IOC Report
na.elf

loading gif

Processes

Path
Cmdline
Malicious
/tmp/na.elf
/tmp/na.elf
/tmp/na.elf
-
/tmp/na.elf
-

Domains

Name
IP
Malicious
xz33006.h52l.com
181.41.196.16
malicious

IPs

IP
Domain
Country
Malicious
181.41.196.16
xz33006.h52l.com
Chile
malicious

Memdumps

Base Address
Regiontype
Protect
Malicious
7f0a9c010000
page execute read
malicious
56308f315000
page read and write
7f0b94b37000
page read and write
7ffd00581000
page execute read
7f0b94696000
page read and write
563093027000
page read and write
7f0a9c020000
page read and write
7f0b942d4000
page read and write
7f0a9c023000
page read and write
7f0b8c000000
page read and write
7f0b94a06000
page read and write
7f0b93834000
page read and write
7f0b946bb000
page read and write
563091313000
page execute and read and write
7f0b94b2f000
page read and write
56308f30d000
page read and write
7f0b94045000
page read and write
563091329000
page read and write
7f0b94037000
page read and write
7f0b8c021000
page read and write
56308f08a000
page execute read
7ffd0043b000
page read and write
7f0b94b7c000
page read and write
There are 13 hidden memdumps, click here to show them.