Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
/tmp/na.elf
|
/tmp/na.elf
|
||
|
/tmp/na.elf
|
-
|
||
|
/tmp/na.elf
|
-
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
xz33006.h52l.com
|
181.41.196.16
|
 |
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
181.41.196.16
|
xz33006.h52l.com
|
Chile
|
|
|
|
109.202.202.202
|
unknown
|
Switzerland
|
||
|
91.189.91.43
|
unknown
|
United Kingdom
|
||
|
91.189.91.42
|
unknown
|
United Kingdom
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7f93cc021000
|
page execute read
|
|
||
|
7f93cc031000
|
page read and write
|
|||
|
7f94d1e92000
|
page read and write
|
|||
|
7f94d2121000
|
page read and write
|
|||
|
7f94d24e3000
|
page read and write
|
|||
|
7f94d2984000
|
page read and write
|
|||
|
7f94cc000000
|
page read and write
|
|||
|
7f94d29c9000
|
page read and write
|
|||
|
55dbb2ff0000
|
page read and write
|
|||
|
7f94cc021000
|
page read and write
|
|||
|
7f93cc034000
|
page read and write
|
|||
|
55dbb2db9000
|
page execute read
|
|||
|
7f94d1e84000
|
page read and write
|
|||
|
7f94d2853000
|
page read and write
|
|||
|
7ffe69a2d000
|
page read and write
|
|||
|
7f94d2508000
|
page read and write
|
|||
|
55dbb5005000
|
page read and write
|
|||
|
7f94d297c000
|
page read and write
|
|||
|
7f94d1681000
|
page read and write
|
|||
|
55dbb4fee000
|
page execute and read and write
|
|||
|
55dbb6b3e000
|
page read and write
|
|||
|
55dbb2fe7000
|
page read and write
|
|||
|
7ffe69bac000
|
page execute read
|
There are 13 hidden memdumps, click here to show them.