IOC Report
na.elf

loading gif

Processes

Path
Cmdline
Malicious
/tmp/na.elf
/tmp/na.elf
/tmp/na.elf
-
/tmp/na.elf
-
/tmp/na.elf
-

Domains

Name
IP
Malicious
daisy.ubuntu.com
162.213.35.25

IPs

IP
Domain
Country
Malicious
154.90.62.142
unknown
Seychelles
malicious
116.203.104.203
unknown
Germany

Memdumps

Base Address
Regiontype
Protect
Malicious
555aee202000
page execute and read and write
7fc8dcfa5000
page read and write
7fc7e801e000
page read and write
7ffec7bdc000
page execute read
7fc8dda97000
page read and write
7fc8d8021000
page read and write
555aeec7d000
page read and write
7fc8d8000000
page read and write
7fc8dd61b000
page read and write
7fc8dcf97000
page read and write
7fc8ddadc000
page read and write
7fc7e800d000
page execute read
555aec204000
page read and write
555aebf79000
page execute read
7fc7e8025000
page read and write
555aec1fc000
page read and write
7fc8dd234000
page read and write
7fc8dd966000
page read and write
555aee218000
page read and write
7fc8dc794000
page read and write
7fc8dda8f000
page read and write
7ffec7b53000
page read and write
7fc8dd5f6000
page read and write
There are 13 hidden memdumps, click here to show them.