Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
/tmp/na.elf
|
/tmp/na.elf
|
||
|
/tmp/na.elf
|
-
|
||
|
/tmp/na.elf
|
-
|
||
|
/tmp/na.elf
|
-
|
||
|
/tmp/na.elf
|
-
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://%d.%d.%d.%d/la.bot.%s
|
unknown
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
561c13d5e000
|
page read and write
|
|||
|
561c14301000
|
page read and write
|
|||
|
7fcb34000000
|
page read and write
|
|||
|
7fcb39650000
|
page read and write
|
|||
|
561c13cc7000
|
page execute and read and write
|
|||
|
561c11cc9000
|
page read and write
|
|||
|
561c11a8f000
|
page execute read
|
|||
|
7fcb38b5e000
|
page read and write
|
|||
|
7fcb38b50000
|
page read and write
|
|||
|
7fcb391af000
|
page read and write
|
|||
|
7fcb39695000
|
page read and write
|
|||
|
7ffc319e7000
|
page execute read
|
|||
|
7fcb34021000
|
page read and write
|
|||
|
7fcb3951f000
|
page read and write
|
|||
|
7fcb391d4000
|
page read and write
|
|||
|
7fcab4014000
|
page execute read
|
|||
|
7fcb3834d000
|
page read and write
|
|||
|
561c11cc1000
|
page read and write
|
|||
|
7fcab401d000
|
page read and write
|
|||
|
7fcb39648000
|
page read and write
|
|||
|
7ffc319b9000
|
page read and write
|
|||
|
7fcb38ded000
|
page read and write
|
|||
|
7fcab4026000
|
page read and write
|
There are 13 hidden memdumps, click here to show them.