Edit tour

Linux Analysis Report
PcGHvq1qRT.elf

Overview

General Information

Sample Name:	PcGHvq1qRT.elf
Original Sample Name:	f27e9d3ae13e2b308d245a5888ff1dc5.elf
Analysis ID:	1302784
MD5:	f27e9d3ae13e2b308d245a5888ff1dc5
SHA1:	4e1a44f67e07f3ca7c0bed13d23c76a4fdcd3191
SHA256:	99c95589c84ae7b4173faeeefa404e31556c84ab52b5b1d27950a8edcfe72d47
Tags:	32armelfmirai
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Found strings indicative of a multi-platform dropper

Sample has stripped symbol table

Uses the "uname" system call to query kernel version information (possible evasion)

Detected TCP or UDP traffic on non-standard ports

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Classification

Analysis Advice

Static ELF header machine description suggests that the sample might not execute correctly on this machine.

Static ELF header machine description suggests that the sample might only run correctly on MIPS or ARM architectures.

General Information

Joe Sandbox Version:	38.0.0 Beryl
Analysis ID:	1302784
Start date and time:	2023-09-04 11:50:05 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 31s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample file name:	PcGHvq1qRT.elf
Original Sample Name:	f27e9d3ae13e2b308d245a5888ff1dc5.elf
Detection:	MAL
Classification:	mal60.spre.linELF@0/0@0/0

Warnings

VT rate limit hit for: PcGHvq1qRT.elf

Runtime Messages

Command:	/tmp/PcGHvq1qRT.elf
PID:	5492
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	your device just got infected to a bootnoot
Standard Error:

Process Tree

system is lnxubuntu20

PcGHvq1qRT.elf (PID: 5492, Parent: 5399, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/PcGHvq1qRT.elf

PcGHvq1qRT.elf New Fork (PID: 5494, Parent: 5492)

PcGHvq1qRT.elf New Fork (PID: 5496, Parent: 5492)

PcGHvq1qRT.elf New Fork (PID: 5498, Parent: 5496)

cleanup

Yara Signatures

⊘No yara matches

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: PcGHvq1qRT.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: PcGHvq1qRT.elf

ReversingLabs: Detection: 55%

Spreading

Found strings indicative of a multi-platform dropper

Source: PcGHvq1qRT.elf

String: /system/root//tmp//dev//bin//etc//boot//usr//mnt//var/lib/libc-/proc/self/exe/proc/proc//maps/exe/cmdlinewgettftprebootcurl76-:6-275-15

Source: global traffic

TCP traffic: 192.168.2.14:55824 -> 45.95.146.26:55590

Source: /tmp/PcGHvq1qRT.elf (PID: 5492)

Socket: 127.0.0.1::55592

Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 23.235.109.221
Source: unknown	TCP traffic detected without corresponding DNS query: 45.95.146.26
Source: unknown	TCP traffic detected without corresponding DNS query: 45.95.146.26
Source: unknown	TCP traffic detected without corresponding DNS query: 14.23.135.254
Source: unknown	TCP traffic detected without corresponding DNS query: 182.185.78.254
Source: unknown	TCP traffic detected without corresponding DNS query: 91.236.202.254
Source: unknown	TCP traffic detected without corresponding DNS query: 98.142.134.15
Source: unknown	TCP traffic detected without corresponding DNS query: 138.104.53.242
Source: unknown	TCP traffic detected without corresponding DNS query: 85.145.17.208
Source: unknown	TCP traffic detected without corresponding DNS query: 245.142.249.159
Source: unknown	TCP traffic detected without corresponding DNS query: 129.105.77.236
Source: unknown	TCP traffic detected without corresponding DNS query: 80.227.67.203
Source: unknown	TCP traffic detected without corresponding DNS query: 61.154.59.141
Source: unknown	TCP traffic detected without corresponding DNS query: 155.217.176.183
Source: unknown	TCP traffic detected without corresponding DNS query: 99.192.194.117
Source: unknown	TCP traffic detected without corresponding DNS query: 56.156.226.48
Source: unknown	TCP traffic detected without corresponding DNS query: 26.61.155.58
Source: unknown	TCP traffic detected without corresponding DNS query: 20.15.25.142
Source: unknown	TCP traffic detected without corresponding DNS query: 102.242.183.209
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.169
Source: unknown	TCP traffic detected without corresponding DNS query: 4.29.253.182
Source: unknown	TCP traffic detected without corresponding DNS query: 66.19.230.236
Source: unknown	TCP traffic detected without corresponding DNS query: 209.84.200.47
Source: unknown	TCP traffic detected without corresponding DNS query: 242.203.12.22
Source: unknown	TCP traffic detected without corresponding DNS query: 218.211.112.17
Source: unknown	TCP traffic detected without corresponding DNS query: 63.198.160.190
Source: unknown	TCP traffic detected without corresponding DNS query: 93.90.16.214
Source: unknown	TCP traffic detected without corresponding DNS query: 78.128.118.142
Source: unknown	TCP traffic detected without corresponding DNS query: 23.70.164.254
Source: unknown	TCP traffic detected without corresponding DNS query: 247.1.234.25
Source: unknown	TCP traffic detected without corresponding DNS query: 63.134.120.236
Source: unknown	TCP traffic detected without corresponding DNS query: 248.222.162.176
Source: unknown	TCP traffic detected without corresponding DNS query: 40.41.142.145
Source: unknown	TCP traffic detected without corresponding DNS query: 209.180.18.186
Source: unknown	TCP traffic detected without corresponding DNS query: 150.2.223.37
Source: unknown	TCP traffic detected without corresponding DNS query: 22.40.83.25
Source: unknown	TCP traffic detected without corresponding DNS query: 206.52.7.55
Source: unknown	TCP traffic detected without corresponding DNS query: 165.254.30.196
Source: unknown	TCP traffic detected without corresponding DNS query: 55.171.175.89
Source: unknown	TCP traffic detected without corresponding DNS query: 111.172.203.69
Source: unknown	TCP traffic detected without corresponding DNS query: 69.55.96.183
Source: unknown	TCP traffic detected without corresponding DNS query: 94.46.217.198
Source: unknown	TCP traffic detected without corresponding DNS query: 221.33.2.117
Source: unknown	TCP traffic detected without corresponding DNS query: 63.153.71.62
Source: unknown	TCP traffic detected without corresponding DNS query: 106.163.130.18
Source: unknown	TCP traffic detected without corresponding DNS query: 107.251.186.48
Source: unknown	TCP traffic detected without corresponding DNS query: 58.106.172.207
Source: unknown	TCP traffic detected without corresponding DNS query: 79.151.13.170
Source: unknown	TCP traffic detected without corresponding DNS query: 79.21.251.94
Source: unknown	TCP traffic detected without corresponding DNS query: 218.201.247.143

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/PcGHvq1qRT.elf (PID: 5496)	SIGKILL sent: pid: 5494, result: successful	Jump to behavior
Source: /tmp/PcGHvq1qRT.elf (PID: 5496)	SIGKILL sent: pid: 5498, result: successful	Jump to behavior
Source: /tmp/PcGHvq1qRT.elf (PID: 5496)	SIGKILL sent: pid: -5496, result: unknown	Jump to behavior

Source: classification engine

Classification label: mal60.spre.linELF@0/0@0/0

Source: /tmp/PcGHvq1qRT.elf (PID: 5492)

Queries kernel information via 'uname':

Jump to behavior

Source: PcGHvq1qRT.elf, 5492.1.0000558d2ddec000.0000558d2df3d000.rw-.sdmp, PcGHvq1qRT.elf, 5494.1.0000558d2ddec000.0000558d2df1a000.rw-.sdmp, PcGHvq1qRT.elf, 5496.1.0000558d2ddec000.0000558d2df1a000.rw-.sdmp, PcGHvq1qRT.elf, 5498.1.0000558d2ddec000.0000558d2df1a000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: PcGHvq1qRT.elf, 5492.1.00007ffe75e5e000.00007ffe75e7f000.rw-.sdmp, PcGHvq1qRT.elf, 5494.1.00007ffe75e5e000.00007ffe75e7f000.rw-.sdmp, PcGHvq1qRT.elf, 5496.1.00007ffe75e5e000.00007ffe75e7f000.rw-.sdmp, PcGHvq1qRT.elf, 5498.1.00007ffe75e5e000.00007ffe75e7f000.rw-.sdmp	Binary or memory string: +x86_64/usr/bin/qemu-arm/tmp/PcGHvq1qRT.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/PcGHvq1qRT.elf
Source: PcGHvq1qRT.elf, 5492.1.0000558d2ddec000.0000558d2df3d000.rw-.sdmp, PcGHvq1qRT.elf, 5494.1.0000558d2ddec000.0000558d2df1a000.rw-.sdmp, PcGHvq1qRT.elf, 5496.1.0000558d2ddec000.0000558d2df1a000.rw-.sdmp, PcGHvq1qRT.elf, 5498.1.0000558d2ddec000.0000558d2df1a000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: PcGHvq1qRT.elf, 5492.1.00007ffe75e5e000.00007ffe75e7f000.rw-.sdmp, PcGHvq1qRT.elf, 5494.1.00007ffe75e5e000.00007ffe75e7f000.rw-.sdmp, PcGHvq1qRT.elf, 5496.1.00007ffe75e5e000.00007ffe75e7f000.rw-.sdmp, PcGHvq1qRT.elf, 5498.1.00007ffe75e5e000.00007ffe75e7f000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	1 Scripting	Path Interception	Path Interception	1 Scripting	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Non-Standard Port	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
PcGHvq1qRT.elf	55%	ReversingLabs	Linux.Trojan.Mirai
PcGHvq1qRT.elf	100%	Avira	EXP/ELF.Agent.Gen.J

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
16.33.190.67	unknown	United States	unknown	unknown	false
255.158.6.163	unknown	Reserved	unknown	unknown	false
170.192.162.102	unknown	United States	11685	HNBCOL-ASUS	false
153.102.222.132	unknown	United States	27064	DNIC-ASBLK-27032-27159US	false
18.55.201.148	unknown	United States	3	MIT-GATEWAYSUS	false
254.101.52.189	unknown	Reserved	unknown	unknown	false
197.186.68.197	unknown	Tanzania United Republic of	37133	airtel-tz-asTZ	false
185.28.104.215	unknown	Moldova Republic of	8926	MOLDTELECOM-ASMoldtelecomAutonomousSystemMD	false
5.174.35.101	unknown	Poland	8374	PLUSNETPlusnetworkoperatorinPolandPL	false
87.230.238.35	unknown	Saudi Arabia	42428	SPSNETAutonomousNumberforMultihomedISPEnvironmentSA	false
197.34.122.10	unknown	Egypt	8452	TE-ASTE-ASEG	false
26.61.155.58	unknown	United States	7922	COMCAST-7922US	false
4.29.253.182	unknown	United States	3356	LEVEL3US	false
76.221.93.220	unknown	United States	7018	ATT-INTERNET4US	false
128.232.175.151	unknown	United Kingdom	786	JANETJiscServicesLimitedGB	false
9.66.201.8	unknown	United States	3356	LEVEL3US	false
215.24.245.92	unknown	United States	721	DNIC-ASBLK-00721-00726US	false
63.153.71.62	unknown	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
92.133.143.160	unknown	France	3215	FranceTelecom-OrangeFR	false
118.232.204.58	unknown	Taiwan; Republic of China (ROC)	38841	KBRO-AS-TWkbroCOLtdTW	false
83.33.5.176	unknown	Spain	3352	TELEFONICA_DE_ESPANAES	false
99.192.194.117	unknown	United States	27589	MOJOHOSTUS	false
107.251.186.48	unknown	United States	20057	ATT-MOBILITY-LLC-AS20057US	false
69.229.152.90	unknown	United States	7018	ATT-INTERNET4US	false
59.60.175.19	unknown	China	4809	CHINATELECOM-CORE-WAN-CN2ChinaTelecomNextGenerationCarr	false
180.67.218.142	unknown	Korea Republic of	9318	SKB-ASSKBroadbandCoLtdKR	false
200.205.132.51	unknown	Brazil	10429	TELEFONICABRASILSABR	false
252.118.2.231	unknown	Reserved	unknown	unknown	false
39.218.20.199	unknown	Indonesia	23693	TELKOMSEL-ASN-IDPTTelekomunikasiSelularID	false
36.163.24.182	unknown	China	9808	CMNET-GDGuangdongMobileCommunicationCoLtdCN	false
58.135.246.19	unknown	China	4847	CNIX-APChinaNetworksInter-ExchangeCN	false
15.146.20.76	unknown	United States	71	HP-INTERNET-ASUS	false
254.90.236.41	unknown	Reserved	unknown	unknown	false
100.79.95.3	unknown	Reserved	701	UUNETUS	false
155.109.31.152	unknown	United States	10273	FPLUS	false
106.26.182.87	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
101.253.90.233	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
141.229.108.158	unknown	unknown	12701	BARCAPLondonGB	false
33.252.10.190	unknown	United States	2686	ATGS-MMD-ASUS	false
21.74.199.72	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
88.191.83.95	unknown	France	12322	PROXADFR	false
40.126.11.121	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
24.129.70.110	unknown	United States	7922	COMCAST-7922US	false
48.138.155.93	unknown	United States	2686	ATGS-MMD-ASUS	false
59.91.227.110	unknown	India	9829	BSNL-NIBNationalInternetBackboneIN	false
156.26.43.85	unknown	United States	22245	WICHITA-STATE-UUS	false
76.196.252.167	unknown	United States	7018	ATT-INTERNET4US	false
87.37.220.235	unknown	Ireland	1213	HEANETIE	false
179.231.93.105	unknown	Brazil	26599	TELEFONICABRASILSABR	false
48.104.202.63	unknown	United States	2686	ATGS-MMD-ASUS	false
195.50.185.66	unknown	Germany	3209	VODANETInternationalIP-BackboneofVodafoneDE	false
125.139.190.45	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
221.33.2.117	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
54.144.211.57	unknown	United States	14618	AMAZON-AESUS	false
84.26.47.138	unknown	Netherlands	33915	TNF-ASNL	false
156.153.219.98	unknown	United States	71	HP-INTERNET-ASUS	false
120.12.109.156	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
17.146.57.40	unknown	United States	714	APPLE-ENGINEERINGUS	false
3.242.154.105	unknown	United States	14618	AMAZON-AESUS	false
158.116.132.51	unknown	United States	63284	FLEXTRONICS-CCAUS	false
188.36.114.152	unknown	Hungary	5483	MAGYAR-TELEKOM-MAIN-ASMagyarTelekomNyrtHU	false
155.137.187.125	unknown	Denmark	51964	ORANGE-BUSINESS-SERVICES-IPSN-ASNFR	false
102.242.183.209	unknown	Tunisia	36926	CKL1-ASNKE	false
165.26.147.40	unknown	United States	14381	CATERPILLAR-INCUS	false
107.211.129.174	unknown	United States	7018	ATT-INTERNET4US	false
136.69.226.141	unknown	United States	60311	ONEFMCH	false
83.191.24.227	unknown	Sweden	39651	COMHEM-SWEDENSE	false
14.84.52.248	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
71.18.56.190	unknown	United States	7029	WINDSTREAMUS	false
244.237.147.133	unknown	Reserved	unknown	unknown	false
12.178.41.207	unknown	United States	7018	ATT-INTERNET4US	false
63.168.178.190	unknown	United States	1239	SPRINTLINKUS	false
3.180.254.82	unknown	United States	16509	AMAZON-02US	false
51.221.134.18	unknown	United States	2686	ATGS-MMD-ASUS	false
186.142.91.37	unknown	Argentina	11315	TelefonicaMovilesArgentinaSAMovistarArgentinaAR	false
94.46.217.198	unknown	Netherlands	15805	SKYNET-CY-ASCY	false
215.27.236.124	unknown	United States	721	DNIC-ASBLK-00721-00726US	false
46.125.83.26	unknown	Austria	8412	TMARennweg97-99AT	false
157.232.42.214	unknown	United States	4704	SANNETRakutenMobileIncJP	false
86.227.206.32	unknown	France	3215	FranceTelecom-OrangeFR	false
90.66.132.214	unknown	France	3215	FranceTelecom-OrangeFR	false
102.170.136.182	unknown	Tunisia	37693	TUNISIANATN	false
164.237.143.102	unknown	United States	27047	DNIC-ASBLK-27032-27159US	false
31.85.135.179	unknown	United Kingdom	12576	EELtdGB	false
140.240.164.206	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
84.222.117.87	unknown	Italy	8612	TISCALI-IT	false
141.88.51.60	unknown	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
84.157.36.148	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
192.14.233.131	unknown	United States	29861	SYNTAXCA	false
205.195.104.162	unknown	Canada	3356	LEVEL3US	false
213.129.4.13	unknown	Denmark	702	UUNETUS	false
172.69.33.224	unknown	United States	13335	CLOUDFLARENETUS	false
57.144.117.26	unknown	Belgium	2686	ATGS-MMD-ASUS	false
130.124.63.242	unknown	United States	17007	OATK-AS1US	false
4.244.219.52	unknown	United States	3356	LEVEL3US	false
186.23.34.243	unknown	Argentina	27747	TelecentroSAAR	false
90.241.109.96	unknown	United Kingdom	5378	VodafoneGB	false
215.154.70.130	unknown	United States	721	DNIC-ASBLK-00721-00726US	false
152.242.63.38	unknown	Brazil	26599	TELEFONICABRASILSABR	false
189.53.173.74	unknown	Brazil	4230	CLAROSABR	false

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
HNBCOL-ASUS	lg532pM3F3.elf	Get hash	malicious	Mirai	Browse	170.204.91.218
	fcFty3PO5m.elf	Get hash	malicious	Mirai	Browse	170.174.174.83
	z5vAv95CrB.elf	Get hash	malicious	Mirai	Browse	170.174.174.67
	sora.arm.elf	Get hash	malicious	Mirai	Browse	170.197.121.172
	nFmbhgYErw.elf	Get hash	malicious	Mirai	Browse	170.204.91.225
	aZQ2muYOx8.elf	Get hash	malicious	Mirai	Browse	170.242.104.154
	j6BAo3KkBY.elf	Get hash	malicious	Mirai	Browse	170.241.202.214
	7LcDPmw3gy.elf	Get hash	malicious	Mirai	Browse	170.180.28.34
	z3hir.x86.elf	Get hash	malicious	Mirai	Browse	170.236.90.150
	3yNyYEMLhg.elf	Get hash	malicious	Mirai	Browse	170.237.118.201
	sora.arm.elf	Get hash	malicious	Mirai	Browse	170.136.24.102
	6kSGLAbblu.elf	Get hash	malicious	Mirai	Browse	170.241.250.183
	sora.arm.elf	Get hash	malicious	Mirai	Browse	170.204.8.75
	la.bot.arm7.elf	Get hash	malicious	Unknown	Browse	170.168.240.144
	xSoP4QsJLl.elf	Get hash	malicious	Mirai	Browse	170.174.163.188
	4UodShThL8.elf	Get hash	malicious	Mirai	Browse	170.207.75.235
	yUsKiAR3si.elf	Get hash	malicious	Mirai	Browse	170.181.187.73
	RSnCYRPJHk.elf	Get hash	malicious	Mirai	Browse	170.181.187.41
	OnHACEHRbH.elf	Get hash	malicious	Mirai	Browse	170.227.246.64
	eLrX7pm9rz.elf	Get hash	malicious	Mirai	Browse	170.181.187.24

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, stripped
Entropy (8bit):	5.912631917368671
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	PcGHvq1qRT.elf
File size:	94'792 bytes
MD5:	f27e9d3ae13e2b308d245a5888ff1dc5
SHA1:	4e1a44f67e07f3ca7c0bed13d23c76a4fdcd3191
SHA256:	99c95589c84ae7b4173faeeefa404e31556c84ab52b5b1d27950a8edcfe72d47
SHA512:	b4d609ad1f8f69af9383a098f7d9b4b9a80d3d3b6a0f16f8bafef619a35aacb354e32ab3d7bfb74e0056192518722429e7e3ae46cce65edede909a727058b447
SSDEEP:	1536:x0nS9RAJVk5nFU1b5aU6KkQ3Moh0AdTqs6b4ID+lNyE9i26QnbIujyX:bAJVkZFS4U6Sd0AdTqs6boOQnjuX
TLSH:	D593B64DF954AB29C7E232FEFB4D028E332B1B98B3EAB015DE315B4533C8B965525121
File Content Preview:	.ELF..............(.........4...xo......4. ...(........p.a...........................................b...b...............b...b...b.......3...............b...b...b..................Q.td..................................-...L..................G.F.G.F.G.F.G.

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x81d0
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	5
Section Header Offset:	94072
Section Header Size:	40
Number of Section Headers:	18
Header String Table Index:	17

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0
.init	PROGBITS	0x80d4	0xd4	0x10	0x0	0x6	AX	0	4
.text	PROGBITS	0x80f0	0xf0	0x14f08	0x0	0x6	AX	0	16
.fini	PROGBITS	0x1cff8	0x14ff8	0x10	0x0	0x6	AX	0	4
.rodata	PROGBITS	0x1d008	0x15008	0x1184	0x0	0x2	A	0	4
.ARM.extab	PROGBITS	0x1e18c	0x1618c	0x18	0x0	0x2	A	0	4
.ARM.exidx	ARM_EXIDX	0x1e1a4	0x161a4	0x118	0x0	0x82	AL	2	4
.eh_frame	PROGBITS	0x262bc	0x162bc	0x4	0x0	0x3	WA	0	4
.tbss	NOBITS	0x262c0	0x162c0	0x8	0x0	0x403	WAT	0	4
.init_array	INIT_ARRAY	0x262c0	0x162c0	0x4	0x0	0x3	WA	0	4
.fini_array	FINI_ARRAY	0x262c4	0x162c4	0x4	0x0	0x3	WA	0	4
.jcr	PROGBITS	0x262c8	0x162c8	0x4	0x0	0x3	WA	0	4
.got	PROGBITS	0x262cc	0x162cc	0xa8	0x4	0x3	WA	0	4
.data	PROGBITS	0x26374	0x16374	0x210	0x0	0x3	WA	0	4
.bss	NOBITS	0x26584	0x16584	0x30d4	0x0	0x3	WA	0	4
.comment	PROGBITS	0x0	0x16584	0x94c	0x0	0x0		0	1
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x16ed0	0x16	0x0	0x0		0	1
.shstrtab	STRTAB	0x0	0x16ee6	0x91	0x0	0x0		0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
EXIDX	0x161a4	0x1e1a4	0x1e1a4	0x118	0x118	4.4741	0x4	R	0x4	.ARM.exidx
LOAD	0x0	0x8000	0x8000	0x162bc	0x162bc	5.8784	0x5	R E	0x8000	.init .text .fini .rodata .ARM.extab .ARM.exidx
LOAD	0x162bc	0x262bc	0x262bc	0x2c8	0x339c	3.9149	0x6	RW	0x8000	.eh_frame .tbss .init_array .fini_array .jcr .got .data .bss
TLS	0x162c0	0x262c0	0x262c0	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 4, 2023 11:50:49.226532936 CEST	23	59378	23.235.109.221	192.168.2.14
Sep 4, 2023 11:50:49.226809978 CEST	59378	23	192.168.2.14	23.235.109.221
Sep 4, 2023 11:50:50.297919989 CEST	55824	55590	192.168.2.14	45.95.146.26
Sep 4, 2023 11:50:50.323865891 CEST	55590	55824	45.95.146.26	192.168.2.14
Sep 4, 2023 11:50:50.324347973 CEST	55824	55590	192.168.2.14	45.95.146.26
Sep 4, 2023 11:50:50.329798937 CEST	7126	23	192.168.2.14	14.23.135.254
Sep 4, 2023 11:50:50.329849958 CEST	7126	23	192.168.2.14	182.185.78.254
Sep 4, 2023 11:50:50.329859972 CEST	7126	23	192.168.2.14	91.236.202.254
Sep 4, 2023 11:50:50.329868078 CEST	7126	23	192.168.2.14	98.142.134.15
Sep 4, 2023 11:50:50.329900980 CEST	7126	23	192.168.2.14	138.104.53.242
Sep 4, 2023 11:50:50.329925060 CEST	7126	23	192.168.2.14	85.145.17.208
Sep 4, 2023 11:50:50.329942942 CEST	7126	23	192.168.2.14	245.142.249.159
Sep 4, 2023 11:50:50.329942942 CEST	7126	23	192.168.2.14	129.105.77.236
Sep 4, 2023 11:50:50.329945087 CEST	7126	23	192.168.2.14	80.227.67.203
Sep 4, 2023 11:50:50.329960108 CEST	7126	23	192.168.2.14	61.154.59.141
Sep 4, 2023 11:50:50.329982042 CEST	7126	23	192.168.2.14	155.217.176.183
Sep 4, 2023 11:50:50.329987049 CEST	7126	23	192.168.2.14	99.192.194.117
Sep 4, 2023 11:50:50.329988956 CEST	7126	23	192.168.2.14	56.156.226.48
Sep 4, 2023 11:50:50.329988956 CEST	7126	23	192.168.2.14	26.61.155.58
Sep 4, 2023 11:50:50.329988956 CEST	7126	23	192.168.2.14	20.15.25.142
Sep 4, 2023 11:50:50.330023050 CEST	7126	23	192.168.2.14	102.242.183.209
Sep 4, 2023 11:50:50.330025911 CEST	7126	23	192.168.2.14	69.192.108.169
Sep 4, 2023 11:50:50.330029964 CEST	7126	23	192.168.2.14	4.29.253.182
Sep 4, 2023 11:50:50.330029964 CEST	7126	23	192.168.2.14	66.19.230.236
Sep 4, 2023 11:50:50.330060005 CEST	7126	23	192.168.2.14	209.84.200.47
Sep 4, 2023 11:50:50.330064058 CEST	7126	23	192.168.2.14	242.203.12.22
Sep 4, 2023 11:50:50.330068111 CEST	7126	23	192.168.2.14	218.211.112.17
Sep 4, 2023 11:50:50.330086946 CEST	7126	23	192.168.2.14	63.198.160.190
Sep 4, 2023 11:50:50.330096006 CEST	7126	23	192.168.2.14	93.90.16.214
Sep 4, 2023 11:50:50.330108881 CEST	7126	23	192.168.2.14	78.128.118.142
Sep 4, 2023 11:50:50.330113888 CEST	7126	23	192.168.2.14	23.70.164.254
Sep 4, 2023 11:50:50.330113888 CEST	7126	23	192.168.2.14	247.1.234.25
Sep 4, 2023 11:50:50.330125093 CEST	7126	23	192.168.2.14	63.134.120.236
Sep 4, 2023 11:50:50.330125093 CEST	7126	23	192.168.2.14	248.222.162.176
Sep 4, 2023 11:50:50.330127954 CEST	7126	23	192.168.2.14	40.41.142.145
Sep 4, 2023 11:50:50.330127954 CEST	7126	23	192.168.2.14	209.180.18.186
Sep 4, 2023 11:50:50.330141068 CEST	7126	23	192.168.2.14	150.2.223.37
Sep 4, 2023 11:50:50.330147028 CEST	7126	23	192.168.2.14	22.40.83.25
Sep 4, 2023 11:50:50.330157042 CEST	7126	23	192.168.2.14	206.52.7.55
Sep 4, 2023 11:50:50.330163002 CEST	7126	23	192.168.2.14	165.254.30.196
Sep 4, 2023 11:50:50.330164909 CEST	7126	23	192.168.2.14	55.171.175.89
Sep 4, 2023 11:50:50.330173016 CEST	7126	23	192.168.2.14	111.172.203.69
Sep 4, 2023 11:50:50.330190897 CEST	7126	23	192.168.2.14	69.55.96.183
Sep 4, 2023 11:50:50.330193043 CEST	7126	23	192.168.2.14	94.46.217.198
Sep 4, 2023 11:50:50.330194950 CEST	7126	23	192.168.2.14	221.33.2.117
Sep 4, 2023 11:50:50.330212116 CEST	7126	23	192.168.2.14	63.153.71.62
Sep 4, 2023 11:50:50.330225945 CEST	7126	23	192.168.2.14	106.163.130.18
Sep 4, 2023 11:50:50.330235958 CEST	7126	23	192.168.2.14	107.251.186.48
Sep 4, 2023 11:50:50.330244064 CEST	7126	23	192.168.2.14	58.106.172.207
Sep 4, 2023 11:50:50.330246925 CEST	7126	23	192.168.2.14	79.151.13.170
Sep 4, 2023 11:50:50.330260038 CEST	7126	23	192.168.2.14	79.21.251.94
Sep 4, 2023 11:50:50.330275059 CEST	7126	23	192.168.2.14	218.201.247.143
Sep 4, 2023 11:50:50.330286980 CEST	7126	23	192.168.2.14	243.179.78.169
Sep 4, 2023 11:50:50.330300093 CEST	7126	23	192.168.2.14	21.144.255.229
Sep 4, 2023 11:50:50.330315113 CEST	7126	23	192.168.2.14	16.36.217.218
Sep 4, 2023 11:50:50.330328941 CEST	7126	23	192.168.2.14	38.161.247.174
Sep 4, 2023 11:50:50.330337048 CEST	7126	23	192.168.2.14	222.130.153.29
Sep 4, 2023 11:50:50.330348969 CEST	7126	23	192.168.2.14	173.196.90.54
Sep 4, 2023 11:50:50.330358982 CEST	7126	23	192.168.2.14	89.83.18.119
Sep 4, 2023 11:50:50.330358982 CEST	7126	23	192.168.2.14	49.150.223.15
Sep 4, 2023 11:50:50.330372095 CEST	7126	23	192.168.2.14	254.90.236.41
Sep 4, 2023 11:50:50.330382109 CEST	7126	23	192.168.2.14	60.41.26.55
Sep 4, 2023 11:50:50.330393076 CEST	7126	23	192.168.2.14	44.148.168.186
Sep 4, 2023 11:50:50.330411911 CEST	7126	23	192.168.2.14	115.57.172.109
Sep 4, 2023 11:50:50.330411911 CEST	7126	23	192.168.2.14	205.195.104.162
Sep 4, 2023 11:50:50.330424070 CEST	7126	23	192.168.2.14	32.232.192.39
Sep 4, 2023 11:50:50.330440044 CEST	7126	23	192.168.2.14	180.9.195.20
Sep 4, 2023 11:50:50.330455065 CEST	7126	23	192.168.2.14	80.28.11.102
Sep 4, 2023 11:50:50.330456018 CEST	7126	23	192.168.2.14	135.8.166.70
Sep 4, 2023 11:50:50.330456018 CEST	7126	23	192.168.2.14	98.152.86.109
Sep 4, 2023 11:50:50.330473900 CEST	7126	23	192.168.2.14	168.237.210.232
Sep 4, 2023 11:50:50.330481052 CEST	7126	23	192.168.2.14	13.61.20.245
Sep 4, 2023 11:50:50.330495119 CEST	7126	23	192.168.2.14	186.142.91.37
Sep 4, 2023 11:50:50.330503941 CEST	7126	23	192.168.2.14	120.12.109.156
Sep 4, 2023 11:50:50.330508947 CEST	7126	23	192.168.2.14	83.191.24.227
Sep 4, 2023 11:50:50.330534935 CEST	7126	23	192.168.2.14	164.228.43.176
Sep 4, 2023 11:50:50.330543041 CEST	7126	23	192.168.2.14	72.174.224.146
Sep 4, 2023 11:50:50.330553055 CEST	7126	23	192.168.2.14	141.85.153.146
Sep 4, 2023 11:50:50.330590010 CEST	7126	23	192.168.2.14	188.36.114.152
Sep 4, 2023 11:50:50.330590010 CEST	7126	23	192.168.2.14	27.57.35.242
Sep 4, 2023 11:50:50.330598116 CEST	7126	23	192.168.2.14	55.39.192.36
Sep 4, 2023 11:50:50.330598116 CEST	7126	23	192.168.2.14	60.64.24.20
Sep 4, 2023 11:50:50.330612898 CEST	7126	23	192.168.2.14	35.185.161.206
Sep 4, 2023 11:50:50.330627918 CEST	7126	23	192.168.2.14	158.116.132.51
Sep 4, 2023 11:50:50.330637932 CEST	7126	23	192.168.2.14	183.53.64.245
Sep 4, 2023 11:50:50.330658913 CEST	7126	23	192.168.2.14	162.34.65.195
Sep 4, 2023 11:50:50.330666065 CEST	7126	23	192.168.2.14	141.45.138.86
Sep 4, 2023 11:50:50.330672979 CEST	7126	23	192.168.2.14	3.242.154.105
Sep 4, 2023 11:50:50.330688000 CEST	7126	23	192.168.2.14	163.156.115.205
Sep 4, 2023 11:50:50.330914021 CEST	7126	23	192.168.2.14	81.119.67.244
Sep 4, 2023 11:50:50.330996990 CEST	7126	23	192.168.2.14	222.35.124.254
Sep 4, 2023 11:50:50.331018925 CEST	7126	23	192.168.2.14	164.58.120.209
Sep 4, 2023 11:50:50.331022978 CEST	7126	23	192.168.2.14	108.229.12.142
Sep 4, 2023 11:50:50.331047058 CEST	7126	23	192.168.2.14	182.214.255.197
Sep 4, 2023 11:50:50.331065893 CEST	7126	23	192.168.2.14	87.230.238.35
Sep 4, 2023 11:50:50.331065893 CEST	7126	23	192.168.2.14	108.120.57.164
Sep 4, 2023 11:50:50.331073999 CEST	7126	23	192.168.2.14	18.161.182.56
Sep 4, 2023 11:50:50.331073999 CEST	7126	23	192.168.2.14	125.206.27.213
Sep 4, 2023 11:50:50.331113100 CEST	7126	23	192.168.2.14	214.103.244.4
Sep 4, 2023 11:50:50.331114054 CEST	7126	23	192.168.2.14	92.133.143.160
Sep 4, 2023 11:50:50.331114054 CEST	7126	23	192.168.2.14	199.116.127.182
Sep 4, 2023 11:50:50.331119061 CEST	7126	23	192.168.2.14	165.123.112.167
Sep 4, 2023 11:50:50.331140041 CEST	7126	23	192.168.2.14	218.19.124.73
Sep 4, 2023 11:50:50.331149101 CEST	7126	23	192.168.2.14	1.188.220.125
Sep 4, 2023 11:50:50.331151009 CEST	7126	23	192.168.2.14	58.79.47.159
Sep 4, 2023 11:50:50.331151962 CEST	7126	23	192.168.2.14	202.182.72.111
Sep 4, 2023 11:50:50.331154108 CEST	7126	23	192.168.2.14	12.77.93.129
Sep 4, 2023 11:50:50.331155062 CEST	7126	23	192.168.2.14	221.8.7.61
Sep 4, 2023 11:50:50.331155062 CEST	7126	23	192.168.2.14	72.79.51.183
Sep 4, 2023 11:50:50.331156015 CEST	7126	23	192.168.2.14	43.16.197.111
Sep 4, 2023 11:50:50.331177950 CEST	7126	23	192.168.2.14	15.161.237.34
Sep 4, 2023 11:50:50.331224918 CEST	7126	23	192.168.2.14	114.44.110.204
Sep 4, 2023 11:50:50.331226110 CEST	7126	23	192.168.2.14	170.108.34.184
Sep 4, 2023 11:50:50.331227064 CEST	7126	23	192.168.2.14	208.110.133.69
Sep 4, 2023 11:50:50.331228018 CEST	7126	23	192.168.2.14	21.237.29.1
Sep 4, 2023 11:50:50.331228971 CEST	7126	23	192.168.2.14	249.236.162.160
Sep 4, 2023 11:50:50.331228018 CEST	7126	23	192.168.2.14	178.45.211.81
Sep 4, 2023 11:50:50.331228971 CEST	7126	23	192.168.2.14	176.8.121.200
Sep 4, 2023 11:50:50.331243992 CEST	7126	23	192.168.2.14	106.26.182.87
Sep 4, 2023 11:50:50.331243992 CEST	7126	23	192.168.2.14	30.174.243.102
Sep 4, 2023 11:50:50.331243992 CEST	7126	23	192.168.2.14	168.245.18.119
Sep 4, 2023 11:50:50.331245899 CEST	7126	23	192.168.2.14	248.89.175.224
Sep 4, 2023 11:50:50.331245899 CEST	7126	23	192.168.2.14	194.222.201.120
Sep 4, 2023 11:50:50.331252098 CEST	7126	23	192.168.2.14	81.253.69.192
Sep 4, 2023 11:50:50.331252098 CEST	7126	23	192.168.2.14	154.151.206.197
Sep 4, 2023 11:50:50.331253052 CEST	7126	23	192.168.2.14	214.70.149.245
Sep 4, 2023 11:50:50.331262112 CEST	7126	23	192.168.2.14	86.227.206.32
Sep 4, 2023 11:50:50.331264019 CEST	7126	23	192.168.2.14	200.201.227.2
Sep 4, 2023 11:50:50.331271887 CEST	7126	23	192.168.2.14	42.117.236.170
Sep 4, 2023 11:50:50.331276894 CEST	7126	23	192.168.2.14	101.195.82.176
Sep 4, 2023 11:50:50.331283092 CEST	7126	23	192.168.2.14	130.8.13.123
Sep 4, 2023 11:50:50.331289053 CEST	7126	23	192.168.2.14	164.84.73.225
Sep 4, 2023 11:50:50.331289053 CEST	7126	23	192.168.2.14	42.28.231.32
Sep 4, 2023 11:50:50.331300974 CEST	7126	23	192.168.2.14	200.190.28.181
Sep 4, 2023 11:50:50.331317902 CEST	7126	23	192.168.2.14	221.160.211.31
Sep 4, 2023 11:50:50.331317902 CEST	7126	23	192.168.2.14	115.100.219.136
Sep 4, 2023 11:50:50.331327915 CEST	7126	23	192.168.2.14	64.145.123.98
Sep 4, 2023 11:50:50.331338882 CEST	7126	23	192.168.2.14	216.151.56.226
Sep 4, 2023 11:50:50.331356049 CEST	7126	23	192.168.2.14	76.221.93.220
Sep 4, 2023 11:50:50.331495047 CEST	7126	23	192.168.2.14	185.28.104.215
Sep 4, 2023 11:50:50.331495047 CEST	7126	23	192.168.2.14	51.221.134.18
Sep 4, 2023 11:50:50.331532001 CEST	7126	23	192.168.2.14	131.249.104.234
Sep 4, 2023 11:50:50.331532001 CEST	7126	23	192.168.2.14	57.144.117.26
Sep 4, 2023 11:50:50.331532001 CEST	7126	23	192.168.2.14	254.191.101.255
Sep 4, 2023 11:50:50.331535101 CEST	7126	23	192.168.2.14	16.106.9.103
Sep 4, 2023 11:50:50.331535101 CEST	7126	23	192.168.2.14	49.122.132.105
Sep 4, 2023 11:50:50.331537962 CEST	7126	23	192.168.2.14	22.252.26.9
Sep 4, 2023 11:50:50.331537962 CEST	7126	23	192.168.2.14	51.110.42.176
Sep 4, 2023 11:50:50.331537962 CEST	7126	23	192.168.2.14	157.107.85.165
Sep 4, 2023 11:50:50.331538916 CEST	7126	23	192.168.2.14	204.62.222.225
Sep 4, 2023 11:50:50.331540108 CEST	7126	23	192.168.2.14	6.105.123.50
Sep 4, 2023 11:50:50.331537962 CEST	7126	23	192.168.2.14	46.125.83.26
Sep 4, 2023 11:50:50.331540108 CEST	7126	23	192.168.2.14	165.26.147.40
Sep 4, 2023 11:50:50.331540108 CEST	7126	23	192.168.2.14	143.60.56.226
Sep 4, 2023 11:50:50.331540108 CEST	7126	23	192.168.2.14	114.135.148.91
Sep 4, 2023 11:50:50.331540108 CEST	7126	23	192.168.2.14	161.136.44.173
Sep 4, 2023 11:50:50.331568956 CEST	7126	23	192.168.2.14	159.210.169.107
Sep 4, 2023 11:50:50.331568956 CEST	7126	23	192.168.2.14	121.225.4.196
Sep 4, 2023 11:50:50.331568956 CEST	7126	23	192.168.2.14	50.219.194.164
Sep 4, 2023 11:50:50.331568956 CEST	7126	23	192.168.2.14	142.109.32.215
Sep 4, 2023 11:50:50.331568956 CEST	7126	23	192.168.2.14	49.216.123.167
Sep 4, 2023 11:50:50.331577063 CEST	7126	23	192.168.2.14	122.6.179.244
Sep 4, 2023 11:50:50.331577063 CEST	7126	23	192.168.2.14	253.161.110.105
Sep 4, 2023 11:50:50.331577063 CEST	7126	23	192.168.2.14	159.109.150.241
Sep 4, 2023 11:50:50.331583977 CEST	7126	23	192.168.2.14	161.112.203.16
Sep 4, 2023 11:50:50.331583977 CEST	7126	23	192.168.2.14	71.18.56.190
Sep 4, 2023 11:50:50.331583977 CEST	7126	23	192.168.2.14	72.142.253.42
Sep 4, 2023 11:50:50.331583977 CEST	7126	23	192.168.2.14	12.178.41.207
Sep 4, 2023 11:50:50.331583977 CEST	7126	23	192.168.2.14	48.48.149.60
Sep 4, 2023 11:50:50.331583977 CEST	7126	23	192.168.2.14	248.27.99.22
Sep 4, 2023 11:50:50.331583977 CEST	7126	23	192.168.2.14	120.6.162.123
Sep 4, 2023 11:50:50.331587076 CEST	7126	23	192.168.2.14	143.106.175.231
Sep 4, 2023 11:50:50.331583977 CEST	7126	23	192.168.2.14	110.160.243.251
Sep 4, 2023 11:50:50.331587076 CEST	7126	23	192.168.2.14	135.203.157.163
Sep 4, 2023 11:50:50.331583977 CEST	7126	23	192.168.2.14	55.64.171.21
Sep 4, 2023 11:50:50.331587076 CEST	7126	23	192.168.2.14	205.64.84.168
Sep 4, 2023 11:50:50.331583977 CEST	7126	23	192.168.2.14	85.19.75.26
Sep 4, 2023 11:50:50.331587076 CEST	7126	23	192.168.2.14	220.123.79.119
Sep 4, 2023 11:50:50.331605911 CEST	7126	23	192.168.2.14	38.149.12.41
Sep 4, 2023 11:50:50.331605911 CEST	7126	23	192.168.2.14	40.112.208.253
Sep 4, 2023 11:50:50.331605911 CEST	7126	23	192.168.2.14	54.144.211.57
Sep 4, 2023 11:50:50.331605911 CEST	7126	23	192.168.2.14	189.243.248.118
Sep 4, 2023 11:50:50.331610918 CEST	7126	23	192.168.2.14	128.232.175.151
Sep 4, 2023 11:50:50.331618071 CEST	7126	23	192.168.2.14	161.110.224.242
Sep 4, 2023 11:50:50.331623077 CEST	7126	23	192.168.2.14	188.62.162.109
Sep 4, 2023 11:50:50.331623077 CEST	7126	23	192.168.2.14	33.219.158.99
Sep 4, 2023 11:50:50.331623077 CEST	7126	23	192.168.2.14	87.5.91.243
Sep 4, 2023 11:50:50.331624031 CEST	7126	23	192.168.2.14	195.236.31.127
Sep 4, 2023 11:50:50.331624031 CEST	7126	23	192.168.2.14	140.240.164.206
Sep 4, 2023 11:50:50.331640959 CEST	7126	23	192.168.2.14	141.88.51.60
Sep 4, 2023 11:50:50.331640959 CEST	7126	23	192.168.2.14	88.191.83.95
Sep 4, 2023 11:50:50.331662893 CEST	7126	23	192.168.2.14	126.169.128.123
Sep 4, 2023 11:50:50.331674099 CEST	7126	23	192.168.2.14	155.109.31.152
Sep 4, 2023 11:50:50.331685066 CEST	7126	23	192.168.2.14	93.206.43.4
Sep 4, 2023 11:50:50.331685066 CEST	7126	23	192.168.2.14	145.4.59.214
Sep 4, 2023 11:50:50.331691027 CEST	7126	23	192.168.2.14	177.8.112.193
Sep 4, 2023 11:50:50.331695080 CEST	7126	23	192.168.2.14	189.50.134.176
Sep 4, 2023 11:50:50.331707954 CEST	7126	23	192.168.2.14	222.9.1.36
Sep 4, 2023 11:50:50.331707954 CEST	7126	23	192.168.2.14	5.174.35.101
Sep 4, 2023 11:50:50.331707954 CEST	7126	23	192.168.2.14	252.118.2.231
Sep 4, 2023 11:50:50.331723928 CEST	7126	23	192.168.2.14	168.245.31.3
Sep 4, 2023 11:50:50.331727982 CEST	7126	23	192.168.2.14	185.3.55.50
Sep 4, 2023 11:50:50.331744909 CEST	7126	23	192.168.2.14	252.22.237.20
Sep 4, 2023 11:50:50.331753016 CEST	7126	23	192.168.2.14	187.159.140.233
Sep 4, 2023 11:50:50.331885099 CEST	7126	23	192.168.2.14	73.89.171.54
Sep 4, 2023 11:50:50.331885099 CEST	7126	23	192.168.2.14	47.70.82.170
Sep 4, 2023 11:50:50.331885099 CEST	7126	23	192.168.2.14	42.62.100.187
Sep 4, 2023 11:50:50.331885099 CEST	7126	23	192.168.2.14	152.242.63.38
Sep 4, 2023 11:50:50.331908941 CEST	7126	23	192.168.2.14	46.194.5.189
Sep 4, 2023 11:50:50.331909895 CEST	7126	23	192.168.2.14	36.163.24.182
Sep 4, 2023 11:50:50.331911087 CEST	7126	23	192.168.2.14	24.63.158.137
Sep 4, 2023 11:50:50.331911087 CEST	7126	23	192.168.2.14	3.180.254.82
Sep 4, 2023 11:50:50.331911087 CEST	7126	23	192.168.2.14	66.48.241.144
Sep 4, 2023 11:50:50.331911087 CEST	7126	23	192.168.2.14	94.201.90.220
Sep 4, 2023 11:50:50.331917048 CEST	7126	23	192.168.2.14	103.5.231.251
Sep 4, 2023 11:50:50.331917048 CEST	7126	23	192.168.2.14	152.80.74.96
Sep 4, 2023 11:50:50.331917048 CEST	7126	23	192.168.2.14	24.138.97.20
Sep 4, 2023 11:50:50.331917048 CEST	7126	23	192.168.2.14	170.192.162.102
Sep 4, 2023 11:50:50.331917048 CEST	7126	23	192.168.2.14	9.101.130.161
Sep 4, 2023 11:50:50.331935883 CEST	7126	23	192.168.2.14	56.217.40.195
Sep 4, 2023 11:50:50.331937075 CEST	7126	23	192.168.2.14	175.12.70.102
Sep 4, 2023 11:50:50.331938028 CEST	7126	23	192.168.2.14	76.51.23.173
Sep 4, 2023 11:50:50.331938028 CEST	7126	23	192.168.2.14	182.60.136.94
Sep 4, 2023 11:50:50.331938028 CEST	7126	23	192.168.2.14	180.166.242.88
Sep 4, 2023 11:50:50.331938028 CEST	7126	23	192.168.2.14	14.84.52.248
Sep 4, 2023 11:50:50.331938028 CEST	7126	23	192.168.2.14	119.153.251.186
Sep 4, 2023 11:50:50.331938028 CEST	7126	23	192.168.2.14	197.34.122.10
Sep 4, 2023 11:50:50.331938982 CEST	7126	23	192.168.2.14	32.135.246.136
Sep 4, 2023 11:50:50.331938982 CEST	7126	23	192.168.2.14	21.75.122.50
Sep 4, 2023 11:50:50.331938028 CEST	7126	23	192.168.2.14	250.222.167.151
Sep 4, 2023 11:50:50.331938982 CEST	7126	23	192.168.2.14	158.30.200.84
Sep 4, 2023 11:50:50.331938028 CEST	7126	23	192.168.2.14	189.91.144.131
Sep 4, 2023 11:50:50.331938028 CEST	7126	23	192.168.2.14	153.99.199.123
Sep 4, 2023 11:50:50.331955910 CEST	7126	23	192.168.2.14	155.140.5.22
Sep 4, 2023 11:50:50.331955910 CEST	7126	23	192.168.2.14	207.64.210.107
Sep 4, 2023 11:50:50.331955910 CEST	7126	23	192.168.2.14	41.56.161.72
Sep 4, 2023 11:50:50.331955910 CEST	7126	23	192.168.2.14	203.165.130.29
Sep 4, 2023 11:50:50.331959963 CEST	7126	23	192.168.2.14	69.111.145.26
Sep 4, 2023 11:50:50.331971884 CEST	7126	23	192.168.2.14	100.196.192.162
Sep 4, 2023 11:50:50.331971884 CEST	7126	23	192.168.2.14	150.19.180.139
Sep 4, 2023 11:50:50.331974030 CEST	7126	23	192.168.2.14	63.168.178.190
Sep 4, 2023 11:50:50.331974030 CEST	7126	23	192.168.2.14	105.30.150.200
Sep 4, 2023 11:50:50.331974030 CEST	7126	23	192.168.2.14	101.17.14.72
Sep 4, 2023 11:50:50.331980944 CEST	7126	23	192.168.2.14	199.63.201.98
Sep 4, 2023 11:50:50.331990004 CEST	7126	23	192.168.2.14	183.176.65.225
Sep 4, 2023 11:50:50.331990004 CEST	7126	23	192.168.2.14	186.13.213.65
Sep 4, 2023 11:50:50.331990004 CEST	7126	23	192.168.2.14	160.109.98.208
Sep 4, 2023 11:50:50.332005978 CEST	7126	23	192.168.2.14	113.76.176.231
Sep 4, 2023 11:50:50.332010031 CEST	7126	23	192.168.2.14	103.113.145.133
Sep 4, 2023 11:50:50.332012892 CEST	7126	23	192.168.2.14	2.188.236.148
Sep 4, 2023 11:50:50.332020044 CEST	7126	23	192.168.2.14	158.225.0.237
Sep 4, 2023 11:50:50.332020044 CEST	7126	23	192.168.2.14	156.26.43.85
Sep 4, 2023 11:50:50.332020998 CEST	7126	23	192.168.2.14	148.24.102.251
Sep 4, 2023 11:50:50.332020998 CEST	7126	23	192.168.2.14	130.202.247.243
Sep 4, 2023 11:50:50.332020998 CEST	7126	23	192.168.2.14	89.238.82.99
Sep 4, 2023 11:50:50.332025051 CEST	7126	23	192.168.2.14	178.10.99.153
Sep 4, 2023 11:50:50.332026005 CEST	7126	23	192.168.2.14	43.217.95.57
Sep 4, 2023 11:50:50.332065105 CEST	7126	23	192.168.2.14	215.27.236.124
Sep 4, 2023 11:50:50.332065105 CEST	7126	23	192.168.2.14	36.142.107.64
Sep 4, 2023 11:50:50.332065105 CEST	7126	23	192.168.2.14	145.21.200.51
Sep 4, 2023 11:50:50.332072973 CEST	7126	23	192.168.2.14	55.201.121.208
Sep 4, 2023 11:50:50.332082033 CEST	7126	23	192.168.2.14	59.102.221.249
Sep 4, 2023 11:50:50.332103014 CEST	7126	23	192.168.2.14	120.121.220.145
Sep 4, 2023 11:50:50.332108974 CEST	7126	23	192.168.2.14	161.119.69.93
Sep 4, 2023 11:50:50.332118988 CEST	7126	23	192.168.2.14	93.79.130.49
Sep 4, 2023 11:50:50.332122087 CEST	7126	23	192.168.2.14	45.179.71.209
Sep 4, 2023 11:50:50.332133055 CEST	7126	23	192.168.2.14	68.162.72.142
Sep 4, 2023 11:50:50.332194090 CEST	7126	23	192.168.2.14	60.41.44.9
Sep 4, 2023 11:50:50.332195044 CEST	7126	23	192.168.2.14	148.174.132.29
Sep 4, 2023 11:50:50.332195997 CEST	7126	23	192.168.2.14	12.3.93.140
Sep 4, 2023 11:50:50.332199097 CEST	7126	23	192.168.2.14	18.134.45.117
Sep 4, 2023 11:50:50.332256079 CEST	7126	23	192.168.2.14	255.140.128.76
Sep 4, 2023 11:50:50.332272053 CEST	7126	23	192.168.2.14	18.74.24.40
Sep 4, 2023 11:50:50.332272053 CEST	7126	23	192.168.2.14	196.141.7.35
Sep 4, 2023 11:50:50.332274914 CEST	7126	23	192.168.2.14	24.129.70.110
Sep 4, 2023 11:50:50.332274914 CEST	7126	23	192.168.2.14	201.126.8.138
Sep 4, 2023 11:50:50.332276106 CEST	7126	23	192.168.2.14	200.49.139.99
Sep 4, 2023 11:50:50.332274914 CEST	7126	23	192.168.2.14	96.148.192.222
Sep 4, 2023 11:50:50.332292080 CEST	7126	23	192.168.2.14	40.126.11.121
Sep 4, 2023 11:50:50.332298040 CEST	7126	23	192.168.2.14	31.85.135.179
Sep 4, 2023 11:50:50.332298994 CEST	7126	23	192.168.2.14	74.146.177.169
Sep 4, 2023 11:50:50.332299948 CEST	7126	23	192.168.2.14	154.92.249.112
Sep 4, 2023 11:50:50.332302094 CEST	7126	23	192.168.2.14	120.243.14.156
Sep 4, 2023 11:50:50.332302094 CEST	7126	23	192.168.2.14	125.253.205.26
Sep 4, 2023 11:50:50.332304001 CEST	7126	23	192.168.2.14	201.168.146.33
Sep 4, 2023 11:50:50.332304001 CEST	7126	23	192.168.2.14	70.3.211.41
Sep 4, 2023 11:50:50.332304001 CEST	7126	23	192.168.2.14	107.211.129.174
Sep 4, 2023 11:50:50.332304001 CEST	7126	23	192.168.2.14	146.16.115.221
Sep 4, 2023 11:50:50.332304001 CEST	7126	23	192.168.2.14	67.14.236.6
Sep 4, 2023 11:50:50.332304001 CEST	7126	23	192.168.2.14	145.195.231.204
Sep 4, 2023 11:50:50.332304001 CEST	7126	23	192.168.2.14	73.94.165.48
Sep 4, 2023 11:50:50.332304001 CEST	7126	23	192.168.2.14	16.255.227.37
Sep 4, 2023 11:50:50.332307100 CEST	7126	23	192.168.2.14	186.12.103.84
Sep 4, 2023 11:50:50.332312107 CEST	7126	23	192.168.2.14	192.14.233.131
Sep 4, 2023 11:50:50.332329035 CEST	7126	23	192.168.2.14	206.233.32.243
Sep 4, 2023 11:50:50.332339048 CEST	7126	23	192.168.2.14	60.67.182.12
Sep 4, 2023 11:50:50.332346916 CEST	7126	23	192.168.2.14	188.81.178.228
Sep 4, 2023 11:50:50.332350016 CEST	7126	23	192.168.2.14	159.53.220.1
Sep 4, 2023 11:50:50.332362890 CEST	7126	23	192.168.2.14	22.15.15.84
Sep 4, 2023 11:50:50.332387924 CEST	7126	23	192.168.2.14	71.127.129.41
Sep 4, 2023 11:50:50.332484961 CEST	7126	23	192.168.2.14	211.186.98.236
Sep 4, 2023 11:50:50.332488060 CEST	7126	23	192.168.2.14	192.253.112.7
Sep 4, 2023 11:50:50.332503080 CEST	7126	23	192.168.2.14	156.153.219.98
Sep 4, 2023 11:50:50.332509995 CEST	7126	23	192.168.2.14	102.128.191.151
Sep 4, 2023 11:50:50.332511902 CEST	7126	23	192.168.2.14	193.227.75.13
Sep 4, 2023 11:50:50.332511902 CEST	7126	23	192.168.2.14	184.185.243.126
Sep 4, 2023 11:50:50.332520962 CEST	7126	23	192.168.2.14	128.12.154.133
Sep 4, 2023 11:50:50.332520962 CEST	7126	23	192.168.2.14	87.37.220.235
Sep 4, 2023 11:50:50.332530975 CEST	7126	23	192.168.2.14	30.148.54.152
Sep 4, 2023 11:50:50.332544088 CEST	7126	23	192.168.2.14	162.220.47.234
Sep 4, 2023 11:50:50.332545996 CEST	7126	23	192.168.2.14	144.122.163.57
Sep 4, 2023 11:50:50.332561016 CEST	7126	23	192.168.2.14	102.61.64.48
Sep 4, 2023 11:50:50.332565069 CEST	7126	23	192.168.2.14	253.252.25.58
Sep 4, 2023 11:50:50.332566977 CEST	7126	23	192.168.2.14	204.69.180.94
Sep 4, 2023 11:50:50.332582951 CEST	7126	23	192.168.2.14	77.250.28.208
Sep 4, 2023 11:50:50.332593918 CEST	7126	23	192.168.2.14	16.228.62.52
Sep 4, 2023 11:50:50.332598925 CEST	7126	23	192.168.2.14	72.56.237.158
Sep 4, 2023 11:50:50.332622051 CEST	7126	23	192.168.2.14	90.200.62.170
Sep 4, 2023 11:50:50.332623959 CEST	7126	23	192.168.2.14	84.222.117.87
Sep 4, 2023 11:50:50.332650900 CEST	7126	23	192.168.2.14	119.37.133.183
Sep 4, 2023 11:50:50.332659006 CEST	7126	23	192.168.2.14	200.162.71.185
Sep 4, 2023 11:50:50.332767010 CEST	7126	23	192.168.2.14	92.43.237.3
Sep 4, 2023 11:50:50.332767010 CEST	7126	23	192.168.2.14	215.122.126.128
Sep 4, 2023 11:50:50.332767010 CEST	7126	23	192.168.2.14	97.124.62.156
Sep 4, 2023 11:50:50.332767010 CEST	7126	23	192.168.2.14	186.166.234.123
Sep 4, 2023 11:50:50.332770109 CEST	7126	23	192.168.2.14	52.199.204.181
Sep 4, 2023 11:50:50.332771063 CEST	7126	23	192.168.2.14	247.162.133.66
Sep 4, 2023 11:50:50.332771063 CEST	7126	23	192.168.2.14	4.244.219.52
Sep 4, 2023 11:50:50.332771063 CEST	7126	23	192.168.2.14	193.195.227.195
Sep 4, 2023 11:50:50.332771063 CEST	7126	23	192.168.2.14	195.50.185.66
Sep 4, 2023 11:50:50.332773924 CEST	7126	23	192.168.2.14	7.154.241.230
Sep 4, 2023 11:50:50.332773924 CEST	7126	23	192.168.2.14	45.71.113.93
Sep 4, 2023 11:50:50.332773924 CEST	7126	23	192.168.2.14	246.147.132.13
Sep 4, 2023 11:50:50.332773924 CEST	7126	23	192.168.2.14	25.74.210.116
Sep 4, 2023 11:50:50.332784891 CEST	7126	23	192.168.2.14	81.165.136.247
Sep 4, 2023 11:50:50.332787991 CEST	7126	23	192.168.2.14	217.43.119.132
Sep 4, 2023 11:50:50.332787991 CEST	7126	23	192.168.2.14	179.74.221.30
Sep 4, 2023 11:50:50.332792997 CEST	7126	23	192.168.2.14	174.74.102.108
Sep 4, 2023 11:50:50.332792997 CEST	7126	23	192.168.2.14	156.11.72.171
Sep 4, 2023 11:50:50.332803011 CEST	7126	23	192.168.2.14	197.186.68.197
Sep 4, 2023 11:50:50.332804918 CEST	7126	23	192.168.2.14	217.180.145.189
Sep 4, 2023 11:50:50.332813025 CEST	7126	23	192.168.2.14	31.170.103.42
Sep 4, 2023 11:50:50.332832098 CEST	7126	23	192.168.2.14	128.111.51.169
Sep 4, 2023 11:50:50.332832098 CEST	7126	23	192.168.2.14	181.240.92.189
Sep 4, 2023 11:50:50.332837105 CEST	7126	23	192.168.2.14	217.53.14.169
Sep 4, 2023 11:50:50.332853079 CEST	7126	23	192.168.2.14	72.221.187.108
Sep 4, 2023 11:50:50.332856894 CEST	7126	23	192.168.2.14	101.253.90.233
Sep 4, 2023 11:50:50.332856894 CEST	7126	23	192.168.2.14	169.107.172.197
Sep 4, 2023 11:50:50.332856894 CEST	7126	23	192.168.2.14	103.218.107.99
Sep 4, 2023 11:50:50.332856894 CEST	7126	23	192.168.2.14	217.2.70.148
Sep 4, 2023 11:50:50.332861900 CEST	7126	23	192.168.2.14	245.187.95.118
Sep 4, 2023 11:50:50.332870960 CEST	7126	23	192.168.2.14	124.69.117.40
Sep 4, 2023 11:50:50.332887888 CEST	7126	23	192.168.2.14	139.200.163.48
Sep 4, 2023 11:50:50.332889080 CEST	7126	23	192.168.2.14	120.148.62.83
Sep 4, 2023 11:50:50.332887888 CEST	7126	23	192.168.2.14	153.102.222.132
Sep 4, 2023 11:50:50.332901001 CEST	7126	23	192.168.2.14	207.231.128.54
Sep 4, 2023 11:50:50.332901001 CEST	7126	23	192.168.2.14	178.229.54.83
Sep 4, 2023 11:50:50.332909107 CEST	7126	23	192.168.2.14	215.225.86.206
Sep 4, 2023 11:50:50.332911015 CEST	7126	23	192.168.2.14	31.81.149.183
Sep 4, 2023 11:50:50.332926989 CEST	7126	23	192.168.2.14	100.203.160.191
Sep 4, 2023 11:50:50.332926989 CEST	7126	23	192.168.2.14	139.209.146.247
Sep 4, 2023 11:50:50.332940102 CEST	7126	23	192.168.2.14	243.18.95.232
Sep 4, 2023 11:50:50.332957983 CEST	7126	23	192.168.2.14	110.99.141.153
Sep 4, 2023 11:50:50.332962036 CEST	7126	23	192.168.2.14	132.153.179.48
Sep 4, 2023 11:50:50.332967043 CEST	7126	23	192.168.2.14	5.29.251.211
Sep 4, 2023 11:50:50.333085060 CEST	7126	23	192.168.2.14	172.66.196.138
Sep 4, 2023 11:50:50.333085060 CEST	7126	23	192.168.2.14	97.197.148.51
Sep 4, 2023 11:50:50.333086967 CEST	7126	23	192.168.2.14	5.29.199.158
Sep 4, 2023 11:50:50.333086967 CEST	7126	23	192.168.2.14	200.5.222.249
Sep 4, 2023 11:50:50.333086014 CEST	7126	23	192.168.2.14	6.3.130.203
Sep 4, 2023 11:50:50.333086014 CEST	7126	23	192.168.2.14	110.53.231.73
Sep 4, 2023 11:50:50.333086967 CEST	7126	23	192.168.2.14	31.34.204.225
Sep 4, 2023 11:50:50.333086014 CEST	7126	23	192.168.2.14	246.247.199.117
Sep 4, 2023 11:50:50.333087921 CEST	7126	23	192.168.2.14	83.131.3.159
Sep 4, 2023 11:50:50.333086014 CEST	7126	23	192.168.2.14	148.217.4.21
Sep 4, 2023 11:50:50.333093882 CEST	7126	23	192.168.2.14	48.160.41.70
Sep 4, 2023 11:50:50.333127022 CEST	7126	23	192.168.2.14	55.188.206.227
Sep 4, 2023 11:50:50.333143950 CEST	7126	23	192.168.2.14	147.211.184.240
Sep 4, 2023 11:50:50.333144903 CEST	7126	23	192.168.2.14	61.53.47.142
Sep 4, 2023 11:50:50.333148956 CEST	7126	23	192.168.2.14	162.142.23.15
Sep 4, 2023 11:50:50.333167076 CEST	7126	23	192.168.2.14	176.153.9.87
Sep 4, 2023 11:50:50.333183050 CEST	7126	23	192.168.2.14	95.192.254.242
Sep 4, 2023 11:50:50.333183050 CEST	7126	23	192.168.2.14	82.245.141.143
Sep 4, 2023 11:50:50.333188057 CEST	7126	23	192.168.2.14	155.137.187.125
Sep 4, 2023 11:50:50.333200932 CEST	7126	23	192.168.2.14	69.229.152.90
Sep 4, 2023 11:50:50.333209038 CEST	7126	23	192.168.2.14	114.234.246.162
Sep 4, 2023 11:50:50.333209991 CEST	7126	23	192.168.2.14	51.64.240.13
Sep 4, 2023 11:50:50.333209991 CEST	7126	23	192.168.2.14	182.193.169.214
Sep 4, 2023 11:50:50.333209991 CEST	7126	23	192.168.2.14	45.182.177.13
Sep 4, 2023 11:50:50.333214998 CEST	7126	23	192.168.2.14	26.150.236.128
Sep 4, 2023 11:50:50.333209991 CEST	7126	23	192.168.2.14	171.84.174.8
Sep 4, 2023 11:50:50.333209991 CEST	7126	23	192.168.2.14	223.248.248.152
Sep 4, 2023 11:50:50.333230972 CEST	7126	23	192.168.2.14	188.61.99.148
Sep 4, 2023 11:50:50.333230972 CEST	7126	23	192.168.2.14	147.54.125.194
Sep 4, 2023 11:50:50.333255053 CEST	7126	23	192.168.2.14	35.151.65.36
Sep 4, 2023 11:50:50.333255053 CEST	7126	23	192.168.2.14	104.228.41.0
Sep 4, 2023 11:50:50.333345890 CEST	7126	23	192.168.2.14	164.237.143.102
Sep 4, 2023 11:50:50.333349943 CEST	7126	23	192.168.2.14	54.112.71.175
Sep 4, 2023 11:50:50.333353043 CEST	7126	23	192.168.2.14	102.242.62.4
Sep 4, 2023 11:50:50.333357096 CEST	7126	23	192.168.2.14	84.26.47.138
Sep 4, 2023 11:50:50.333367109 CEST	7126	23	192.168.2.14	74.236.252.74
Sep 4, 2023 11:50:50.333367109 CEST	7126	23	192.168.2.14	2.238.237.241
Sep 4, 2023 11:50:50.333374977 CEST	7126	23	192.168.2.14	193.204.143.151
Sep 4, 2023 11:50:50.333401918 CEST	7126	23	192.168.2.14	89.24.96.51
Sep 4, 2023 11:50:50.333410978 CEST	7126	23	192.168.2.14	89.95.96.182
Sep 4, 2023 11:50:50.333432913 CEST	7126	23	192.168.2.14	64.75.226.142
Sep 4, 2023 11:50:50.333432913 CEST	7126	23	192.168.2.14	113.78.82.7
Sep 4, 2023 11:50:50.333436966 CEST	7126	23	192.168.2.14	48.175.113.138
Sep 4, 2023 11:50:50.333436966 CEST	7126	23	192.168.2.14	144.178.173.20
Sep 4, 2023 11:50:50.333442926 CEST	7126	23	192.168.2.14	12.168.239.231
Sep 4, 2023 11:50:50.333451033 CEST	7126	23	192.168.2.14	255.167.30.208
Sep 4, 2023 11:50:50.333477974 CEST	7126	23	192.168.2.14	78.111.62.6
Sep 4, 2023 11:50:50.333488941 CEST	7126	23	192.168.2.14	64.21.59.196
Sep 4, 2023 11:50:50.333492994 CEST	7126	23	192.168.2.14	244.160.213.208
Sep 4, 2023 11:50:50.333560944 CEST	7126	23	192.168.2.14	216.71.43.80
Sep 4, 2023 11:50:50.333560944 CEST	7126	23	192.168.2.14	58.135.246.19
Sep 4, 2023 11:50:50.333561897 CEST	7126	23	192.168.2.14	197.148.56.99
Sep 4, 2023 11:50:50.333560944 CEST	7126	23	192.168.2.14	245.214.57.148
Sep 4, 2023 11:50:50.333561897 CEST	7126	23	192.168.2.14	49.222.164.179
Sep 4, 2023 11:50:50.333568096 CEST	7126	23	192.168.2.14	90.241.109.96
Sep 4, 2023 11:50:50.333626032 CEST	7126	23	192.168.2.14	203.230.218.247
Sep 4, 2023 11:50:50.333626986 CEST	7126	23	192.168.2.14	5.213.31.51
Sep 4, 2023 11:50:50.333626986 CEST	7126	23	192.168.2.14	219.235.23.221
Sep 4, 2023 11:50:50.333633900 CEST	7126	23	192.168.2.14	213.129.4.13
Sep 4, 2023 11:50:50.333626986 CEST	7126	23	192.168.2.14	97.175.194.1
Sep 4, 2023 11:50:50.333626986 CEST	7126	23	192.168.2.14	242.83.235.30
Sep 4, 2023 11:50:50.333633900 CEST	7126	23	192.168.2.14	242.225.226.200
Sep 4, 2023 11:50:50.333626986 CEST	7126	23	192.168.2.14	254.101.52.189
Sep 4, 2023 11:50:50.333641052 CEST	7126	23	192.168.2.14	35.134.31.206
Sep 4, 2023 11:50:50.333642006 CEST	7126	23	192.168.2.14	190.219.178.117
Sep 4, 2023 11:50:50.333657980 CEST	7126	23	192.168.2.14	163.230.149.98
Sep 4, 2023 11:50:50.333657980 CEST	7126	23	192.168.2.14	157.232.42.214
Sep 4, 2023 11:50:50.333657980 CEST	7126	23	192.168.2.14	206.24.248.89
Sep 4, 2023 11:50:50.333657980 CEST	7126	23	192.168.2.14	64.148.195.30
Sep 4, 2023 11:50:50.333662987 CEST	7126	23	192.168.2.14	143.204.196.30
Sep 4, 2023 11:50:50.333662987 CEST	7126	23	192.168.2.14	30.142.79.100
Sep 4, 2023 11:50:50.333664894 CEST	7126	23	192.168.2.14	138.137.179.223
Sep 4, 2023 11:50:50.333664894 CEST	7126	23	192.168.2.14	193.33.68.67
Sep 4, 2023 11:50:50.333669901 CEST	7126	23	192.168.2.14	18.252.26.0
Sep 4, 2023 11:50:50.333669901 CEST	7126	23	192.168.2.14	203.86.109.195
Sep 4, 2023 11:50:50.333671093 CEST	7126	23	192.168.2.14	71.206.92.2
Sep 4, 2023 11:50:50.333669901 CEST	7126	23	192.168.2.14	193.134.65.97
Sep 4, 2023 11:50:50.333671093 CEST	7126	23	192.168.2.14	150.50.242.62
Sep 4, 2023 11:50:50.333673954 CEST	7126	23	192.168.2.14	248.104.227.129
Sep 4, 2023 11:50:50.333671093 CEST	7126	23	192.168.2.14	200.205.132.51
Sep 4, 2023 11:50:50.333673954 CEST	7126	23	192.168.2.14	146.160.246.19
Sep 4, 2023 11:50:50.333671093 CEST	7126	23	192.168.2.14	159.39.3.14
Sep 4, 2023 11:50:50.333683968 CEST	7126	23	192.168.2.14	84.157.36.148
Sep 4, 2023 11:50:50.333683968 CEST	7126	23	192.168.2.14	57.169.109.250
Sep 4, 2023 11:50:50.333683968 CEST	7126	23	192.168.2.14	255.158.6.163
Sep 4, 2023 11:50:50.333683968 CEST	7126	23	192.168.2.14	93.227.108.223
Sep 4, 2023 11:50:50.333735943 CEST	7126	23	192.168.2.14	11.48.44.88
Sep 4, 2023 11:50:50.333736897 CEST	7126	23	192.168.2.14	188.165.48.103
Sep 4, 2023 11:50:50.333744049 CEST	7126	23	192.168.2.14	203.24.5.191
Sep 4, 2023 11:50:50.333745003 CEST	7126	23	192.168.2.14	42.6.114.64
Sep 4, 2023 11:50:50.333744049 CEST	7126	23	192.168.2.14	215.154.70.130
Sep 4, 2023 11:50:50.333745003 CEST	7126	23	192.168.2.14	88.65.174.195
Sep 4, 2023 11:50:50.333744049 CEST	7126	23	192.168.2.14	255.255.23.156
Sep 4, 2023 11:50:50.333755016 CEST	7126	23	192.168.2.14	77.247.92.226
Sep 4, 2023 11:50:50.333755970 CEST	7126	23	192.168.2.14	168.3.123.120
Sep 4, 2023 11:50:50.333755016 CEST	7126	23	192.168.2.14	137.233.152.88
Sep 4, 2023 11:50:50.333775997 CEST	7126	23	192.168.2.14	111.226.247.75
Sep 4, 2023 11:50:50.333834887 CEST	7126	23	192.168.2.14	32.23.32.124
Sep 4, 2023 11:50:50.333838940 CEST	7126	23	192.168.2.14	205.171.222.40
Sep 4, 2023 11:50:50.333838940 CEST	7126	23	192.168.2.14	194.143.193.96
Sep 4, 2023 11:50:50.333848000 CEST	7126	23	192.168.2.14	87.13.35.137
Sep 4, 2023 11:50:50.333848000 CEST	7126	23	192.168.2.14	14.163.135.24
Sep 4, 2023 11:50:50.333859921 CEST	7126	23	192.168.2.14	9.245.79.204
Sep 4, 2023 11:50:50.333848000 CEST	7126	23	192.168.2.14	186.23.34.243
Sep 4, 2023 11:50:50.333859921 CEST	7126	23	192.168.2.14	179.231.93.105
Sep 4, 2023 11:50:50.333848000 CEST	7126	23	192.168.2.14	183.238.51.205
Sep 4, 2023 11:50:50.333859921 CEST	7126	23	192.168.2.14	91.108.30.37
Sep 4, 2023 11:50:50.333868027 CEST	7126	23	192.168.2.14	48.104.202.63
Sep 4, 2023 11:50:50.333868027 CEST	7126	23	192.168.2.14	169.189.93.115
Sep 4, 2023 11:50:50.333868027 CEST	7126	23	192.168.2.14	188.248.246.49
Sep 4, 2023 11:50:50.333875895 CEST	7126	23	192.168.2.14	163.166.246.81
Sep 4, 2023 11:50:50.333877087 CEST	7126	23	192.168.2.14	160.201.197.59
Sep 4, 2023 11:50:50.333879948 CEST	7126	23	192.168.2.14	59.71.66.114
Sep 4, 2023 11:50:50.333879948 CEST	7126	23	192.168.2.14	136.210.174.226
Sep 4, 2023 11:50:50.333879948 CEST	7126	23	192.168.2.14	120.249.7.40
Sep 4, 2023 11:50:50.333883047 CEST	7126	23	192.168.2.14	114.204.106.111
Sep 4, 2023 11:50:50.333883047 CEST	7126	23	192.168.2.14	13.163.167.201
Sep 4, 2023 11:50:50.333888054 CEST	7126	23	192.168.2.14	15.99.79.196
Sep 4, 2023 11:50:50.333883047 CEST	7126	23	192.168.2.14	171.14.58.247
Sep 4, 2023 11:50:50.333888054 CEST	7126	23	192.168.2.14	9.66.201.8
Sep 4, 2023 11:50:50.333883047 CEST	7126	23	192.168.2.14	111.229.47.167
Sep 4, 2023 11:50:50.333897114 CEST	7126	23	192.168.2.14	246.46.110.8
Sep 4, 2023 11:50:50.333901882 CEST	7126	23	192.168.2.14	141.229.108.158
Sep 4, 2023 11:50:50.333901882 CEST	7126	23	192.168.2.14	172.36.83.197
Sep 4, 2023 11:50:50.333901882 CEST	7126	23	192.168.2.14	107.53.32.220
Sep 4, 2023 11:50:50.333904028 CEST	7126	23	192.168.2.14	46.230.6.73
Sep 4, 2023 11:50:50.333901882 CEST	7126	23	192.168.2.14	174.211.137.111
Sep 4, 2023 11:50:50.333913088 CEST	7126	23	192.168.2.14	213.98.199.89
Sep 4, 2023 11:50:50.333923101 CEST	7126	23	192.168.2.14	136.69.226.141
Sep 4, 2023 11:50:50.333940029 CEST	7126	23	192.168.2.14	16.193.178.190
Sep 4, 2023 11:50:50.333947897 CEST	7126	23	192.168.2.14	39.31.211.179
Sep 4, 2023 11:50:50.333951950 CEST	7126	23	192.168.2.14	27.74.158.73
Sep 4, 2023 11:50:50.333954096 CEST	7126	23	192.168.2.14	102.74.174.88
Sep 4, 2023 11:50:50.333959103 CEST	7126	23	192.168.2.14	250.251.103.48
Sep 4, 2023 11:50:50.333960056 CEST	7126	23	192.168.2.14	253.20.56.231
Sep 4, 2023 11:50:50.333959103 CEST	7126	23	192.168.2.14	17.41.249.117
Sep 4, 2023 11:50:50.333971977 CEST	7126	23	192.168.2.14	30.164.1.196
Sep 4, 2023 11:50:50.333988905 CEST	7126	23	192.168.2.14	133.56.221.213
Sep 4, 2023 11:50:50.334002018 CEST	7126	23	192.168.2.14	6.152.74.67
Sep 4, 2023 11:50:50.334012985 CEST	7126	23	192.168.2.14	76.196.252.167
Sep 4, 2023 11:50:50.334032059 CEST	7126	23	192.168.2.14	125.139.190.45
Sep 4, 2023 11:50:50.334033012 CEST	7126	23	192.168.2.14	86.25.88.57
Sep 4, 2023 11:50:50.334127903 CEST	7126	23	192.168.2.14	39.218.20.199
Sep 4, 2023 11:50:50.334127903 CEST	7126	23	192.168.2.14	94.23.158.125
Sep 4, 2023 11:50:50.334127903 CEST	7126	23	192.168.2.14	73.83.177.64
Sep 4, 2023 11:50:50.334137917 CEST	7126	23	192.168.2.14	172.69.33.224
Sep 4, 2023 11:50:50.334141970 CEST	7126	23	192.168.2.14	19.244.218.160
Sep 4, 2023 11:50:50.334163904 CEST	7126	23	192.168.2.14	178.44.10.160
Sep 4, 2023 11:50:50.334178925 CEST	7126	23	192.168.2.14	170.166.192.99
Sep 4, 2023 11:50:50.334192038 CEST	7126	23	192.168.2.14	84.200.132.100
Sep 4, 2023 11:50:50.334209919 CEST	7126	23	192.168.2.14	194.222.238.154
Sep 4, 2023 11:50:50.334230900 CEST	7126	23	192.168.2.14	100.236.122.157
Sep 4, 2023 11:50:50.334243059 CEST	7126	23	192.168.2.14	124.49.54.147
Sep 4, 2023 11:50:50.334273100 CEST	7126	23	192.168.2.14	33.252.10.190
Sep 4, 2023 11:50:50.334275007 CEST	7126	23	192.168.2.14	177.179.123.244
Sep 4, 2023 11:50:50.334325075 CEST	7126	23	192.168.2.14	120.66.22.228
Sep 4, 2023 11:50:50.334378004 CEST	7126	23	192.168.2.14	195.112.73.29
Sep 4, 2023 11:50:50.334379911 CEST	7126	23	192.168.2.14	77.9.158.106
Sep 4, 2023 11:50:50.334379911 CEST	7126	23	192.168.2.14	135.221.169.59
Sep 4, 2023 11:50:50.334388018 CEST	7126	23	192.168.2.14	16.33.190.67
Sep 4, 2023 11:50:50.334388018 CEST	7126	23	192.168.2.14	137.87.234.179
Sep 4, 2023 11:50:50.334388018 CEST	7126	23	192.168.2.14	179.81.50.30
Sep 4, 2023 11:50:50.334399939 CEST	7126	23	192.168.2.14	90.66.132.214
Sep 4, 2023 11:50:50.334402084 CEST	7126	23	192.168.2.14	255.151.37.6
Sep 4, 2023 11:50:50.334403992 CEST	7126	23	192.168.2.14	159.103.223.209
Sep 4, 2023 11:50:50.334402084 CEST	7126	23	192.168.2.14	112.155.74.226
Sep 4, 2023 11:50:50.334402084 CEST	7126	23	192.168.2.14	189.53.173.74
Sep 4, 2023 11:50:50.334405899 CEST	7126	23	192.168.2.14	185.156.221.27
Sep 4, 2023 11:50:50.334405899 CEST	7126	23	192.168.2.14	18.55.201.148
Sep 4, 2023 11:50:50.334419012 CEST	7126	23	192.168.2.14	48.138.155.93
Sep 4, 2023 11:50:50.334439039 CEST	7126	23	192.168.2.14	213.131.164.241
Sep 4, 2023 11:50:50.334439039 CEST	7126	23	192.168.2.14	130.124.63.242
Sep 4, 2023 11:50:50.334439039 CEST	7126	23	192.168.2.14	187.150.6.177
Sep 4, 2023 11:50:50.334439039 CEST	7126	23	192.168.2.14	117.67.134.74
Sep 4, 2023 11:50:50.334439039 CEST	7126	23	192.168.2.14	159.49.29.90
Sep 4, 2023 11:50:50.334439039 CEST	7126	23	192.168.2.14	73.155.78.6
Sep 4, 2023 11:50:50.334450006 CEST	7126	23	192.168.2.14	59.91.227.110
Sep 4, 2023 11:50:50.334461927 CEST	7126	23	192.168.2.14	57.166.40.61
Sep 4, 2023 11:50:50.334469080 CEST	7126	23	192.168.2.14	255.24.218.148
Sep 4, 2023 11:50:50.334486008 CEST	7126	23	192.168.2.14	21.42.137.166
Sep 4, 2023 11:50:50.334528923 CEST	7126	23	192.168.2.14	62.107.68.95
Sep 4, 2023 11:50:50.334528923 CEST	7126	23	192.168.2.14	43.250.200.2
Sep 4, 2023 11:50:50.334532976 CEST	7126	23	192.168.2.14	15.146.20.76
Sep 4, 2023 11:50:50.334630013 CEST	7126	23	192.168.2.14	211.158.157.212
Sep 4, 2023 11:50:50.334642887 CEST	7126	23	192.168.2.14	12.211.176.239
Sep 4, 2023 11:50:50.334650993 CEST	7126	23	192.168.2.14	112.124.164.159
Sep 4, 2023 11:50:50.334655046 CEST	7126	23	192.168.2.14	128.43.61.47
Sep 4, 2023 11:50:50.334655046 CEST	7126	23	192.168.2.14	117.74.107.100
Sep 4, 2023 11:50:50.334666014 CEST	7126	23	192.168.2.14	155.180.246.156
Sep 4, 2023 11:50:50.334666967 CEST	7126	23	192.168.2.14	147.65.46.63
Sep 4, 2023 11:50:50.334666014 CEST	7126	23	192.168.2.14	255.140.84.171
Sep 4, 2023 11:50:50.334666014 CEST	7126	23	192.168.2.14	108.221.127.1
Sep 4, 2023 11:50:50.334672928 CEST	7126	23	192.168.2.14	217.239.171.163
Sep 4, 2023 11:50:50.334672928 CEST	7126	23	192.168.2.14	14.219.239.163
Sep 4, 2023 11:50:50.334672928 CEST	7126	23	192.168.2.14	21.74.199.72
Sep 4, 2023 11:50:50.334676027 CEST	7126	23	192.168.2.14	184.175.80.199
Sep 4, 2023 11:50:50.334680080 CEST	7126	23	192.168.2.14	118.232.204.58
Sep 4, 2023 11:50:50.334688902 CEST	7126	23	192.168.2.14	150.73.91.193
Sep 4, 2023 11:50:50.334705114 CEST	7126	23	192.168.2.14	135.101.102.209
Sep 4, 2023 11:50:50.334707975 CEST	7126	23	192.168.2.14	246.214.51.20
Sep 4, 2023 11:50:50.334713936 CEST	7126	23	192.168.2.14	68.11.126.77
Sep 4, 2023 11:50:50.334718943 CEST	7126	23	192.168.2.14	142.48.51.130
Sep 4, 2023 11:50:50.334718943 CEST	7126	23	192.168.2.14	55.194.26.70
Sep 4, 2023 11:50:50.334738016 CEST	7126	23	192.168.2.14	163.202.114.49
Sep 4, 2023 11:50:50.334744930 CEST	7126	23	192.168.2.14	57.64.42.66
Sep 4, 2023 11:50:50.334750891 CEST	7126	23	192.168.2.14	144.231.118.191
Sep 4, 2023 11:50:50.334750891 CEST	7126	23	192.168.2.14	46.48.191.55
Sep 4, 2023 11:50:50.334764004 CEST	7126	23	192.168.2.14	41.33.209.151
Sep 4, 2023 11:50:50.334784985 CEST	7126	23	192.168.2.14	94.43.182.67
Sep 4, 2023 11:50:50.334799051 CEST	7126	23	192.168.2.14	41.68.184.14
Sep 4, 2023 11:50:50.334804058 CEST	7126	23	192.168.2.14	41.132.130.37
Sep 4, 2023 11:50:50.334831953 CEST	7126	23	192.168.2.14	180.67.218.142
Sep 4, 2023 11:50:50.334873915 CEST	7126	23	192.168.2.14	175.63.194.78
Sep 4, 2023 11:50:50.334875107 CEST	7126	23	192.168.2.14	61.187.183.111
Sep 4, 2023 11:50:50.334897995 CEST	7126	23	192.168.2.14	246.83.197.5
Sep 4, 2023 11:50:50.334898949 CEST	7126	23	192.168.2.14	150.161.142.173
Sep 4, 2023 11:50:50.334897995 CEST	7126	23	192.168.2.14	59.60.175.19
Sep 4, 2023 11:50:50.334928036 CEST	7126	23	192.168.2.14	102.170.136.182
Sep 4, 2023 11:50:50.334933996 CEST	7126	23	192.168.2.14	244.237.147.133
Sep 4, 2023 11:50:50.334948063 CEST	7126	23	192.168.2.14	49.12.95.181
Sep 4, 2023 11:50:50.334983110 CEST	7126	23	192.168.2.14	137.168.146.212
Sep 4, 2023 11:50:50.334988117 CEST	7126	23	192.168.2.14	184.67.8.146
Sep 4, 2023 11:50:50.335005999 CEST	7126	23	192.168.2.14	156.184.184.154
Sep 4, 2023 11:50:50.335022926 CEST	7126	23	192.168.2.14	120.82.74.66
Sep 4, 2023 11:50:50.335073948 CEST	7126	23	192.168.2.14	132.121.130.4
Sep 4, 2023 11:50:50.335139990 CEST	7126	23	192.168.2.14	174.144.209.205
Sep 4, 2023 11:50:50.335140944 CEST	7126	23	192.168.2.14	38.78.236.234
Sep 4, 2023 11:50:50.335139990 CEST	7126	23	192.168.2.14	186.244.37.68
Sep 4, 2023 11:50:50.335140944 CEST	7126	23	192.168.2.14	202.70.70.88
Sep 4, 2023 11:50:50.335144997 CEST	7126	23	192.168.2.14	1.179.10.135
Sep 4, 2023 11:50:50.335144997 CEST	7126	23	192.168.2.14	163.23.15.75
Sep 4, 2023 11:50:50.335144997 CEST	7126	23	192.168.2.14	39.125.64.135
Sep 4, 2023 11:50:50.335145950 CEST	7126	23	192.168.2.14	24.12.14.53
Sep 4, 2023 11:50:50.335144997 CEST	7126	23	192.168.2.14	112.88.133.227
Sep 4, 2023 11:50:50.335174084 CEST	7126	23	192.168.2.14	91.249.39.35
Sep 4, 2023 11:50:50.335174084 CEST	7126	23	192.168.2.14	80.215.51.59
Sep 4, 2023 11:50:50.335179090 CEST	7126	23	192.168.2.14	203.241.248.192
Sep 4, 2023 11:50:50.335180044 CEST	7126	23	192.168.2.14	82.38.30.179
Sep 4, 2023 11:50:50.335180044 CEST	7126	23	192.168.2.14	154.112.125.160
Sep 4, 2023 11:50:50.335179090 CEST	7126	23	192.168.2.14	111.149.207.46
Sep 4, 2023 11:50:50.335180044 CEST	7126	23	192.168.2.14	32.232.213.108
Sep 4, 2023 11:50:50.335181952 CEST	7126	23	192.168.2.14	54.85.9.79
Sep 4, 2023 11:50:50.335181952 CEST	7126	23	192.168.2.14	187.189.20.161
Sep 4, 2023 11:50:50.335181952 CEST	7126	23	192.168.2.14	80.133.251.192
Sep 4, 2023 11:50:50.335186958 CEST	7126	23	192.168.2.14	192.236.217.99
Sep 4, 2023 11:50:50.335186958 CEST	7126	23	192.168.2.14	246.253.80.168
Sep 4, 2023 11:50:50.335186958 CEST	7126	23	192.168.2.14	180.232.67.237
Sep 4, 2023 11:50:50.335186958 CEST	7126	23	192.168.2.14	244.245.122.211
Sep 4, 2023 11:50:50.335186958 CEST	7126	23	192.168.2.14	154.153.53.41
Sep 4, 2023 11:50:50.335186958 CEST	7126	23	192.168.2.14	17.146.57.40
Sep 4, 2023 11:50:50.335186958 CEST	7126	23	192.168.2.14	139.183.8.66
Sep 4, 2023 11:50:50.335196972 CEST	7126	23	192.168.2.14	176.201.100.111
Sep 4, 2023 11:50:50.335197926 CEST	7126	23	192.168.2.14	83.33.5.176
Sep 4, 2023 11:50:50.335197926 CEST	7126	23	192.168.2.14	220.238.215.177
Sep 4, 2023 11:50:50.335197926 CEST	7126	23	192.168.2.14	100.79.95.3
Sep 4, 2023 11:50:50.335199118 CEST	7126	23	192.168.2.14	117.130.212.121
Sep 4, 2023 11:50:50.335199118 CEST	7126	23	192.168.2.14	46.8.34.4
Sep 4, 2023 11:50:50.335199118 CEST	7126	23	192.168.2.14	133.234.79.50
Sep 4, 2023 11:50:50.335199118 CEST	7126	23	192.168.2.14	59.234.222.226
Sep 4, 2023 11:50:50.335226059 CEST	7126	23	192.168.2.14	167.243.223.8
Sep 4, 2023 11:50:50.335230112 CEST	7126	23	192.168.2.14	144.15.172.101
Sep 4, 2023 11:50:50.335226059 CEST	7126	23	192.168.2.14	215.24.245.92
Sep 4, 2023 11:50:50.335226059 CEST	7126	23	192.168.2.14	2.141.63.34
Sep 4, 2023 11:50:50.335226059 CEST	7126	23	192.168.2.14	159.219.178.172
Sep 4, 2023 11:50:50.355698109 CEST	23	7126	89.238.82.99	192.168.2.14
Sep 4, 2023 11:50:50.359304905 CEST	23	7126	94.23.158.125	192.168.2.14
Sep 4, 2023 11:50:50.369056940 CEST	23	7126	83.131.3.159	192.168.2.14
Sep 4, 2023 11:50:50.437014103 CEST	23	7126	66.19.230.236	192.168.2.14
Sep 4, 2023 11:50:50.471656084 CEST	23	7126	202.182.72.111	192.168.2.14
Sep 4, 2023 11:50:50.588335991 CEST	23	7126	221.160.211.31	192.168.2.14
Sep 4, 2023 11:50:50.593822002 CEST	23	7126	125.139.190.45	192.168.2.14
Sep 4, 2023 11:50:50.618405104 CEST	23	7126	60.67.182.12	192.168.2.14
Sep 4, 2023 11:50:50.642927885 CEST	23	7126	60.41.44.9	192.168.2.14
Sep 4, 2023 11:50:50.941098928 CEST	55824	55590	192.168.2.14	45.95.146.26
Sep 4, 2023 11:50:50.967232943 CEST	55590	55824	45.95.146.26	192.168.2.14
Sep 4, 2023 11:50:50.967415094 CEST	55824	55590	192.168.2.14	45.95.146.26
Sep 4, 2023 11:51:04.908278942 CEST	23	7126	165.254.30.196	192.168.2.14

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 4, 2023 11:50:50.359751940 CEST	91.236.202.254	192.168.2.14	ba1a	(Unknown)	Destination Unreachable
Sep 4, 2023 11:50:50.360073090 CEST	49.12.95.181	192.168.2.14	508f	(Port unreachable)	Destination Unreachable
Sep 4, 2023 11:50:50.368091106 CEST	91.249.39.35	192.168.2.14	5de9	(Unknown)	Destination Unreachable
Sep 4, 2023 11:50:50.371248007 CEST	195.50.167.229	192.168.2.14	3446	(Time to live exceeded in transit)	Time Exceeded
Sep 4, 2023 11:50:50.485575914 CEST	67.213.224.26	192.168.2.14	5dae	(Time to live exceeded in transit)	Time Exceeded
Sep 4, 2023 11:50:50.524682045 CEST	201.117.239.110	192.168.2.14	50ae	(Time to live exceeded in transit)	Time Exceeded
Sep 4, 2023 11:50:50.574773073 CEST	196.202.252.6	192.168.2.14	db1a	(Time to live exceeded in transit)	Time Exceeded
Sep 4, 2023 11:50:50.591275930 CEST	200.205.74.153	192.168.2.14	9404	(Unknown)	Destination Unreachable
Sep 4, 2023 11:50:53.376621008 CEST	77.247.92.226	192.168.2.14	6aa9	(Host unreachable)	Destination Unreachable
Sep 4, 2023 11:50:53.517187119 CEST	64.59.80.53	192.168.2.14	e605	(Host unreachable)	Destination Unreachable
Sep 4, 2023 11:50:53.521903038 CEST	192.69.240.1	192.168.2.14	6fb	(Host unreachable)	Destination Unreachable
Sep 4, 2023 11:50:53.560570002 CEST	24.12.14.53	192.168.2.14	e614	(Host unreachable)	Destination Unreachable

System Behavior

Analysis Process: PcGHvq1qRT.elf PID: 5492, Parent PID: 5399

General

Start time:	09:50:49
Start date:	04/09/2023
Path:	/tmp/PcGHvq1qRT.elf
Arguments:	/tmp/PcGHvq1qRT.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: PcGHvq1qRT.elf PID: 5494, Parent PID: 5492

General

Start time:	09:50:49
Start date:	04/09/2023
Path:	/tmp/PcGHvq1qRT.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: PcGHvq1qRT.elf PID: 5496, Parent PID: 5492

General

Start time:	09:50:49
Start date:	04/09/2023
Path:	/tmp/PcGHvq1qRT.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: PcGHvq1qRT.elf PID: 5498, Parent PID: 5496

General

Start time:	09:50:49
Start date:	04/09/2023
Path:	/tmp/PcGHvq1qRT.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port paring that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report PcGHvq1qRT.elf

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

ICMP Packets

System Behavior

Analysis Process: PcGHvq1qRT.elf PID: 5492, Parent PID: 5399

General

Chronological Activities

Analysis Process: PcGHvq1qRT.elf PID: 5494, Parent PID: 5492

General

Chronological Activities

Analysis Process: PcGHvq1qRT.elf PID: 5496, Parent PID: 5492

General

Chronological Activities

Analysis Process: PcGHvq1qRT.elf PID: 5498, Parent PID: 5496

General

Linux Analysis Report
PcGHvq1qRT.elf