IOC Report
xi.arm6.elf

loading gif

Processes

Path
Cmdline
Malicious
/tmp/xi.arm6.elf
/tmp/xi.arm6.elf

Domains

Name
IP
Malicious
daisy.ubuntu.com
162.213.35.24

Memdumps

Base Address
Regiontype
Protect
Malicious
7f0de8028000
page execute read
malicious
7f0de8031000
page read and write
55accdd10000
page execute and read and write
7f0ef04fa000
page read and write
55accbab8000
page execute read
7f0de803b000
page read and write
7f0eeffa8000
page read and write
7f0eef949000
page read and write
55accf567000
page read and write
7f0ef0647000
page read and write
7f0eef9db000
page read and write
55accbd12000
page read and write
7f0eefd3d000
page read and write
7ffeb7065000
page read and write
7f0ee7fff000
page read and write
7f0eef141000
page read and write
7f0ef0623000
page read and write
7f0eeffcb000
page read and write
7f0ef0137000
page read and write
7ffeb70b1000
page execute read
7f0ef0319000
page read and write
55accdd27000
page read and write
7f0ef068c000
page read and write
7f0ee8021000
page read and write
55accbd09000
page read and write
There are 15 hidden memdumps, click here to show them.