IOC Report
ppc.elf

loading gif

Processes

Path
Cmdline
Malicious
/usr/bin/dash
-
/usr/bin/rm
rm -f /tmp/tmp.DM9Q5Mohm1 /tmp/tmp.VC2F28MSxW /tmp/tmp.mkdFGKy59o
/usr/bin/dash
-
/usr/bin/cat
cat /tmp/tmp.DM9Q5Mohm1
/usr/bin/dash
-
/usr/bin/head
head -n 10
/usr/bin/dash
-
/usr/bin/tr
tr -d \\000-\\011\\013\\014\\016-\\037
/usr/bin/dash
-
/usr/bin/cut
cut -c -80
/usr/bin/dash
-
/usr/bin/cat
cat /tmp/tmp.DM9Q5Mohm1
/usr/bin/dash
-
/usr/bin/head
head -n 10
/usr/bin/dash
-
/usr/bin/tr
tr -d \\000-\\011\\013\\014\\016-\\037
/usr/bin/dash
-
/usr/bin/cut
cut -c -80
/usr/bin/dash
-
/usr/bin/rm
rm -f /tmp/tmp.DM9Q5Mohm1 /tmp/tmp.VC2F28MSxW /tmp/tmp.mkdFGKy59o
/tmp/ppc.elf
/tmp/ppc.elf
/tmp/ppc.elf
-
/tmp/ppc.elf
-
/tmp/ppc.elf
-
/tmp/ppc.elf
-
/tmp/ppc.elf
-
/tmp/ppc.elf
-
/tmp/ppc.elf
-
/tmp/ppc.elf
-
/tmp/ppc.elf
-
/tmp/ppc.elf
-
/tmp/ppc.elf
-
There are 22 hidden processes, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
7f4304000000
page read and write
55ff9d096000
page read and write
55ff9d096000
page read and write
7f4304000000
page read and write
55ffa09de000
page read and write
7f4309d6c000
page read and write
7f4214038000
page read and write
7f43099aa000
page read and write
7f430a205000
page read and write
7f430a20d000
page read and write
7f430a20d000
page read and write
55ffa09de000
page read and write
7f4309d91000
page read and write
7f4304021000
page read and write
7f4309d6c000
page read and write
55ff9f0b2000
page read and write
7f4309d6c000
page read and write
7f4309d91000
page read and write
7f4214027000
page read and write
55ffa09de000
page read and write
55ff9f09c000
page execute and read and write
7f430a20d000
page read and write
7fffde9cd000
page execute read
55ff9d096000
page read and write
7f430970d000
page read and write
7f430a0dc000
page read and write
55ff9ce13000
page execute read
55ff9f0b2000
page read and write
55ff9d096000
page read and write
55ffa09de000
page read and write
7fffde8b6000
page read and write
7f4304000000
page read and write
55ff9ce13000
page execute read
55ff9f0b2000
page read and write
7f430a252000
page read and write
55ff9f09c000
page execute and read and write
7f430a205000
page read and write
7f430a20d000
page read and write
55ff9ce13000
page execute read
7f4304000000
page read and write
55ff9f09c000
page execute and read and write
7f4304000000
page read and write
55ff9d09e000
page read and write
7f430a0dc000
page read and write
7f4304021000
page read and write
7f4214020000
page read and write
7f4214027000
page read and write
7f4309d91000
page read and write
7f4214027000
page read and write
7f4309d6c000
page read and write
55ff9f09c000
page execute and read and write
7f4308f0a000
page read and write
7f430a0dc000
page read and write
7f4308f0a000
page read and write
7f430971b000
page read and write
7fffde8b6000
page read and write
7f4304021000
page read and write
55ff9f09c000
page execute and read and write
7fffde8b6000
page read and write
7f4309d6c000
page read and write
55ff9d096000
page read and write
7fffde9cd000
page execute read
7f430971b000
page read and write
7f430a252000
page read and write
7f4214020000
page read and write
55ff9f0b2000
page read and write
7f4214010000
page execute read
7f430971b000
page read and write
7f4309d91000
page read and write
7fffde8b6000
page read and write
55ff9f09c000
page execute and read and write
7f430a252000
page read and write
55ff9d09e000
page read and write
7f4214027000
page read and write
55ffa09de000
page read and write
7f430a205000
page read and write
7f4304021000
page read and write
55ff9f0b2000
page read and write
7f430a0dc000
page read and write
7f4309d91000
page read and write
7f43099aa000
page read and write
55ff9d09e000
page read and write
55ff9d096000
page read and write
7fffde9cd000
page execute read
55ff9d09e000
page read and write
7f4309d91000
page read and write
7f4214020000
page read and write
7f4308f0a000
page read and write
7f4304021000
page read and write
7fffde9cd000
page execute read
7f4304021000
page read and write
55ff9f09c000
page execute and read and write
7f430971b000
page read and write
7f430a20d000
page read and write
7f430a0dc000
page read and write
7f43099aa000
page read and write
7f4304021000
page read and write
7f430a20d000
page read and write
7f430a0dc000
page read and write
7f4214010000
page execute read
55ff9d09e000
page read and write
7f430a252000
page read and write
7f4214020000
page read and write
7f430a205000
page read and write
7f430971b000
page read and write
7f430a205000
page read and write
7f4304000000
page read and write
7f4309d91000
page read and write
7f430971b000
page read and write
7f430a205000
page read and write
7f430a0dc000
page read and write
55ff9d09e000
page read and write
7f4214010000
page execute read
7f430970d000
page read and write
7f4309d91000
page read and write
7f430a205000
page read and write
55ff9ce13000
page execute read
7fffde9cd000
page execute read
7f4214020000
page read and write
55ff9d09e000
page read and write
55ffa09de000
page read and write
7f4304000000
page read and write
7fffde9cd000
page execute read
55ff9d09e000
page read and write
7f4309d6c000
page read and write
7f4304021000
page read and write
7f430970d000
page read and write
7f430970d000
page read and write
7f43099aa000
page read and write
7f4308f0a000
page read and write
7f430a252000
page read and write
7f430970d000
page read and write
7f4214027000
page read and write
55ff9ce13000
page execute read
7f43099aa000
page read and write
7f4308f0a000
page read and write
7f4214020000
page read and write
55ff9d096000
page read and write
55ff9f0b2000
page read and write
7f4214027000
page read and write
7f4214038000
page read and write
7f43099aa000
page read and write
7fffde9cd000
page execute read
55ff9f0b2000
page read and write
7f430a20d000
page read and write
7f43099aa000
page read and write
7f4214010000
page execute read
55ff9ce13000
page execute read
55ff9d096000
page read and write
7f430a205000
page read and write
7f4214010000
page execute read
7f430a20d000
page read and write
7f4214020000
page read and write
7f430970d000
page read and write
55ff9ce13000
page execute read
7f4214038000
page read and write
55ff9f09c000
page execute and read and write
7f430971b000
page read and write
7f430970d000
page read and write
7f430a205000
page read and write
7f430970d000
page read and write
7f4214010000
page execute read
7f430a252000
page read and write
7fffde8b6000
page read and write
7f430a252000
page read and write
7f430a252000
page read and write
55ff9d096000
page read and write
7f4309d6c000
page read and write
7f4308f0a000
page read and write
7f430a0dc000
page read and write
55ff9f0b2000
page read and write
7fffde9cd000
page execute read
7f4214027000
page read and write
55ff9ce13000
page execute read
7fffde8b6000
page read and write
7fffde8b6000
page read and write
7fffde9cd000
page execute read
7f4214020000
page read and write
7f430970d000
page read and write
7f4304021000
page read and write
7f4309d6c000
page read and write
7f430a20d000
page read and write
7f4308f0a000
page read and write
7fffde8b6000
page read and write
7f430a0dc000
page read and write
7f4214010000
page execute read
7f430971b000
page read and write
55ff9f0b2000
page read and write
7fffde8b6000
page read and write
55ffa09de000
page read and write
7f4214027000
page read and write
7f4214020000
page read and write
7f4214010000
page execute read
7f4304000000
page read and write
7f430a252000
page read and write
7f4214010000
page execute read
55ff9ce13000
page execute read
7f4308f0a000
page read and write
7f43099aa000
page read and write
7f430971b000
page read and write
7f4309d6c000
page read and write
7f43099aa000
page read and write
55ffa09de000
page read and write
7f4309d91000
page read and write
55ffa09de000
page read and write
7f4304000000
page read and write
55ff9d09e000
page read and write
55ff9f09c000
page execute and read and write
7f4308f0a000
page read and write
7f4214027000
page read and write
There are 200 hidden memdumps, click here to show them.