Linux Analysis Report
HUyUkUjJ4y.elf

Overview

General Information

Sample name: HUyUkUjJ4y.elf
renamed because original name is a hash value
Original sample name: eb026492049c95816f62d278e1b99ba5.elf
Analysis ID: 1541864
MD5: eb026492049c95816f62d278e1b99ba5
SHA1: a223d14a7cfac1e7e691638eb710a247bdda241e
SHA256: 36686bf6d538f209fa41fceb549b70e1b5319a5ef45e450dcb7c5e7cf5fa5f22
Tags: 32elfmipsmirai
Infos:

Detection

Score: 56
Range: 0 - 100
Whitelisted: false

Signatures

Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Detected TCP or UDP traffic on non-standard ports
Enumerates processes within the "proc" file system
Sample has stripped symbol table
Sample listens on a socket
Sample tries to kill a process (SIGKILL)
Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)
Uses the "uname" system call to query kernel version information (possible evasion)

Classification

AV Detection

barindex
Source: HUyUkUjJ4y.elf Avira: detected
Source: HUyUkUjJ4y.elf ReversingLabs: Detection: 65%
Source: global traffic TCP traffic: 192.168.2.14:42904 -> 198.50.207.21:1024
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 223.165.131.131:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 210.217.100.205:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 212.220.149.26:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 113.72.160.136:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 67.61.240.93:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 40.15.122.102:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 126.209.75.63:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 92.7.18.89:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 81.58.162.247:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 194.158.162.115:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 173.165.205.234:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 193.8.2.94:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 208.97.165.72:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 203.87.60.146:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 176.112.238.217:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 173.100.148.129:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 213.76.195.228:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 121.31.49.217:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 75.246.98.16:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 180.37.171.25:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 52.15.239.164:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 63.244.136.184:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 125.237.11.18:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 141.42.95.84:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 73.47.116.129:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 24.194.180.183:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 141.100.154.6:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 203.121.63.45:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 147.49.152.195:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 195.188.10.95:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 186.172.188.27:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 128.45.247.118:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 80.251.134.81:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 104.24.203.141:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 18.140.98.9:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 147.85.30.111:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 35.11.182.106:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 52.103.87.165:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 179.133.151.183:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 198.126.180.42:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 51.232.28.84:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 187.67.82.34:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 176.219.117.68:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 12.85.66.213:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 104.211.23.109:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 129.180.78.249:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 122.27.76.137:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 13.98.28.183:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 61.88.221.28:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 200.92.215.58:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 117.69.238.160:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 206.35.204.201:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 92.62.178.124:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 71.222.174.7:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 36.71.13.148:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 221.188.81.155:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 208.107.78.186:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 200.37.254.136:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 203.158.211.255:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 208.97.65.244:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 198.140.134.23:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 146.224.150.29:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 92.191.230.137:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 94.86.240.179:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 134.231.22.164:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 181.255.124.46:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 102.162.205.80:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 89.85.27.50:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 2.19.246.53:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 146.5.191.58:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 134.135.172.90:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 72.233.6.214:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 138.139.1.181:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 8.112.59.35:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 147.108.121.95:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 39.229.191.223:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 92.95.161.35:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 12.42.73.41:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 141.180.243.130:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 105.34.73.222:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 139.218.177.112:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 196.175.52.54:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 71.163.200.11:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 150.170.225.201:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 149.78.223.191:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 90.110.207.40:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 93.180.132.194:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 38.53.197.186:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 43.100.54.153:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 70.79.252.231:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 141.27.242.120:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 8.12.212.77:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 40.83.239.45:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 182.165.106.234:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 1.121.79.254:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 122.246.199.7:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 152.107.224.145:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 219.202.182.191:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 66.54.154.73:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 193.227.165.176:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 107.89.159.132:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 183.28.224.52:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 147.219.215.58:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 76.110.28.146:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 188.10.254.34:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 196.75.209.248:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 9.167.81.236:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 162.94.107.49:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 82.245.74.240:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 66.255.105.155:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 177.50.165.26:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 161.249.109.254:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 9.217.41.51:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 205.33.203.204:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 98.3.38.62:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 184.29.230.114:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 41.75.101.1:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 59.58.69.7:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 31.90.221.153:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 53.207.91.30:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 90.218.237.215:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 65.199.56.79:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 61.219.77.225:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 124.29.129.91:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 145.48.223.209:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 84.183.57.26:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 37.77.77.196:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 23.208.122.184:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 100.246.68.84:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 92.72.217.205:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 42.238.53.101:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 209.204.73.148:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 91.128.200.147:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 25.145.167.206:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 114.97.219.163:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 109.131.149.204:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 27.46.218.239:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 213.182.79.216:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 144.194.248.118:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 93.25.16.223:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 210.73.22.22:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 83.55.204.109:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 70.7.147.114:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 106.143.99.76:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 5.128.83.205:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 102.106.12.29:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 155.39.188.5:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 20.19.230.189:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 44.3.250.80:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 156.249.44.212:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 60.92.111.97:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 184.237.34.236:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 97.57.114.233:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 173.79.72.0:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 36.25.232.221:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 213.128.163.168:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 98.113.149.135:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 75.189.221.100:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 217.191.242.111:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 182.224.220.5:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 138.8.200.30:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 135.174.219.101:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 201.111.236.88:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 132.166.45.25:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 18.60.19.42:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 209.171.125.145:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 146.226.62.123:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 148.226.138.0:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 112.120.110.210:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 61.201.171.231:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 146.83.189.117:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 18.123.209.161:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 130.196.49.208:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 216.23.217.31:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 99.31.195.148:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 161.2.209.149:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 221.24.88.150:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 59.156.245.5:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 197.28.127.42:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 68.187.124.154:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 69.178.155.136:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 81.231.13.188:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 122.250.101.79:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 32.169.87.115:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 64.88.102.240:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 128.244.229.110:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 189.199.230.51:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 164.136.163.92:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 211.125.241.32:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 60.82.135.64:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 220.142.156.251:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 24.234.219.21:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 177.98.136.70:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 153.20.251.12:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 158.171.185.19:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 180.157.2.118:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 73.160.102.25:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 156.133.142.84:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 17.201.232.189:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 24.145.116.201:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 145.76.62.189:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 59.201.138.153:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 57.251.21.159:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 132.78.237.210:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 119.0.158.2:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 128.186.56.229:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 62.190.36.241:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 151.205.192.243:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 213.170.198.28:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 193.143.149.16:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 201.240.150.128:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 69.229.211.39:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 99.36.202.11:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 175.128.176.12:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 76.132.168.242:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 111.174.230.189:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 51.229.64.121:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 195.155.56.161:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 71.150.120.207:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 75.4.217.57:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 128.253.255.253:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 183.126.115.9:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 163.201.232.82:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 76.140.140.194:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 54.242.233.227:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 169.50.114.109:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 38.70.197.251:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 60.28.94.76:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 223.240.130.76:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 105.94.156.185:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 205.43.58.95:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 126.179.13.168:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 70.80.5.52:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 19.123.14.120:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 106.52.24.50:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 104.253.214.124:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 118.106.212.40:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 174.86.248.183:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 218.130.159.85:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 61.92.33.67:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 82.24.18.28:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 116.72.161.17:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 121.227.136.253:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 218.205.221.196:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 144.202.121.91:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 8.212.1.125:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 9.139.147.191:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 81.237.208.245:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 134.100.39.39:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 99.98.147.196:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 139.4.233.11:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 48.204.108.105:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 219.177.75.157:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 12.51.9.123:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 180.5.231.6:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 58.170.5.171:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 103.253.15.156:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 70.39.66.133:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 13.52.99.79:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 111.8.53.171:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 59.131.23.107:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 85.27.227.250:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 78.251.149.93:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 148.202.219.4:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 143.109.174.250:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 185.197.65.199:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 2.63.19.82:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 191.88.224.178:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 82.205.240.196:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 93.227.90.36:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 155.4.153.200:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 46.218.33.81:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 51.27.18.82:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 162.220.114.254:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 110.102.110.134:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 116.32.176.150:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 216.16.157.253:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 4.41.9.252:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 37.62.34.22:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 9.215.230.91:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 118.142.184.114:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 204.111.116.11:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 67.206.125.111:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 69.72.106.193:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 44.7.173.227:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 65.203.57.207:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 107.26.61.184:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 104.64.210.32:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 50.70.66.134:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 2.1.11.208:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 77.232.100.117:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 176.192.13.12:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 50.136.115.98:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 123.21.191.74:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 219.32.112.92:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 130.180.116.115:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 159.175.35.183:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 216.130.164.168:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 159.58.175.214:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 101.100.32.145:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 126.253.48.40:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 164.69.33.161:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 164.213.0.81:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 212.187.107.127:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 18.46.168.175:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 92.197.130.232:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 173.40.147.93:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 175.252.208.63:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 201.188.167.2:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 220.7.24.85:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 110.172.213.146:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 44.195.152.11:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 161.39.36.73:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 36.81.215.38:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 179.162.162.160:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 73.236.95.184:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 212.233.22.221:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 199.51.62.204:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 2.7.212.183:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 158.16.243.79:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 62.27.164.154:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 45.27.165.114:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 211.123.190.98:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 212.141.68.218:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 51.81.157.149:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 107.190.82.123:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 48.191.134.75:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 2.133.129.204:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 209.194.233.43:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 120.40.144.213:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 170.225.1.58:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 149.206.32.174:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 68.114.51.135:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 51.123.41.136:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 94.68.167.39:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 198.178.183.233:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 165.17.51.230:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 211.0.26.4:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 17.64.171.31:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 92.160.94.133:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 175.66.100.65:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 218.125.30.216:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 154.16.87.238:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 116.184.225.108:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 165.63.18.105:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 221.228.118.66:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 180.115.124.9:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 213.122.123.247:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 97.135.26.78:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 166.21.153.110:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 163.120.154.17:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 149.110.199.175:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 72.4.207.205:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 35.3.214.232:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 149.239.221.11:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 95.156.5.11:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 31.168.169.11:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 220.164.12.94:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 86.199.171.131:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 88.119.197.13:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 197.175.142.1:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 173.125.235.211:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 104.230.186.118:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 216.103.238.197:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 112.63.123.95:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 47.201.200.170:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 189.90.247.168:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 120.174.76.62:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 138.22.111.131:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 114.127.195.211:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 199.243.93.228:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 160.181.142.149:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 182.86.5.219:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 72.102.146.139:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 36.167.176.232:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 4.21.14.135:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 160.120.200.233:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 183.74.236.159:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 148.109.49.101:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 193.162.200.77:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 20.220.37.241:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 46.41.145.120:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 39.5.174.161:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 182.143.248.169:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 141.139.229.135:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 14.224.96.214:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 49.96.160.112:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 46.87.238.183:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 191.140.125.187:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 27.164.146.200:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 100.190.153.85:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 121.161.77.114:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 115.89.110.213:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 79.194.155.216:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 144.227.104.77:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 52.38.60.202:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 114.140.153.21:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 71.15.161.213:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 94.254.49.198:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 50.168.124.212:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 5.209.44.208:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 54.169.98.41:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 62.70.102.59:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 159.34.211.222:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 218.150.136.223:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 219.80.15.253:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 102.101.220.15:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 53.102.214.37:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 57.109.145.151:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 124.60.39.123:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 195.178.99.49:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 13.4.6.101:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 95.68.3.171:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 102.184.248.251:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 41.99.172.62:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 101.125.139.103:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 175.54.136.11:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 108.92.114.85:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 209.249.218.130:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 82.55.90.127:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 140.41.248.121:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 105.212.136.155:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 109.220.183.59:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 99.206.28.88:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 150.127.31.44:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 46.11.86.129:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 164.3.120.137:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 164.170.46.219:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 193.187.97.95:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 89.214.42.129:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 203.116.202.131:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 220.156.36.123:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 179.239.147.70:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 131.64.51.245:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 8.133.155.173:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 129.140.38.84:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 140.16.95.236:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 31.0.64.221:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 108.59.118.254:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 155.202.207.124:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 203.30.51.231:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 142.50.135.16:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 156.1.30.34:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 120.142.22.168:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 92.61.164.210:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 112.34.135.19:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 105.0.211.35:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 99.197.102.5:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 194.231.149.241:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 155.1.168.134:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 130.28.209.179:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 207.194.4.114:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 157.55.121.13:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 82.172.24.232:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 113.135.56.232:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 32.68.14.106:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 99.191.149.240:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 43.29.112.240:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 81.174.236.231:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 97.251.163.225:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 129.26.19.246:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 177.204.251.158:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 38.135.52.140:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 12.97.89.54:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 39.235.148.99:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 159.130.133.55:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 5.239.50.121:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 12.156.203.82:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 207.55.121.27:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 118.66.54.173:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 141.90.91.57:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 110.69.9.8:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 147.227.169.203:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 178.82.185.169:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 86.106.75.12:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 97.220.219.49:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 185.59.62.175:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 34.198.179.72:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 67.47.236.154:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 182.243.171.81:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 25.0.104.101:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 196.53.69.158:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 9.144.112.110:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 219.207.84.175:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 108.235.211.90:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 5.113.207.68:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 113.184.8.190:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 103.12.160.115:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 142.82.71.27:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 50.148.149.137:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 63.45.30.154:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 83.180.199.30:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 54.138.49.214:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 25.135.20.208:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 144.190.226.82:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 150.138.186.127:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 110.151.190.233:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 101.51.233.40:2323
Source: global traffic TCP traffic: 192.168.2.14:30645 -> 168.188.87.139:2323
Source: /tmp/HUyUkUjJ4y.elf (PID: 5516) Socket: 127.0.0.1:38273 Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) Socket: 0.0.0.0:0 Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) Socket: 0.0.0.0:23 Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) Socket: 0.0.0.0:53413 Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) Socket: 0.0.0.0:80 Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) Socket: 0.0.0.0:52869 Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) Socket: 0.0.0.0:37215 Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) Socket: 0.0.0.0:0 Jump to behavior
Source: global traffic TCP traffic: 192.168.2.14:46540 -> 185.125.190.26:443
Source: unknown TCP traffic detected without corresponding DNS query: 198.50.207.21
Source: unknown TCP traffic detected without corresponding DNS query: 223.165.131.131
Source: unknown TCP traffic detected without corresponding DNS query: 119.135.131.35
Source: unknown TCP traffic detected without corresponding DNS query: 95.184.62.131
Source: unknown TCP traffic detected without corresponding DNS query: 93.122.153.163
Source: unknown TCP traffic detected without corresponding DNS query: 77.5.39.128
Source: unknown TCP traffic detected without corresponding DNS query: 181.165.145.211
Source: unknown TCP traffic detected without corresponding DNS query: 94.68.162.165
Source: unknown TCP traffic detected without corresponding DNS query: 98.128.13.168
Source: unknown TCP traffic detected without corresponding DNS query: 171.48.74.255
Source: unknown TCP traffic detected without corresponding DNS query: 46.198.225.134
Source: unknown TCP traffic detected without corresponding DNS query: 101.92.84.96
Source: unknown TCP traffic detected without corresponding DNS query: 109.94.56.43
Source: unknown TCP traffic detected without corresponding DNS query: 111.36.31.127
Source: unknown TCP traffic detected without corresponding DNS query: 38.104.19.19
Source: unknown TCP traffic detected without corresponding DNS query: 182.54.179.237
Source: unknown TCP traffic detected without corresponding DNS query: 83.182.175.210
Source: unknown TCP traffic detected without corresponding DNS query: 205.39.126.186
Source: unknown TCP traffic detected without corresponding DNS query: 212.220.149.26
Source: unknown TCP traffic detected without corresponding DNS query: 143.116.153.107
Source: unknown TCP traffic detected without corresponding DNS query: 201.86.214.128
Source: unknown TCP traffic detected without corresponding DNS query: 80.54.183.127
Source: unknown TCP traffic detected without corresponding DNS query: 92.220.146.79
Source: unknown TCP traffic detected without corresponding DNS query: 43.51.213.243
Source: unknown TCP traffic detected without corresponding DNS query: 77.31.12.47
Source: unknown TCP traffic detected without corresponding DNS query: 88.254.175.137
Source: unknown TCP traffic detected without corresponding DNS query: 113.72.160.136
Source: unknown TCP traffic detected without corresponding DNS query: 41.142.66.98
Source: unknown TCP traffic detected without corresponding DNS query: 216.253.139.142
Source: unknown TCP traffic detected without corresponding DNS query: 63.30.62.31
Source: unknown TCP traffic detected without corresponding DNS query: 88.21.117.10
Source: unknown TCP traffic detected without corresponding DNS query: 117.108.66.110
Source: unknown TCP traffic detected without corresponding DNS query: 70.61.38.191
Source: unknown TCP traffic detected without corresponding DNS query: 183.163.36.52
Source: unknown TCP traffic detected without corresponding DNS query: 125.127.156.173
Source: unknown TCP traffic detected without corresponding DNS query: 153.84.130.72
Source: unknown TCP traffic detected without corresponding DNS query: 131.207.244.160
Source: unknown TCP traffic detected without corresponding DNS query: 2.232.88.176
Source: unknown TCP traffic detected without corresponding DNS query: 67.61.240.93
Source: unknown TCP traffic detected without corresponding DNS query: 113.119.52.23
Source: unknown TCP traffic detected without corresponding DNS query: 104.27.57.163
Source: unknown TCP traffic detected without corresponding DNS query: 40.15.122.102
Source: unknown TCP traffic detected without corresponding DNS query: 103.30.245.29
Source: unknown TCP traffic detected without corresponding DNS query: 85.51.52.11
Source: unknown TCP traffic detected without corresponding DNS query: 147.108.239.160
Source: unknown TCP traffic detected without corresponding DNS query: 39.15.200.38
Source: unknown TCP traffic detected without corresponding DNS query: 8.139.226.156
Source: unknown TCP traffic detected without corresponding DNS query: 81.101.211.5
Source: unknown TCP traffic detected without corresponding DNS query: 196.52.75.237
Source: unknown TCP traffic detected without corresponding DNS query: 128.33.159.215
Source: global traffic DNS traffic detected: DNS query: daisy.ubuntu.com
Source: unknown Network traffic detected: HTTP traffic on port 46540 -> 443
Source: ELF static info symbol of initial sample .symtab present: no
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) SIGKILL sent: pid: 940, result: successful Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) SIGKILL sent: pid: 940, result: successful Jump to behavior
Source: classification engine Classification label: mal56.linELF@0/0@2/0
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) File opened: /proc/490/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) File opened: /proc/791/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) File opened: /proc/794/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) File opened: /proc/795/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) File opened: /proc/797/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) File opened: /proc/853/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) File opened: /proc/917/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) File opened: /proc/780/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) File opened: /proc/1/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) File opened: /proc/661/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) File opened: /proc/782/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) File opened: /proc/785/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) File opened: /proc/940/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) File opened: /proc/767/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) File opened: /proc/800/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) File opened: /proc/888/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) File opened: /proc/801/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) File opened: /proc/725/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) File opened: /proc/769/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) File opened: /proc/726/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) File opened: /proc/803/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) File opened: /proc/806/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) File opened: /proc/807/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5524) File opened: /proc/928/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) File opened: /proc/490/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) File opened: /proc/791/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) File opened: /proc/794/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) File opened: /proc/795/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) File opened: /proc/797/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) File opened: /proc/853/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) File opened: /proc/917/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) File opened: /proc/780/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) File opened: /proc/1/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) File opened: /proc/661/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) File opened: /proc/782/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) File opened: /proc/785/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) File opened: /proc/940/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) File opened: /proc/767/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) File opened: /proc/800/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) File opened: /proc/888/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) File opened: /proc/801/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) File opened: /proc/725/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) File opened: /proc/769/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) File opened: /proc/726/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) File opened: /proc/803/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) File opened: /proc/806/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) File opened: /proc/807/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5518) File opened: /proc/928/fd Jump to behavior
Source: /tmp/HUyUkUjJ4y.elf (PID: 5516) Queries kernel information via 'uname': Jump to behavior
Source: HUyUkUjJ4y.elf, 5516.1.000055e2adb27000.000055e2adbae000.rw-.sdmp, HUyUkUjJ4y.elf, 5518.1.000055e2adb27000.000055e2adbae000.rw-.sdmp, HUyUkUjJ4y.elf, 5633.1.000055e2adb27000.000055e2adbae000.rw-.sdmp, HUyUkUjJ4y.elf, 5655.1.000055e2adb27000.000055e2adbae000.rw-.sdmp, HUyUkUjJ4y.elf, 5642.1.000055e2adb27000.000055e2adbae000.rw-.sdmp, HUyUkUjJ4y.elf, 5519.1.000055e2adb27000.000055e2adbae000.rw-.sdmp, HUyUkUjJ4y.elf, 5634.1.000055e2adb27000.000055e2adbae000.rw-.sdmp, HUyUkUjJ4y.elf, 5529.1.000055e2adb27000.000055e2adbae000.rw-.sdmp Binary or memory string: U!/etc/qemu-binfmt/mips
Source: HUyUkUjJ4y.elf, 5516.1.000055e2adb27000.000055e2adbae000.rw-.sdmp, HUyUkUjJ4y.elf, 5518.1.000055e2adb27000.000055e2adbae000.rw-.sdmp, HUyUkUjJ4y.elf, 5633.1.000055e2adb27000.000055e2adbae000.rw-.sdmp, HUyUkUjJ4y.elf, 5655.1.000055e2adb27000.000055e2adbae000.rw-.sdmp, HUyUkUjJ4y.elf, 5642.1.000055e2adb27000.000055e2adbae000.rw-.sdmp, HUyUkUjJ4y.elf, 5519.1.000055e2adb27000.000055e2adbae000.rw-.sdmp, HUyUkUjJ4y.elf, 5634.1.000055e2adb27000.000055e2adbae000.rw-.sdmp, HUyUkUjJ4y.elf, 5529.1.000055e2adb27000.000055e2adbae000.rw-.sdmp Binary or memory string: /etc/qemu-binfmt/mips
Source: HUyUkUjJ4y.elf, 5516.1.00007ffd1dfa8000.00007ffd1dfc9000.rw-.sdmp, HUyUkUjJ4y.elf, 5518.1.00007ffd1dfa8000.00007ffd1dfc9000.rw-.sdmp, HUyUkUjJ4y.elf, 5633.1.00007ffd1dfa8000.00007ffd1dfc9000.rw-.sdmp, HUyUkUjJ4y.elf, 5655.1.00007ffd1dfa8000.00007ffd1dfc9000.rw-.sdmp, HUyUkUjJ4y.elf, 5642.1.00007ffd1dfa8000.00007ffd1dfc9000.rw-.sdmp, HUyUkUjJ4y.elf, 5519.1.00007ffd1dfa8000.00007ffd1dfc9000.rw-.sdmp, HUyUkUjJ4y.elf, 5634.1.00007ffd1dfa8000.00007ffd1dfc9000.rw-.sdmp, HUyUkUjJ4y.elf, 5529.1.00007ffd1dfa8000.00007ffd1dfc9000.rw-.sdmp Binary or memory string: ux86_64/usr/bin/qemu-mips/tmp/HUyUkUjJ4y.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/HUyUkUjJ4y.elf
Source: HUyUkUjJ4y.elf, 5516.1.00007ffd1dfa8000.00007ffd1dfc9000.rw-.sdmp, HUyUkUjJ4y.elf, 5518.1.00007ffd1dfa8000.00007ffd1dfc9000.rw-.sdmp, HUyUkUjJ4y.elf, 5633.1.00007ffd1dfa8000.00007ffd1dfc9000.rw-.sdmp, HUyUkUjJ4y.elf, 5655.1.00007ffd1dfa8000.00007ffd1dfc9000.rw-.sdmp, HUyUkUjJ4y.elf, 5642.1.00007ffd1dfa8000.00007ffd1dfc9000.rw-.sdmp, HUyUkUjJ4y.elf, 5519.1.00007ffd1dfa8000.00007ffd1dfc9000.rw-.sdmp, HUyUkUjJ4y.elf, 5634.1.00007ffd1dfa8000.00007ffd1dfc9000.rw-.sdmp, HUyUkUjJ4y.elf, 5529.1.00007ffd1dfa8000.00007ffd1dfc9000.rw-.sdmp Binary or memory string: /usr/bin/qemu-mips
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs