Analyzing malwares

Dump a linux process's memory to file

https://serverfault.com/questions/173999/dump-a-linux-processs-memory-to-file

How to capture all network traffic of a single process

If the process is not started yet, you can start it as a new process and monitor it using the following

strace -f -e trace=network -s 10000 <PROCESS WITH ARGUMENTS>;

If the process is already started and you know its PID you can use the following

strace -f -e trace=network -s 10000 -p <PID>;

https://bytefreaks.net/gnulinux/how-to-capture-all-network-traffic-of-a-single-process

Recommended options:

$ strace -o log-x86 -fx ./x86

-o: write to log file
-f: trace forked process
-x: print out as hexadecimal