Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
/usr/bin/dash
|
-
|
||
|
/usr/bin/rm
|
rm -f /tmp/tmp.jFYWf2ZOp0 /tmp/tmp.dyJhbLDI6k /tmp/tmp.6fHhJDi2GF
|
||
|
/usr/bin/dash
|
-
|
||
|
/usr/bin/rm
|
rm -f /tmp/tmp.jFYWf2ZOp0 /tmp/tmp.dyJhbLDI6k /tmp/tmp.6fHhJDi2GF
|
||
|
/tmp/na.elf
|
/tmp/na.elf
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
109.202.202.202
|
unknown
|
Switzerland
|
||
|
91.189.91.43
|
unknown
|
United Kingdom
|
||
|
91.189.91.42
|
unknown
|
United Kingdom
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7f45d1a4a000
|
page read and write
|
|||
|
55893dd1a000
|
page read and write
|
|||
|
7f45d224d000
|
page read and write
|
|||
|
7f45d28ac000
|
page read and write
|
|||
|
7ffd62768000
|
page execute read
|
|||
|
55893bc7d000
|
page read and write
|
|||
|
7f45d2d45000
|
page read and write
|
|||
|
7f45cc000000
|
page read and write
|
|||
|
7f45cc021000
|
page read and write
|
|||
|
55893ef0d000
|
page read and write
|
|||
|
7f454c017000
|
page execute read
|
|||
|
55893bc85000
|
page read and write
|
|||
|
7f45d2d92000
|
page read and write
|
|||
|
7f45d2c1c000
|
page read and write
|
|||
|
55893dc83000
|
page execute and read and write
|
|||
|
7f45d28d1000
|
page read and write
|
|||
|
7f45d2d4d000
|
page read and write
|
|||
|
7f454c019000
|
page read and write
|
|||
|
7ffd62634000
|
page read and write
|
|||
|
7f45d225b000
|
page read and write
|
|||
|
55893ba4b000
|
page execute read
|
|||
|
7f45d24ea000
|
page read and write
|
|||
|
7f454c01b000
|
page read and write
|
There are 13 hidden memdumps, click here to show them.