IOC Report
na.elf

loading gif

Processes

Path
Cmdline
Malicious
/tmp/na.elf
/tmp/na.elf
/tmp/na.elf
-
/tmp/na.elf
-

Domains

Name
IP
Malicious
xz33006.h52l.com
181.41.196.16
malicious

IPs

IP
Domain
Country
Malicious
181.41.196.16
xz33006.h52l.com
Chile
malicious

Memdumps

Base Address
Regiontype
Protect
Malicious
7f337c413000
page execute read
malicious
7f33fc000000
page read and write
7f3401938000
page read and write
7f337c457000
page read and write
7f3401f89000
page read and write
7ffffcb54000
page execute read
555b03bed000
page read and write
7f34024db000
page read and write
7f337c454000
page read and write
7f3401122000
page read and write
555b0395b000
page execute read
555b05beb000
page execute and read and write
555b05c02000
page read and write
555b03be3000
page read and write
7ffffca85000
page read and write
7f34022fa000
page read and write
7f33fc021000
page read and write
7f3402604000
page read and write
7f3401fac000
page read and write
7f340192a000
page read and write
7f3402651000
page read and write
555b075c3000
page read and write
7f3401fc9000
page read and write
7f340260c000
page read and write
7f3401be8000
page read and write
There are 15 hidden memdumps, click here to show them.