f11e46c7000.00007f11e46ec000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5585.1.00007f2319b57000.00007f2319b7c000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5594.1.00007fbc43624000.00007fbc43649000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5571.1.000055c4b4090000.000055c4b4092000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5558.1.00007ff91a1da000.00007ff91a1ff000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5610.1.00007fc5aaf3e000.00007fc5aaf63000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5494.1.000056367b50b000.000056367b52c000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5494.1.000056367b50b000.000056367b52c000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5534.1.000055f6f3390000.000055f6f33fb000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5534.1.000055f6f3390000.000055f6f33fb000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5501.1.000055dd21893000.000055dd21895000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5577.1.000056176577e000.0000561765780000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5589.1.00007f3d30d94000.00007f3d30db9000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5607.1.000055d19e96c000.000055d19e96e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5498.1.000055aba96c9000.000055aba96cb000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5585.1.000055cba206b000.000055cba206d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5594.1.0000562521c8c000.0000562521c8e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5567.1.00007fecc1a50000.00007fecc1a75000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5501.1.000055dd22e11000.000055dd22e4e000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5501.1.000055dd22e11000.000055dd22e4e000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5531.1.00005570d8fb3000.00005570d8ff8000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5531.1.00005570d8fb3000.00005570d8ff8000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5564.1.00005620d4e79000.00005620d4f09000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5564.1.00005620d4e79000.00005620d4f09000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5561.1.00007f690dddd000.00007f690de02000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5677.1.00007fe271c5f000.00007fe271c84000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5540.1.0000558c16377000.0000558c163e4000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5540.1.0000558c16377000.0000558c163e4000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5663.1.00007f18e3a75000.00007f18e3a9a000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5638.1.000055f9e78b9000.000055f9e78bb000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5644.1.0000558fed1e2000.0000558fed1e4000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5571.1.00007f91ca946000.00007f91ca96b000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5641.1.000055a410ad4000.000055a410ad6000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5567.1.000055dbe2bc4000.000055dbe2bc6000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5670.1.0000559d1bf7b000.0000559d1bf7d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5653.1.00007f1436c48000.00007f1436c6d000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5561.1.000055fe082e0000.000055fe08370000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5561.1.000055fe082e0000.000055fe08370000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5498.1.000055aba9ea8000.000055aba9ee5000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5498.1.000055aba9ea8000.000055aba9ee5000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5558.1.0000565229ba7000.0000565229ba9000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5666.1.0000562c1fa13000.0000562c1fb63000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5666.1.0000562c1fa13000.0000562c1fb63000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5564.1.00005620d305e000.00005620d3060000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5549.1.0000562a58dc7000.0000562a58e32000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5549.1.0000562a58dc7000.0000562a58e32000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5580.1.000055d3fe064000.000055d3fe11a000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5580.1.000055d3fe064000.000055d3fe11a000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5660.1.000055ab003fa000.000055ab003fc000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5677.1.0000556777c76000.0000556777c78000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5577.1.000056176690a000.00005617669b9000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5577.1.000056176690a000.00005617669b9000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5656.1.00007f62e1017000.00007f62e103c000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5681.1.0000561f71930000.0000561f71932000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5585.1.000055cba2ca0000.000055cba2d7c000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5585.1.000055cba2ca0000.000055cba2d7c000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5549.1.0000562a5767c000.0000562a5767e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5603.1.0000564c62ff2000.0000564c62ff4000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5577.1.00007f1c71c15000.00007f1c71c3a000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5603.1.00007f490ef2d000.00007f490ef52000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5610.1.000055d017fc3000.000055d017fc5000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5617.1.000055bf3a112000.000055bf3a214000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5617.1.000055bf3a112000.000055bf3a214000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5574.1.000055872198a000.0000558721a40000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5574.1.000055872198a000.0000558721a40000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5597.1.00007f4d03b4b000.00007f4d03b70000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5537.1.000055fcd6729000.000055fcd672b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5504.1.0000558402118000.000055840211a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5552.1.000055ec1e51e000.000055ec1e520000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5613.1.000056196aa40000.000056196aa42000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5653.1.000055d10c29e000.000055d10c2a0000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5600.1.00007f852a553000.00007f852a578000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5540.1.0000558c145f0000.0000558c145f2000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5666.1.0000562c1df65000.0000562c1df67000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5558.1.000056522b1aa000.000056522b23a000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5558.1.000056522b1aa000.000056522b23a000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5613.1.000056196b229000.000056196b32b000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5613.1.000056196b229000.000056196b32b000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5580.1.00007f37e69fe000.00007f37e6a23000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5607.1.00007f7a5577b000.00007f7a557a0000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5663.1.000055d7b9cca000.000055d7b9ccc000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5644.1.00007f16886f6000.00007f168871b000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5580.1.000055d3fc6a3000.000055d3fc6a5000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5670.1.00007f4410fae000.00007f4410fd3000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5555.1.00007f2850891000.00007f28508b6000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5607.1.000055d19f7f0000.000055d19f8f2000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5607.1.000055d19f7f0000.000055d19f8f2000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5610.1.000055d019688000.000055d01978a000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5610.1.000055d019688000.000055d01978a000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5656.1.000056176ea58000.000056176ea5a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5589.1.00005581fed9c000.00005581fee78000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5589.1.00005581fed9c000.00005581fee78000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5552.1.00007fc872bee000.00007fc872c13000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5613.1.00007fa2602ae000.00007fa2602d3000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5543.1.00005609673c3000.00005609673c5000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5561.1.000055fe0723e000.000055fe07240000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5630.1.00007f2954d22000.00007f2954d47000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5600.1.00005578e6df6000.00005578e6df8000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5555.1.0000564e95f07000.0000564e95f09000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5549.1.00007f1134190000.00007f11341b5000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5653.1.000055d10dc98000.000055d10dde6000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5653.1.000055d10dc98000.000055d10dde6000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5555.1.0000564e96ab4000.0000564e96b44000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5555.1.0000564e96ab4000.0000564e96b44000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5527.1.0000563c9831e000.0000563c98363000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5527.1.0000563c9831e000.0000563c98363000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5543.1.00005609680e8000.0000560968155000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5543.1.00005609680e8000.0000560968155000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5666.1.00007fd2d9f8e000.00007fd2d9fb3000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5663.1.000055d7ba550000.000055d7ba696000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5663.1.000055d7ba550000.000055d7ba696000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5641.1.00007faa94b75000.00007faa94b9a000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5552.1.000055ec1fca1000.000055ec1fd31000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5552.1.000055ec1fca1000.000055ec1fd31000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5567.1.000055dbe4a90000.000055dbe4b46000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5567.1.000055dbe4a90000.000055dbe4b46000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5647.1.000055de4a14e000.000055de4a294000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5647.1.000055de4a14e000.000055de4a294000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5630.1.0000564655641000.0000564655769000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5630.1.0000564655641000.0000564655769000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5641.1.000055a4116ef000.000055a41180f000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5641.1.000055a4116ef000.000055a41180f000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5571.1.000055c4b4ac6000.000055c4b4b7c000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5571.1.000055c4b4ac6000.000055c4b4b7c000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5670.1.0000559d1cdda000.0000559d1cf4d000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5670.1.0000559d1cdda000.0000559d1cf4d000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5594.1.0000562522597000.0000562522673000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5594.1.0000562522597000.0000562522673000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5597.1.0000562ec0263000.0000562ec0341000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5597.1.0000562ec0263000.0000562ec0341000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5603.1.0000564c63265000.0000564c6335f000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5603.1.0000564c63265000.0000564c6335f000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5638.1.000055f9e8ba5000.000055f9e8ccd000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5638.1.000055f9e8ba5000.000055f9e8ccd000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5660.1.000055ab01002000.000055ab01148000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5660.1.000055ab01002000.000055ab01148000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5656.1.00005617709fc000.0000561770b4a000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5656.1.00005617709fc000.0000561770b4a000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5600.1.00005578e8d43000.00005578e8e1f000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5600.1.00005578e8d43000.00005578e8e1f000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5644.1.0000558fedbd2000.0000558fedcf2000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5644.1.0000558fedbd2000.0000558fedcf2000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: 5677.1.0000556778686000.0000556778780000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: 5677.1.0000556778686000.0000556778780000.rw-.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Ladvix_db41f9d2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Ladvix, fingerprint = d0aaa680e81f44cc555bf7799d33fce66f172563788afb2ad0fb16d3e460e8c6, id = db41f9d2-aa5c-4d26-b8ba-cece44eddca8, last_modified = 2021-09-16
Source: /tmp/fileWxCD2o, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/file4GTrSQ, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/filejKuw5C, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/fileZ7AjNP, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/filePciSgW, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/filewuGbF8, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/fileSIETn8, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/filektm6Sd, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/file24icLZ, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/fileRSLoWa, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/fileSZl1Ip, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/file37RoKX, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/filentdV7I, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/fileKHB58W, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/fileBZcmru, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/file6pB1F9, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/fileBJ61uU, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/filetroeGo, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/filehKcCxF, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/fileUGWp4l, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/filecGjWUF, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/fileKpYTIE, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/filedpZAKa, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/fileUJdw2s, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/filezimFUd, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/fileVVTXDR, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/fileRJ2CMD, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/filef8ZZSV, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/fileto6ECp, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/file9NIXMo, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/file6lgRJ1, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/fileFhYfEr, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/filezhjTVU, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/filebWQPiU, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/fileybgNyx, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/file3AXL0s, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/filee8BHzd, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/filec48VVM, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/fileJJ6xTS, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/fileNSEDrB, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/filet2jLka, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/fileVF2JLG, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/fileHswVvD, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16
Source: /tmp/filejuJZ28, type: DROPPED	Matched rule: Linux_Hacktool_Flooder_e63396f4 reference_sample = 913e6d2538bd7eed3a8f3d958cf445fe11c5c299a70e5385e0df6a9b2f638323, os = linux, severity = x86, creation_date = 2021-04-06, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Hacktool.Flooder, fingerprint = 269285d03ea1a3b41ff134ab2cf5e22502626c72401b83add6c1e165f4dd83f8, id = e63396f4-a297-4d99-b341-34cb22498078, last_modified = 2021-09-16

Source: classification engine

Classification label: mal80.troj.evad.linELF@0/44@2/0

Persistence and Installation Behavior

Sample tries to persist itself using cron

Source: /tmp/waternetworkdns.elf (PID: 5494)

File: /etc/cron.hourly/0

Jump to behavior

Sample tries to set files in /etc globally writable

Source: /tmp/waternetworkdns.elf (PID: 5494)

File: /etc/cron.hourly/0 (bits: uv usr: rwx grp: rwx all: rwx)

Jump to behavior

Writes identical ELF files to multiple locations

Source: /tmp/fileto6ECp (PID: 5534)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/fileHswVvD	Jump to dropped file
Source: /tmp/fileUJdw2s (PID: 5574)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/fileVF2JLG	Jump to dropped file
Source: /tmp/file9NIXMo (PID: 5613)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/fileRJ2CMD	Jump to dropped file
Source: /tmp/filezhjTVU (PID: 5540)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/fileSIETn8	Jump to dropped file
Source: /tmp/fileVF2JLG (PID: 5577)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/fileJJ6xTS	Jump to dropped file
Source: /tmp/file37RoKX (PID: 5630)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/filePciSgW	Jump to dropped file
Source: /tmp/filef8ZZSV (PID: 5501)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/filet2jLka	Jump to dropped file
Source: /tmp/filejKuw5C (PID: 5497)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/file4GTrSQ	Jump to dropped file
Source: /tmp/filehKcCxF (PID: 5564)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/fileKHB58W	Jump to dropped file
Source: /tmp/filecGjWUF (PID: 5603)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/filebWQPiU	Jump to dropped file
Source: /tmp/filePciSgW (PID: 5638)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/fileBZcmru	Jump to dropped file
Source: /tmp/fileSZl1Ip (PID: 5600)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/filecGjWUF	Jump to dropped file
Source: /tmp/filentdV7I (PID: 5644)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/file24icLZ	Jump to dropped file
Source: /tmp/filee8BHzd (PID: 5663)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/fileWxCD2o	Jump to dropped file
Source: /tmp/fileNSEDrB (PID: 5670)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/fileBJ61uU	Jump to dropped file
Source: /tmp/filedpZAKa (PID: 5653)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/fileKpYTIE	Jump to dropped file
Source: /tmp/fileKHB58W (PID: 5567)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/filejuJZ28	Jump to dropped file
Source: /tmp/fileJJ6xTS (PID: 5580)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/file6pB1F9	Jump to dropped file
Source: /tmp/fileybgNyx (PID: 5589)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/fileZ7AjNP	Jump to dropped file
Source: /tmp/file3AXL0s (PID: 5561)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/filehKcCxF	Jump to dropped file
Source: /tmp/filet2jLka (PID: 5504)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/filetroeGo	Jump to dropped file
Source: /tmp/file6lgRJ1 (PID: 5555)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/filezimFUd	Jump to dropped file
Source: /tmp/filebWQPiU (PID: 5607)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/fileRSLoWa	Jump to dropped file
Source: /tmp/file24icLZ (PID: 5647)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/filedpZAKa	Jump to dropped file
Source: /tmp/file4GTrSQ (PID: 5498)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/filef8ZZSV	Jump to dropped file
Source: /tmp/fileKpYTIE (PID: 5656)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/fileVVTXDR	Jump to dropped file
Source: /tmp/fileRSLoWa (PID: 5610)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/file9NIXMo	Jump to dropped file
Source: /tmp/fileSIETn8 (PID: 5543)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/fileUGWp4l	Jump to dropped file
Source: /tmp/fileWxCD2o (PID: 5666)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/fileNSEDrB	Jump to dropped file
Source: /tmp/filewuGbF8 (PID: 5531)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/fileto6ECp	Jump to dropped file
Source: /tmp/file6pB1F9 (PID: 5585)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/fileybgNyx	Jump to dropped file
Source: /tmp/filektm6Sd (PID: 5597)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/fileSZl1Ip	Jump to dropped file
Source: /tmp/filejuJZ28 (PID: 5571)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/fileUJdw2s	Jump to dropped file
Source: /tmp/fileHswVvD (PID: 5537)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/filezhjTVU	Jump to dropped file
Source: /tmp/fileRJ2CMD (PID: 5617)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/file37RoKX	Jump to dropped file
Source: /tmp/fileBJ61uU (PID: 5677)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/fileFhYfEr	Jump to dropped file
Source: /tmp/filezimFUd (PID: 5558)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/file3AXL0s	Jump to dropped file
Source: /tmp/fileBZcmru (PID: 5641)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/filentdV7I	Jump to dropped file
Source: /tmp/fileVVTXDR (PID: 5660)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/filee8BHzd	Jump to dropped file
Source: /tmp/filetroeGo (PID: 5527)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/filewuGbF8	Jump to dropped file
Source: /tmp/filec48VVM (PID: 5552)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/file6lgRJ1	Jump to dropped file
Source: /tmp/fileZ7AjNP (PID: 5594)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/filektm6Sd	Jump to dropped file
Source: /tmp/fileUGWp4l (PID: 5549)	File with SHA-256 DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC written: /tmp/filec48VVM	Jump to dropped file

Source: /tmp/waternetworkdns.elf (PID: 5494)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/waternetworkdns.elf (PID: 5494)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/waternetworkdns.elf (PID: 5494)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/waternetworkdns.elf (PID: 5494)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/waternetworkdns.elf (PID: 5494)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/waternetworkdns.elf (PID: 5494)	Directory: /tmp/.	Jump to behavior
Source: /tmp/waternetworkdns.elf (PID: 5494)	Directory: /tmp/..	Jump to behavior
Source: /tmp/waternetworkdns.elf (PID: 5494)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/filejKuw5C (PID: 5497)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/filejKuw5C (PID: 5497)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/filejKuw5C (PID: 5497)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/filejKuw5C (PID: 5497)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/filejKuw5C (PID: 5497)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/filejKuw5C (PID: 5497)	Directory: /tmp/.	Jump to behavior
Source: /tmp/filejKuw5C (PID: 5497)	Directory: /tmp/..	Jump to behavior
Source: /tmp/filejKuw5C (PID: 5497)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/file4GTrSQ (PID: 5498)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/file4GTrSQ (PID: 5498)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/file4GTrSQ (PID: 5498)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/file4GTrSQ (PID: 5498)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/file4GTrSQ (PID: 5498)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/file4GTrSQ (PID: 5498)	Directory: /tmp/.	Jump to behavior
Source: /tmp/file4GTrSQ (PID: 5498)	Directory: /tmp/..	Jump to behavior
Source: /tmp/file4GTrSQ (PID: 5498)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/filef8ZZSV (PID: 5501)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/filef8ZZSV (PID: 5501)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/filef8ZZSV (PID: 5501)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/filef8ZZSV (PID: 5501)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/filef8ZZSV (PID: 5501)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/filef8ZZSV (PID: 5501)	Directory: /tmp/.	Jump to behavior
Source: /tmp/filef8ZZSV (PID: 5501)	Directory: /tmp/..	Jump to behavior
Source: /tmp/filef8ZZSV (PID: 5501)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/filet2jLka (PID: 5504)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/filet2jLka (PID: 5504)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/filet2jLka (PID: 5504)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/filet2jLka (PID: 5504)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/filet2jLka (PID: 5504)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/filet2jLka (PID: 5504)	Directory: /tmp/.	Jump to behavior
Source: /tmp/filet2jLka (PID: 5504)	Directory: /tmp/..	Jump to behavior
Source: /tmp/filet2jLka (PID: 5504)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/filetroeGo (PID: 5527)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/filetroeGo (PID: 5527)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/filetroeGo (PID: 5527)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/filetroeGo (PID: 5527)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/filetroeGo (PID: 5527)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/filetroeGo (PID: 5527)	Directory: /tmp/.	Jump to behavior
Source: /tmp/filetroeGo (PID: 5527)	Directory: /tmp/..	Jump to behavior
Source: /tmp/filetroeGo (PID: 5527)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/filewuGbF8 (PID: 5531)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/filewuGbF8 (PID: 5531)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/filewuGbF8 (PID: 5531)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/filewuGbF8 (PID: 5531)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/filewuGbF8 (PID: 5531)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/filewuGbF8 (PID: 5531)	Directory: /tmp/.	Jump to behavior
Source: /tmp/filewuGbF8 (PID: 5531)	Directory: /tmp/..	Jump to behavior
Source: /tmp/filewuGbF8 (PID: 5531)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/fileto6ECp (PID: 5534)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/fileto6ECp (PID: 5534)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/fileto6ECp (PID: 5534)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/fileto6ECp (PID: 5534)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/fileto6ECp (PID: 5534)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/fileto6ECp (PID: 5534)	Directory: /tmp/.	Jump to behavior
Source: /tmp/fileto6ECp (PID: 5534)	Directory: /tmp/..	Jump to behavior
Source: /tmp/fileto6ECp (PID: 5534)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/fileHswVvD (PID: 5537)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/fileHswVvD (PID: 5537)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/fileHswVvD (PID: 5537)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/fileHswVvD (PID: 5537)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/fileHswVvD (PID: 5537)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/fileHswVvD (PID: 5537)	Directory: /tmp/.	Jump to behavior
Source: /tmp/fileHswVvD (PID: 5537)	Directory: /tmp/..	Jump to behavior
Source: /tmp/fileHswVvD (PID: 5537)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/filezhjTVU (PID: 5540)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/filezhjTVU (PID: 5540)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/filezhjTVU (PID: 5540)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/filezhjTVU (PID: 5540)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/filezhjTVU (PID: 5540)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/filezhjTVU (PID: 5540)	Directory: /tmp/.	Jump to behavior
Source: /tmp/filezhjTVU (PID: 5540)	Directory: /tmp/..	Jump to behavior
Source: /tmp/filezhjTVU (PID: 5540)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/fileSIETn8 (PID: 5543)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/fileSIETn8 (PID: 5543)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/fileSIETn8 (PID: 5543)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/fileSIETn8 (PID: 5543)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/fileSIETn8 (PID: 5543)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/fileSIETn8 (PID: 5543)	Directory: /tmp/.	Jump to behavior
Source: /tmp/fileSIETn8 (PID: 5543)	Directory: /tmp/..	Jump to behavior
Source: /tmp/fileSIETn8 (PID: 5543)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/fileUGWp4l (PID: 5549)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/fileUGWp4l (PID: 5549)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/fileUGWp4l (PID: 5549)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/fileUGWp4l (PID: 5549)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/fileUGWp4l (PID: 5549)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/fileUGWp4l (PID: 5549)	Directory: /tmp/.	Jump to behavior
Source: /tmp/fileUGWp4l (PID: 5549)	Directory: /tmp/..	Jump to behavior
Source: /tmp/fileUGWp4l (PID: 5549)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/filec48VVM (PID: 5552)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/filec48VVM (PID: 5552)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/filec48VVM (PID: 5552)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/filec48VVM (PID: 5552)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/filec48VVM (PID: 5552)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/filec48VVM (PID: 5552)	Directory: /tmp/.	Jump to behavior
Source: /tmp/filec48VVM (PID: 5552)	Directory: /tmp/..	Jump to behavior
Source: /tmp/filec48VVM (PID: 5552)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/file6lgRJ1 (PID: 5555)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/file6lgRJ1 (PID: 5555)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/file6lgRJ1 (PID: 5555)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/file6lgRJ1 (PID: 5555)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/file6lgRJ1 (PID: 5555)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/file6lgRJ1 (PID: 5555)	Directory: /tmp/.	Jump to behavior
Source: /tmp/file6lgRJ1 (PID: 5555)	Directory: /tmp/..	Jump to behavior
Source: /tmp/file6lgRJ1 (PID: 5555)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/filezimFUd (PID: 5558)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/filezimFUd (PID: 5558)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/filezimFUd (PID: 5558)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/filezimFUd (PID: 5558)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/filezimFUd (PID: 5558)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/filezimFUd (PID: 5558)	Directory: /tmp/.	Jump to behavior
Source: /tmp/filezimFUd (PID: 5558)	Directory: /tmp/..	Jump to behavior
Source: /tmp/filezimFUd (PID: 5558)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/file3AXL0s (PID: 5561)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/file3AXL0s (PID: 5561)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/file3AXL0s (PID: 5561)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/file3AXL0s (PID: 5561)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/file3AXL0s (PID: 5561)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/file3AXL0s (PID: 5561)	Directory: /tmp/.	Jump to behavior
Source: /tmp/file3AXL0s (PID: 5561)	Directory: /tmp/..	Jump to behavior
Source: /tmp/file3AXL0s (PID: 5561)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/filehKcCxF (PID: 5564)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/filehKcCxF (PID: 5564)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/filehKcCxF (PID: 5564)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/filehKcCxF (PID: 5564)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/filehKcCxF (PID: 5564)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/filehKcCxF (PID: 5564)	Directory: /tmp/.	Jump to behavior
Source: /tmp/filehKcCxF (PID: 5564)	Directory: /tmp/..	Jump to behavior
Source: /tmp/filehKcCxF (PID: 5564)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/fileKHB58W (PID: 5567)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/fileKHB58W (PID: 5567)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/fileKHB58W (PID: 5567)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/fileKHB58W (PID: 5567)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/fileKHB58W (PID: 5567)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/fileKHB58W (PID: 5567)	Directory: /tmp/.	Jump to behavior
Source: /tmp/fileKHB58W (PID: 5567)	Directory: /tmp/..	Jump to behavior
Source: /tmp/fileKHB58W (PID: 5567)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/filejuJZ28 (PID: 5571)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/filejuJZ28 (PID: 5571)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/filejuJZ28 (PID: 5571)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/filejuJZ28 (PID: 5571)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/filejuJZ28 (PID: 5571)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/filejuJZ28 (PID: 5571)	Directory: /tmp/.	Jump to behavior
Source: /tmp/filejuJZ28 (PID: 5571)	Directory: /tmp/..	Jump to behavior
Source: /tmp/filejuJZ28 (PID: 5571)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/fileUJdw2s (PID: 5574)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/fileUJdw2s (PID: 5574)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/fileUJdw2s (PID: 5574)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/fileUJdw2s (PID: 5574)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/fileUJdw2s (PID: 5574)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/fileUJdw2s (PID: 5574)	Directory: /tmp/.	Jump to behavior
Source: /tmp/fileUJdw2s (PID: 5574)	Directory: /tmp/..	Jump to behavior
Source: /tmp/fileUJdw2s (PID: 5574)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/fileVF2JLG (PID: 5577)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/fileVF2JLG (PID: 5577)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/fileVF2JLG (PID: 5577)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/fileVF2JLG (PID: 5577)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/fileVF2JLG (PID: 5577)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/fileVF2JLG (PID: 5577)	Directory: /tmp/.	Jump to behavior
Source: /tmp/fileVF2JLG (PID: 5577)	Directory: /tmp/..	Jump to behavior
Source: /tmp/fileVF2JLG (PID: 5577)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/fileJJ6xTS (PID: 5580)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/fileJJ6xTS (PID: 5580)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/fileJJ6xTS (PID: 5580)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/fileJJ6xTS (PID: 5580)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/fileJJ6xTS (PID: 5580)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/fileJJ6xTS (PID: 5580)	Directory: /tmp/.	Jump to behavior
Source: /tmp/fileJJ6xTS (PID: 5580)	Directory: /tmp/..	Jump to behavior
Source: /tmp/fileJJ6xTS (PID: 5580)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/file6pB1F9 (PID: 5585)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/file6pB1F9 (PID: 5585)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/file6pB1F9 (PID: 5585)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/file6pB1F9 (PID: 5585)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/file6pB1F9 (PID: 5585)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/file6pB1F9 (PID: 5585)	Directory: /tmp/.	Jump to behavior
Source: /tmp/file6pB1F9 (PID: 5585)	Directory: /tmp/..	Jump to behavior
Source: /tmp/file6pB1F9 (PID: 5585)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/fileybgNyx (PID: 5589)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/fileybgNyx (PID: 5589)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/fileybgNyx (PID: 5589)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/fileybgNyx (PID: 5589)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/fileybgNyx (PID: 5589)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/fileybgNyx (PID: 5589)	Directory: /tmp/.	Jump to behavior
Source: /tmp/fileybgNyx (PID: 5589)	Directory: /tmp/..	Jump to behavior
Source: /tmp/fileybgNyx (PID: 5589)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/fileZ7AjNP (PID: 5594)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/fileZ7AjNP (PID: 5594)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/fileZ7AjNP (PID: 5594)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/fileZ7AjNP (PID: 5594)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/fileZ7AjNP (PID: 5594)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/fileZ7AjNP (PID: 5594)	Directory: /tmp/.	Jump to behavior
Source: /tmp/fileZ7AjNP (PID: 5594)	Directory: /tmp/..	Jump to behavior
Source: /tmp/fileZ7AjNP (PID: 5594)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/filektm6Sd (PID: 5597)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/filektm6Sd (PID: 5597)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/filektm6Sd (PID: 5597)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/filektm6Sd (PID: 5597)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/filektm6Sd (PID: 5597)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/filektm6Sd (PID: 5597)	Directory: /tmp/.	Jump to behavior
Source: /tmp/filektm6Sd (PID: 5597)	Directory: /tmp/..	Jump to behavior
Source: /tmp/filektm6Sd (PID: 5597)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/fileSZl1Ip (PID: 5600)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/fileSZl1Ip (PID: 5600)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/fileSZl1Ip (PID: 5600)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/fileSZl1Ip (PID: 5600)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/fileSZl1Ip (PID: 5600)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/fileSZl1Ip (PID: 5600)	Directory: /tmp/.	Jump to behavior
Source: /tmp/fileSZl1Ip (PID: 5600)	Directory: /tmp/..	Jump to behavior
Source: /tmp/fileSZl1Ip (PID: 5600)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/filecGjWUF (PID: 5603)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/filecGjWUF (PID: 5603)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/filecGjWUF (PID: 5603)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/filecGjWUF (PID: 5603)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/filecGjWUF (PID: 5603)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/filecGjWUF (PID: 5603)	Directory: /tmp/.	Jump to behavior
Source: /tmp/filecGjWUF (PID: 5603)	Directory: /tmp/..	Jump to behavior
Source: /tmp/filecGjWUF (PID: 5603)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/filebWQPiU (PID: 5607)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/filebWQPiU (PID: 5607)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/filebWQPiU (PID: 5607)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/filebWQPiU (PID: 5607)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/filebWQPiU (PID: 5607)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/filebWQPiU (PID: 5607)	Directory: /tmp/.	Jump to behavior
Source: /tmp/filebWQPiU (PID: 5607)	Directory: /tmp/..	Jump to behavior
Source: /tmp/filebWQPiU (PID: 5607)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/fileRSLoWa (PID: 5610)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/fileRSLoWa (PID: 5610)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/fileRSLoWa (PID: 5610)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/fileRSLoWa (PID: 5610)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/fileRSLoWa (PID: 5610)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/fileRSLoWa (PID: 5610)	Directory: /tmp/.	Jump to behavior
Source: /tmp/fileRSLoWa (PID: 5610)	Directory: /tmp/..	Jump to behavior
Source: /tmp/fileRSLoWa (PID: 5610)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/file9NIXMo (PID: 5613)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/file9NIXMo (PID: 5613)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/file9NIXMo (PID: 5613)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/file9NIXMo (PID: 5613)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/file9NIXMo (PID: 5613)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/file9NIXMo (PID: 5613)	Directory: /tmp/.	Jump to behavior
Source: /tmp/file9NIXMo (PID: 5613)	Directory: /tmp/..	Jump to behavior
Source: /tmp/file9NIXMo (PID: 5613)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/fileRJ2CMD (PID: 5617)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/fileRJ2CMD (PID: 5617)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/fileRJ2CMD (PID: 5617)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/fileRJ2CMD (PID: 5617)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/fileRJ2CMD (PID: 5617)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/fileRJ2CMD (PID: 5617)	Directory: /tmp/.	Jump to behavior
Source: /tmp/fileRJ2CMD (PID: 5617)	Directory: /tmp/..	Jump to behavior
Source: /tmp/fileRJ2CMD (PID: 5617)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/file37RoKX (PID: 5630)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/file37RoKX (PID: 5630)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/file37RoKX (PID: 5630)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/file37RoKX (PID: 5630)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/file37RoKX (PID: 5630)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/file37RoKX (PID: 5630)	Directory: /tmp/.	Jump to behavior
Source: /tmp/file37RoKX (PID: 5630)	Directory: /tmp/..	Jump to behavior
Source: /tmp/file37RoKX (PID: 5630)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/filePciSgW (PID: 5638)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/filePciSgW (PID: 5638)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/filePciSgW (PID: 5638)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/filePciSgW (PID: 5638)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/filePciSgW (PID: 5638)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/filePciSgW (PID: 5638)	Directory: /tmp/.	Jump to behavior
Source: /tmp/filePciSgW (PID: 5638)	Directory: /tmp/..	Jump to behavior
Source: /tmp/filePciSgW (PID: 5638)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/fileBZcmru (PID: 5641)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/fileBZcmru (PID: 5641)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/fileBZcmru (PID: 5641)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/fileBZcmru (PID: 5641)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/fileBZcmru (PID: 5641)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/fileBZcmru (PID: 5641)	Directory: /tmp/.	Jump to behavior
Source: /tmp/fileBZcmru (PID: 5641)	Directory: /tmp/..	Jump to behavior
Source: /tmp/fileBZcmru (PID: 5641)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/filentdV7I (PID: 5644)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/filentdV7I (PID: 5644)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/filentdV7I (PID: 5644)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/filentdV7I (PID: 5644)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/filentdV7I (PID: 5644)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/filentdV7I (PID: 5644)	Directory: /tmp/.	Jump to behavior
Source: /tmp/filentdV7I (PID: 5644)	Directory: /tmp/..	Jump to behavior
Source: /tmp/filentdV7I (PID: 5644)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/file24icLZ (PID: 5647)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/file24icLZ (PID: 5647)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/file24icLZ (PID: 5647)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/file24icLZ (PID: 5647)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/file24icLZ (PID: 5647)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/file24icLZ (PID: 5647)	Directory: /tmp/.	Jump to behavior
Source: /tmp/file24icLZ (PID: 5647)	Directory: /tmp/..	Jump to behavior
Source: /tmp/file24icLZ (PID: 5647)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/filedpZAKa (PID: 5653)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/filedpZAKa (PID: 5653)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/filedpZAKa (PID: 5653)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/filedpZAKa (PID: 5653)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/filedpZAKa (PID: 5653)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/filedpZAKa (PID: 5653)	Directory: /tmp/.	Jump to behavior
Source: /tmp/filedpZAKa (PID: 5653)	Directory: /tmp/..	Jump to behavior
Source: /tmp/filedpZAKa (PID: 5653)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/fileKpYTIE (PID: 5656)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/fileKpYTIE (PID: 5656)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/fileKpYTIE (PID: 5656)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/fileKpYTIE (PID: 5656)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/fileKpYTIE (PID: 5656)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/fileKpYTIE (PID: 5656)	Directory: /tmp/.	Jump to behavior
Source: /tmp/fileKpYTIE (PID: 5656)	Directory: /tmp/..	Jump to behavior
Source: /tmp/fileKpYTIE (PID: 5656)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/fileVVTXDR (PID: 5660)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/fileVVTXDR (PID: 5660)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/fileVVTXDR (PID: 5660)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/fileVVTXDR (PID: 5660)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/fileVVTXDR (PID: 5660)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/fileVVTXDR (PID: 5660)	Directory: /tmp/.	Jump to behavior
Source: /tmp/fileVVTXDR (PID: 5660)	Directory: /tmp/..	Jump to behavior
Source: /tmp/fileVVTXDR (PID: 5660)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/filee8BHzd (PID: 5663)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/filee8BHzd (PID: 5663)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/filee8BHzd (PID: 5663)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/filee8BHzd (PID: 5663)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/filee8BHzd (PID: 5663)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/filee8BHzd (PID: 5663)	Directory: /tmp/.	Jump to behavior
Source: /tmp/filee8BHzd (PID: 5663)	Directory: /tmp/..	Jump to behavior
Source: /tmp/filee8BHzd (PID: 5663)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/fileWxCD2o (PID: 5666)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/fileWxCD2o (PID: 5666)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/fileWxCD2o (PID: 5666)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/fileWxCD2o (PID: 5666)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/fileWxCD2o (PID: 5666)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/fileWxCD2o (PID: 5666)	Directory: /tmp/.	Jump to behavior
Source: /tmp/fileWxCD2o (PID: 5666)	Directory: /tmp/..	Jump to behavior
Source: /tmp/fileWxCD2o (PID: 5666)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/fileNSEDrB (PID: 5670)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/fileNSEDrB (PID: 5670)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/fileNSEDrB (PID: 5670)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/fileNSEDrB (PID: 5670)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/fileNSEDrB (PID: 5670)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/fileNSEDrB (PID: 5670)	Directory: /tmp/.	Jump to behavior
Source: /tmp/fileNSEDrB (PID: 5670)	Directory: /tmp/..	Jump to behavior
Source: /tmp/fileNSEDrB (PID: 5670)	Directory: /tmp/.XIM-unix	Jump to behavior
Source: /tmp/fileBJ61uU (PID: 5677)	Directory: /tmp/.X11-unix	Jump to behavior
Source: /tmp/fileBJ61uU (PID: 5677)	Directory: /tmp/.xfsm-ICE-572N81	Jump to behavior
Source: /tmp/fileBJ61uU (PID: 5677)	Directory: /tmp/.Test-unix	Jump to behavior
Source: /tmp/fileBJ61uU (PID: 5677)	Directory: /tmp/.font-unix	Jump to behavior
Source: /tmp/fileBJ61uU (PID: 5677)	Directory: /tmp/.ICE-unix	Jump to behavior
Source: /tmp/fileBJ61uU (PID: 5677)	Directory: /tmp/.	Jump to behavior
Source: /tmp/fileBJ61uU (PID: 5677)	Directory: /tmp/..	Jump to behavior
Source: /tmp/fileBJ61uU (PID: 5677)	Directory: /tmp/.XIM-unix	Jump to behavior

Source: /tmp/waternetworkdns.elf (PID: 5494)	File: /etc/cron.hourly/0 (bits: uv usr: rwx grp: rwx all: rwx)			Jump to behavior
Source: /tmp/waternetworkdns.elf (PID: 5494)	File: <invalid fd (-1)> (bits: uv usr: rwx grp: rwx all: rwx)			Jump to behavior

Source: /tmp/waternetworkdns.elf (PID: 5494)	File written: /tmp/filejKuw5C	Jump to dropped file
Source: /tmp/filejKuw5C (PID: 5497)	File written: /tmp/file4GTrSQ	Jump to dropped file
Source: /tmp/file4GTrSQ (PID: 5498)	File written: /tmp/filef8ZZSV	Jump to dropped file
Source: /tmp/filef8ZZSV (PID: 5501)	File written: /tmp/filet2jLka	Jump to dropped file
Source: /tmp/filet2jLka (PID: 5504)	File written: /tmp/filetroeGo	Jump to dropped file
Source: /tmp/filetroeGo (PID: 5527)	File written: /tmp/filewuGbF8	Jump to dropped file
Source: /tmp/filewuGbF8 (PID: 5531)	File written: /tmp/fileto6ECp	Jump to dropped file
Source: /tmp/fileto6ECp (PID: 5534)	File written: /tmp/fileHswVvD	Jump to dropped file
Source: /tmp/fileHswVvD (PID: 5537)	File written: /tmp/filezhjTVU	Jump to dropped file
Source: /tmp/filezhjTVU (PID: 5540)	File written: /tmp/fileSIETn8	Jump to dropped file
Source: /tmp/fileSIETn8 (PID: 5543)	File written: /tmp/fileUGWp4l	Jump to dropped file
Source: /tmp/fileUGWp4l (PID: 5549)	File written: /tmp/filec48VVM	Jump to dropped file
Source: /tmp/filec48VVM (PID: 5552)	File written: /tmp/file6lgRJ1	Jump to dropped file
Source: /tmp/file6lgRJ1 (PID: 5555)	File written: /tmp/filezimFUd	Jump to dropped file
Source: /tmp/filezimFUd (PID: 5558)	File written: /tmp/file3AXL0s	Jump to dropped file
Source: /tmp/file3AXL0s (PID: 5561)	File written: /tmp/filehKcCxF	Jump to dropped file
Source: /tmp/filehKcCxF (PID: 5564)	File written: /tmp/fileKHB58W	Jump to dropped file
Source: /tmp/fileKHB58W (PID: 5567)	File written: /tmp/filejuJZ28	Jump to dropped file
Source: /tmp/filejuJZ28 (PID: 5571)	File written: /tmp/fileUJdw2s	Jump to dropped file
Source: /tmp/fileUJdw2s (PID: 5574)	File written: /tmp/fileVF2JLG	Jump to dropped file
Source: /tmp/fileVF2JLG (PID: 5577)	File written: /tmp/fileJJ6xTS	Jump to dropped file
Source: /tmp/fileJJ6xTS (PID: 5580)	File written: /tmp/file6pB1F9	Jump to dropped file
Source: /tmp/file6pB1F9 (PID: 5585)	File written: /tmp/fileybgNyx	Jump to dropped file
Source: /tmp/fileybgNyx (PID: 5589)	File written: /tmp/fileZ7AjNP	Jump to dropped file
Source: /tmp/fileZ7AjNP (PID: 5594)	File written: /tmp/filektm6Sd	Jump to dropped file
Source: /tmp/filektm6Sd (PID: 5597)	File written: /tmp/fileSZl1Ip	Jump to dropped file
Source: /tmp/fileSZl1Ip (PID: 5600)	File written: /tmp/filecGjWUF	Jump to dropped file
Source: /tmp/filecGjWUF (PID: 5603)	File written: /tmp/filebWQPiU	Jump to dropped file
Source: /tmp/filebWQPiU (PID: 5607)	File written: /tmp/fileRSLoWa	Jump to dropped file
Source: /tmp/fileRSLoWa (PID: 5610)	File written: /tmp/file9NIXMo	Jump to dropped file
Source: /tmp/file9NIXMo (PID: 5613)	File written: /tmp/fileRJ2CMD	Jump to dropped file
Source: /tmp/fileRJ2CMD (PID: 5617)	File written: /tmp/file37RoKX	Jump to dropped file
Source: /tmp/file37RoKX (PID: 5630)	File written: /tmp/filePciSgW	Jump to dropped file
Source: /tmp/filePciSgW (PID: 5638)	File written: /tmp/fileBZcmru	Jump to dropped file
Source: /tmp/fileBZcmru (PID: 5641)	File written: /tmp/filentdV7I	Jump to dropped file
Source: /tmp/filentdV7I (PID: 5644)	File written: /tmp/file24icLZ	Jump to dropped file
Source: /tmp/file24icLZ (PID: 5647)	File written: /tmp/filedpZAKa	Jump to dropped file
Source: /tmp/filedpZAKa (PID: 5653)	File written: /tmp/fileKpYTIE	Jump to dropped file
Source: /tmp/fileKpYTIE (PID: 5656)	File written: /tmp/fileVVTXDR	Jump to dropped file
Source: /tmp/fileVVTXDR (PID: 5660)	File written: /tmp/filee8BHzd	Jump to dropped file
Source: /tmp/filee8BHzd (PID: 5663)	File written: /tmp/fileWxCD2o	Jump to dropped file
Source: /tmp/fileWxCD2o (PID: 5666)	File written: /tmp/fileNSEDrB	Jump to dropped file
Source: /tmp/fileNSEDrB (PID: 5670)	File written: /tmp/fileBJ61uU	Jump to dropped file
Source: /tmp/fileBJ61uU (PID: 5677)	File written: /tmp/fileFhYfEr	Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/filejKuw5C (PID: 5497)	File: /tmp/file4GTrSQ	Jump to behavior
Source: /tmp/file4GTrSQ (PID: 5498)	File: /tmp/filef8ZZSV	Jump to behavior
Source: /tmp/filef8ZZSV (PID: 5501)	File: /tmp/filet2jLka	Jump to behavior
Source: /tmp/filet2jLka (PID: 5504)	File: /tmp/filetroeGo	Jump to behavior
Source: /tmp/filetroeGo (PID: 5527)	File: /tmp/filewuGbF8	Jump to behavior
Source: /tmp/filewuGbF8 (PID: 5531)	File: /tmp/fileto6ECp	Jump to behavior
Source: /tmp/fileto6ECp (PID: 5534)	File: /tmp/fileHswVvD	Jump to behavior
Source: /tmp/fileHswVvD (PID: 5537)	File: /tmp/filezhjTVU	Jump to behavior
Source: /tmp/filezhjTVU (PID: 5540)	File: /tmp/fileSIETn8	Jump to behavior
Source: /tmp/fileSIETn8 (PID: 5543)	File: /tmp/fileUGWp4l	Jump to behavior
Source: /tmp/fileUGWp4l (PID: 5549)	File: /tmp/filec48VVM	Jump to behavior
Source: /tmp/filec48VVM (PID: 5552)	File: /tmp/file6lgRJ1	Jump to behavior
Source: /tmp/file6lgRJ1 (PID: 5555)	File: /tmp/filezimFUd	Jump to behavior
Source: /tmp/filezimFUd (PID: 5558)	File: /tmp/file3AXL0s	Jump to behavior
Source: /tmp/file3AXL0s (PID: 5561)	File: /tmp/filehKcCxF	Jump to behavior
Source: /tmp/filehKcCxF (PID: 5564)	File: /tmp/fileKHB58W	Jump to behavior
Source: /tmp/fileKHB58W (PID: 5567)	File: /tmp/filejuJZ28	Jump to behavior
Source: /tmp/filejuJZ28 (PID: 5571)	File: /tmp/fileUJdw2s	Jump to behavior
Source: /tmp/fileUJdw2s (PID: 5574)	File: /tmp/fileVF2JLG	Jump to behavior
Source: /tmp/fileVF2JLG (PID: 5577)	File: /tmp/fileJJ6xTS	Jump to behavior
Source: /tmp/fileJJ6xTS (PID: 5580)	File: /tmp/file6pB1F9	Jump to behavior
Source: /tmp/file6pB1F9 (PID: 5585)	File: /tmp/fileybgNyx	Jump to behavior
Source: /tmp/fileybgNyx (PID: 5589)	File: /tmp/fileZ7AjNP	Jump to behavior
Source: /tmp/fileZ7AjNP (PID: 5594)	File: /tmp/filektm6Sd	Jump to behavior
Source: /tmp/filektm6Sd (PID: 5597)	File: /tmp/fileSZl1Ip	Jump to behavior
Source: /tmp/fileSZl1Ip (PID: 5600)	File: /tmp/filecGjWUF	Jump to behavior
Source: /tmp/filecGjWUF (PID: 5603)	File: /tmp/filebWQPiU	Jump to behavior
Source: /tmp/filebWQPiU (PID: 5607)	File: /tmp/fileRSLoWa	Jump to behavior
Source: /tmp/fileRSLoWa (PID: 5610)	File: /tmp/file9NIXMo	Jump to behavior
Source: /tmp/file9NIXMo (PID: 5613)	File: /tmp/fileRJ2CMD	Jump to behavior
Source: /tmp/fileRJ2CMD (PID: 5617)	File: /tmp/file37RoKX	Jump to behavior
Source: /tmp/file37RoKX (PID: 5630)	File: /tmp/filePciSgW	Jump to behavior
Source: /tmp/filePciSgW (PID: 5638)	File: /tmp/fileBZcmru	Jump to behavior
Source: /tmp/fileBZcmru (PID: 5641)	File: /tmp/filentdV7I	Jump to behavior
Source: /tmp/filentdV7I (PID: 5644)	File: /tmp/file24icLZ	Jump to behavior
Source: /tmp/file24icLZ (PID: 5647)	File: /tmp/filedpZAKa	Jump to behavior
Source: /tmp/filedpZAKa (PID: 5653)	File: /tmp/fileKpYTIE	Jump to behavior
Source: /tmp/fileKpYTIE (PID: 5656)	File: /tmp/fileVVTXDR	Jump to behavior
Source: /tmp/fileVVTXDR (PID: 5660)	File: /tmp/filee8BHzd	Jump to behavior
Source: /tmp/filee8BHzd (PID: 5663)	File: /tmp/fileWxCD2o	Jump to behavior
Source: /tmp/fileWxCD2o (PID: 5666)	File: /tmp/fileNSEDrB	Jump to behavior
Source: /tmp/fileNSEDrB (PID: 5670)	File: /tmp/fileBJ61uU	Jump to behavior
Source: /tmp/fileBJ61uU (PID: 5677)	File: /tmp/fileFhYfEr	Jump to behavior

Source: filektm6Sd, 5597.1.0000562ec0263000.0000562ec0341000.rw-.sdmp	Binary or memory string: vmware-root_727-4290690966`G
Source: file24icLZ, 5647.1.000055de4a14e000.000055de4a294000.rw-.sdmp	Binary or memory string: vmware-root_727-4290690966gG
Source: file24icLZ, 5647.1.000055de4a14e000.000055de4a294000.rw-.sdmp	Binary or memory string: vmware-root_727-4290690966
Source: fileSIETn8, 5543.1.00005609680e8000.0000560968155000.rw-.sdmp	Binary or memory string: vmware-root_727-4290690966h

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Non-Application Layer Protocol	Exfiltration Over Other Network Medium	1 Data Manipulation
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 File and Directory Permissions Modification	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Hidden Files and Directories	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Steganography	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
waternetworkdns.elf	48%	Virustotal		Browse
waternetworkdns.elf	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner
/tmp/file37RoKX	100%	Joe Sandbox ML
/tmp/fileUGWp4l	100%	Joe Sandbox ML
/tmp/fileUJdw2s	100%	Joe Sandbox ML
/tmp/filecGjWUF	100%	Joe Sandbox ML
/tmp/file24icLZ	100%	Joe Sandbox ML
/tmp/fileKpYTIE	100%	Joe Sandbox ML
/tmp/file9NIXMo	100%	Joe Sandbox ML
/tmp/file6pB1F9	100%	Joe Sandbox ML
/tmp/filedpZAKa	100%	Joe Sandbox ML
/tmp/fileVVTXDR	100%	Joe Sandbox ML
/tmp/fileBJ61uU	100%	Joe Sandbox ML
/tmp/fileZ7AjNP	100%	Joe Sandbox ML
/tmp/fileWxCD2o	100%	Joe Sandbox ML
/tmp/fileFhYfEr	100%	Joe Sandbox ML
/tmp/fileSIETn8	100%	Joe Sandbox ML
/tmp/file4GTrSQ	100%	Joe Sandbox ML
/tmp/fileRSLoWa	100%	Joe Sandbox ML
/tmp/fileSZl1Ip	100%	Joe Sandbox ML
/tmp/fileRJ2CMD	100%	Joe Sandbox ML
/tmp/fileKHB58W	100%	Joe Sandbox ML
/tmp/filePciSgW	100%	Joe Sandbox ML
/tmp/fileBZcmru	100%	Joe Sandbox ML
/tmp/file6lgRJ1	100%	Joe Sandbox ML
/tmp/filebWQPiU	100%	Joe Sandbox ML
/tmp/filee8BHzd	100%	Joe Sandbox ML
/tmp/fileJJ6xTS	100%	Joe Sandbox ML
/tmp/fileNSEDrB	100%	Joe Sandbox ML
/tmp/file3AXL0s	100%	Joe Sandbox ML
/tmp/filec48VVM	100%	Joe Sandbox ML
/tmp/fileHswVvD	100%	Joe Sandbox ML
/tmp/fileVF2JLG	100%	Joe Sandbox ML

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.24	true	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://www.gnu.org/software/coreutils/	waternetworkdns.elf, 5494.1.00007fdd403c4000.00007fdd403e7000.rw-.sdmp, waternetworkdns.elf, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp, fileSIETn8, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp	false	high
https://gnu.org/licenses/gpl.html	waternetworkdns.elf, 5494.1.00007fdd403c4000.00007fdd403e7000.rw-.sdmp, waternetworkdns.elf, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp, fileSIETn8, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp	false	high
https://wiki.xiph.org/MIME_Types_and_File_Extensions	waternetworkdns.elf, 5494.1.00007fdd403c4000.00007fdd403e7000.rw-.sdmp, waternetworkdns.elf, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp, fileSIETn8, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp	false	high
http://cf0.pw/0/etc/cron.hourly/0	waternetworkdns.elf, 5494.1.000056367b50b000.000056367b52c000.rw-.sdmp	false	high
https://www.gnu.org/gethelp/	waternetworkdns.elf, 5494.1.00007fdd403c4000.00007fdd403e7000.rw-.sdmp, waternetworkdns.elf, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp, fileSIETn8, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp	false	high
https://www.gnu.org/software/coreutils/Report	waternetworkdns.elf, 5494.1.00007fdd403c4000.00007fdd403e7000.rw-.sdmp, waternetworkdns.elf, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp, fileSIETn8, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp	false	high
https://translationproject.org/team/	fileBJ61uU, 5677.1.00007fe271c5f000.00007fe271c84000.rw-.sdmp	false	high
https://wiki.xiph.org/MIME_Types_and_File_Extensions.oga	waternetworkdns.elf, 5494.1.00007fdd403c4000.00007fdd403e7000.rw-.sdmp, waternetworkdns.elf, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp, fileSIETn8, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp	false	high
https://wiki.xiph.org/MIME_Types_and_File_Extensions.ogv	waternetworkdns.elf, 5494.1.00007fdd403c4000.00007fdd403e7000.rw-.sdmp, waternetworkdns.elf, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5497.1.00007ff87d7d2000.00007ff87d7f7000.rw-.sdmp, filejKuw5C, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5498.1.00007fc569d3c000.00007fc569d61000.rw-.sdmp, file4GTrSQ, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5501.1.00007f36749e0000.00007f3674a05000.rw-.sdmp, filef8ZZSV, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5504.1.00007f396d2d0000.00007f396d2f5000.rw-.sdmp, filet2jLka, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5527.1.00007f63b00a2000.00007f63b00c7000.rw-.sdmp, filetroeGo, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5531.1.00007f0e9bc96000.00007f0e9bcbb000.rw-.sdmp, filewuGbF8, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5534.1.00007f5078091000.00007f50780b6000.rw-.sdmp, fileto6ECp, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5537.1.00007f7864258000.00007f786427d000.rw-.sdmp, fileHswVvD, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5540.1.00007f262f4a0000.00007f262f4c5000.rw-.sdmp, filezhjTVU, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp, fileSIETn8, 5543.1.00007f5cc730b000.00007f5cc7330000.rw-.sdmp	false	high

World Map of Contacted IPs

⊘No contacted IP infos

Joe Sandbox View / Context

IPs

⊘No context

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	mpsl.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	ovh.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	botnet.arm.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	botnet.arm6.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	pps.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	botnet.arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	boatnet.mpsl.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	boatnet.arm6.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	boatnet.m68k.elf	Get hash	malicious	Mirai	Browse	162.213.35.24

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/file24icLZ

Download File

Process:	/tmp/filentdV7I
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/file24icLZ, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/file37RoKX

Download File

Process:	/tmp/fileRJ2CMD
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/file37RoKX, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/file3AXL0s

Download File

Process:	/tmp/filezimFUd
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/file3AXL0s, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/file4GTrSQ

Download File

Process:	/tmp/filejKuw5C
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/file4GTrSQ, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/file6lgRJ1

Download File

Process:	/tmp/filec48VVM
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/file6lgRJ1, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/file6pB1F9

Download File

Process:	/tmp/fileJJ6xTS
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/file6pB1F9, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/file9NIXMo

Download File

Process:	/tmp/fileRSLoWa
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/file9NIXMo, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/fileBJ61uU

Download File

Process:	/tmp/fileNSEDrB
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/fileBJ61uU, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/fileBZcmru

Download File

Process:	/tmp/filePciSgW
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/fileBZcmru, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/fileFhYfEr

Download File

Process:	/tmp/fileBJ61uU
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/fileFhYfEr, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/fileHswVvD

Download File

Process:	/tmp/fileto6ECp
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/fileHswVvD, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/fileJJ6xTS

Download File

Process:	/tmp/fileVF2JLG
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/fileJJ6xTS, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/fileKHB58W

Download File

Process:	/tmp/filehKcCxF
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/fileKHB58W, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/fileKpYTIE

Download File

Process:	/tmp/filedpZAKa
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/fileKpYTIE, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/fileNSEDrB

Download File

Process:	/tmp/fileWxCD2o
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/fileNSEDrB, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/filePciSgW

Download File

Process:	/tmp/file37RoKX
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/filePciSgW, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/fileRJ2CMD

Download File

Process:	/tmp/file9NIXMo
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/fileRJ2CMD, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/fileRSLoWa

Download File

Process:	/tmp/filebWQPiU
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/fileRSLoWa, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/fileSIETn8

Download File

Process:	/tmp/filezhjTVU
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/fileSIETn8, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/fileSZl1Ip

Download File

Process:	/tmp/filektm6Sd
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/fileSZl1Ip, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/fileUGWp4l

Download File

Process:	/tmp/fileSIETn8
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/fileUGWp4l, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/fileUJdw2s

Download File

Process:	/tmp/filejuJZ28
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/fileUJdw2s, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/fileVF2JLG

Download File

Process:	/tmp/fileUJdw2s
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/fileVF2JLG, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/fileVVTXDR

Download File

Process:	/tmp/fileKpYTIE
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/fileVVTXDR, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/fileWxCD2o

Download File

Process:	/tmp/filee8BHzd
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/fileWxCD2o, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/fileZ7AjNP

Download File

Process:	/tmp/fileybgNyx
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/fileZ7AjNP, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/filebWQPiU

Download File

Process:	/tmp/filecGjWUF
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/filebWQPiU, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/filec48VVM

Download File

Process:	/tmp/fileUGWp4l
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/filec48VVM, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/filecGjWUF

Download File

Process:	/tmp/fileSZl1Ip
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/filecGjWUF, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/filedpZAKa

Download File

Process:	/tmp/file24icLZ
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/filedpZAKa, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/filee8BHzd

Download File

Process:	/tmp/fileVVTXDR
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/filee8BHzd, Author: unknown
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/filef8ZZSV

Download File

Process:	/tmp/file4GTrSQ
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/filef8ZZSV, Author: unknown
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/filehKcCxF

Download File

Process:	/tmp/file3AXL0s
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/filehKcCxF, Author: unknown
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/filejKuw5C

Download File

Process:	/tmp/waternetworkdns.elf
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24067
Entropy (8bit):	3.881380742772542
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0Lax:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6y5
MD5:	E43D55D27FAB12AB60E85E17531E91BB
SHA1:	D660B63571315A765B9B5F3205B196EBB01D86E4
SHA-256:	3872F0A3BF07A8522EAB09C4071D97417667B98DF59B9B00E4BD837203F1356E
SHA-512:	D327C1103F703E66D18B3A8F01BA84D230A5E28ADA3E493B2B1BCCAF18DD8BD4511C1607B487145EAA5A25A6ADE28F5A95E2C6EFD89167DA874F2705E71A3DED
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/filejKuw5C, Author: unknown
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/filejuJZ28

Download File

Process:	/tmp/fileKHB58W
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/filejuJZ28, Author: unknown
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/filektm6Sd

Download File

Process:	/tmp/fileZ7AjNP
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/filektm6Sd, Author: unknown
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/filentdV7I

Download File

Process:	/tmp/fileBZcmru
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/filentdV7I, Author: unknown
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/filet2jLka

Download File

Process:	/tmp/filef8ZZSV
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/filet2jLka, Author: unknown
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/fileto6ECp

Download File

Process:	/tmp/filewuGbF8
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/fileto6ECp, Author: unknown
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/filetroeGo

Download File

Process:	/tmp/filet2jLka
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/filetroeGo, Author: unknown
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/filewuGbF8

Download File

Process:	/tmp/filetroeGo
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/filewuGbF8, Author: unknown
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/fileybgNyx

Download File

Process:	/tmp/file6pB1F9
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/fileybgNyx, Author: unknown
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/filezhjTVU

Download File

Process:	/tmp/fileHswVvD
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/filezhjTVU, Author: unknown
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

/tmp/filezimFUd

Download File

Process:	/tmp/file6lgRJ1
File Type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e03b5df4f7ad89db3a7379e41cc89cf11388f86, for GNU/Linux 3.2.0, not stripped
Category:	dropped
Size (bytes):	24068
Entropy (8bit):	3.8815331358678615
Encrypted:	false
SSDEEP:	384:urM57KXC6yqiaSKC6yqiaSKC6yqiaSKC6yl68MvzhOc48rowjR7qHH0LaR:urLXC6yqiaSKC6yqiaSKC6yqiaSKC6yJ
MD5:	8E6C64C1C937895958CE6A7AE3436F41
SHA1:	3EDE788DAFD1901ADDDFF15F580E6FFF310FD943
SHA-256:	DD0AAB4BEAEE98752B4523AC28E181A7022981A1F8131B99AAABF32715DF79CC
SHA-512:	5EADC0EC9BE81CD6637F164B997CF3D767FAFB7F85B19C0599DE8B76ADC35E18420E15AB2C2260EF89960F5AC08DDB3981100F7BD17155024C7B408F296EEF44
Malicious:	true
Yara Hits:	Rule: Linux_Hacktool_Flooder_e63396f4, Description: unknown, Source: /tmp/filezimFUd, Author: unknown
Preview:	.ELF..............>.............@.......xN..........@.8...@.............@.......@.......@.......................................................................................................................H.......H................................................................................0.......0.......0.......................................<.......L.......L......\........C.......................<.......L.......L......................................8.......8.......8.......0.......0.......................h.......h.......h.......D.......D...............S.td....8.......8.......8.......0.......0...............P.td.....1.......1.......1..............................Q.td....................................................R.td.....<.......L.......L......8.......8.............../lib64/ld-linux-x86-64.so.2......... .......GNU.............................................GNU.n...Oz...7.A...8..............GNU........................."..................."...$.......(....e.m9..........

Static File Info

General

File type:	ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), for GNU/Linux 3.2.0, BuildID[sha1]=a5bdb209387e06cba305d4d5db76c52b7cb6ea26, dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, no section header
Entropy (8bit):	4.217660998097045
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 49.77% ELF Executable and Linkable format (generic) (4004/1) 49.46% Lumena CEL bitmap (63/63) 0.78%
File name:	waternetworkdns.elf
File size:	30'479 bytes
MD5:	d877a05237ba43c64ef9abd55633cf6c
SHA1:	b2ca9cf4dee5c504fe5902ab5ae5aa50b36c5819
SHA256:	d06a042f54e256d62ae8026e2cb2a8f47775ce2d6cfa8f2df479b30c506ebc36
SHA512:	fb7dc34ca97cf5899a8abaca7d0e0e5e36b15b80b50e6d4ad879d814bb7b372d1389ed56e0d276931310e12785af671eaeacbec6c72cf080cbe52f44899adbeb
SSDEEP:	768:AFTaLRRArLXC6yqiaSKC6yqiaSKC6yqiaSKC6ylPM7junoa:GTqRRAiG/
TLSH:	75D2B61FE251CA3DC8C5E334448B957451B4B4B0EF32521B3B4466BA2DA2B988F7DB27
File Content Preview:	.ELF..............>.....P.......@...................@.8...@.............@.......@.......@.......................................8.......8.......8...............................................................0.......0......... ....................... ....

Static ELF Info

ELF header
Class:	ELF64
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Advanced Micro Devices X86-64
Version Number:	0x1
Type:	DYN (Shared object file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x1350
Flags:	0x0
ELF Header Size:	64
Program Header Offset:	64
Program Header Size:	56
Number of Program Headers:	9
Section Header Offset:	0
Section Header Size:	64
Number of Section Headers:	0
Header String Table Index:	0

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Prog Interpreter
PHDR	0x40	0x40	0x40	0x1f8	0x1f8	1.6922	0x4	R	0x8
INTERP	0x238	0x238	0x238	0x1c	0x1c	3.9408	0x4	R	0x1	/lib64/ld-linux-x86-64.so.2
LOAD	0x0	0x0	0x0	0x1c30	0x1c30	4.9384	0x5	R E	0x200000
LOAD	0x1cb0	0x201cb0	0x201cb0	0x427	0x430	3.0541	0x6	RW	0x200000
DYNAMIC	0x1cc0	0x201cc0	0x201cc0	0x1f0	0x1f0	1.5195	0x6	RW	0x8
NOTE	0x254	0x254	0x254	0x44	0x44	3.3967	0x4	R	0x4
GNU_EH_FRAME	0x1960	0x1960	0x1960	0x64	0x64	3.5382	0x4	R	0x4
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x10
GNU_RELRO	0x1cb0	0x201cb0	0x201cb0	0x350	0x350	1.7150	0x4	R	0x1

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 1, 2024 03:32:35.385807037 CET	34800	53	192.168.2.13	8.8.8.8
Dec 1, 2024 03:32:35.505919933 CET	53	34800	8.8.8.8	192.168.2.13
Dec 1, 2024 03:32:35.506150961 CET	34800	53	192.168.2.13	8.8.8.8
Dec 1, 2024 03:32:35.506150961 CET	34800	53	192.168.2.13	8.8.8.8
Dec 1, 2024 03:32:35.506150961 CET	34800	53	192.168.2.13	8.8.8.8
Dec 1, 2024 03:32:35.727641106 CET	53	34800	8.8.8.8	192.168.2.13
Dec 1, 2024 03:32:35.727659941 CET	53	34800	8.8.8.8	192.168.2.13
Dec 1, 2024 03:32:36.636663914 CET	53	34800	8.8.8.8	192.168.2.13
Dec 1, 2024 03:32:36.636976957 CET	34800	53	192.168.2.13	8.8.8.8
Dec 1, 2024 03:32:36.878140926 CET	53	34800	8.8.8.8	192.168.2.13
Dec 1, 2024 03:32:36.878232002 CET	34800	53	192.168.2.13	8.8.8.8
Dec 1, 2024 03:32:38.636707067 CET	53	34800	8.8.8.8	192.168.2.13
Dec 1, 2024 03:32:38.636864901 CET	34800	53	192.168.2.13	8.8.8.8
Dec 1, 2024 03:32:38.756814003 CET	53	34800	8.8.8.8	192.168.2.13

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 1, 2024 03:32:35.506150961 CET	192.168.2.13	8.8.8.8	0x5414	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Dec 1, 2024 03:32:35.506150961 CET	192.168.2.13	8.8.8.8	0x9b7f	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 1, 2024 03:32:36.878140926 CET	8.8.8.8	192.168.2.13	0x5414	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Dec 1, 2024 03:32:36.878140926 CET	8.8.8.8	192.168.2.13	0x5414	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: waternetworkdns.elf PID: 5494, Parent PID: 5417

General

Start time (UTC):	02:29:47
Start date (UTC):	01/12/2024
Path:	/tmp/waternetworkdns.elf
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: waternetworkdns.elf PID: 5497, Parent PID: 5494

General

Start time (UTC):	02:29:51
Start date (UTC):	01/12/2024
Path:	/tmp/waternetworkdns.elf
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filejKuw5C PID: 5497, Parent PID: 5494

General

Start time (UTC):	02:29:51
Start date (UTC):	01/12/2024
Path:	/tmp/filejKuw5C
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filejKuw5C PID: 5498, Parent PID: 5497

General

Start time (UTC):	02:29:56
Start date (UTC):	01/12/2024
Path:	/tmp/filejKuw5C
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: file4GTrSQ PID: 5498, Parent PID: 5497

General

Start time (UTC):	02:29:56
Start date (UTC):	01/12/2024
Path:	/tmp/file4GTrSQ
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: file4GTrSQ PID: 5501, Parent PID: 5498

General

Start time (UTC):	02:30:00
Start date (UTC):	01/12/2024
Path:	/tmp/file4GTrSQ
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filef8ZZSV PID: 5501, Parent PID: 5498

General

Start time (UTC):	02:30:00
Start date (UTC):	01/12/2024
Path:	/tmp/filef8ZZSV
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filef8ZZSV PID: 5504, Parent PID: 5501

General

Start time (UTC):	02:30:06
Start date (UTC):	01/12/2024
Path:	/tmp/filef8ZZSV
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filet2jLka PID: 5504, Parent PID: 5501

General

Start time (UTC):	02:30:06
Start date (UTC):	01/12/2024
Path:	/tmp/filet2jLka
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filet2jLka PID: 5527, Parent PID: 5504

General

Start time (UTC):	02:30:11
Start date (UTC):	01/12/2024
Path:	/tmp/filet2jLka
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filetroeGo PID: 5527, Parent PID: 5504

General

Start time (UTC):	02:30:11
Start date (UTC):	01/12/2024
Path:	/tmp/filetroeGo
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filetroeGo PID: 5531, Parent PID: 5527

General

Start time (UTC):	02:30:17
Start date (UTC):	01/12/2024
Path:	/tmp/filetroeGo
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filewuGbF8 PID: 5531, Parent PID: 5527

General

Start time (UTC):	02:30:17
Start date (UTC):	01/12/2024
Path:	/tmp/filewuGbF8
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filewuGbF8 PID: 5534, Parent PID: 5531

General

Start time (UTC):	02:30:22
Start date (UTC):	01/12/2024
Path:	/tmp/filewuGbF8
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileto6ECp PID: 5534, Parent PID: 5531

General

Start time (UTC):	02:30:22
Start date (UTC):	01/12/2024
Path:	/tmp/fileto6ECp
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileto6ECp PID: 5537, Parent PID: 5534

General

Start time (UTC):	02:30:28
Start date (UTC):	01/12/2024
Path:	/tmp/fileto6ECp
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileHswVvD PID: 5537, Parent PID: 5534

General

Start time (UTC):	02:30:28
Start date (UTC):	01/12/2024
Path:	/tmp/fileHswVvD
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileHswVvD PID: 5540, Parent PID: 5537

General

Start time (UTC):	02:30:33
Start date (UTC):	01/12/2024
Path:	/tmp/fileHswVvD
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filezhjTVU PID: 5540, Parent PID: 5537

General

Start time (UTC):	02:30:33
Start date (UTC):	01/12/2024
Path:	/tmp/filezhjTVU
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filezhjTVU PID: 5543, Parent PID: 5540

General

Start time (UTC):	02:30:38
Start date (UTC):	01/12/2024
Path:	/tmp/filezhjTVU
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileSIETn8 PID: 5543, Parent PID: 5540

General

Start time (UTC):	02:30:38
Start date (UTC):	01/12/2024
Path:	/tmp/fileSIETn8
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileSIETn8 PID: 5549, Parent PID: 5543

General

Start time (UTC):	02:30:43
Start date (UTC):	01/12/2024
Path:	/tmp/fileSIETn8
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileUGWp4l PID: 5549, Parent PID: 5543

General

Start time (UTC):	02:30:43
Start date (UTC):	01/12/2024
Path:	/tmp/fileUGWp4l
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileUGWp4l PID: 5552, Parent PID: 5549

General

Start time (UTC):	02:30:48
Start date (UTC):	01/12/2024
Path:	/tmp/fileUGWp4l
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filec48VVM PID: 5552, Parent PID: 5549

General

Start time (UTC):	02:30:48
Start date (UTC):	01/12/2024
Path:	/tmp/filec48VVM
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filec48VVM PID: 5555, Parent PID: 5552

General

Start time (UTC):	02:30:53
Start date (UTC):	01/12/2024
Path:	/tmp/filec48VVM
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: file6lgRJ1 PID: 5555, Parent PID: 5552

General

Start time (UTC):	02:30:53
Start date (UTC):	01/12/2024
Path:	/tmp/file6lgRJ1
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: file6lgRJ1 PID: 5558, Parent PID: 5555

General

Start time (UTC):	02:30:58
Start date (UTC):	01/12/2024
Path:	/tmp/file6lgRJ1
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filezimFUd PID: 5558, Parent PID: 5555

General

Start time (UTC):	02:30:58
Start date (UTC):	01/12/2024
Path:	/tmp/filezimFUd
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filezimFUd PID: 5561, Parent PID: 5558

General

Start time (UTC):	02:31:02
Start date (UTC):	01/12/2024
Path:	/tmp/filezimFUd
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: file3AXL0s PID: 5561, Parent PID: 5558

General

Start time (UTC):	02:31:02
Start date (UTC):	01/12/2024
Path:	/tmp/file3AXL0s
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: file3AXL0s PID: 5564, Parent PID: 5561

General

Start time (UTC):	02:31:07
Start date (UTC):	01/12/2024
Path:	/tmp/file3AXL0s
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filehKcCxF PID: 5564, Parent PID: 5561

General

Start time (UTC):	02:31:07
Start date (UTC):	01/12/2024
Path:	/tmp/filehKcCxF
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filehKcCxF PID: 5567, Parent PID: 5564

General

Start time (UTC):	02:31:12
Start date (UTC):	01/12/2024
Path:	/tmp/filehKcCxF
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileKHB58W PID: 5567, Parent PID: 5564

General

Start time (UTC):	02:31:12
Start date (UTC):	01/12/2024
Path:	/tmp/fileKHB58W
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileKHB58W PID: 5571, Parent PID: 5567

General

Start time (UTC):	02:31:18
Start date (UTC):	01/12/2024
Path:	/tmp/fileKHB58W
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filejuJZ28 PID: 5571, Parent PID: 5567

General

Start time (UTC):	02:31:18
Start date (UTC):	01/12/2024
Path:	/tmp/filejuJZ28
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filejuJZ28 PID: 5574, Parent PID: 5571

General

Start time (UTC):	02:31:23
Start date (UTC):	01/12/2024
Path:	/tmp/filejuJZ28
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileUJdw2s PID: 5574, Parent PID: 5571

General

Start time (UTC):	02:31:23
Start date (UTC):	01/12/2024
Path:	/tmp/fileUJdw2s
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileUJdw2s PID: 5577, Parent PID: 5574

General

Start time (UTC):	02:31:28
Start date (UTC):	01/12/2024
Path:	/tmp/fileUJdw2s
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileVF2JLG PID: 5577, Parent PID: 5574

General

Start time (UTC):	02:31:28
Start date (UTC):	01/12/2024
Path:	/tmp/fileVF2JLG
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileVF2JLG PID: 5580, Parent PID: 5577

General

Start time (UTC):	02:31:33
Start date (UTC):	01/12/2024
Path:	/tmp/fileVF2JLG
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileJJ6xTS PID: 5580, Parent PID: 5577

General

Start time (UTC):	02:31:33
Start date (UTC):	01/12/2024
Path:	/tmp/fileJJ6xTS
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileJJ6xTS PID: 5585, Parent PID: 5580

General

Start time (UTC):	02:31:39
Start date (UTC):	01/12/2024
Path:	/tmp/fileJJ6xTS
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: file6pB1F9 PID: 5585, Parent PID: 5580

General

Start time (UTC):	02:31:39
Start date (UTC):	01/12/2024
Path:	/tmp/file6pB1F9
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: file6pB1F9 PID: 5589, Parent PID: 5585

General

Start time (UTC):	02:31:45
Start date (UTC):	01/12/2024
Path:	/tmp/file6pB1F9
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileybgNyx PID: 5589, Parent PID: 5585

General

Start time (UTC):	02:31:45
Start date (UTC):	01/12/2024
Path:	/tmp/fileybgNyx
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileybgNyx PID: 5594, Parent PID: 5589

General

Start time (UTC):	02:31:52
Start date (UTC):	01/12/2024
Path:	/tmp/fileybgNyx
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileZ7AjNP PID: 5594, Parent PID: 5589

General

Start time (UTC):	02:31:52
Start date (UTC):	01/12/2024
Path:	/tmp/fileZ7AjNP
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileZ7AjNP PID: 5597, Parent PID: 5594

General

Start time (UTC):	02:31:58
Start date (UTC):	01/12/2024
Path:	/tmp/fileZ7AjNP
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filektm6Sd PID: 5597, Parent PID: 5594

General

Start time (UTC):	02:31:58
Start date (UTC):	01/12/2024
Path:	/tmp/filektm6Sd
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filektm6Sd PID: 5600, Parent PID: 5597

General

Start time (UTC):	02:32:03
Start date (UTC):	01/12/2024
Path:	/tmp/filektm6Sd
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileSZl1Ip PID: 5600, Parent PID: 5597

General

Start time (UTC):	02:32:03
Start date (UTC):	01/12/2024
Path:	/tmp/fileSZl1Ip
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileSZl1Ip PID: 5603, Parent PID: 5600

General

Start time (UTC):	02:32:08
Start date (UTC):	01/12/2024
Path:	/tmp/fileSZl1Ip
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filecGjWUF PID: 5603, Parent PID: 5600

General

Start time (UTC):	02:32:08
Start date (UTC):	01/12/2024
Path:	/tmp/filecGjWUF
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filecGjWUF PID: 5607, Parent PID: 5603

General

Start time (UTC):	02:32:14
Start date (UTC):	01/12/2024
Path:	/tmp/filecGjWUF
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filebWQPiU PID: 5607, Parent PID: 5603

General

Start time (UTC):	02:32:14
Start date (UTC):	01/12/2024
Path:	/tmp/filebWQPiU
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filebWQPiU PID: 5610, Parent PID: 5607

General

Start time (UTC):	02:32:20
Start date (UTC):	01/12/2024
Path:	/tmp/filebWQPiU
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileRSLoWa PID: 5610, Parent PID: 5607

General

Start time (UTC):	02:32:20
Start date (UTC):	01/12/2024
Path:	/tmp/fileRSLoWa
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileRSLoWa PID: 5613, Parent PID: 5610

General

Start time (UTC):	02:32:26
Start date (UTC):	01/12/2024
Path:	/tmp/fileRSLoWa
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: file9NIXMo PID: 5613, Parent PID: 5610

General

Start time (UTC):	02:32:26
Start date (UTC):	01/12/2024
Path:	/tmp/file9NIXMo
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: file9NIXMo PID: 5617, Parent PID: 5613

General

Start time (UTC):	02:32:30
Start date (UTC):	01/12/2024
Path:	/tmp/file9NIXMo
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileRJ2CMD PID: 5617, Parent PID: 5613

General

Start time (UTC):	02:32:30
Start date (UTC):	01/12/2024
Path:	/tmp/fileRJ2CMD
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileRJ2CMD PID: 5630, Parent PID: 5617

General

Start time (UTC):	02:32:38
Start date (UTC):	01/12/2024
Path:	/tmp/fileRJ2CMD
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: file37RoKX PID: 5630, Parent PID: 5617

General

Start time (UTC):	02:32:38
Start date (UTC):	01/12/2024
Path:	/tmp/file37RoKX
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: file37RoKX PID: 5638, Parent PID: 5630

General

Start time (UTC):	02:32:44
Start date (UTC):	01/12/2024
Path:	/tmp/file37RoKX
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filePciSgW PID: 5638, Parent PID: 5630

General

Start time (UTC):	02:32:44
Start date (UTC):	01/12/2024
Path:	/tmp/filePciSgW
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filePciSgW PID: 5641, Parent PID: 5638

General

Start time (UTC):	02:32:49
Start date (UTC):	01/12/2024
Path:	/tmp/filePciSgW
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileBZcmru PID: 5641, Parent PID: 5638

General

Start time (UTC):	02:32:49
Start date (UTC):	01/12/2024
Path:	/tmp/fileBZcmru
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileBZcmru PID: 5644, Parent PID: 5641

General

Start time (UTC):	02:32:55
Start date (UTC):	01/12/2024
Path:	/tmp/fileBZcmru
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filentdV7I PID: 5644, Parent PID: 5641

General

Start time (UTC):	02:32:55
Start date (UTC):	01/12/2024
Path:	/tmp/filentdV7I
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filentdV7I PID: 5647, Parent PID: 5644

General

Start time (UTC):	02:33:01
Start date (UTC):	01/12/2024
Path:	/tmp/filentdV7I
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: file24icLZ PID: 5647, Parent PID: 5644

General

Start time (UTC):	02:33:01
Start date (UTC):	01/12/2024
Path:	/tmp/file24icLZ
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: file24icLZ PID: 5653, Parent PID: 5647

General

Start time (UTC):	02:33:07
Start date (UTC):	01/12/2024
Path:	/tmp/file24icLZ
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filedpZAKa PID: 5653, Parent PID: 5647

General

Start time (UTC):	02:33:07
Start date (UTC):	01/12/2024
Path:	/tmp/filedpZAKa
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filedpZAKa PID: 5656, Parent PID: 5653

General

Start time (UTC):	02:33:12
Start date (UTC):	01/12/2024
Path:	/tmp/filedpZAKa
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileKpYTIE PID: 5656, Parent PID: 5653

General

Start time (UTC):	02:33:12
Start date (UTC):	01/12/2024
Path:	/tmp/fileKpYTIE
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileKpYTIE PID: 5660, Parent PID: 5656

General

Start time (UTC):	02:33:18
Start date (UTC):	01/12/2024
Path:	/tmp/fileKpYTIE
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileVVTXDR PID: 5660, Parent PID: 5656

General

Start time (UTC):	02:33:18
Start date (UTC):	01/12/2024
Path:	/tmp/fileVVTXDR
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileVVTXDR PID: 5663, Parent PID: 5660

General

Start time (UTC):	02:33:23
Start date (UTC):	01/12/2024
Path:	/tmp/fileVVTXDR
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filee8BHzd PID: 5663, Parent PID: 5660

General

Start time (UTC):	02:33:23
Start date (UTC):	01/12/2024
Path:	/tmp/filee8BHzd
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: filee8BHzd PID: 5666, Parent PID: 5663

General

Start time (UTC):	02:33:30
Start date (UTC):	01/12/2024
Path:	/tmp/filee8BHzd
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileWxCD2o PID: 5666, Parent PID: 5663

General

Start time (UTC):	02:33:30
Start date (UTC):	01/12/2024
Path:	/tmp/fileWxCD2o
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileWxCD2o PID: 5670, Parent PID: 5666

General

Start time (UTC):	02:33:36
Start date (UTC):	01/12/2024
Path:	/tmp/fileWxCD2o
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileNSEDrB PID: 5670, Parent PID: 5666

General

Start time (UTC):	02:33:36
Start date (UTC):	01/12/2024
Path:	/tmp/fileNSEDrB
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileNSEDrB PID: 5677, Parent PID: 5670

General

Start time (UTC):	02:33:42
Start date (UTC):	01/12/2024
Path:	/tmp/fileNSEDrB
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileBJ61uU PID: 5677, Parent PID: 5670

General

Start time (UTC):	02:33:42
Start date (UTC):	01/12/2024
Path:	/tmp/fileBJ61uU
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileBJ61uU PID: 5681, Parent PID: 5677

General

Start time (UTC):	02:33:48
Start date (UTC):	01/12/2024
Path:	/tmp/fileBJ61uU
Arguments:	-
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Chronological Activities

Analysis Process: fileFhYfEr PID: 5681, Parent PID: 5677

General

Start time (UTC):	02:33:48
Start date (UTC):	01/12/2024
Path:	/tmp/fileFhYfEr
Arguments:	/tmp/waternetworkdns.elf
File size:	30479 bytes
MD5 hash:	d877a05237ba43c64ef9abd55633cf6c

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file or directory permissions/attributes to evade access control lists (ACLs) and access protected files.File and directory permissions are commonly managed by ACLs configured by the file or directory owner, or users with the appropriate permissions. File and directory ACL implementations vary by platform, but generally explicitly designate which users or groups can perform which actions (read, write, execute, etc.).
Tactics:	Defense Evasion
Data Sources:	Active Directory: Active Directory Object Modification, Command: Command Execution, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may insert, delete, or manipulate data in order to influence external outcomes or hide activity, thus threatening the integrity of the data. By manipulating data, adversaries may attempt to affect a business process, organizational understanding, or decision making.
Tactics:	Impact
Data Sources:	File: File Creation, File: File Deletion, File: File Metadata, File: File Modification, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report waternetworkdns.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Initial Sample

Dropped Files

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/file24icLZ

/tmp/file37RoKX

/tmp/file3AXL0s

/tmp/file4GTrSQ

/tmp/file6lgRJ1

/tmp/file6pB1F9

/tmp/file9NIXMo

/tmp/fileBJ61uU

/tmp/fileBZcmru

/tmp/fileFhYfEr

/tmp/fileHswVvD

/tmp/fileJJ6xTS

/tmp/fileKHB58W

/tmp/fileKpYTIE

/tmp/fileNSEDrB

/tmp/filePciSgW

/tmp/fileRJ2CMD

/tmp/fileRSLoWa

/tmp/fileSIETn8

/tmp/fileSZl1Ip

/tmp/fileUGWp4l

/tmp/fileUJdw2s

/tmp/fileVF2JLG

/tmp/fileVVTXDR

/tmp/fileWxCD2o

/tmp/fileZ7AjNP

/tmp/filebWQPiU

/tmp/filec48VVM

/tmp/filecGjWUF

/tmp/filedpZAKa

Linux Analysis Report
waternetworkdns.elf