IOC Report
na.elf

loading gif

Processes

Path
Cmdline
Malicious
/tmp/na.elf
/tmp/na.elf
/tmp/na.elf
-
/tmp/na.elf
-

Domains

Name
IP
Malicious
nineteen.libre
38.60.249.66
 malicious
fortyfivehundred.dyn
154.90.62.142
 malicious
kr3ddnsnet1.indy
154.223.21.228
 malicious
subcarrace.indy
154.223.21.228
 malicious
eighteen.pirate. [malformed]
unknown
 malicious
krddnsnet.dyn. [malformed]
unknown
 malicious
subcarrace.indy. [malformed]
unknown
 malicious
daisy.ubuntu.com
162.213.35.24

IPs

IP
Domain
Country
Malicious
154.90.62.142
fortyfivehundred.dyn
Seychelles
malicious
154.223.21.228
kr3ddnsnet1.indy
Seychelles
malicious
38.60.249.66
nineteen.libre
United States
malicious
162.243.19.47
unknown
United States
63.231.92.27
unknown
United States
161.97.219.84
unknown
United States

Memdumps

Base Address
Regiontype
Protect
Malicious
7ff17c026000
page execute read
7ff282803000
page read and write
7ff282950000
page read and write
7ff27c021000
page read and write
55db275ed000
page read and write
7ff27bfff000
page read and write
55db2739c000
page execute read
7ff28144a000
page read and write
7ff17c02e000
page read and write
7ff282046000
page read and write
7ff2822d4000
page read and write
7fff15123000
page read and write
7ff281c52000
page read and write
55db2a4b9000
page read and write
7fff1514f000
page execute read
55db295f4000
page execute and read and write
7ff282995000
page read and write
7ff28292c000
page read and write
7ff282622000
page read and write
55db2960b000
page read and write
7ff281ce4000
page read and write
7ff17c036000
page read and write
55db275f6000
page read and write
7ff282440000
page read and write
7ff2822b1000
page read and write
There are 15 hidden memdumps, click here to show them.