Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
/usr/bin/dash
|
-
|
||
|
/usr/bin/rm
|
rm -f /tmp/tmp.4jLf3h3Uqq /tmp/tmp.jmvgMJk7cC /tmp/tmp.7rbvlX96eN
|
||
|
/usr/bin/dash
|
-
|
||
|
/usr/bin/rm
|
rm -f /tmp/tmp.4jLf3h3Uqq /tmp/tmp.jmvgMJk7cC /tmp/tmp.7rbvlX96eN
|
||
|
/tmp/na.elf
|
/tmp/na.elf
|
||
|
/tmp/na.elf
|
-
|
||
|
/tmp/na.elf
|
-
|
||
|
/tmp/na.elf
|
-
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
21savage.dyn
|
154.90.62.142
|
 |
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
154.90.62.142
|
21savage.dyn
|
Seychelles
|
|
|
|
109.202.202.202
|
unknown
|
Switzerland
|
||
|
91.189.91.43
|
unknown
|
United Kingdom
|
||
|
91.189.91.42
|
unknown
|
United Kingdom
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7fcd99aac000
|
page read and write
|
|||
|
7ffe044ce000
|
page execute read
|
|||
|
7fcd99a67000
|
page read and write
|
|||
|
557078d89000
|
page read and write
|
|||
|
7fcd99936000
|
page read and write
|
|||
|
7fcd98764000
|
page read and write
|
|||
|
7fcd1440b000
|
page execute read
|
|||
|
7ffe04433000
|
page read and write
|
|||
|
55707642d000
|
page read and write
|
|||
|
7fcd99204000
|
page read and write
|
|||
|
7fcd1441c000
|
page read and write
|
|||
|
55707844a000
|
page read and write
|
|||
|
7fcd995c6000
|
page read and write
|
|||
|
557078433000
|
page execute and read and write
|
|||
|
7fcd14423000
|
page read and write
|
|||
|
7fcd98f75000
|
page read and write
|
|||
|
7fcd99a5f000
|
page read and write
|
|||
|
7fcd995eb000
|
page read and write
|
|||
|
7fcd94021000
|
page read and write
|
|||
|
557076435000
|
page read and write
|
|||
|
7fcd98f67000
|
page read and write
|
|||
|
7fcd94000000
|
page read and write
|
|||
|
557076217000
|
page execute read
|
There are 13 hidden memdumps, click here to show them.