IOC Report
sh4.elf

loading gif

Processes

Path
Cmdline
Malicious
/tmp/sh4.elf
/tmp/sh4.elf

IPs

IP
Domain
Country
Malicious
109.202.202.202
unknown
Switzerland
91.189.91.43
unknown
United Kingdom
91.189.91.42
unknown
United Kingdom

Memdumps

Base Address
Regiontype
Protect
Malicious
7fee48411000
page read and write
7feecfd2b000
page read and write
55d9e9119000
page read and write
7ffcdc487000
page read and write
7feec8000000
page read and write
7feecf28b000
page read and write
7feecfa9c000
page read and write
55d9e9102000
page execute and read and write
7feed058e000
page read and write
7feecfa8e000
page read and write
7feed0586000
page read and write
7fee4840c000
page execute read
7feed0112000
page read and write
7ffcdc497000
page execute read
55d9e7104000
page read and write
7feed045d000
page read and write
7feec8021000
page read and write
55d9e70fc000
page read and write
7feed05d3000
page read and write
7feed00ed000
page read and write
7fee4840e000
page read and write
55d9e93b1000
page read and write
55d9e6ee6000
page execute read
There are 13 hidden memdumps, click here to show them.