IOC Report
EwFT3M4fD1.elf

loading gif

Processes

Path
Cmdline
Malicious
/tmp/EwFT3M4fD1.elf
/tmp/EwFT3M4fD1.elf
/tmp/EwFT3M4fD1.elf
-
/tmp/EwFT3M4fD1.elf
-
/tmp/EwFT3M4fD1.elf
-

Domains

Name
IP
Malicious
daisy.ubuntu.com
162.213.35.25

Memdumps

Base Address
Regiontype
Protect
Malicious
8059000
page execute read
malicious
8059000
page execute read
malicious
8059000
page execute read
malicious
ffd9a000
page read and write
ffd9a000
page read and write
805a000
page read and write
805a000
page read and write
805a000
page read and write
f7f09000
page execute read
9d46000
page read and write
f7f09000
page execute read
f7f09000
page execute read
9d46000
page read and write
9d46000
page read and write
ffd9a000
page read and write
There are 5 hidden memdumps, click here to show them.