IOC Report
na.elf

loading gif

Processes

Path
Cmdline
Malicious
/tmp/na.elf
/tmp/na.elf
/tmp/na.elf
-
/tmp/na.elf
-
/bin/sh
sh -c "]0;Central Control Terminal - 54 server(s) connected"

Domains

Name
IP
Malicious
daisy.ubuntu.com
162.213.35.25

IPs

IP
Domain
Country
Malicious
185.125.190.26
unknown
United Kingdom
129.152.30.246
unknown
United States

Memdumps

Base Address
Regiontype
Protect
Malicious
7f6179bd9000
page read and write
7f6074036000
page execute read
559a32fab000
page read and write
559a34fb2000
page execute and read and write
7f6174021000
page read and write
7f6179c1e000
page read and write
7f6179bb5000
page read and write
7ffcf6f1b000
page execute read
7f6173fff000
page read and write
559a34fc9000
page read and write
7f61796c9000
page read and write
7f6074045000
page read and write
7f61798ab000
page read and write
7ffcf6ece000
page read and write
559a32d5a000
page execute read
7f6178f6d000
page read and write
559a362ad000
page read and write
7f6178edb000
page read and write
7f617955d000
page read and write
7f617953a000
page read and write
7f61786d3000
page read and write
559a32fb4000
page read and write
7f61792cf000
page read and write
7f6179a8c000
page read and write
7f607403f000
page read and write
There are 15 hidden memdumps, click here to show them.