Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
/tmp/na.elf
|
/tmp/na.elf
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
109.202.202.202
|
unknown
|
Switzerland
|
||
|
91.189.91.43
|
unknown
|
United Kingdom
|
||
|
91.189.91.42
|
unknown
|
United Kingdom
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
560fe782a000
|
page read and write
|
|||
|
560fe49c9000
|
page execute read
|
|||
|
7fc391709000
|
page read and write
|
|||
|
7ffeac7ed000
|
page execute read
|
|||
|
560fe6c59000
|
page execute and read and write
|
|||
|
7fc3913b2000
|
page read and write
|
|||
|
7fc391064000
|
page read and write
|
|||
|
560fe4c51000
|
page read and write
|
|||
|
560fe4c5b000
|
page read and write
|
|||
|
7fc391081000
|
page read and write
|
|||
|
7fc3901da000
|
page read and write
|
|||
|
7fc3916bc000
|
page read and write
|
|||
|
7fc30c115000
|
page execute read
|
|||
|
7fc30c160000
|
page execute read
|
|||
|
7fc391593000
|
page read and write
|
|||
|
7fc38c021000
|
page read and write
|
|||
|
7fc3909f0000
|
page read and write
|
|||
|
7fc390ca0000
|
page read and write
|
|||
|
7ffeac793000
|
page read and write
|
|||
|
7fc3916c4000
|
page read and write
|
|||
|
7fc38c000000
|
page read and write
|
|||
|
7fc391041000
|
page read and write
|
|||
|
7fc3909e2000
|
page read and write
|
|||
|
560fe6c70000
|
page read and write
|
There are 14 hidden memdumps, click here to show them.