IOC Report
zmap.sh4.elf

loading gif

Processes

Path
Cmdline
Malicious
/tmp/zmap.sh4.elf
/tmp/zmap.sh4.elf
/tmp/zmap.sh4.elf
-
/tmp/zmap.sh4.elf
-

Domains

Name
IP
Malicious
srvy.vlrt-gap.com
185.196.8.105

IPs

IP
Domain
Country
Malicious
185.196.8.105
srvy.vlrt-gap.com
Switzerland
109.202.202.202
unknown
Switzerland
91.189.91.43
unknown
United Kingdom
91.189.91.42
unknown
United Kingdom

Memdumps

Base Address
Regiontype
Protect
Malicious
7f476c410000
page execute read
malicious
7f476c410000
page execute read
malicious
5611f8074000
page execute and read and write
7f476c420000
page read and write
7f47f2a28000
page read and write
5611f606e000
page read and write
5611f808b000
page read and write
7f47f1ba1000
page read and write
7f47f2a03000
page read and write
5611f8074000
page execute and read and write
7f47ec000000
page read and write
7f47f2e9c000
page read and write
7f476c423000
page read and write
7f47f2d73000
page read and write
7f47ec000000
page read and write
7f47f23b2000
page read and write
7f47f23b2000
page read and write
7ffdde279000
page read and write
5611f606e000
page read and write
7f476c420000
page read and write
5611f5e58000
page execute read
5611f5e58000
page execute read
7f47f23a4000
page read and write
7f47f2e9c000
page read and write
7f47f2d73000
page read and write
7f47f23a4000
page read and write
7f47ec021000
page read and write
7f47f1ba1000
page read and write
7ffdde279000
page read and write
5611f9911000
page read and write
7f476c423000
page read and write
7f47f2ea4000
page read and write
7ffdde340000
page execute read
7f47f2a28000
page read and write
5611f6076000
page read and write
7ffdde340000
page execute read
7f47f2641000
page read and write
5611f9911000
page read and write
7f47f2641000
page read and write
7f47f2ee9000
page read and write
5611f808b000
page read and write
7f47ec021000
page read and write
7f47f2ea4000
page read and write
5611f6076000
page read and write
7f47f2a03000
page read and write
7f47f2ee9000
page read and write
There are 36 hidden memdumps, click here to show them.