Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
arm7.xxx.elf

Overview

General Information

Sample name:	arm7.xxx.elf
Analysis ID:	1573489
MD5:	3569b4cd07654d510b52b1f45b2bb21e
SHA1:	83be50929fca9d09386a95e35d2df30f0208260e
SHA256:	fa7b4829842488cdf5e5293e6965675324dd79dbd2016dfdba26c8a91ad90ffa
Tags:	elfMiraiuser-lontze7
Infos:

Detection

Gafgyt, Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Contains symbols with names commonly found in malware

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Sample contains strings that are user agent strings indicative of HTTP manipulation

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

×

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1573489
Start date and time:	2024-12-12 06:44:43 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	arm7.xxx.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/1@2/0

Runtime Messages

Command:	/tmp/arm7.xxx.elf
PID:	5608
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

arm7.xxx.elf (PID: 5608, Parent: 5533, MD5: ae65271c943d3451b7f026d1fadccea6) Arguments: /tmp/arm7.xxx.elf

arm7.xxx.elf New Fork (PID: 5610, Parent: 5608)

arm7.xxx.elf New Fork (PID: 5612, Parent: 5610)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
arm7.xxx.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
arm7.xxx.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
arm7.xxx.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x12af0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12ba4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12bb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12bcc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12be0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12bf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

Source	Rule	Description	Author	Strings
5610.1.00007f5f78001000.00007f5f78016000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5610.1.00007f5f78001000.00007f5f78016000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x12af0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12ba4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12bb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12bcc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12be0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12bf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5608.1.00007f5f78001000.00007f5f78016000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5608.1.00007f5f78001000.00007f5f78016000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x12af0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12ba4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12bb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12bcc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12be0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12bf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: arm7.xxx.elf PID: 5608	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: arm7.xxx.elf PID: 5608	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x5b91:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5ba5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5bb9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5bcd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5be1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5bf5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5c09:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5c1d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5c31:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5c45:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5c59:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5c6d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5c81:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5c95:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5ca9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5cbd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5cd1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5ce5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5cf9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5d0d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5d21:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: arm7.xxx.elf PID: 5610	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: arm7.xxx.elf PID: 5610	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x95d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x95e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x95fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9610:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9624:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9638:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x964c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9660:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9674:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9688:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x969c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x96b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x96c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x96d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x96ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9700:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9714:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9728:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x973c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9750:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9764:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 3 entries

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-12T06:45:58.012764+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35278	185.177.25.107	606	TCP
2024-12-12T06:46:00.171852+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35280	185.177.25.107	606	TCP
2024-12-12T06:46:02.329989+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35282	185.177.25.107	606	TCP
2024-12-12T06:46:04.455354+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35284	185.177.25.107	606	TCP
2024-12-12T06:46:06.580560+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35286	185.177.25.107	606	TCP
2024-12-12T06:46:08.706775+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35288	185.177.25.107	606	TCP
2024-12-12T06:46:10.834966+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35290	185.177.25.107	606	TCP
2024-12-12T06:46:13.022148+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35292	185.177.25.107	606	TCP
2024-12-12T06:46:15.163169+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35294	185.177.25.107	606	TCP
2024-12-12T06:46:17.300156+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35296	185.177.25.107	606	TCP
2024-12-12T06:46:19.424420+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35298	185.177.25.107	606	TCP
2024-12-12T06:46:21.549974+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35300	185.177.25.107	606	TCP
2024-12-12T06:46:23.675998+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35302	185.177.25.107	606	TCP
2024-12-12T06:46:25.785460+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35304	185.177.25.107	606	TCP
2024-12-12T06:46:27.926334+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35306	185.177.25.107	606	TCP
2024-12-12T06:46:30.050147+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35308	185.177.25.107	606	TCP
2024-12-12T06:46:32.176085+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35310	185.177.25.107	606	TCP
2024-12-12T06:46:34.299968+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35312	185.177.25.107	606	TCP
2024-12-12T06:46:36.427134+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35314	185.177.25.107	606	TCP
2024-12-12T06:46:38.552127+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35316	185.177.25.107	606	TCP
2024-12-12T06:46:40.674184+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35318	185.177.25.107	606	TCP
2024-12-12T06:46:42.802483+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35320	185.177.25.107	606	TCP
2024-12-12T06:46:44.909455+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35322	185.177.25.107	606	TCP
2024-12-12T06:46:47.035992+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35324	185.177.25.107	606	TCP
2024-12-12T06:46:49.145385+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35326	185.177.25.107	606	TCP
2024-12-12T06:46:51.285716+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35328	185.177.25.107	606	TCP
2024-12-12T06:46:53.410388+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35330	185.177.25.107	606	TCP
2024-12-12T06:46:55.536517+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35332	185.177.25.107	606	TCP
2024-12-12T06:46:57.684226+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35334	185.177.25.107	606	TCP
2024-12-12T06:46:59.820746+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35336	185.177.25.107	606	TCP
2024-12-12T06:47:01.955817+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35338	185.177.25.107	606	TCP
2024-12-12T06:47:04.129360+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35340	185.177.25.107	606	TCP
2024-12-12T06:47:06.296315+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35342	185.177.25.107	606	TCP
2024-12-12T06:47:08.427512+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35344	185.177.25.107	606	TCP
2024-12-12T06:47:10.551174+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35346	185.177.25.107	606	TCP
2024-12-12T06:47:12.709913+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35348	185.177.25.107	606	TCP
2024-12-12T06:47:14.832883+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35350	185.177.25.107	606	TCP
2024-12-12T06:47:16.986420+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35352	185.177.25.107	606	TCP
2024-12-12T06:47:19.113423+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35354	185.177.25.107	606	TCP
2024-12-12T06:47:21.269397+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35356	185.177.25.107	606	TCP
2024-12-12T06:47:23.394609+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35358	185.177.25.107	606	TCP
2024-12-12T06:47:25.504491+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35360	185.177.25.107	606	TCP
2024-12-12T06:47:27.631260+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35362	185.177.25.107	606	TCP
2024-12-12T06:47:29.757209+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35364	185.177.25.107	606	TCP
2024-12-12T06:47:31.864677+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35366	185.177.25.107	606	TCP
2024-12-12T06:47:33.989357+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35368	185.177.25.107	606	TCP
2024-12-12T06:47:36.097995+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35370	185.177.25.107	606	TCP
2024-12-12T06:47:38.225615+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35372	185.177.25.107	606	TCP
2024-12-12T06:47:40.333121+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35374	185.177.25.107	606	TCP
2024-12-12T06:47:42.442066+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35376	185.177.25.107	606	TCP
2024-12-12T06:47:44.551800+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35378	185.177.25.107	606	TCP
2024-12-12T06:47:46.677575+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35380	185.177.25.107	606	TCP
2024-12-12T06:47:48.802357+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35382	185.177.25.107	606	TCP
2024-12-12T06:47:50.927570+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35384	185.177.25.107	606	TCP
2024-12-12T06:47:53.052161+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35386	185.177.25.107	606	TCP
2024-12-12T06:47:55.176427+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35388	185.177.25.107	606	TCP
2024-12-12T06:47:57.304856+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35390	185.177.25.107	606	TCP
2024-12-12T06:47:59.429307+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35392	185.177.25.107	606	TCP
2024-12-12T06:48:01.568660+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35394	185.177.25.107	606	TCP
2024-12-12T06:48:03.693792+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35396	185.177.25.107	606	TCP
2024-12-12T06:48:05.816598+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35398	185.177.25.107	606	TCP
2024-12-12T06:48:07.945621+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35400	185.177.25.107	606	TCP
2024-12-12T06:48:10.084325+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35402	185.177.25.107	606	TCP
2024-12-12T06:48:12.209950+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35404	185.177.25.107	606	TCP
2024-12-12T06:48:14.334473+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35406	185.177.25.107	606	TCP
2024-12-12T06:48:16.460478+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35408	185.177.25.107	606	TCP
2024-12-12T06:48:18.584426+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35410	185.177.25.107	606	TCP
2024-12-12T06:48:20.711999+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35412	185.177.25.107	606	TCP
2024-12-12T06:48:22.851566+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35414	185.177.25.107	606	TCP
2024-12-12T06:48:24.976958+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35416	185.177.25.107	606	TCP
2024-12-12T06:48:27.101442+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35418	185.177.25.107	606	TCP
2024-12-12T06:48:29.210015+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35420	185.177.25.107	606	TCP
2024-12-12T06:48:31.336084+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35422	185.177.25.107	606	TCP
2024-12-12T06:48:33.461397+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35424	185.177.25.107	606	TCP
2024-12-12T06:48:35.585156+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35426	185.177.25.107	606	TCP
2024-12-12T06:48:37.709539+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35428	185.177.25.107	606	TCP
2024-12-12T06:48:39.833801+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35430	185.177.25.107	606	TCP
2024-12-12T06:48:41.959334+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35434	185.177.25.107	606	TCP
2024-12-12T06:48:44.085184+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35436	185.177.25.107	606	TCP
2024-12-12T06:48:46.208163+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35438	185.177.25.107	606	TCP
2024-12-12T06:48:48.321239+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35440	185.177.25.107	606	TCP
2024-12-12T06:48:50.447249+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35442	185.177.25.107	606	TCP
2024-12-12T06:48:52.555429+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35444	185.177.25.107	606	TCP
2024-12-12T06:48:54.684217+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35446	185.177.25.107	606	TCP
2024-12-12T06:48:56.791642+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35448	185.177.25.107	606	TCP
2024-12-12T06:48:58.899164+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35450	185.177.25.107	606	TCP
2024-12-12T06:49:01.011235+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35452	185.177.25.107	606	TCP
2024-12-12T06:49:03.135700+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35454	185.177.25.107	606	TCP
2024-12-12T06:49:05.262879+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35456	185.177.25.107	606	TCP
2024-12-12T06:49:07.387015+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35458	185.177.25.107	606	TCP
2024-12-12T06:49:09.508979+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35460	185.177.25.107	606	TCP
2024-12-12T06:49:11.623284+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35462	185.177.25.107	606	TCP
2024-12-12T06:49:13.746799+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35464	185.177.25.107	606	TCP
2024-12-12T06:49:15.870503+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35466	185.177.25.107	606	TCP
2024-12-12T06:49:17.994893+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35468	185.177.25.107	606	TCP
2024-12-12T06:49:20.120398+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35470	185.177.25.107	606	TCP
2024-12-12T06:49:22.295310+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35472	185.177.25.107	606	TCP
2024-12-12T06:49:24.434576+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35474	185.177.25.107	606	TCP
2024-12-12T06:49:26.541721+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35476	185.177.25.107	606	TCP
2024-12-12T06:49:28.668744+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35478	185.177.25.107	606	TCP
2024-12-12T06:49:30.793364+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35480	185.177.25.107	606	TCP
2024-12-12T06:49:32.917713+0100	2846526	1	A Network Trojan was detected	192.168.2.14	35482	185.177.25.107	606	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: arm7.xxx.elf

Avira: detected

Found malware configuration

Source: arm7.xxx.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "185.177.25.107:606"}

Multi AV Scanner detection for submitted file

Source: arm7.xxx.elf

Virustotal: Detection: 54%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/arm7.xxx.elf (PID: 5608)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35280 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35294 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35286 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35296 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35292 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35288 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35300 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35302 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35312 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35290 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35284 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35306 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35304 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35322 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35318 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35332 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35320 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35334 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35278 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35358 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35338 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35310 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35298 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35330 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35316 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35348 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35344 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35374 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35324 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35326 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35328 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35410 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35424 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35346 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35414 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35308 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35436 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35444 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35336 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35450 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35366 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35364 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35458 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35362 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35470 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35434 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35418 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35282 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35482 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35314 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35448 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35350 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35390 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35352 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35340 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35396 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35416 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35360 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35438 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35422 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35420 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35478 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35472 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35356 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35342 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35376 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35412 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35398 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35384 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35392 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35462 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35378 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35408 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35354 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35406 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35464 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35474 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35382 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35466 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35402 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35370 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35460 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35446 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35426 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35404 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35442 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35394 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35468 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35372 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35476 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35386 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35456 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35400 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35440 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35454 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35380 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35388 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35480 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35368 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35428 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35430 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:35452 -> 185.177.25.107:606

Source: global traffic

TCP traffic: 192.168.2.14:35278 -> 185.177.25.107:606

Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

System Summary

Malicious sample detected (through community Yara rule)

Source: arm7.xxx.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5610.1.00007f5f78001000.00007f5f78016000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5608.1.00007f5f78001000.00007f5f78016000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: arm7.xxx.elf PID: 5608, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: arm7.xxx.elf PID: 5610, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample

Name: vseattack

Source: arm7.xxx.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5610.1.00007f5f78001000.00007f5f78016000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5608.1.00007f5f78001000.00007f5f78016000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: arm7.xxx.elf PID: 5608, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: arm7.xxx.elf PID: 5610, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/1@2/0

Source: /tmp/arm7.xxx.elf (PID: 5608)

Queries kernel information via 'uname':

Jump to behavior

Source: arm7.xxx.elf, 5608.1.00007ffe26e96000.00007ffe26eb7000.rw-.sdmp, arm7.xxx.elf, 5610.1.00007ffe26e96000.00007ffe26eb7000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-ppc/tmp/arm7.xxx.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/arm7.xxx.elf
Source: arm7.xxx.elf, 5608.1.00007ffe26e96000.00007ffe26eb7000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.X9i7Kf
Source: arm7.xxx.elf, 5608.1.000056181be66000.000056181bf16000.rw-.sdmp, arm7.xxx.elf, 5610.1.000056181be66000.000056181bf16000.rw-.sdmp	Binary or memory string: !/etc/qemu-binfmt/ppc11!hotpluggableq
Source: arm7.xxx.elf, 5608.1.00007ffe26e96000.00007ffe26eb7000.rw-.sdmp	Binary or memory string: V/tmp/qemu-open.X9i7Kf\D
Source: arm7.xxx.elf, 5608.1.000056181be66000.000056181bf16000.rw-.sdmp, arm7.xxx.elf, 5610.1.000056181be66000.000056181bf16000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/ppc
Source: arm7.xxx.elf, 5608.1.00007ffe26e96000.00007ffe26eb7000.rw-.sdmp, arm7.xxx.elf, 5610.1.00007ffe26e96000.00007ffe26eb7000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-ppc

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: arm7.xxx.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: arm7.xxx.elf, type: SAMPLE
Source: Yara match	File source: 5610.1.00007f5f78001000.00007f5f78016000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5608.1.00007f5f78001000.00007f5f78016000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: arm7.xxx.elf PID: 5608, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: arm7.xxx.elf PID: 5610, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: arm7.xxx.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: arm7.xxx.elf, type: SAMPLE
Source: Yara match	File source: 5610.1.00007f5f78001000.00007f5f78016000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5608.1.00007f5f78001000.00007f5f78016000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: arm7.xxx.elf PID: 5608, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: arm7.xxx.elf PID: 5610, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "185.177.25.107:606"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
arm7.xxx.elf	55%	Virustotal		Browse
arm7.xxx.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
185.177.25.107:606	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.24	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
185.177.25.107:606	true	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
185.177.25.107	unknown	Turkey		18013	ASLINE-AS-APASLINELIMITEDHK	true

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.177.25.107	m68k.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	ppc.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	arm6.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	mpsl.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	m68k.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	arm6.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	mpsl.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	fruit.sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	fruit.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	fruit.x86.elf	Get hash	malicious	Mirai, Gafgyt	Browse	162.213.35.24
	fruit.ppc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	fruit.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	fruit.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ASLINE-AS-APASLINELIMITEDHK	m68k.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	ppc.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	arm6.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	mpsl.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	fruit.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	fruit.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	fruit.sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	fruit.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	fruit.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	fruit.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/qemu-open.X9i7Kf (deleted)

Process:	/tmp/arm7.xxx.elf
File Type:	ASCII text
Category:	dropped
Size (bytes):	230
Entropy (8bit):	3.709552666863289
Encrypted:	false
SSDEEP:	6:iekrEcvwAsE5KlwSd4pzKaV6Lpms/a/1VCxGF:ur+m5MwSdIKaV6L1adVRF
MD5:	2E667F43AE18CD1FE3C108641708A82C
SHA1:	12B90DE2DA0FBCFE66F3D6130905E56C8D6A68D3
SHA-256:	6F721492E7A337C5B498A8F55F5EB7AC745AFF716D0B5B08EFF2C1B6B250F983
SHA-512:	D2A0EE2509154EC1098994F38BE172F98F4150399C534A04D5C675D7C05630802225019F19344CC9070C576BC465A4FEB382AC7712DE6BF25E9244B54A9DB830
Malicious:	false
Reputation:	high, very likely benign file
Preview:	Iface.Destination.Gateway .Flags.RefCnt.Use.Metric.Mask..MTU.Window.IRTT .ens160.00000000.c0a80201.0003.0.0.0.00000000.0.0.0.ens160.c0a80200.00000000.0001.0.0.0.ffffff00.0.0.0.

Static File Info

General

File type:	ELF 32-bit MSB executable, PowerPC or cisco 4500, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	6.120670856256462
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	arm7.xxx.elf
File size:	113'467 bytes
MD5:	3569b4cd07654d510b52b1f45b2bb21e
SHA1:	83be50929fca9d09386a95e35d2df30f0208260e
SHA256:	fa7b4829842488cdf5e5293e6965675324dd79dbd2016dfdba26c8a91ad90ffa
SHA512:	8425309ac08d42d6593540905d6a70999a0e0d379cf66dacd99a951003b64b071c2ac1bfa01654185cdfe55e63392c2929a1b0a392bb8cdffdbd584161c81a13
SSDEEP:	1536:SREr8PURtk0tflMhlFqASxH2GrgZ29/b3Y7mmsPsSaF2Run:SR8Az2MzYWG/oSmqsSacRun
TLSH:	24B35C27A3290687C98B49B12CEF3BF187A9E8E113E35545960EBFD01773EB05052F96
File Content Preview:	.ELF...........................4.._......4. ...(......................N...N...............P...P...P.......s...............PT..PT..PT................dt.Q.............................!..\|......$H...H."....$8!. \|...N.. .!..\|.......?.........ST..../...@..`= .

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	PowerPC
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x10000218
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	4
Section Header Offset:	89872
Section Header Size:	40
Number of Section Headers:	19
Header String Table Index:	16

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x100000b4	0xb4	0x24	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x100000d8	0xd8	0x122e0	0x0	0x6	AX	0	0	4
.fini	PROGBITS	0x100123b8	0x123b8	0x20	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x100123d8	0x123d8	0x2b20	0x0	0x2	A	0	0	8
.eh_frame	PROGBITS	0x10025000	0x15000	0x54	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x10025054	0x15054	0x8	0x0	0x403	WAT	0	0	4
.ctors	PROGBITS	0x10025054	0x15054	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x1002505c	0x1505c	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x10025064	0x15064	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x10025068	0x15068	0x1f2	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x1002525c	0x1525c	0x10	0x4	0x7	WAX	0	0	4
.sdata	PROGBITS	0x1002526c	0x1526c	0x54	0x0	0x3	WA	0	0	4
.sbss	NOBITS	0x100252c0	0x152c0	0x94	0x0	0x3	WA	0	0	8
.bss	NOBITS	0x10025354	0x152c0	0x708c	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x152c0	0xbd0	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x15e90	0x7e	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x16208	0x3230	0x10	0x0		18	285	4
.strtab	STRTAB	0x0	0x19438	0x2703	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Prog Interpreter	Section Mappings
LOAD	0x0	0x10000000	0x10000000	0x14ef8	0x14ef8	6.1490	0x5	R E	0x10000		.init .text .fini .rodata
LOAD	0x15000	0x10025000	0x10025000	0x2c0	0x73e0	4.1798	0x7	RWE	0x10000		.eh_frame .tbss .ctors .dtors .jcr .data .got .sdata .sbss .bss
TLS	0x15054	0x10025054	0x10025054	0x0	0x8	0.0000	0x4	R	0x4		.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Symbols

Name	Version Info Name	Version Info File Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
			.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
			.symtab	0x100000b4	0	SECTION	<unknown>	DEFAULT	1
			.symtab	0x100000d8	0	SECTION	<unknown>	DEFAULT	2
			.symtab	0x100123b8	0	SECTION	<unknown>	DEFAULT	3
			.symtab	0x100123d8	0	SECTION	<unknown>	DEFAULT	4
			.symtab	0x10025000	0	SECTION	<unknown>	DEFAULT	5
			.symtab	0x10025054	0	SECTION	<unknown>	DEFAULT	6
			.symtab	0x10025054	0	SECTION	<unknown>	DEFAULT	7
			.symtab	0x1002505c	0	SECTION	<unknown>	DEFAULT	8
			.symtab	0x10025064	0	SECTION	<unknown>	DEFAULT	9
			.symtab	0x10025068	0	SECTION	<unknown>	DEFAULT	10
			.symtab	0x1002525c	0	SECTION	<unknown>	DEFAULT	11
			.symtab	0x1002526c	0	SECTION	<unknown>	DEFAULT	12
			.symtab	0x100252c0	0	SECTION	<unknown>	DEFAULT	13
			.symtab	0x10025354	0	SECTION	<unknown>	DEFAULT	14
			.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
C.107.5839			.symtab	0x1001288c	8	OBJECT	<unknown>	DEFAULT	4
C.140.6146			.symtab	0x10013208	24	OBJECT	<unknown>	DEFAULT	4
C.3.5322			.symtab	0x10013e40	12	OBJECT	<unknown>	DEFAULT	4
C.3.6030			.symtab	0x10013f34	12	OBJECT	<unknown>	DEFAULT	4
C.3.6052			.symtab	0x10013e88	12	OBJECT	<unknown>	DEFAULT	4
C.3.6106			.symtab	0x10013e7c	12	OBJECT	<unknown>	DEFAULT	4
C.4.5416			.symtab	0x10013e64	24	OBJECT	<unknown>	DEFAULT	4
C.4.6053			.symtab	0x10013e94	12	OBJECT	<unknown>	DEFAULT	4
C.6.6061			.symtab	0x10013ea0	12	OBJECT	<unknown>	DEFAULT	4
C.7.5462			.symtab	0x10013e4c	12	OBJECT	<unknown>	DEFAULT	4
Q			.symtab	0x10025370	16384	OBJECT	<unknown>	DEFAULT	14
Sakura_Bot.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
SendSTD			.symtab	0x1000355c	320	FUNC	<unknown>	DEFAULT	2
SendSTDHEX			.symtab	0x10002b68	344	FUNC	<unknown>	DEFAULT	2
SendSTD_HEX			.symtab	0x100037e8	376	FUNC	<unknown>	DEFAULT	2
SendUDP			.symtab	0x100020e8	1120	FUNC	<unknown>	DEFAULT	2
_Exit			.symtab	0x10006f38	92	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_			.symtab	0x10025260	0	OBJECT	<unknown>	HIDDEN	11
_Jv_RegisterClasses			.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_SDA_BASE_			.symtab	0x1002d26c	0	NOTYPE	<unknown>	DEFAULT	12
_WRITE.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__			.symtab	0x10025058	0	OBJECT	<unknown>	DEFAULT	7
__CTOR_LIST__			.symtab	0x10025054	0	OBJECT	<unknown>	DEFAULT	7
__C_ctype_b			.symtab	0x10025274	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_b.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data			.symtab	0x1001340a	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower			.symtab	0x100252b8	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_tolower.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data			.symtab	0x10014bf8	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper			.symtab	0x1002527c	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_toupper.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data			.symtab	0x1001370a	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__			.symtab	0x10025060	0	OBJECT	<unknown>	DEFAULT	8
__DTOR_LIST__			.symtab	0x1002505c	0	OBJECT	<unknown>	DEFAULT	8
__EH_FRAME_BEGIN__			.symtab	0x10025000	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__			.symtab	0x10025050	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b			.symtab	0x10025274	4	OBJECT	<unknown>	HIDDEN	12
__GI___C_ctype_tolower			.symtab	0x100252b8	4	OBJECT	<unknown>	HIDDEN	12
__GI___C_ctype_toupper			.symtab	0x1002527c	4	OBJECT	<unknown>	HIDDEN	12
__GI___close			.symtab	0x10009fe4	116	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel			.symtab	0x10009ff0	16	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b			.symtab	0x10025278	4	OBJECT	<unknown>	HIDDEN	12
__GI___ctype_tolower			.symtab	0x100252bc	4	OBJECT	<unknown>	HIDDEN	12
__GI___ctype_toupper			.symtab	0x10025280	4	OBJECT	<unknown>	HIDDEN	12
__GI___errno_location			.symtab	0x10007168	20	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel			.symtab	0x10006dd8	116	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked			.symtab	0x1000c3b0	312	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r			.symtab	0x10010c24	48	FUNC	<unknown>	HIDDEN	2
__GI___libc_close			.symtab	0x10009fe4	116	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl			.symtab	0x10006e4c	236	FUNC	<unknown>	HIDDEN	2
__GI___libc_open			.symtab	0x1000a058	132	FUNC	<unknown>	HIDDEN	2
__GI___libc_read			.symtab	0x1000a160	132	FUNC	<unknown>	HIDDEN	2
__GI___libc_waitpid			.symtab	0x1000a1e4	132	FUNC	<unknown>	HIDDEN	2
__GI___libc_write			.symtab	0x1000a0dc	132	FUNC	<unknown>	HIDDEN	2
__GI___open			.symtab	0x1000a058	132	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel			.symtab	0x1000a064	16	FUNC	<unknown>	HIDDEN	2
__GI___read			.symtab	0x1000a160	132	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel			.symtab	0x1000a16c	16	FUNC	<unknown>	HIDDEN	2
__GI___register_atfork			.symtab	0x10009c18	356	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset			.symtab	0x10007d9c	40	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset			.symtab	0x10007dc4	40	FUNC	<unknown>	HIDDEN	2
__GI___sigismember			.symtab	0x10007d74	40	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini			.symtab	0x1000a3e4	144	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init			.symtab	0x1000a4d4	100	FUNC	<unknown>	HIDDEN	2
__GI___waitpid			.symtab	0x1000a1e4	132	FUNC	<unknown>	HIDDEN	2
__GI___write			.symtab	0x1000a0dc	132	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel			.symtab	0x1000a0e8	16	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r			.symtab	0x10010c54	284	FUNC	<unknown>	HIDDEN	2
__GI__exit			.symtab	0x10006f38	92	FUNC	<unknown>	HIDDEN	2
__GI_abort			.symtab	0x10008c3c	248	FUNC	<unknown>	HIDDEN	2
__GI_atoi			.symtab	0x10009254	12	FUNC	<unknown>	HIDDEN	2
__GI_brk			.symtab	0x1000d560	52	FUNC	<unknown>	HIDDEN	2
__GI_chdir			.symtab	0x10006fc8	52	FUNC	<unknown>	HIDDEN	2
__GI_close			.symtab	0x10009fe4	116	FUNC	<unknown>	HIDDEN	2
__GI_closedir			.symtab	0x1000ab64	212	FUNC	<unknown>	HIDDEN	2
__GI_config_close			.symtab	0x1000b270	80	FUNC	<unknown>	HIDDEN	2
__GI_config_open			.symtab	0x1000b2c0	84	FUNC	<unknown>	HIDDEN	2
__GI_config_read			.symtab	0x1000af3c	820	FUNC	<unknown>	HIDDEN	2
__GI_connect			.symtab	0x10007940	120	FUNC	<unknown>	HIDDEN	2
__GI_exit			.symtab	0x10009420	136	FUNC	<unknown>	HIDDEN	2
__GI_fclose			.symtab	0x1000b314	640	FUNC	<unknown>	HIDDEN	2
__GI_fcntl			.symtab	0x10006e4c	236	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked			.symtab	0x1000c0c8	744	FUNC	<unknown>	HIDDEN	2
__GI_fgetc			.symtab	0x1000bc88	304	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked			.symtab	0x1000c3b0	312	FUNC	<unknown>	HIDDEN	2
__GI_fgets			.symtab	0x1000bdb8	244	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked			.symtab	0x1000c4e8	196	FUNC	<unknown>	HIDDEN	2
__GI_fopen			.symtab	0x1000b594	12	FUNC	<unknown>	HIDDEN	2
__GI_fork			.symtab	0x100098ac	824	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked			.symtab	0x10010a1c	92	FUNC	<unknown>	HIDDEN	2
__GI_fseek			.symtab	0x1001207c	16	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64			.symtab	0x1001208c	404	FUNC	<unknown>	HIDDEN	2
__GI_fstat			.symtab	0x1000d5c8	124	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked			.symtab	0x10010a78	192	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked			.symtab	0x1000c3b0	312	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize			.symtab	0x1000a8a4	56	FUNC	<unknown>	HIDDEN	2
__GI_getegid			.symtab	0x1000a8dc	16	FUNC	<unknown>	HIDDEN	2
__GI_geteuid			.symtab	0x1000a8ec	16	FUNC	<unknown>	HIDDEN	2
__GI_getgid			.symtab	0x1000a8fc	16	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname			.symtab	0x100078bc	8	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname2			.symtab	0x100078c4	72	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname2_r			.symtab	0x1000ca68	664	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r			.symtab	0x1000f1a0	748	FUNC	<unknown>	HIDDEN	2
__GI_gethostname			.symtab	0x1000f4e4	136	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize			.symtab	0x1000a90c	28	FUNC	<unknown>	HIDDEN	2
__GI_getpid			.symtab	0x10009d7c	56	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit			.symtab	0x1000a928	52	FUNC	<unknown>	HIDDEN	2
__GI_getsockname			.symtab	0x100079b8	52	FUNC	<unknown>	HIDDEN	2
__GI_getuid			.symtab	0x1000a95c	16	FUNC	<unknown>	HIDDEN	2
__GI_htonl			.symtab	0x100077d0	4	FUNC	<unknown>	HIDDEN	2
__GI_htons			.symtab	0x100077d4	4	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr			.symtab	0x10007888	52	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton			.symtab	0x1000c998	208	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa			.symtab	0x10007854	52	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r			.symtab	0x100077d8	124	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop			.symtab	0x1000e1a8	728	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton			.symtab	0x1000de48	524	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r			.symtab	0x10009088	236	FUNC	<unknown>	HIDDEN	2
__GI_ioctl			.symtab	0x10006cf4	228	FUNC	<unknown>	HIDDEN	2
__GI_isatty			.symtab	0x1000c96c	44	FUNC	<unknown>	HIDDEN	2
__GI_isspace			.symtab	0x10007130	24	FUNC	<unknown>	HIDDEN	2
__GI_kill			.symtab	0x10006ffc	52	FUNC	<unknown>	HIDDEN	2
__GI_lseek64			.symtab	0x1000f6c8	112	FUNC	<unknown>	HIDDEN	2
__GI_memchr			.symtab	0x10011d64	264	FUNC	<unknown>	HIDDEN	2
__GI_memcpy			.symtab	0x1000717c	156	FUNC	<unknown>	HIDDEN	2
__GI_memmove			.symtab	0x1000c5ac	164	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy			.symtab	0x1000c650	52	FUNC	<unknown>	HIDDEN	2
__GI_memrchr			.symtab	0x10011e6c	244	FUNC	<unknown>	HIDDEN	2
__GI_memset			.symtab	0x10007218	144	FUNC	<unknown>	HIDDEN	2
__GI_mmap			.symtab	0x1000a96c	52	FUNC	<unknown>	HIDDEN	2
__GI_mremap			.symtab	0x1000d644	52	FUNC	<unknown>	HIDDEN	2
__GI_munmap			.symtab	0x1000a9a0	52	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep			.symtab	0x1000aa08	112	FUNC	<unknown>	HIDDEN	2
__GI_ntohl			.symtab	0x100077c8	4	FUNC	<unknown>	HIDDEN	2
__GI_ntohs			.symtab	0x100077cc	4	FUNC	<unknown>	HIDDEN	2
__GI_open			.symtab	0x1000a058	132	FUNC	<unknown>	HIDDEN	2
__GI_opendir			.symtab	0x1000acf0	208	FUNC	<unknown>	HIDDEN	2
__GI_poll			.symtab	0x1000f5a0	120	FUNC	<unknown>	HIDDEN	2
__GI_raise			.symtab	0x10009db4	148	FUNC	<unknown>	HIDDEN	2
__GI_random			.symtab	0x10008d38	104	FUNC	<unknown>	HIDDEN	2
__GI_random_r			.symtab	0x10008f08	140	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr			.symtab	0x1000dbf8	184	FUNC	<unknown>	HIDDEN	2
__GI_read			.symtab	0x1000a160	132	FUNC	<unknown>	HIDDEN	2
__GI_readdir64			.symtab	0x1000ae78	196	FUNC	<unknown>	HIDDEN	2
__GI_recv			.symtab	0x10007a54	128	FUNC	<unknown>	HIDDEN	2
__GI_sbrk			.symtab	0x1000aa78	116	FUNC	<unknown>	HIDDEN	2
__GI_select			.symtab	0x10007064	136	FUNC	<unknown>	HIDDEN	2
__GI_send			.symtab	0x10007b08	128	FUNC	<unknown>	HIDDEN	2
__GI_sendto			.symtab	0x10007bbc	144	FUNC	<unknown>	HIDDEN	2
__GI_setsid			.symtab	0x100070ec	52	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt			.symtab	0x10007c4c	52	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r			.symtab	0x10009174	224	FUNC	<unknown>	HIDDEN	2
__GI_sigaction			.symtab	0x1000cd00	36	FUNC	<unknown>	HIDDEN	2
__GI_signal			.symtab	0x10007cb4	192	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask			.symtab	0x1000aaec	120	FUNC	<unknown>	HIDDEN	2
__GI_sleep			.symtab	0x10009e48	292	FUNC	<unknown>	HIDDEN	2
__GI_socket			.symtab	0x10007c80	52	FUNC	<unknown>	HIDDEN	2
__GI_sprintf			.symtab	0x1000f738	136	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r			.symtab	0x10008f94	244	FUNC	<unknown>	HIDDEN	2
__GI_stat			.symtab	0x1000f618	124	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp			.symtab	0x10011f60	80	FUNC	<unknown>	HIDDEN	2
__GI_strchr			.symtab	0x100072a8	256	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul			.symtab	0x1000c684	248	FUNC	<unknown>	HIDDEN	2
__GI_strcmp			.symtab	0x100073a8	52	FUNC	<unknown>	HIDDEN	2
__GI_strcoll			.symtab	0x100073a8	52	FUNC	<unknown>	HIDDEN	2
__GI_strcpy			.symtab	0x100073dc	32	FUNC	<unknown>	HIDDEN	2
__GI_strcspn			.symtab	0x1000c77c	96	FUNC	<unknown>	HIDDEN	2
__GI_strdup			.symtab	0x10010d70	80	FUNC	<unknown>	HIDDEN	2
__GI_strlen			.symtab	0x100073fc	160	FUNC	<unknown>	HIDDEN	2
__GI_strncpy			.symtab	0x1000dcb0	188	FUNC	<unknown>	HIDDEN	2
__GI_strnlen			.symtab	0x10010b38	236	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk			.symtab	0x1000c930	60	FUNC	<unknown>	HIDDEN	2
__GI_strrchr			.symtab	0x1000c7dc	112	FUNC	<unknown>	HIDDEN	2
__GI_strspn			.symtab	0x1000c84c	72	FUNC	<unknown>	HIDDEN	2
__GI_strstr			.symtab	0x1000749c	240	FUNC	<unknown>	HIDDEN	2
__GI_strtok			.symtab	0x100075a8	12	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r			.symtab	0x1000c894	156	FUNC	<unknown>	HIDDEN	2
__GI_strtol			.symtab	0x10009260	8	FUNC	<unknown>	HIDDEN	2
__GI_sysconf			.symtab	0x100095f0	624	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr			.symtab	0x100075b4	156	FUNC	<unknown>	HIDDEN	2
__GI_tcsetattr			.symtab	0x10007650	376	FUNC	<unknown>	HIDDEN	2
__GI_time			.symtab	0x10007120	16	FUNC	<unknown>	HIDDEN	2
__GI_toupper			.symtab	0x10007148	32	FUNC	<unknown>	HIDDEN	2
__GI_uname			.symtab	0x1000f694	52	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf			.symtab	0x1000f7c0	224	FUNC	<unknown>	HIDDEN	2
__GI_waitpid			.symtab	0x1000a1e4	132	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb			.symtab	0x10011218	92	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs			.symtab	0x10011284	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs			.symtab	0x10011274	16	FUNC	<unknown>	HIDDEN	2
__GI_write			.symtab	0x1000a0dc	132	FUNC	<unknown>	HIDDEN	2
__JCR_END__			.symtab	0x10025064	0	OBJECT	<unknown>	DEFAULT	9
__JCR_LIST__			.symtab	0x10025064	0	OBJECT	<unknown>	DEFAULT	9
__app_fini			.symtab	0x10025304	4	OBJECT	<unknown>	HIDDEN	13
__atexit_lock			.symtab	0x10025174	24	OBJECT	<unknown>	DEFAULT	10
__bss_start			.symtab	0x100252c0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd			.symtab	0x1000a474	96	FUNC	<unknown>	DEFAULT	2
__close			.symtab	0x10009fe4	116	FUNC	<unknown>	DEFAULT	2
__close_nameservers			.symtab	0x1000f0b8	144	FUNC	<unknown>	HIDDEN	2
__close_nocancel			.symtab	0x10009ff0	16	FUNC	<unknown>	DEFAULT	2
__ctype_b			.symtab	0x10025278	4	OBJECT	<unknown>	DEFAULT	12
__ctype_tolower			.symtab	0x100252bc	4	OBJECT	<unknown>	DEFAULT	12
__ctype_toupper			.symtab	0x10025280	4	OBJECT	<unknown>	DEFAULT	12
__curbrk			.symtab	0x1002533c	4	OBJECT	<unknown>	DEFAULT	13
__data_start			.symtab	0x10025070	0	NOTYPE	<unknown>	DEFAULT	10
__decode_dotted			.symtab	0x1000e480	280	FUNC	<unknown>	HIDDEN	2
__decode_header			.symtab	0x10010ea8	188	FUNC	<unknown>	HIDDEN	2
__deregister_frame_info			.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup			.symtab	0x1000e598	1672	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux			.symtab	0x1001234c	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux			.symtab	0x100000d8	0	FUNC	<unknown>	DEFAULT	2
__dso_handle			.symtab	0x10025068	0	OBJECT	<unknown>	HIDDEN	10
__encode_dotted			.symtab	0x10011fb0	204	FUNC	<unknown>	HIDDEN	2
__encode_header			.symtab	0x10010dc0	232	FUNC	<unknown>	HIDDEN	2
__encode_question			.symtab	0x10010f64	124	FUNC	<unknown>	HIDDEN	2
__environ			.symtab	0x100252fc	4	OBJECT	<unknown>	DEFAULT	13
__errno_location			.symtab	0x10007168	20	FUNC	<unknown>	DEFAULT	2
__errno_location.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup			.symtab	0x100252e8	4	OBJECT	<unknown>	HIDDEN	13
__fcntl_nocancel			.symtab	0x10006dd8	116	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked			.symtab	0x1000c3b0	312	FUNC	<unknown>	DEFAULT	2
__fini_array_end			.symtab	0x10025054	0	NOTYPE	<unknown>	HIDDEN	6
__fini_array_start			.symtab	0x10025054	0	NOTYPE	<unknown>	HIDDEN	6
__fork			.symtab	0x100098ac	824	FUNC	<unknown>	DEFAULT	2
__fork_generation_pointer			.symtab	0x100252ec	4	OBJECT	<unknown>	HIDDEN	13
__fork_handlers			.symtab	0x100252f0	4	OBJECT	<unknown>	HIDDEN	13
__fork_lock			.symtab	0x100252f4	4	OBJECT	<unknown>	HIDDEN	13
__get_hosts_byname_r			.symtab	0x1000f148	88	FUNC	<unknown>	HIDDEN	2
__getdents64			.symtab	0x1000d828	344	FUNC	<unknown>	HIDDEN	2
__getpagesize			.symtab	0x1000a90c	28	FUNC	<unknown>	DEFAULT	2
__getpid			.symtab	0x10009d7c	56	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r			.symtab	0x10010c24	48	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location			.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end			.symtab	0x10025054	0	NOTYPE	<unknown>	HIDDEN	6
__init_array_start			.symtab	0x10025054	0	NOTYPE	<unknown>	HIDDEN	6
__libc_close			.symtab	0x10009fe4	116	FUNC	<unknown>	DEFAULT	2
__libc_connect			.symtab	0x10007940	120	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel			.symtab	0x1000a268	124	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel			.symtab	0x1000a2e4	172	FUNC	<unknown>	HIDDEN	2
__libc_errno			.symtab	0x0	4	TLS	<unknown>	HIDDEN	6
__libc_fcntl			.symtab	0x10006e4c	236	FUNC	<unknown>	DEFAULT	2
__libc_fork			.symtab	0x100098ac	824	FUNC	<unknown>	DEFAULT	2
__libc_h_errno			.symtab	0x4	4	TLS	<unknown>	HIDDEN	6
__libc_nanosleep			.symtab	0x1000aa08	112	FUNC	<unknown>	DEFAULT	2
__libc_open			.symtab	0x1000a058	132	FUNC	<unknown>	DEFAULT	2
__libc_read			.symtab	0x1000a160	132	FUNC	<unknown>	DEFAULT	2
__libc_recv			.symtab	0x10007a54	128	FUNC	<unknown>	DEFAULT	2
__libc_select			.symtab	0x10007064	136	FUNC	<unknown>	DEFAULT	2
__libc_send			.symtab	0x10007b08	128	FUNC	<unknown>	DEFAULT	2
__libc_sendto			.symtab	0x10007bbc	144	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls			.symtab	0x1000d250	464	FUNC	<unknown>	DEFAULT	2
__libc_sigaction			.symtab	0x1000cd00	36	FUNC	<unknown>	DEFAULT	2
__libc_stack_end			.symtab	0x100252f8	4	OBJECT	<unknown>	DEFAULT	13
__libc_waitpid			.symtab	0x1000a1e4	132	FUNC	<unknown>	DEFAULT	2
__libc_write			.symtab	0x1000a0dc	132	FUNC	<unknown>	DEFAULT	2
__linkin_atfork			.symtab	0x10009be4	52	FUNC	<unknown>	HIDDEN	2
__lll_lock_wait_private			.symtab	0x10009f6c	120	FUNC	<unknown>	HIDDEN	2
__local_nameserver			.symtab	0x10013ecc	16	OBJECT	<unknown>	HIDDEN	4
__malloc_consolidate			.symtab	0x10008824	460	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index			.symtab	0x10007dec	112	FUNC	<unknown>	DEFAULT	2
__malloc_lock			.symtab	0x10025098	24	OBJECT	<unknown>	DEFAULT	10
__malloc_state			.symtab	0x1002c018	888	OBJECT	<unknown>	DEFAULT	14
__malloc_trim			.symtab	0x1000876c	184	FUNC	<unknown>	DEFAULT	2
__nameserver			.symtab	0x10025348	4	OBJECT	<unknown>	HIDDEN	13
__nameservers			.symtab	0x1002534c	4	OBJECT	<unknown>	HIDDEN	13
__nptl_deallocate_tsd			.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads			.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open			.symtab	0x1000a058	132	FUNC	<unknown>	DEFAULT	2
__open_etc_hosts			.symtab	0x10010fe0	12	FUNC	<unknown>	HIDDEN	2
__open_nameservers			.symtab	0x1000eca4	1044	FUNC	<unknown>	HIDDEN	2
__open_nocancel			.symtab	0x1000a064	16	FUNC	<unknown>	DEFAULT	2
__pagesize			.symtab	0x10025300	4	OBJECT	<unknown>	DEFAULT	13
__preinit_array_end			.symtab	0x10025054	0	NOTYPE	<unknown>	HIDDEN	6
__preinit_array_start			.symtab	0x10025054	0	NOTYPE	<unknown>	HIDDEN	6
__progname			.symtab	0x10025288	4	OBJECT	<unknown>	DEFAULT	12
__progname_full			.symtab	0x1002528c	4	OBJECT	<unknown>	DEFAULT	12
__pthread_initialize_minimal			.symtab	0x1000d420	12	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_init			.symtab	0x1000a398	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock			.symtab	0x1000a390	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock			.symtab	0x1000a390	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock			.symtab	0x1000a390	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0			.symtab	0x1000a390	8	FUNC	<unknown>	DEFAULT	2
__pthread_unwind			.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__read			.symtab	0x1000a160	132	FUNC	<unknown>	DEFAULT	2
__read_etc_hosts_r			.symtab	0x10010fec	556	FUNC	<unknown>	HIDDEN	2
__read_nocancel			.symtab	0x1000a16c	16	FUNC	<unknown>	DEFAULT	2
__register_atfork			.symtab	0x10009c18	356	FUNC	<unknown>	DEFAULT	2
__register_frame_info			.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__res_sync			.symtab	0x10025340	4	OBJECT	<unknown>	HIDDEN	13
__resolv_attempts			.symtab	0x100252b1	1	OBJECT	<unknown>	HIDDEN	12
__resolv_lock			.symtab	0x1002bff4	24	OBJECT	<unknown>	DEFAULT	14
__resolv_timeout			.symtab	0x100252b0	1	OBJECT	<unknown>	HIDDEN	12
__rtld_fini			.symtab	0x10025308	4	OBJECT	<unknown>	HIDDEN	13
__searchdomain			.symtab	0x10025344	4	OBJECT	<unknown>	HIDDEN	13
__searchdomains			.symtab	0x10025350	4	OBJECT	<unknown>	HIDDEN	13
__sigaddset			.symtab	0x10007d9c	40	FUNC	<unknown>	DEFAULT	2
__sigdelset			.symtab	0x10007dc4	40	FUNC	<unknown>	DEFAULT	2
__sigismember			.symtab	0x10007d74	40	FUNC	<unknown>	DEFAULT	2
__sigjmp_save			.symtab	0x1000f48c	88	FUNC	<unknown>	HIDDEN	2
__sigsetjmp			.symtab	0x1000d4b4	172	FUNC	<unknown>	DEFAULT	2
__stdin			.symtab	0x1002529c	4	OBJECT	<unknown>	DEFAULT	12
__stdio_READ			.symtab	0x1000d980	120	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE			.symtab	0x1000d9f8	264	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position			.symtab	0x10012220	212	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite			.symtab	0x10011340	364	FUNC	<unknown>	HIDDEN	2
__stdio_rfill			.symtab	0x1000db00	72	FUNC	<unknown>	HIDDEN	2
__stdio_seek			.symtab	0x100122f4	88	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o			.symtab	0x1000db48	176	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o			.symtab	0x100114ac	260	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit			.symtab	0x1000bb44	76	FUNC	<unknown>	HIDDEN	2
__stdout			.symtab	0x100252a0	4	OBJECT	<unknown>	DEFAULT	12
__sys_connect			.symtab	0x1000790c	52	FUNC	<unknown>	DEFAULT	2
__sys_recv			.symtab	0x10007a20	52	FUNC	<unknown>	DEFAULT	2
__sys_send			.symtab	0x10007ad4	52	FUNC	<unknown>	DEFAULT	2
__sys_sendto			.symtab	0x10007b88	52	FUNC	<unknown>	DEFAULT	2
__syscall_error			.symtab	0x1000a880	28	FUNC	<unknown>	HIDDEN	2
__syscall_error.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep			.symtab	0x1000a9d4	52	FUNC	<unknown>	DEFAULT	2
__syscall_poll			.symtab	0x1000f56c	52	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction			.symtab	0x1000d594	52	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select			.symtab	0x10007030	52	FUNC	<unknown>	DEFAULT	2
__uClibc_fini			.symtab	0x1000a3e4	144	FUNC	<unknown>	DEFAULT	2
__uClibc_init			.symtab	0x1000a4d4	100	FUNC	<unknown>	DEFAULT	2
__uClibc_main			.symtab	0x1000a538	840	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname			.symtab	0x10025284	4	OBJECT	<unknown>	HIDDEN	12
__waitpid			.symtab	0x1000a1e4	132	FUNC	<unknown>	DEFAULT	2
__waitpid_nocancel			.symtab	0x1000a1f0	16	FUNC	<unknown>	DEFAULT	2
__write			.symtab	0x1000a0dc	132	FUNC	<unknown>	DEFAULT	2
__write_nocancel			.symtab	0x1000a0e8	16	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r			.symtab	0x10010c54	284	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv			.symtab	0x1000d75c	204	FUNC	<unknown>	HIDDEN	2
__xstat64_conv			.symtab	0x1000d678	228	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec			.symtab	0x1002c00c	10	OBJECT	<unknown>	DEFAULT	14
_charpad			.symtab	0x1000f8a0	100	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo			.symtab	0x1002c390	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_handler			.symtab	0x1002c3b8	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_spec			.symtab	0x100252b4	4	OBJECT	<unknown>	HIDDEN	12
_dl_aux_init			.symtab	0x1000d42c	28	FUNC	<unknown>	DEFAULT	2
_dl_init_static_tls			.symtab	0x100252ac	4	OBJECT	<unknown>	DEFAULT	12
_dl_nothread_init_static_tls			.symtab	0x1000d448	108	FUNC	<unknown>	HIDDEN	2
_dl_phdr			.symtab	0x10025334	4	OBJECT	<unknown>	DEFAULT	13
_dl_phnum			.symtab	0x10025338	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_dtv_gaps			.symtab	0x10025328	1	OBJECT	<unknown>	DEFAULT	13
_dl_tls_dtv_slotinfo_list			.symtab	0x10025324	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_generation			.symtab	0x1002532c	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_max_dtv_idx			.symtab	0x1002531c	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_setup			.symtab	0x1000d200	80	FUNC	<unknown>	DEFAULT	2
_dl_tls_static_align			.symtab	0x10025318	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_static_nelem			.symtab	0x10025330	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_static_size			.symtab	0x10025320	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_static_used			.symtab	0x10025314	4	OBJECT	<unknown>	DEFAULT	13
_edata			.symtab	0x100252c0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end			.symtab	0x1002c3e0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit			.symtab	0x10006f38	92	FUNC	<unknown>	DEFAULT	2
_exit.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini			.symtab	0x100123b8	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers			.symtab	0x10029ab0	8192	OBJECT	<unknown>	DEFAULT	14
_fopen.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow			.symtab	0x1000f904	152	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr			.symtab	0x1001166c	1784	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_init			.symtab	0x100000b4	0	FUNC	<unknown>	DEFAULT	1
_load_inttype			.symtab	0x100115b0	128	FUNC	<unknown>	HIDDEN	2
_load_inttype.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init			.symtab	0x10010094	188	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec			.symtab	0x1001044c	1488	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs			.symtab	0x10010150	92	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs			.symtab	0x100101ac	608	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size			.symtab	0x1001040c	64	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore			.symtab	0x1000a3ac	56	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer			.symtab	0x1000a3a0	12	FUNC	<unknown>	DEFAULT	2
_rfill.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp			.symtab	0x1000a89c	8	FUNC	<unknown>	DEFAULT	2
_sigintr			.symtab	0x100252e0	8	OBJECT	<unknown>	HIDDEN	13
_start			.symtab	0x10000218	72	FUNC	<unknown>	DEFAULT	2
_stdio.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen			.symtab	0x1000b5a0	1000	FUNC	<unknown>	HIDDEN	2
_stdio_init			.symtab	0x1000b988	128	FUNC	<unknown>	HIDDEN	2
_stdio_openlist			.symtab	0x100252a4	4	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_add_lock			.symtab	0x10029a98	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_dec_use			.symtab	0x1000beac	540	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count			.symtab	0x10025310	4	OBJECT	<unknown>	DEFAULT	13
_stdio_openlist_del_lock			.symtab	0x10029aa4	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_use_count			.symtab	0x1002530c	4	OBJECT	<unknown>	DEFAULT	13
_stdio_streams			.symtab	0x1002518c	204	OBJECT	<unknown>	DEFAULT	10
_stdio_term			.symtab	0x1000ba08	316	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking			.symtab	0x100252a8	4	OBJECT	<unknown>	DEFAULT	12
_stdlib_strto_l			.symtab	0x10009268	440	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype			.symtab	0x10011630	60	FUNC	<unknown>	HIDDEN	2
_store_inttype.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs			.symtab	0x10014000	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr			.symtab	0x1000bb90	248	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal			.symtab	0x1000f99c	1784	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort			.symtab	0x10008c3c	248	FUNC	<unknown>	DEFAULT	2
abort.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access			.symtab	0x10006f94	52	FUNC	<unknown>	DEFAULT	2
access.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
astd			.symtab	0x100049b0	340	FUNC	<unknown>	DEFAULT	2
atcp			.symtab	0x10004390	1568	FUNC	<unknown>	DEFAULT	2
atoi			.symtab	0x10009254	12	FUNC	<unknown>	DEFAULT	2
atol			.symtab	0x10009254	12	FUNC	<unknown>	DEFAULT	2
atol.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
audp			.symtab	0x10003e00	1424	FUNC	<unknown>	DEFAULT	2
bcopy			.symtab	0x1000758c	16	FUNC	<unknown>	DEFAULT	2
bcopy.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that			.symtab	0x10029550	4	OBJECT	<unknown>	DEFAULT	14
brk			.symtab	0x1000d560	52	FUNC	<unknown>	DEFAULT	2
bsd_signal			.symtab	0x10007cb4	192	FUNC	<unknown>	DEFAULT	2
buf.4826			.symtab	0x10029374	16	OBJECT	<unknown>	DEFAULT	14
buf.6501			.symtab	0x10029398	440	OBJECT	<unknown>	DEFAULT	14
bzero			.symtab	0x1000759c	12	FUNC	<unknown>	DEFAULT	2
bzero.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
c			.symtab	0x10025090	4	OBJECT	<unknown>	DEFAULT	10
call___do_global_ctors_aux			.symtab	0x1001239c	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux			.symtab	0x10000170	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy			.symtab	0x100001fc	0	FUNC	<unknown>	DEFAULT	2
calloc			.symtab	0x1000cd24	264	FUNC	<unknown>	DEFAULT	2
calloc.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
chdir			.symtab	0x10006fc8	52	FUNC	<unknown>	DEFAULT	2
chdir.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close			.symtab	0x10009fe4	116	FUNC	<unknown>	DEFAULT	2
closedir			.symtab	0x1000ab64	212	FUNC	<unknown>	DEFAULT	2
closedir.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closenameservers.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer			.symtab	0x1002526c	4	OBJECT	<unknown>	DEFAULT	12
completed.5580			.symtab	0x10025354	0	OBJECT	<unknown>	DEFAULT	14
connect			.symtab	0x10007940	120	FUNC	<unknown>	DEFAULT	2
connect.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout			.symtab	0x10001978	656	FUNC	<unknown>	DEFAULT	2
crtstuff.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum			.symtab	0x10001dd4	320	FUNC	<unknown>	DEFAULT	2
currentServer			.symtab	0x10025270	4	OBJECT	<unknown>	DEFAULT	12
data_start			.symtab	0x10025070	0	NOTYPE	<unknown>	DEFAULT	10
decoded.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ			.symtab	0x100252fc	4	OBJECT	<unknown>	DEFAULT	13
errno			.symtab	0x0	4	TLS	<unknown>	DEFAULT	6
errno.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit			.symtab	0x10009420	136	FUNC	<unknown>	DEFAULT	2
exit.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table			.symtab	0x10014b88	72	OBJECT	<unknown>	DEFAULT	4
fclose			.symtab	0x1000b314	640	FUNC	<unknown>	DEFAULT	2
fclose.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl			.symtab	0x10006e4c	236	FUNC	<unknown>	DEFAULT	2
fd_to_DIR			.symtab	0x1000ac38	184	FUNC	<unknown>	DEFAULT	2
fdgets			.symtab	0x10000510	232	FUNC	<unknown>	DEFAULT	2
fdopendir			.symtab	0x1000adc0	184	FUNC	<unknown>	DEFAULT	2
fflush_unlocked			.symtab	0x1000c0c8	744	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc			.symtab	0x1000bc88	304	FUNC	<unknown>	DEFAULT	2
fgetc.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked			.symtab	0x1000c3b0	312	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets			.symtab	0x1000bdb8	244	FUNC	<unknown>	DEFAULT	2
fgets.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked			.symtab	0x1000c4e8	196	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt			.symtab	0x10014b70	20	OBJECT	<unknown>	DEFAULT	4
fopen			.symtab	0x1000b594	12	FUNC	<unknown>	DEFAULT	2
fopen.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork			.symtab	0x100098ac	824	FUNC	<unknown>	DEFAULT	2
fork.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork_handler_pool			.symtab	0x10029554	1348	OBJECT	<unknown>	DEFAULT	14
fputs_unlocked			.symtab	0x10010a1c	92	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy			.symtab	0x1000018c	0	FUNC	<unknown>	DEFAULT	2
free			.symtab	0x100089f0	524	FUNC	<unknown>	DEFAULT	2
free.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek			.symtab	0x1001207c	16	FUNC	<unknown>	DEFAULT	2
fseeko			.symtab	0x1001207c	16	FUNC	<unknown>	DEFAULT	2
fseeko.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64			.symtab	0x1001208c	404	FUNC	<unknown>	DEFAULT	2
fseeko64.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat			.symtab	0x1000d5c8	124	FUNC	<unknown>	DEFAULT	2
fstat.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ftcp			.symtab	0x10002548	1568	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked			.symtab	0x10010a78	192	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch			.symtab	0x10004b04	40	FUNC	<unknown>	DEFAULT	2
getHost			.symtab	0x1000154c	124	FUNC	<unknown>	DEFAULT	2
getOurIP			.symtab	0x100005f8	644	FUNC	<unknown>	DEFAULT	2
getPortz			.symtab	0x10004b2c	256	FUNC	<unknown>	DEFAULT	2
getRandomIP			.symtab	0x100004a0	112	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc			.symtab	0x1000bc88	304	FUNC	<unknown>	DEFAULT	2
getc_unlocked			.symtab	0x1000c3b0	312	FUNC	<unknown>	DEFAULT	2
getdents64.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize			.symtab	0x1000a8a4	56	FUNC	<unknown>	DEFAULT	2
getdtablesize.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid			.symtab	0x1000a8dc	16	FUNC	<unknown>	DEFAULT	2
getegid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid			.symtab	0x1000a8ec	16	FUNC	<unknown>	DEFAULT	2
geteuid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid			.symtab	0x1000a8fc	16	FUNC	<unknown>	DEFAULT	2
getgid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname			.symtab	0x100078bc	8	FUNC	<unknown>	DEFAULT	2
gethostbyname.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname2			.symtab	0x100078c4	72	FUNC	<unknown>	DEFAULT	2
gethostbyname2.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname2_r			.symtab	0x1000ca68	664	FUNC	<unknown>	DEFAULT	2
gethostbyname2_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r			.symtab	0x1000f1a0	748	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostname			.symtab	0x1000f4e4	136	FUNC	<unknown>	DEFAULT	2
gethostname.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize			.symtab	0x1000a90c	28	FUNC	<unknown>	DEFAULT	2
getpagesize.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid			.symtab	0x10009d7c	56	FUNC	<unknown>	DEFAULT	2
getpid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit			.symtab	0x1000a928	52	FUNC	<unknown>	DEFAULT	2
getrlimit.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname			.symtab	0x100079b8	52	FUNC	<unknown>	DEFAULT	2
getsockname.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt			.symtab	0x100079ec	52	FUNC	<unknown>	DEFAULT	2
getsockopt.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid			.symtab	0x1000a95c	16	FUNC	<unknown>	DEFAULT	2
getuid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP			.symtab	0x100252c4	4	OBJECT	<unknown>	DEFAULT	13
h_errno			.symtab	0x4	4	TLS	<unknown>	DEFAULT	6
hoste.6500			.symtab	0x10029384	20	OBJECT	<unknown>	DEFAULT	14
htonl			.symtab	0x100077d0	4	FUNC	<unknown>	DEFAULT	2
htons			.symtab	0x100077d4	4	FUNC	<unknown>	DEFAULT	2
i.4868			.symtab	0x10025094	4	OBJECT	<unknown>	DEFAULT	10
index			.symtab	0x100072a8	256	FUNC	<unknown>	DEFAULT	2
inet_addr			.symtab	0x10007888	52	FUNC	<unknown>	DEFAULT	2
inet_aton			.symtab	0x1000c998	208	FUNC	<unknown>	DEFAULT	2
inet_aton.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa			.symtab	0x10007854	52	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r			.symtab	0x100077d8	124	FUNC	<unknown>	DEFAULT	2
inet_ntop			.symtab	0x1000e1a8	728	FUNC	<unknown>	DEFAULT	2
inet_ntop4			.symtab	0x1000e054	340	FUNC	<unknown>	DEFAULT	2
inet_pton			.symtab	0x1000de48	524	FUNC	<unknown>	DEFAULT	2
inet_pton4			.symtab	0x1000dd6c	220	FUNC	<unknown>	DEFAULT	2
initConnection			.symtab	0x1000636c	412	FUNC	<unknown>	DEFAULT	2
init_rand			.symtab	0x10000260	232	FUNC	<unknown>	DEFAULT	2
init_static_tls			.symtab	0x1000d1c4	60	FUNC	<unknown>	DEFAULT	2
initfini.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate			.symtab	0x10008e1c	132	FUNC	<unknown>	DEFAULT	2
initstate_r			.symtab	0x10009088	236	FUNC	<unknown>	DEFAULT	2
ioctl			.symtab	0x10006cf4	228	FUNC	<unknown>	DEFAULT	2
ioctl.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty			.symtab	0x1000c96c	44	FUNC	<unknown>	DEFAULT	2
isatty.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace			.symtab	0x10007130	24	FUNC	<unknown>	DEFAULT	2
isspace.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill			.symtab	0x10006ffc	52	FUNC	<unknown>	DEFAULT	2
kill.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
last_id.6558			.symtab	0x10025258	2	OBJECT	<unknown>	DEFAULT	10
last_ns_num.6557			.symtab	0x1002bfec	4	OBJECT	<unknown>	DEFAULT	14
libc-cancellation.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-lowlevellock.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-tls.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork			.symtab	0x10001c08	460	FUNC	<unknown>	DEFAULT	2
llseek.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64			.symtab	0x1000f6c8	112	FUNC	<unknown>	DEFAULT	2
macAddress			.symtab	0x100252d0	6	OBJECT	<unknown>	DEFAULT	13
main			.symtab	0x10006508	2028	FUNC	<unknown>	DEFAULT	2
mainCommSock			.symtab	0x100252c0	4	OBJECT	<unknown>	DEFAULT	13
makeIPPacket			.symtab	0x10001ffc	236	FUNC	<unknown>	DEFAULT	2
makeRandomStr			.symtab	0x100015c8	188	FUNC	<unknown>	DEFAULT	2
makevsepacket			.symtab	0x10002e08	264	FUNC	<unknown>	DEFAULT	2
malloc			.symtab	0x10007e5c	2320	FUNC	<unknown>	DEFAULT	2
malloc.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim			.symtab	0x10008bfc	64	FUNC	<unknown>	DEFAULT	2
memchr			.symtab	0x10011d64	264	FUNC	<unknown>	DEFAULT	2
memchr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy			.symtab	0x1000717c	156	FUNC	<unknown>	DEFAULT	2
memcpy.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memmove			.symtab	0x1000c5ac	164	FUNC	<unknown>	DEFAULT	2
memmove.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy			.symtab	0x1000c650	52	FUNC	<unknown>	DEFAULT	2
mempcpy.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr			.symtab	0x10011e6c	244	FUNC	<unknown>	DEFAULT	2
memrchr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset			.symtab	0x10007218	144	FUNC	<unknown>	DEFAULT	2
memset.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mmap			.symtab	0x1000a96c	52	FUNC	<unknown>	DEFAULT	2
mmap.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap			.symtab	0x1000d644	52	FUNC	<unknown>	DEFAULT	2
mremap.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap			.symtab	0x1000a9a0	52	FUNC	<unknown>	DEFAULT	2
munmap.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock			.symtab	0x100250b0	24	OBJECT	<unknown>	DEFAULT	10
mylock			.symtab	0x100250c8	24	OBJECT	<unknown>	DEFAULT	10
nanosleep			.symtab	0x1000aa08	112	FUNC	<unknown>	DEFAULT	2
nanosleep.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1347			.symtab	0x10029370	4	OBJECT	<unknown>	DEFAULT	14
nprocessors_onln			.symtab	0x100094a8	328	FUNC	<unknown>	DEFAULT	2
ntohl			.symtab	0x100077c8	4	FUNC	<unknown>	DEFAULT	2
ntohl.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs			.symtab	0x100077cc	4	FUNC	<unknown>	DEFAULT	2
ntop.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids			.symtab	0x100252c8	8	OBJECT	<unknown>	DEFAULT	13
object.5595			.symtab	0x10025358	0	OBJECT	<unknown>	DEFAULT	14
open			.symtab	0x1000a058	132	FUNC	<unknown>	DEFAULT	2
opendir			.symtab	0x1000acf0	208	FUNC	<unknown>	DEFAULT	2
opendir.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP			.symtab	0x100252d8	4	OBJECT	<unknown>	DEFAULT	13
p.5578			.symtab	0x1002506c	0	OBJECT	<unknown>	DEFAULT	10
parse_config.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
pids			.symtab	0x100252dc	4	OBJECT	<unknown>	DEFAULT	13
poll			.symtab	0x1000f5a0	120	FUNC	<unknown>	DEFAULT	2
poll.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.6256			.symtab	0x10013f48	12	OBJECT	<unknown>	DEFAULT	4
print			.symtab	0x10000dfc	1568	FUNC	<unknown>	DEFAULT	2
printchar			.symtab	0x100009d8	128	FUNC	<unknown>	DEFAULT	2
printi			.symtab	0x10000bfc	512	FUNC	<unknown>	DEFAULT	2
prints			.symtab	0x10000a58	420	FUNC	<unknown>	DEFAULT	2
processCmd			.symtab	0x10004c2c	5952	FUNC	<unknown>	DEFAULT	2
program_invocation_name			.symtab	0x1002528c	4	OBJECT	<unknown>	DEFAULT	12
program_invocation_short_name			.symtab	0x10025288	4	OBJECT	<unknown>	DEFAULT	12
qual_chars.6264			.symtab	0x10013f90	20	OBJECT	<unknown>	DEFAULT	4
raise			.symtab	0x10009db4	148	FUNC	<unknown>	DEFAULT	2
raise.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand			.symtab	0x10008d34	4	FUNC	<unknown>	DEFAULT	2
rand.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc			.symtab	0x10000348	344	FUNC	<unknown>	DEFAULT	2
random			.symtab	0x10008d38	104	FUNC	<unknown>	DEFAULT	2
random.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info			.symtab	0x10013a0c	40	OBJECT	<unknown>	DEFAULT	4
random_r			.symtab	0x10008f08	140	FUNC	<unknown>	DEFAULT	2
random_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl			.symtab	0x100250f4	128	OBJECT	<unknown>	DEFAULT	10
rawmemchr			.symtab	0x1000dbf8	184	FUNC	<unknown>	DEFAULT	2
rawmemchr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read			.symtab	0x1000a160	132	FUNC	<unknown>	DEFAULT	2
read_etc_hosts_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readdir64			.symtab	0x1000ae78	196	FUNC	<unknown>	DEFAULT	2
readdir64.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc			.symtab	0x1000ce2c	920	FUNC	<unknown>	DEFAULT	2
realloc.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv			.symtab	0x10007a54	128	FUNC	<unknown>	DEFAULT	2
recv.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine			.symtab	0x10001684	756	FUNC	<unknown>	DEFAULT	2
register-atfork.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
resolv_conf_mtime.6540			.symtab	0x1002bff0	4	OBJECT	<unknown>	DEFAULT	14
rindex			.symtab	0x1000c7dc	112	FUNC	<unknown>	DEFAULT	2
rtcp			.symtab	0x10003960	1184	FUNC	<unknown>	DEFAULT	2
sbrk			.symtab	0x1000aa78	116	FUNC	<unknown>	DEFAULT	2
sbrk.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select			.symtab	0x10007064	136	FUNC	<unknown>	DEFAULT	2
select.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send			.symtab	0x10007b08	128	FUNC	<unknown>	DEFAULT	2
send.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendto			.symtab	0x10007bbc	144	FUNC	<unknown>	DEFAULT	2
sendto.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid			.symtab	0x100070ec	52	FUNC	<unknown>	DEFAULT	2
setsid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt			.symtab	0x10007c4c	52	FUNC	<unknown>	DEFAULT	2
setsockopt.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate			.symtab	0x10008da0	124	FUNC	<unknown>	DEFAULT	2
setstate_r			.symtab	0x10009174	224	FUNC	<unknown>	DEFAULT	2
sigaction			.symtab	0x1000cd00	36	FUNC	<unknown>	DEFAULT	2
sigaction.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigjmp.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal			.symtab	0x10007cb4	192	FUNC	<unknown>	DEFAULT	2
signal.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask			.symtab	0x1000aaec	120	FUNC	<unknown>	DEFAULT	2
sigprocmask.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
skip_and_NUL_space			.symtab	0x1000ec60	68	FUNC	<unknown>	DEFAULT	2
skip_nospace			.symtab	0x1000ec20	64	FUNC	<unknown>	DEFAULT	2
sleep			.symtab	0x10009e48	292	FUNC	<unknown>	DEFAULT	2
sleep.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket			.symtab	0x10007c80	52	FUNC	<unknown>	DEFAULT	2
socket.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect			.symtab	0x10002cc0	328	FUNC	<unknown>	DEFAULT	2
sockprintf			.symtab	0x1000141c	304	FUNC	<unknown>	DEFAULT	2
spec_and_mask.6263			.symtab	0x10013fbe	16	OBJECT	<unknown>	DEFAULT	4
spec_base.6255			.symtab	0x10013f40	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.6260			.symtab	0x10013fd0	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.6259			.symtab	0x10013fe8	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.6262			.symtab	0x10013fae	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.6261			.symtab	0x10013fa4	9	OBJECT	<unknown>	DEFAULT	4
sprintf			.symtab	0x1000f738	136	FUNC	<unknown>	DEFAULT	2
sprintf.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand			.symtab	0x10008ea0	104	FUNC	<unknown>	DEFAULT	2
srandom			.symtab	0x10008ea0	104	FUNC	<unknown>	DEFAULT	2
srandom_r			.symtab	0x10008f94	244	FUNC	<unknown>	DEFAULT	2
stat			.symtab	0x1000f618	124	FUNC	<unknown>	DEFAULT	2
stat.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
static_dtv			.symtab	0x1002bdb8	512	OBJECT	<unknown>	DEFAULT	14
static_map			.symtab	0x1002bfb8	52	OBJECT	<unknown>	DEFAULT	14
static_slotinfo			.symtab	0x1002bab0	776	OBJECT	<unknown>	DEFAULT	14
stderr			.symtab	0x10025298	4	OBJECT	<unknown>	DEFAULT	12
stdhexflood			.symtab	0x1000369c	332	FUNC	<unknown>	DEFAULT	2
stdin			.symtab	0x10025290	4	OBJECT	<unknown>	DEFAULT	12
stdout			.symtab	0x10025294	4	OBJECT	<unknown>	DEFAULT	12
strcasecmp			.symtab	0x10011f60	80	FUNC	<unknown>	DEFAULT	2
strcasecmp.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr			.symtab	0x100072a8	256	FUNC	<unknown>	DEFAULT	2
strchr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchrnul			.symtab	0x1000c684	248	FUNC	<unknown>	DEFAULT	2
strchrnul.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp			.symtab	0x100073a8	52	FUNC	<unknown>	DEFAULT	2
strcmp.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll			.symtab	0x100073a8	52	FUNC	<unknown>	DEFAULT	2
strcpy			.symtab	0x100073dc	32	FUNC	<unknown>	DEFAULT	2
strcpy.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcspn			.symtab	0x1000c77c	96	FUNC	<unknown>	DEFAULT	2
strcspn.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup			.symtab	0x10010d70	80	FUNC	<unknown>	DEFAULT	2
strdup.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r			.symtab	0x10010c54	284	FUNC	<unknown>	DEFAULT	2
strlen			.symtab	0x100073fc	160	FUNC	<unknown>	DEFAULT	2
strlen.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy			.symtab	0x1000dcb0	188	FUNC	<unknown>	DEFAULT	2
strncpy.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen			.symtab	0x10010b38	236	FUNC	<unknown>	DEFAULT	2
strnlen.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk			.symtab	0x1000c930	60	FUNC	<unknown>	DEFAULT	2
strpbrk.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strrchr			.symtab	0x1000c7dc	112	FUNC	<unknown>	DEFAULT	2
strrchr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn			.symtab	0x1000c84c	72	FUNC	<unknown>	DEFAULT	2
strspn.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr			.symtab	0x1000749c	240	FUNC	<unknown>	DEFAULT	2
strstr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok			.symtab	0x100075a8	12	FUNC	<unknown>	DEFAULT	2
strtok.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r			.symtab	0x1000c894	156	FUNC	<unknown>	DEFAULT	2
strtok_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol			.symtab	0x10009260	8	FUNC	<unknown>	DEFAULT	2
strtol.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sysconf			.symtab	0x100095f0	624	FUNC	<unknown>	DEFAULT	2
sysconf.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr			.symtab	0x100075b4	156	FUNC	<unknown>	DEFAULT	2
tcgetattr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum			.symtab	0x10001f14	232	FUNC	<unknown>	DEFAULT	2
tcsetattr			.symtab	0x10007650	376	FUNC	<unknown>	DEFAULT	2
tcsetattr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
time			.symtab	0x10007120	16	FUNC	<unknown>	DEFAULT	2
time.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper			.symtab	0x10007148	32	FUNC	<unknown>	DEFAULT	2
toupper.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim			.symtab	0x1000087c	348	FUNC	<unknown>	DEFAULT	2
type_codes			.symtab	0x10013f6c	24	OBJECT	<unknown>	DEFAULT	4
type_sizes			.symtab	0x10013f84	12	OBJECT	<unknown>	DEFAULT	4
uname			.symtab	0x1000f694	52	FUNC	<unknown>	DEFAULT	2
uname.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
unknown.1370			.symtab	0x10013ff0	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state			.symtab	0x100250e0	20	OBJECT	<unknown>	DEFAULT	10
useragents			.symtab	0x10025074	28	OBJECT	<unknown>	DEFAULT	10
usleep			.symtab	0x10009860	76	FUNC	<unknown>	DEFAULT	2
usleep.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vseattack			.symtab	0x10002f10	1612	FUNC	<unknown>	DEFAULT	2
vsnprintf			.symtab	0x1000f7c0	224	FUNC	<unknown>	DEFAULT	2
vsnprintf.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid			.symtab	0x1000a1e4	132	FUNC	<unknown>	DEFAULT	2
wcrtomb			.symtab	0x10011218	92	FUNC	<unknown>	DEFAULT	2
wcrtomb.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs			.symtab	0x10011284	188	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs			.symtab	0x10011274	16	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write			.symtab	0x1000a0dc	132	FUNC	<unknown>	DEFAULT	2
xdigits.5264			.symtab	0x10013eb0	17	OBJECT	<unknown>	DEFAULT	4
xstatconv.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-12T06:45:58.012764+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35278	185.177.25.107	606	TCP
2024-12-12T06:46:00.171852+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35280	185.177.25.107	606	TCP
2024-12-12T06:46:02.329989+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35282	185.177.25.107	606	TCP
2024-12-12T06:46:04.455354+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35284	185.177.25.107	606	TCP
2024-12-12T06:46:06.580560+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35286	185.177.25.107	606	TCP
2024-12-12T06:46:08.706775+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35288	185.177.25.107	606	TCP
2024-12-12T06:46:10.834966+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35290	185.177.25.107	606	TCP
2024-12-12T06:46:13.022148+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35292	185.177.25.107	606	TCP
2024-12-12T06:46:15.163169+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35294	185.177.25.107	606	TCP
2024-12-12T06:46:17.300156+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35296	185.177.25.107	606	TCP
2024-12-12T06:46:19.424420+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35298	185.177.25.107	606	TCP
2024-12-12T06:46:21.549974+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35300	185.177.25.107	606	TCP
2024-12-12T06:46:23.675998+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35302	185.177.25.107	606	TCP
2024-12-12T06:46:25.785460+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35304	185.177.25.107	606	TCP
2024-12-12T06:46:27.926334+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35306	185.177.25.107	606	TCP
2024-12-12T06:46:30.050147+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35308	185.177.25.107	606	TCP
2024-12-12T06:46:32.176085+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35310	185.177.25.107	606	TCP
2024-12-12T06:46:34.299968+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35312	185.177.25.107	606	TCP
2024-12-12T06:46:36.427134+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35314	185.177.25.107	606	TCP
2024-12-12T06:46:38.552127+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35316	185.177.25.107	606	TCP
2024-12-12T06:46:40.674184+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35318	185.177.25.107	606	TCP
2024-12-12T06:46:42.802483+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35320	185.177.25.107	606	TCP
2024-12-12T06:46:44.909455+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35322	185.177.25.107	606	TCP
2024-12-12T06:46:47.035992+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35324	185.177.25.107	606	TCP
2024-12-12T06:46:49.145385+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35326	185.177.25.107	606	TCP
2024-12-12T06:46:51.285716+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35328	185.177.25.107	606	TCP
2024-12-12T06:46:53.410388+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35330	185.177.25.107	606	TCP
2024-12-12T06:46:55.536517+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35332	185.177.25.107	606	TCP
2024-12-12T06:46:57.684226+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35334	185.177.25.107	606	TCP
2024-12-12T06:46:59.820746+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35336	185.177.25.107	606	TCP
2024-12-12T06:47:01.955817+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35338	185.177.25.107	606	TCP
2024-12-12T06:47:04.129360+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35340	185.177.25.107	606	TCP
2024-12-12T06:47:06.296315+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35342	185.177.25.107	606	TCP
2024-12-12T06:47:08.427512+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35344	185.177.25.107	606	TCP
2024-12-12T06:47:10.551174+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35346	185.177.25.107	606	TCP
2024-12-12T06:47:12.709913+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35348	185.177.25.107	606	TCP
2024-12-12T06:47:14.832883+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35350	185.177.25.107	606	TCP
2024-12-12T06:47:16.986420+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35352	185.177.25.107	606	TCP
2024-12-12T06:47:19.113423+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35354	185.177.25.107	606	TCP
2024-12-12T06:47:21.269397+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35356	185.177.25.107	606	TCP
2024-12-12T06:47:23.394609+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35358	185.177.25.107	606	TCP
2024-12-12T06:47:25.504491+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35360	185.177.25.107	606	TCP
2024-12-12T06:47:27.631260+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35362	185.177.25.107	606	TCP
2024-12-12T06:47:29.757209+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35364	185.177.25.107	606	TCP
2024-12-12T06:47:31.864677+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35366	185.177.25.107	606	TCP
2024-12-12T06:47:33.989357+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35368	185.177.25.107	606	TCP
2024-12-12T06:47:36.097995+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35370	185.177.25.107	606	TCP
2024-12-12T06:47:38.225615+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35372	185.177.25.107	606	TCP
2024-12-12T06:47:40.333121+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35374	185.177.25.107	606	TCP
2024-12-12T06:47:42.442066+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35376	185.177.25.107	606	TCP
2024-12-12T06:47:44.551800+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35378	185.177.25.107	606	TCP
2024-12-12T06:47:46.677575+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35380	185.177.25.107	606	TCP
2024-12-12T06:47:48.802357+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35382	185.177.25.107	606	TCP
2024-12-12T06:47:50.927570+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35384	185.177.25.107	606	TCP
2024-12-12T06:47:53.052161+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35386	185.177.25.107	606	TCP
2024-12-12T06:47:55.176427+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35388	185.177.25.107	606	TCP
2024-12-12T06:47:57.304856+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35390	185.177.25.107	606	TCP
2024-12-12T06:47:59.429307+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35392	185.177.25.107	606	TCP
2024-12-12T06:48:01.568660+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35394	185.177.25.107	606	TCP
2024-12-12T06:48:03.693792+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35396	185.177.25.107	606	TCP
2024-12-12T06:48:05.816598+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35398	185.177.25.107	606	TCP
2024-12-12T06:48:07.945621+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35400	185.177.25.107	606	TCP
2024-12-12T06:48:10.084325+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35402	185.177.25.107	606	TCP
2024-12-12T06:48:12.209950+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35404	185.177.25.107	606	TCP
2024-12-12T06:48:14.334473+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35406	185.177.25.107	606	TCP
2024-12-12T06:48:16.460478+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35408	185.177.25.107	606	TCP
2024-12-12T06:48:18.584426+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35410	185.177.25.107	606	TCP
2024-12-12T06:48:20.711999+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35412	185.177.25.107	606	TCP
2024-12-12T06:48:22.851566+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35414	185.177.25.107	606	TCP
2024-12-12T06:48:24.976958+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35416	185.177.25.107	606	TCP
2024-12-12T06:48:27.101442+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35418	185.177.25.107	606	TCP
2024-12-12T06:48:29.210015+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35420	185.177.25.107	606	TCP
2024-12-12T06:48:31.336084+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35422	185.177.25.107	606	TCP
2024-12-12T06:48:33.461397+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35424	185.177.25.107	606	TCP
2024-12-12T06:48:35.585156+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35426	185.177.25.107	606	TCP
2024-12-12T06:48:37.709539+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35428	185.177.25.107	606	TCP
2024-12-12T06:48:39.833801+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35430	185.177.25.107	606	TCP
2024-12-12T06:48:41.959334+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35434	185.177.25.107	606	TCP
2024-12-12T06:48:44.085184+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35436	185.177.25.107	606	TCP
2024-12-12T06:48:46.208163+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35438	185.177.25.107	606	TCP
2024-12-12T06:48:48.321239+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35440	185.177.25.107	606	TCP
2024-12-12T06:48:50.447249+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35442	185.177.25.107	606	TCP
2024-12-12T06:48:52.555429+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35444	185.177.25.107	606	TCP
2024-12-12T06:48:54.684217+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35446	185.177.25.107	606	TCP
2024-12-12T06:48:56.791642+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35448	185.177.25.107	606	TCP
2024-12-12T06:48:58.899164+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35450	185.177.25.107	606	TCP
2024-12-12T06:49:01.011235+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35452	185.177.25.107	606	TCP
2024-12-12T06:49:03.135700+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35454	185.177.25.107	606	TCP
2024-12-12T06:49:05.262879+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35456	185.177.25.107	606	TCP
2024-12-12T06:49:07.387015+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35458	185.177.25.107	606	TCP
2024-12-12T06:49:09.508979+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35460	185.177.25.107	606	TCP
2024-12-12T06:49:11.623284+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35462	185.177.25.107	606	TCP
2024-12-12T06:49:13.746799+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35464	185.177.25.107	606	TCP
2024-12-12T06:49:15.870503+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35466	185.177.25.107	606	TCP
2024-12-12T06:49:17.994893+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35468	185.177.25.107	606	TCP
2024-12-12T06:49:20.120398+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35470	185.177.25.107	606	TCP
2024-12-12T06:49:22.295310+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35472	185.177.25.107	606	TCP
2024-12-12T06:49:24.434576+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35474	185.177.25.107	606	TCP
2024-12-12T06:49:26.541721+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35476	185.177.25.107	606	TCP
2024-12-12T06:49:28.668744+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35478	185.177.25.107	606	TCP
2024-12-12T06:49:30.793364+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35480	185.177.25.107	606	TCP
2024-12-12T06:49:32.917713+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	35482	185.177.25.107	606	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 12, 2024 06:45:57.890326023 CET	35278	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:45:58.009987116 CET	606	35278	185.177.25.107	192.168.2.14
Dec 12, 2024 06:45:58.011153936 CET	35278	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:45:58.012763977 CET	35278	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:45:58.132225037 CET	606	35278	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:00.050817966 CET	606	35278	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:00.051342010 CET	35278	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:00.052025080 CET	35280	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:00.171272039 CET	606	35278	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:00.171410084 CET	606	35280	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:00.171626091 CET	35280	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:00.171852112 CET	35280	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:00.291574001 CET	606	35280	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:02.209124088 CET	606	35280	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:02.209614038 CET	35280	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:02.210273981 CET	35282	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:02.329371929 CET	606	35280	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:02.329602003 CET	606	35282	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:02.329988956 CET	35282	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:02.329988956 CET	35282	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:02.449630022 CET	606	35282	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:04.333965063 CET	606	35282	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:04.334611893 CET	35282	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:04.335623026 CET	35284	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:04.454616070 CET	606	35282	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:04.455051899 CET	606	35284	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:04.455193043 CET	35284	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:04.455353975 CET	35284	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:04.575011015 CET	606	35284	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:06.459971905 CET	606	35284	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:06.460251093 CET	35284	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:06.461095095 CET	35286	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:06.579689026 CET	606	35284	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:06.580338001 CET	606	35286	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:06.580559969 CET	35286	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:06.580559969 CET	35286	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:06.702749968 CET	606	35286	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:08.584979057 CET	606	35286	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:08.585154057 CET	35286	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:08.586044073 CET	35288	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:08.704961061 CET	606	35286	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:08.706203938 CET	606	35288	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:08.706654072 CET	35288	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:08.706774950 CET	35288	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:08.826107979 CET	606	35288	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:10.710992098 CET	606	35288	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:10.711399078 CET	35288	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:10.712434053 CET	35290	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:10.831600904 CET	606	35288	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:10.834764957 CET	606	35290	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:10.834881067 CET	35290	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:10.834965944 CET	35290	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:10.955599070 CET	606	35290	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:12.897869110 CET	606	35290	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:12.898313999 CET	35290	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:12.902664900 CET	35292	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:13.017986059 CET	606	35290	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:13.021986008 CET	606	35292	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:13.022109032 CET	35292	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:13.022147894 CET	35292	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:13.142011881 CET	606	35292	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:15.039172888 CET	606	35292	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:15.039927959 CET	35292	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:15.042363882 CET	35294	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:15.160744905 CET	606	35292	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:15.162623882 CET	606	35294	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:15.163001060 CET	35294	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:15.163168907 CET	35294	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:15.282696962 CET	606	35294	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:17.178030968 CET	606	35294	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:17.178469896 CET	35294	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:17.180377007 CET	35296	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:17.298226118 CET	606	35294	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:17.299784899 CET	606	35296	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:17.300156116 CET	35296	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:17.300156116 CET	35296	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:17.419600010 CET	606	35296	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:19.302983999 CET	606	35296	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:19.303524017 CET	35296	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:19.304514885 CET	35298	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:19.423108101 CET	606	35296	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:19.423914909 CET	606	35298	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:19.424326897 CET	35298	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:19.424420118 CET	35298	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:19.546833038 CET	606	35298	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:21.429017067 CET	606	35298	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:21.429490089 CET	35298	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:21.430370092 CET	35300	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:21.549017906 CET	606	35298	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:21.549736977 CET	606	35300	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:21.549843073 CET	35300	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:21.549973965 CET	35300	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:21.669387102 CET	606	35300	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:23.553272963 CET	606	35300	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:23.553884983 CET	35300	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:23.556057930 CET	35302	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:23.673682928 CET	606	35300	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:23.675513029 CET	606	35302	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:23.675826073 CET	35302	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:23.675997972 CET	35302	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:23.795466900 CET	606	35302	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:25.663448095 CET	606	35302	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:25.663896084 CET	35302	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:25.665364027 CET	35304	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:25.783740044 CET	606	35302	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:25.785005093 CET	606	35304	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:25.785367012 CET	35304	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:25.785459995 CET	35304	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:25.904983997 CET	606	35304	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:27.803771973 CET	606	35304	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:27.804199934 CET	35304	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:27.806544065 CET	35306	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:27.923954010 CET	606	35304	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:27.925977945 CET	606	35306	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:27.926332951 CET	35306	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:27.926333904 CET	35306	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:28.045869112 CET	606	35306	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:29.928714991 CET	606	35306	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:29.929419041 CET	35306	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:29.930326939 CET	35308	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:30.048928022 CET	606	35306	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:30.049727917 CET	606	35308	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:30.049940109 CET	35308	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:30.050147057 CET	35308	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:30.169528008 CET	606	35308	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:32.053251028 CET	606	35308	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:32.053750992 CET	35308	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:32.056293964 CET	35310	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:32.173065901 CET	606	35308	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:32.175601959 CET	606	35310	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:32.175856113 CET	35310	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:32.176084995 CET	35310	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:32.295919895 CET	606	35310	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:34.178687096 CET	606	35310	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:34.179024935 CET	35310	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:34.180274010 CET	35312	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:34.298485994 CET	606	35310	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:34.299634933 CET	606	35312	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:34.299968004 CET	35312	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:34.299968004 CET	35312	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:34.420124054 CET	606	35312	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:36.303806067 CET	606	35312	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:36.304357052 CET	35312	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:36.305349112 CET	35314	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:36.425504923 CET	606	35312	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:36.426851034 CET	606	35314	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:36.427038908 CET	35314	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:36.427134037 CET	35314	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:36.546427011 CET	606	35314	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:38.428030014 CET	606	35314	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:38.428553104 CET	35314	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:38.429981947 CET	35316	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:38.550035954 CET	606	35314	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:38.551698923 CET	606	35316	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:38.552016020 CET	35316	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:38.552126884 CET	35316	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:38.671886921 CET	606	35316	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:40.553291082 CET	606	35316	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:40.553863049 CET	35316	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:40.554634094 CET	35318	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:40.673419952 CET	606	35316	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:40.673909903 CET	606	35318	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:40.674031973 CET	35318	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:40.674184084 CET	35318	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:40.793718100 CET	606	35318	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:42.679212093 CET	606	35318	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:42.679963112 CET	35318	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:42.682117939 CET	35320	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:42.799591064 CET	606	35318	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:42.801748991 CET	606	35320	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:42.802335978 CET	35320	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:42.802483082 CET	35320	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:42.922171116 CET	606	35320	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:44.786674023 CET	606	35320	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:44.787201881 CET	35320	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:44.789585114 CET	35322	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:44.906860113 CET	606	35320	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:44.909008026 CET	606	35322	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:44.909454107 CET	35322	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:44.909455061 CET	35322	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:45.028925896 CET	606	35322	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:46.913326025 CET	606	35322	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:46.913847923 CET	35322	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:46.915903091 CET	35324	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:47.033586979 CET	606	35322	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:47.035379887 CET	606	35324	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:47.035712004 CET	35324	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:47.035991907 CET	35324	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:47.155683994 CET	606	35324	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:49.022453070 CET	606	35324	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:49.023205996 CET	35324	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:49.025521994 CET	35326	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:49.142873049 CET	606	35324	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:49.144896030 CET	606	35326	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:49.145385027 CET	35326	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:49.145385027 CET	35326	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:49.264952898 CET	606	35326	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:51.164535999 CET	606	35326	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:51.165009975 CET	35326	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:51.166171074 CET	35328	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:51.284364939 CET	606	35326	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:51.285393953 CET	606	35328	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:51.285586119 CET	35328	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:51.285716057 CET	35328	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:51.405148983 CET	606	35328	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:53.288088083 CET	606	35328	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:53.288589001 CET	35328	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:53.290255070 CET	35330	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:53.408032894 CET	606	35328	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:53.409605026 CET	606	35330	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:53.410115957 CET	35330	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:53.410387993 CET	35330	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:53.529961109 CET	606	35330	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:55.413678885 CET	606	35330	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:55.414371967 CET	35330	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:55.416474104 CET	35332	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:55.533864975 CET	606	35330	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:55.535976887 CET	606	35332	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:55.536451101 CET	35332	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:55.536516905 CET	35332	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:55.656025887 CET	606	35332	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:57.562052011 CET	606	35332	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:57.562411070 CET	35332	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:57.563736916 CET	35334	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:57.683136940 CET	606	35332	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:57.683835983 CET	606	35334	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:57.684072971 CET	35334	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:57.684226036 CET	35334	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:57.803622961 CET	606	35334	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:59.698318005 CET	606	35334	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:59.698718071 CET	35334	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:59.700810909 CET	35336	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:59.818160057 CET	606	35334	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:59.820168972 CET	606	35336	185.177.25.107	192.168.2.14
Dec 12, 2024 06:46:59.820652008 CET	35336	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:59.820745945 CET	35336	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:46:59.940299988 CET	606	35336	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:01.834728956 CET	606	35336	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:01.835125923 CET	35336	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:01.836008072 CET	35338	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:01.954790115 CET	606	35336	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:01.955445051 CET	606	35338	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:01.955816984 CET	35338	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:01.955816984 CET	35338	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:02.075489998 CET	606	35338	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:04.007356882 CET	606	35338	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:04.007770061 CET	35338	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:04.009572029 CET	35340	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:04.127310991 CET	606	35338	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:04.129025936 CET	606	35340	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:04.129359961 CET	35340	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:04.129359961 CET	35340	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:04.249737978 CET	606	35340	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:06.173739910 CET	606	35340	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:06.174518108 CET	35340	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:06.176429033 CET	35342	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:06.294173002 CET	606	35340	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:06.295794010 CET	606	35342	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:06.296314955 CET	35342	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:06.296314955 CET	35342	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:06.415769100 CET	606	35342	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:08.304872990 CET	606	35342	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:08.305489063 CET	35342	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:08.307728052 CET	35344	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:08.425040960 CET	606	35342	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:08.427131891 CET	606	35344	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:08.427462101 CET	35344	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:08.427511930 CET	35344	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:08.546735048 CET	606	35344	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:10.428663015 CET	606	35344	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:10.429070950 CET	35344	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:10.431411028 CET	35346	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:10.548379898 CET	606	35344	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:10.550672054 CET	606	35346	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:10.551007032 CET	35346	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:10.551173925 CET	35346	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:10.670388937 CET	606	35346	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:12.584991932 CET	606	35346	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:12.586028099 CET	35346	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:12.588319063 CET	35348	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:12.706581116 CET	606	35346	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:12.709414959 CET	606	35348	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:12.709913015 CET	35348	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:12.709913015 CET	35348	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:12.829271078 CET	606	35348	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:14.711417913 CET	606	35348	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:14.711926937 CET	35348	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:14.712837934 CET	35350	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:14.831293106 CET	606	35348	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:14.832334042 CET	606	35350	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:14.832882881 CET	35350	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:14.832882881 CET	35350	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:14.952245951 CET	606	35350	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:16.864342928 CET	606	35350	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:16.864861012 CET	35350	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:16.866509914 CET	35352	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:16.984482050 CET	606	35350	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:16.985929012 CET	606	35352	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:16.986274958 CET	35352	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:16.986419916 CET	35352	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:17.105982065 CET	606	35352	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:18.991378069 CET	606	35352	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:18.991872072 CET	35352	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:18.993724108 CET	35354	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:19.111526012 CET	606	35352	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:19.112997055 CET	606	35354	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:19.113379955 CET	35354	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:19.113423109 CET	35354	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:19.232851028 CET	606	35354	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:21.147958040 CET	606	35354	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:21.148452044 CET	35354	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:21.149512053 CET	35356	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:21.267887115 CET	606	35354	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:21.269051075 CET	606	35356	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:21.269262075 CET	35356	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:21.269397020 CET	35356	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:21.388803959 CET	606	35356	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:23.273593903 CET	606	35356	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:23.273849964 CET	35356	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:23.274656057 CET	35358	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:23.393443108 CET	606	35356	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:23.394145012 CET	606	35358	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:23.394516945 CET	35358	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:23.394608974 CET	35358	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:23.514215946 CET	606	35358	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:25.382060051 CET	606	35358	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:25.382780075 CET	35358	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:25.384357929 CET	35360	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:25.502573967 CET	606	35358	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:25.504101992 CET	606	35360	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:25.504407883 CET	35360	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:25.504491091 CET	35360	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:25.624238014 CET	606	35360	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:27.508172035 CET	606	35360	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:27.508661985 CET	35360	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:27.511132956 CET	35362	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:27.628542900 CET	606	35360	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:27.630851984 CET	606	35362	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:27.631136894 CET	35362	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:27.631259918 CET	35362	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:27.751091003 CET	606	35362	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:29.633601904 CET	606	35362	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:29.634210110 CET	35362	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:29.636707067 CET	35364	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:29.754055023 CET	606	35362	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:29.756347895 CET	606	35364	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:29.756864071 CET	35364	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:29.757209063 CET	35364	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:29.877160072 CET	606	35364	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:31.741123915 CET	606	35364	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:31.741914988 CET	35364	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:31.744412899 CET	35366	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:31.861752987 CET	606	35364	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:31.864300966 CET	606	35366	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:31.864676952 CET	35366	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:31.864676952 CET	35366	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:31.984625101 CET	606	35366	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:33.866831064 CET	606	35366	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:33.867042065 CET	35366	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:33.867938042 CET	35368	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:33.987945080 CET	606	35366	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:33.988948107 CET	606	35368	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:33.989356041 CET	35368	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:33.989356995 CET	35368	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:34.110542059 CET	606	35368	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:35.975310087 CET	606	35368	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:35.975840092 CET	35368	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:35.977783918 CET	35370	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:36.096007109 CET	606	35368	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:36.097457886 CET	606	35370	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:36.097826004 CET	35370	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:36.097995043 CET	35370	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:36.217616081 CET	606	35370	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:38.102396965 CET	606	35370	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:38.103014946 CET	35370	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:38.105247021 CET	35372	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:38.223150969 CET	606	35370	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:38.225068092 CET	606	35372	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:38.225364923 CET	35372	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:38.225615025 CET	35372	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:38.345298052 CET	606	35372	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:40.210690022 CET	606	35372	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:40.211060047 CET	35372	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:40.213217974 CET	35374	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:40.330676079 CET	606	35372	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:40.332700014 CET	606	35374	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:40.333059072 CET	35374	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:40.333121061 CET	35374	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:40.452472925 CET	606	35374	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:42.319294930 CET	606	35374	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:42.319849014 CET	35374	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:42.321965933 CET	35376	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:42.439588070 CET	606	35374	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:42.441585064 CET	606	35376	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:42.442065954 CET	35376	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:42.442065954 CET	35376	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:42.561909914 CET	606	35376	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:44.429030895 CET	606	35376	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:44.429653883 CET	35376	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:44.431596994 CET	35378	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:44.549231052 CET	606	35376	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:44.551290035 CET	606	35378	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:44.551690102 CET	35378	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:44.551800013 CET	35378	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:44.672171116 CET	606	35378	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:46.554518938 CET	606	35378	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:46.555416107 CET	35378	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:46.557497025 CET	35380	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:46.675358057 CET	606	35378	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:46.677229881 CET	606	35380	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:46.677575111 CET	35380	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:46.677575111 CET	35380	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:46.797440052 CET	606	35380	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:48.679721117 CET	606	35380	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:48.680216074 CET	35380	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:48.682451010 CET	35382	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:48.800275087 CET	606	35380	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:48.802184105 CET	606	35382	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:48.802356958 CET	35382	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:48.802356958 CET	35382	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:48.922094107 CET	606	35382	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:50.805732965 CET	606	35382	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:50.806128979 CET	35382	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:50.807362080 CET	35384	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:50.925746918 CET	606	35382	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:50.927107096 CET	606	35384	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:50.927480936 CET	35384	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:50.927570105 CET	35384	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:51.047117949 CET	606	35384	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:52.929724932 CET	606	35384	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:52.929918051 CET	35384	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:52.930898905 CET	35386	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:53.051173925 CET	606	35384	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:53.051712036 CET	606	35386	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:53.051930904 CET	35386	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:53.052160978 CET	35386	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:53.172728062 CET	606	35386	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:55.055511951 CET	606	35386	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:55.055675030 CET	35386	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:55.056580067 CET	35388	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:55.175488949 CET	606	35386	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:55.176161051 CET	606	35388	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:55.176389933 CET	35388	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:55.176426888 CET	35388	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:55.296159029 CET	606	35388	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:57.183034897 CET	606	35388	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:57.183526993 CET	35388	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:57.185218096 CET	35390	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:57.303195953 CET	606	35388	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:57.304637909 CET	606	35390	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:57.304856062 CET	35390	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:57.304856062 CET	35390	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:57.424315929 CET	606	35390	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:59.307224989 CET	606	35390	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:59.307847977 CET	35390	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:59.309889078 CET	35392	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:59.427323103 CET	606	35390	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:59.429156065 CET	606	35392	185.177.25.107	192.168.2.14
Dec 12, 2024 06:47:59.429306984 CET	35392	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:59.429306984 CET	35392	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:47:59.548913002 CET	606	35392	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:01.445990086 CET	606	35392	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:01.446698904 CET	35392	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:01.448999882 CET	35394	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:01.566529036 CET	606	35392	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:01.568440914 CET	606	35394	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:01.568660021 CET	35394	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:01.568660021 CET	35394	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:01.688030958 CET	606	35394	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:03.572372913 CET	606	35394	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:03.572653055 CET	35394	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:03.574116945 CET	35396	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:03.691973925 CET	606	35394	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:03.693495989 CET	606	35396	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:03.693636894 CET	35396	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:03.693792105 CET	35396	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:03.815496922 CET	606	35396	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:05.694814920 CET	606	35396	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:05.695357084 CET	35396	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:05.697071075 CET	35398	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:05.814899921 CET	606	35396	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:05.816340923 CET	606	35398	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:05.816493034 CET	35398	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:05.816597939 CET	35398	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:05.935836077 CET	606	35398	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:07.823497057 CET	606	35398	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:07.824094057 CET	35398	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:07.825928926 CET	35400	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:07.943846941 CET	606	35398	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:07.945379019 CET	606	35400	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:07.945518970 CET	35400	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:07.945621014 CET	35400	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:08.064969063 CET	606	35400	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:09.961493969 CET	606	35400	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:09.962260962 CET	35400	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:09.964407921 CET	35402	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:10.081836939 CET	606	35400	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:10.083827972 CET	606	35402	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:10.084325075 CET	35402	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:10.084325075 CET	35402	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:10.204258919 CET	606	35402	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:12.087198973 CET	606	35402	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:12.087763071 CET	35402	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:12.090159893 CET	35404	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:12.207536936 CET	606	35402	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:12.209621906 CET	606	35404	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:12.209861994 CET	35404	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:12.209949970 CET	35404	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:12.329418898 CET	606	35404	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:14.212330103 CET	606	35404	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:14.212680101 CET	35404	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:14.214209080 CET	35406	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:14.332391977 CET	606	35404	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:14.333884954 CET	606	35406	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:14.334280014 CET	35406	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:14.334472895 CET	35406	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:14.454018116 CET	606	35406	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:16.337894917 CET	606	35406	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:16.338469028 CET	35406	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:16.340312958 CET	35408	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:16.458623886 CET	606	35406	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:16.460133076 CET	606	35408	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:16.460277081 CET	35408	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:16.460478067 CET	35408	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:16.579904079 CET	606	35408	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:18.462121010 CET	606	35408	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:18.462707996 CET	35408	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:18.464082003 CET	35410	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:18.582463026 CET	606	35408	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:18.583997965 CET	606	35410	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:18.584424973 CET	35410	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:18.584425926 CET	35410	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:18.704437017 CET	606	35410	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:20.588918924 CET	606	35410	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:20.589561939 CET	35410	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:20.591881037 CET	35412	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:20.709286928 CET	606	35410	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:20.711524010 CET	606	35412	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:20.711934090 CET	35412	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:20.711998940 CET	35412	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:20.831717968 CET	606	35412	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:22.728627920 CET	606	35412	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:22.729304075 CET	35412	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:22.731343031 CET	35414	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:22.849160910 CET	606	35412	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:22.851109028 CET	606	35414	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:22.851566076 CET	35414	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:22.851566076 CET	35414	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:22.971896887 CET	606	35414	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:24.854825020 CET	606	35414	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:24.855391979 CET	35414	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:24.857028961 CET	35416	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:24.975380898 CET	606	35414	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:24.976502895 CET	606	35416	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:24.976857901 CET	35416	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:24.976958036 CET	35416	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:25.097008944 CET	606	35416	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:26.978454113 CET	606	35416	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:26.979048967 CET	35416	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:26.981014013 CET	35418	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:27.101088047 CET	606	35416	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:27.101113081 CET	606	35418	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:27.101346970 CET	35418	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:27.101442099 CET	35418	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:27.220892906 CET	606	35418	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:29.087462902 CET	606	35418	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:29.088279963 CET	35418	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:29.089790106 CET	35420	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:29.207937002 CET	606	35418	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:29.209431887 CET	606	35420	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:29.209872007 CET	35420	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:29.210015059 CET	35420	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:29.329646111 CET	606	35420	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:31.212740898 CET	606	35420	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:31.213391066 CET	35420	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:31.215878963 CET	35422	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:31.332861900 CET	606	35420	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:31.335398912 CET	606	35422	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:31.335967064 CET	35422	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:31.336083889 CET	35422	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:31.455610991 CET	606	35422	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:33.339083910 CET	606	35422	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:33.339792013 CET	35422	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:33.341794014 CET	35424	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:33.459166050 CET	606	35422	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:33.461087942 CET	606	35424	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:33.461232901 CET	35424	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:33.461396933 CET	35424	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:33.580787897 CET	606	35424	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:35.463015079 CET	606	35424	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:35.463650942 CET	35424	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:35.465387106 CET	35426	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:35.583106041 CET	606	35424	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:35.584858894 CET	606	35426	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:35.585062981 CET	35426	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:35.585155964 CET	35426	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:35.704744101 CET	606	35426	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:37.587124109 CET	606	35426	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:37.587585926 CET	35426	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:37.589359045 CET	35428	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:37.707173109 CET	606	35426	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:37.709103107 CET	606	35428	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:37.709537983 CET	35428	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:37.709538937 CET	35428	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:37.829452991 CET	606	35428	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:39.712135077 CET	606	35428	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:39.712697983 CET	35428	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:39.713486910 CET	35430	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:39.832556963 CET	606	35428	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:39.833415031 CET	606	35430	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:39.833631992 CET	35430	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:39.833801031 CET	35430	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:39.953864098 CET	606	35430	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:40.798681974 CET	45322	53	192.168.2.14	8.8.8.8
Dec 12, 2024 06:48:40.919079065 CET	53	45322	8.8.8.8	192.168.2.14
Dec 12, 2024 06:48:40.919172049 CET	45322	53	192.168.2.14	8.8.8.8
Dec 12, 2024 06:48:40.919259071 CET	45322	53	192.168.2.14	8.8.8.8
Dec 12, 2024 06:48:40.919260025 CET	45322	53	192.168.2.14	8.8.8.8
Dec 12, 2024 06:48:41.038683891 CET	53	45322	8.8.8.8	192.168.2.14
Dec 12, 2024 06:48:41.038701057 CET	53	45322	8.8.8.8	192.168.2.14
Dec 12, 2024 06:48:41.838668108 CET	606	35430	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:41.838788986 CET	35430	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:41.839673996 CET	35434	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:41.958162069 CET	606	35430	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:41.959019899 CET	606	35434	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:41.959332943 CET	35434	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:41.959333897 CET	35434	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:42.003698111 CET	53	45322	8.8.8.8	192.168.2.14
Dec 12, 2024 06:48:42.004051924 CET	45322	53	192.168.2.14	8.8.8.8
Dec 12, 2024 06:48:42.078833103 CET	606	35434	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:43.963244915 CET	606	35434	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:43.963839054 CET	35434	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:43.964963913 CET	35436	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:44.004128933 CET	53	45322	8.8.8.8	192.168.2.14
Dec 12, 2024 06:48:44.004478931 CET	45322	53	192.168.2.14	8.8.8.8
Dec 12, 2024 06:48:44.083818913 CET	606	35434	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:44.084732056 CET	606	35436	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:44.085184097 CET	35436	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:44.085184097 CET	35436	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:44.124058962 CET	53	45322	8.8.8.8	192.168.2.14
Dec 12, 2024 06:48:44.204701900 CET	606	35436	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:46.087543964 CET	606	35436	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:46.087987900 CET	35436	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:46.088468075 CET	35438	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:46.207412004 CET	606	35436	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:46.207844019 CET	606	35438	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:46.208163023 CET	35438	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:46.208163023 CET	35438	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:46.327773094 CET	606	35438	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:48.200854063 CET	606	35438	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:48.201287985 CET	35438	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:48.201555967 CET	35440	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:48.320888996 CET	606	35438	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:48.320926905 CET	606	35440	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:48.321238995 CET	35440	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:48.321238995 CET	35440	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:48.440680981 CET	606	35440	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:50.326617956 CET	606	35440	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:50.326925039 CET	35440	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:50.327681065 CET	35442	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:50.446434975 CET	606	35440	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:50.447052956 CET	606	35442	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:50.447248936 CET	35442	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:50.447248936 CET	35442	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:50.566756964 CET	606	35442	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:52.434449911 CET	606	35442	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:52.434684038 CET	35442	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:52.435520887 CET	35444	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:52.554249048 CET	606	35442	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:52.555200100 CET	606	35444	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:52.555347919 CET	35444	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:52.555428982 CET	35444	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:52.674937963 CET	606	35444	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:54.561464071 CET	606	35444	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:54.561984062 CET	35444	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:54.564531088 CET	35446	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:54.681689978 CET	606	35444	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:54.683913946 CET	606	35446	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:54.684168100 CET	35446	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:54.684216976 CET	35446	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:54.803508997 CET	606	35446	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:56.669306993 CET	606	35446	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:56.670154095 CET	35446	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:56.672060013 CET	35448	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:56.789741993 CET	606	35446	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:56.791331053 CET	606	35448	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:56.791641951 CET	35448	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:56.791641951 CET	35448	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:56.911267996 CET	606	35448	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:58.778453112 CET	606	35448	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:58.778693914 CET	35448	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:58.779604912 CET	35450	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:58.898118973 CET	606	35448	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:58.898833036 CET	606	35450	185.177.25.107	192.168.2.14
Dec 12, 2024 06:48:58.899163961 CET	35450	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:58.899163961 CET	35450	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:48:59.018589973 CET	606	35450	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:00.889898062 CET	606	35450	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:00.890252113 CET	35450	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:00.890933037 CET	35452	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:01.010063887 CET	606	35450	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:01.010554075 CET	606	35452	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:01.010977030 CET	35452	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:01.011234999 CET	35452	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:01.130573034 CET	606	35452	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:03.014637947 CET	606	35452	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:03.014870882 CET	35452	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:03.015604973 CET	35454	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:03.134898901 CET	606	35452	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:03.135430098 CET	606	35454	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:03.135699987 CET	35454	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:03.135699987 CET	35454	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:03.255070925 CET	606	35454	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:05.141457081 CET	606	35454	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:05.142252922 CET	35454	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:05.142611027 CET	35456	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:05.262353897 CET	606	35454	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:05.262639046 CET	606	35456	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:05.262737036 CET	35456	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:05.262878895 CET	35456	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:05.382234097 CET	606	35456	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:07.263879061 CET	606	35456	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:07.264772892 CET	35456	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:07.266755104 CET	35458	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:07.384558916 CET	606	35456	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:07.386504889 CET	606	35458	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:07.386833906 CET	35458	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:07.387015104 CET	35458	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:07.506473064 CET	606	35458	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:09.388254881 CET	606	35458	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:09.388662100 CET	35458	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:09.389511108 CET	35460	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:09.508141994 CET	606	35458	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:09.508795977 CET	606	35460	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:09.508979082 CET	35460	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:09.508979082 CET	35460	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:09.628417969 CET	606	35460	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:11.500210047 CET	606	35460	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:11.500669003 CET	35460	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:11.503294945 CET	35462	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:11.620522976 CET	606	35460	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:11.622874022 CET	606	35462	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:11.623284101 CET	35462	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:11.623284101 CET	35462	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:11.742955923 CET	606	35462	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:13.623249054 CET	606	35462	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:13.623833895 CET	35462	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:13.626365900 CET	35464	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:13.743690014 CET	606	35462	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:13.746268034 CET	606	35464	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:13.746707916 CET	35464	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:13.746798992 CET	35464	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:13.866316080 CET	606	35464	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:15.749420881 CET	606	35464	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:15.749722004 CET	35464	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:15.750710011 CET	35466	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:15.869337082 CET	606	35464	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:15.870037079 CET	606	35466	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:15.870372057 CET	35466	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:15.870502949 CET	35466	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:15.989918947 CET	606	35466	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:17.873368025 CET	606	35466	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:17.874022007 CET	35466	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:17.875089884 CET	35468	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:17.993458986 CET	606	35466	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:17.994515896 CET	606	35468	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:17.994802952 CET	35468	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:17.994893074 CET	35468	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:18.114392042 CET	606	35468	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:19.999174118 CET	606	35468	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:19.999609947 CET	35468	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:20.000628948 CET	35470	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:20.119159937 CET	606	35468	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:20.120035887 CET	606	35470	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:20.120301008 CET	35470	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:20.120398045 CET	35470	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:20.239747047 CET	606	35470	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:22.170346022 CET	606	35470	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:22.171015024 CET	35470	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:22.173190117 CET	35472	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:22.294825077 CET	606	35470	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:22.294953108 CET	606	35472	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:22.295309067 CET	35472	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:22.295310020 CET	35472	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:22.416292906 CET	606	35472	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:24.312102079 CET	606	35472	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:24.312861919 CET	35472	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:24.314410925 CET	35474	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:24.432841063 CET	606	35472	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:24.433990002 CET	606	35474	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:24.434576035 CET	35474	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:24.434576035 CET	35474	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:24.554306030 CET	606	35474	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:26.420347929 CET	606	35474	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:26.420727015 CET	35474	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:26.421413898 CET	35476	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:26.540379047 CET	606	35474	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:26.541125059 CET	606	35476	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:26.541552067 CET	35476	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:26.541721106 CET	35476	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:26.661416054 CET	606	35476	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:28.546353102 CET	606	35476	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:28.546785116 CET	35476	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:28.549047947 CET	35478	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:28.666502953 CET	606	35476	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:28.668376923 CET	606	35478	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:28.668575048 CET	35478	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:28.668744087 CET	35478	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:28.788237095 CET	606	35478	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:30.670367956 CET	606	35478	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:30.670989990 CET	35478	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:30.673300982 CET	35480	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:30.790891886 CET	606	35478	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:30.792975903 CET	606	35480	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:30.793364048 CET	35480	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:30.793364048 CET	35480	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:30.912966967 CET	606	35480	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:32.796472073 CET	606	35480	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:32.796859026 CET	35480	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:32.797983885 CET	35482	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:32.917354107 CET	606	35480	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:32.917397976 CET	606	35482	185.177.25.107	192.168.2.14
Dec 12, 2024 06:49:32.917676926 CET	35482	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:32.917712927 CET	35482	606	192.168.2.14	185.177.25.107
Dec 12, 2024 06:49:33.037518024 CET	606	35482	185.177.25.107	192.168.2.14

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 12, 2024 06:48:40.919259071 CET	192.168.2.14	8.8.8.8	0xee67	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 06:48:40.919260025 CET	192.168.2.14	8.8.8.8	0xc6ee	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 12, 2024 06:48:42.003698111 CET	8.8.8.8	192.168.2.14	0xee67	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Dec 12, 2024 06:48:42.003698111 CET	8.8.8.8	192.168.2.14	0xee67	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: arm7.xxx.elf PID: 5608, Parent PID: 5533

General

Start time (UTC):	05:45:56
Start date (UTC):	12/12/2024
Path:	/tmp/arm7.xxx.elf
Arguments:	/tmp/arm7.xxx.elf
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Chronological Activities

Analysis Process: arm7.xxx.elf PID: 5610, Parent PID: 5608

General

Start time (UTC):	05:45:56
Start date (UTC):	12/12/2024
Path:	/tmp/arm7.xxx.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Chronological Activities

Analysis Process: arm7.xxx.elf PID: 5612, Parent PID: 5610

General

Start time (UTC):	05:45:56
Start date (UTC):	12/12/2024
Path:	/tmp/arm7.xxx.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Chronological Activities