Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
i586.xxx.elf

Overview

General Information

Sample name:	i586.xxx.elf
Analysis ID:	1573491
MD5:	922954d5f061bd6b7c22fe4acbd3b8bc
SHA1:	04b396b5bcfc97e61c18890375e07e78fec80310
SHA256:	3f58a19aee035755606b99ba91e26a21cd911c29346f49d8ec9808f171dc5153
Tags:	elfMiraiuser-lontze7
Infos:

Detection

Gafgyt, Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Contains symbols with names commonly found in malware

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Executes the "rm" command used to delete files or directories

Sample contains strings that are user agent strings indicative of HTTP manipulation

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

×

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1573491
Start date and time:	2024-12-12 06:49:38 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 24s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	i586.xxx.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/1@0/0

Runtime Messages

Command:	/tmp/i586.xxx.elf
PID:	6277
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

dash New Fork (PID: 6242, Parent: 4341)

rm (PID: 6242, Parent: 4341, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.AxUoZqs6ZX /tmp/tmp.X6eLSgsrdV /tmp/tmp.Zpp0gxadZd

dash New Fork (PID: 6243, Parent: 4341)

cat (PID: 6243, Parent: 4341, MD5: 7e9d213e404ad3bb82e4ebb2e1f2c1b3) Arguments: cat /tmp/tmp.AxUoZqs6ZX

dash New Fork (PID: 6244, Parent: 4341)

head (PID: 6244, Parent: 4341, MD5: fd96a67145172477dd57131396fc9608) Arguments: head -n 10

dash New Fork (PID: 6245, Parent: 4341)

tr (PID: 6245, Parent: 4341, MD5: fbd1402dd9f72d8ebfff00ce7c3a7bb5) Arguments: tr -d \\000-\\011\\013\\014\\016-\\037

dash New Fork (PID: 6246, Parent: 4341)

cut (PID: 6246, Parent: 4341, MD5: d8ed0ea8f22c0de0f8692d4d9f1759d3) Arguments: cut -c -80

dash New Fork (PID: 6247, Parent: 4341)

cat (PID: 6247, Parent: 4341, MD5: 7e9d213e404ad3bb82e4ebb2e1f2c1b3) Arguments: cat /tmp/tmp.AxUoZqs6ZX

dash New Fork (PID: 6248, Parent: 4341)

head (PID: 6248, Parent: 4341, MD5: fd96a67145172477dd57131396fc9608) Arguments: head -n 10

dash New Fork (PID: 6249, Parent: 4341)

tr (PID: 6249, Parent: 4341, MD5: fbd1402dd9f72d8ebfff00ce7c3a7bb5) Arguments: tr -d \\000-\\011\\013\\014\\016-\\037

dash New Fork (PID: 6250, Parent: 4341)

cut (PID: 6250, Parent: 4341, MD5: d8ed0ea8f22c0de0f8692d4d9f1759d3) Arguments: cut -c -80

dash New Fork (PID: 6251, Parent: 4341)

rm (PID: 6251, Parent: 4341, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.AxUoZqs6ZX /tmp/tmp.X6eLSgsrdV /tmp/tmp.Zpp0gxadZd

i586.xxx.elf (PID: 6277, Parent: 6172, MD5: cd177594338c77b895ae27c33f8f86cc) Arguments: /tmp/i586.xxx.elf

i586.xxx.elf New Fork (PID: 6279, Parent: 6277)

i586.xxx.elf New Fork (PID: 6281, Parent: 6279)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
i586.xxx.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
i586.xxx.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
i586.xxx.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x14759:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1476d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14781:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14795:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147a9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147bd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147d1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147e5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147f9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1480d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14821:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14835:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14849:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1485d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14871:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14885:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14899:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x148ad:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x148c1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x148d5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x148e9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

Source	Rule	Description	Author	Strings
6277.1.00007fd724001000.00007fd724018000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6277.1.00007fd724001000.00007fd724018000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x14759:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1476d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14781:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14795:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147a9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147bd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147d1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147e5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147f9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1480d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14821:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14835:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14849:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1485d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14871:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14885:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14899:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x148ad:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x148c1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x148d5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x148e9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6279.1.00007fd724001000.00007fd724018000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6279.1.00007fd724001000.00007fd724018000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x14759:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1476d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14781:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14795:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147a9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147bd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147d1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147e5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147f9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1480d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14821:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14835:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14849:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1485d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14871:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14885:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14899:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x148ad:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x148c1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x148d5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x148e9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: i586.xxx.elf PID: 6277	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: i586.xxx.elf PID: 6277	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x3cbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3cd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3ce4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3cf8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3dac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3dc0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3dd4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3de8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3dfc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3e10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3e24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3e38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3e4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: i586.xxx.elf PID: 6279	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: i586.xxx.elf PID: 6279	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x76a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x76bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x76d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x76e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x76f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x770c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7720:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7734:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7748:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x775c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7770:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7784:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7798:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x77ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x77c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x77d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x77e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x77fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7810:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7824:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7838:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 3 entries

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-12T06:50:34.522006+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57032	185.177.25.107	606	TCP
2024-12-12T06:50:36.733721+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57034	185.177.25.107	606	TCP
2024-12-12T06:50:38.839065+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57036	185.177.25.107	606	TCP
2024-12-12T06:50:40.948938+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57038	185.177.25.107	606	TCP
2024-12-12T06:50:43.074381+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57040	185.177.25.107	606	TCP
2024-12-12T06:50:45.183991+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57042	185.177.25.107	606	TCP
2024-12-12T06:50:47.309256+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57044	185.177.25.107	606	TCP
2024-12-12T06:50:49.433096+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57046	185.177.25.107	606	TCP
2024-12-12T06:50:51.574085+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57048	185.177.25.107	606	TCP
2024-12-12T06:50:53.730494+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57050	185.177.25.107	606	TCP
2024-12-12T06:50:55.856711+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57052	185.177.25.107	606	TCP
2024-12-12T06:50:58.011885+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57054	185.177.25.107	606	TCP
2024-12-12T06:51:00.137146+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57056	185.177.25.107	606	TCP
2024-12-12T06:51:02.245238+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57058	185.177.25.107	606	TCP
2024-12-12T06:51:04.386778+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57060	185.177.25.107	606	TCP
2024-12-12T06:51:06.512051+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57062	185.177.25.107	606	TCP
2024-12-12T06:51:08.638049+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57064	185.177.25.107	606	TCP
2024-12-12T06:51:10.762613+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57066	185.177.25.107	606	TCP
2024-12-12T06:51:12.887464+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57068	185.177.25.107	606	TCP
2024-12-12T06:51:15.013851+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57070	185.177.25.107	606	TCP
2024-12-12T06:51:17.139373+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57072	185.177.25.107	606	TCP
2024-12-12T06:51:19.248065+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57074	185.177.25.107	606	TCP
2024-12-12T06:51:21.373928+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57076	185.177.25.107	606	TCP
2024-12-12T06:51:23.480882+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57078	185.177.25.107	606	TCP
2024-12-12T06:51:25.621042+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57080	185.177.25.107	606	TCP
2024-12-12T06:51:27.747837+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57082	185.177.25.107	606	TCP
2024-12-12T06:51:29.873787+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57084	185.177.25.107	606	TCP
2024-12-12T06:51:31.999569+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57086	185.177.25.107	606	TCP
2024-12-12T06:51:34.123533+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57088	185.177.25.107	606	TCP
2024-12-12T06:51:36.248327+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57090	185.177.25.107	606	TCP
2024-12-12T06:51:38.372883+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57092	185.177.25.107	606	TCP
2024-12-12T06:51:40.501091+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57094	185.177.25.107	606	TCP
2024-12-12T06:51:42.639831+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57096	185.177.25.107	606	TCP
2024-12-12T06:51:44.763858+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57098	185.177.25.107	606	TCP
2024-12-12T06:51:46.890421+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57100	185.177.25.107	606	TCP
2024-12-12T06:51:49.013744+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57102	185.177.25.107	606	TCP
2024-12-12T06:51:51.141063+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57104	185.177.25.107	606	TCP
2024-12-12T06:51:53.252053+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57106	185.177.25.107	606	TCP
2024-12-12T06:51:55.395468+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57108	185.177.25.107	606	TCP
2024-12-12T06:51:57.529670+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57110	185.177.25.107	606	TCP
2024-12-12T06:51:59.670833+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57112	185.177.25.107	606	TCP
2024-12-12T06:52:01.794583+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57114	185.177.25.107	606	TCP
2024-12-12T06:52:03.920621+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57116	185.177.25.107	606	TCP
2024-12-12T06:52:06.064983+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57118	185.177.25.107	606	TCP
2024-12-12T06:52:08.187870+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57120	185.177.25.107	606	TCP
2024-12-12T06:52:10.311523+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57122	185.177.25.107	606	TCP
2024-12-12T06:52:12.435308+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57124	185.177.25.107	606	TCP
2024-12-12T06:52:14.546074+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57126	185.177.25.107	606	TCP
2024-12-12T06:52:16.669314+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57128	185.177.25.107	606	TCP
2024-12-12T06:52:18.796043+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57130	185.177.25.107	606	TCP
2024-12-12T06:52:20.905219+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57132	185.177.25.107	606	TCP
2024-12-12T06:52:23.030899+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57134	185.177.25.107	606	TCP
2024-12-12T06:52:25.156643+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57136	185.177.25.107	606	TCP
2024-12-12T06:52:27.297865+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57138	185.177.25.107	606	TCP
2024-12-12T06:52:29.420962+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57140	185.177.25.107	606	TCP
2024-12-12T06:52:31.547257+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57142	185.177.25.107	606	TCP
2024-12-12T06:52:33.670923+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57144	185.177.25.107	606	TCP
2024-12-12T06:52:35.795865+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57146	185.177.25.107	606	TCP
2024-12-12T06:52:37.921422+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57148	185.177.25.107	606	TCP
2024-12-12T06:52:40.047531+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57150	185.177.25.107	606	TCP
2024-12-12T06:52:42.173441+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57152	185.177.25.107	606	TCP
2024-12-12T06:52:44.299447+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57154	185.177.25.107	606	TCP
2024-12-12T06:52:46.405773+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57156	185.177.25.107	606	TCP
2024-12-12T06:52:48.683696+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57158	185.177.25.107	606	TCP
2024-12-12T06:52:50.812315+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57160	185.177.25.107	606	TCP
2024-12-12T06:52:52.947059+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57162	185.177.25.107	606	TCP
2024-12-12T06:52:55.078813+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57164	185.177.25.107	606	TCP
2024-12-12T06:52:57.203986+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57166	185.177.25.107	606	TCP
2024-12-12T06:52:59.344008+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57168	185.177.25.107	606	TCP
2024-12-12T06:53:01.469088+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57170	185.177.25.107	606	TCP
2024-12-12T06:53:03.593869+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57172	185.177.25.107	606	TCP
2024-12-12T06:53:05.717939+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57174	185.177.25.107	606	TCP
2024-12-12T06:53:07.846423+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57176	185.177.25.107	606	TCP
2024-12-12T06:53:09.968292+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57178	185.177.25.107	606	TCP
2024-12-12T06:53:12.094583+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57180	185.177.25.107	606	TCP
2024-12-12T06:53:14.219077+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57182	185.177.25.107	606	TCP
2024-12-12T06:53:16.347822+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57184	185.177.25.107	606	TCP
2024-12-12T06:53:18.490726+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57186	185.177.25.107	606	TCP
2024-12-12T06:53:20.624359+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57188	185.177.25.107	606	TCP
2024-12-12T06:53:22.749671+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57190	185.177.25.107	606	TCP
2024-12-12T06:53:24.875156+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57192	185.177.25.107	606	TCP
2024-12-12T06:53:27.001458+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57194	185.177.25.107	606	TCP
2024-12-12T06:53:29.124579+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57196	185.177.25.107	606	TCP
2024-12-12T06:53:31.251194+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57198	185.177.25.107	606	TCP
2024-12-12T06:53:33.378334+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57200	185.177.25.107	606	TCP
2024-12-12T06:53:35.499936+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57202	185.177.25.107	606	TCP
2024-12-12T06:53:37.625923+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57204	185.177.25.107	606	TCP
2024-12-12T06:53:39.750378+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57206	185.177.25.107	606	TCP
2024-12-12T06:53:41.876115+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57208	185.177.25.107	606	TCP
2024-12-12T06:53:44.002174+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57210	185.177.25.107	606	TCP
2024-12-12T06:53:46.127139+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57212	185.177.25.107	606	TCP
2024-12-12T06:53:48.251582+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57214	185.177.25.107	606	TCP
2024-12-12T06:53:50.393355+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57216	185.177.25.107	606	TCP
2024-12-12T06:53:52.533275+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57218	185.177.25.107	606	TCP
2024-12-12T06:53:54.703921+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57220	185.177.25.107	606	TCP
2024-12-12T06:53:56.831520+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57222	185.177.25.107	606	TCP
2024-12-12T06:53:58.986703+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57224	185.177.25.107	606	TCP
2024-12-12T06:54:01.127258+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57226	185.177.25.107	606	TCP
2024-12-12T06:54:03.250648+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57228	185.177.25.107	606	TCP
2024-12-12T06:54:05.358386+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57230	185.177.25.107	606	TCP
2024-12-12T06:54:07.483816+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57232	185.177.25.107	606	TCP
2024-12-12T06:54:09.608923+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57234	185.177.25.107	606	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: i586.xxx.elf

Avira: detected

Found malware configuration

Source: i586.xxx.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "185.177.25.107:606"}

Multi AV Scanner detection for submitted file

Source: i586.xxx.elf

Virustotal: Detection: 57%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/i586.xxx.elf (PID: 6277)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57036 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57038 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57050 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57040 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57056 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57042 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57048 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57052 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57070 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57032 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57080 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57058 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57062 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57078 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57034 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57076 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57122 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57072 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57060 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57046 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57134 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57106 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57068 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57044 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57110 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57096 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57088 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57066 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57160 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57154 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57104 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57114 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57092 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57126 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57100 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57130 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57228 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57186 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57234 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57148 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57140 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57194 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57200 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57094 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57158 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57216 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57090 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57166 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57136 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57146 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57210 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57226 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57180 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57086 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57138 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57098 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57182 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57150 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57124 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57222 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57174 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57102 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57116 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57132 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57172 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57208 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57218 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57170 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57184 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57082 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57202 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57198 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57178 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57074 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57230 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57108 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57168 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57142 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57212 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57120 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57054 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57144 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57190 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57224 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57196 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57204 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57206 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57064 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57176 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57118 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57128 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57084 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57220 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57156 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57164 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57112 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57192 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57214 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57152 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57232 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57162 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57188 -> 185.177.25.107:606

Source: global traffic

TCP traffic: 192.168.2.23:57032 -> 185.177.25.107:606

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: i586.xxx.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6277.1.00007fd724001000.00007fd724018000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6279.1.00007fd724001000.00007fd724018000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: i586.xxx.elf PID: 6277, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: i586.xxx.elf PID: 6279, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample

Name: vseattack

Source: i586.xxx.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6277.1.00007fd724001000.00007fd724018000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6279.1.00007fd724001000.00007fd724018000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: i586.xxx.elf PID: 6277, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: i586.xxx.elf PID: 6279, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/1@0/0

Source: /usr/bin/dash (PID: 6242)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.AxUoZqs6ZX /tmp/tmp.X6eLSgsrdV /tmp/tmp.Zpp0gxadZd			Jump to behavior
Source: /usr/bin/dash (PID: 6251)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.AxUoZqs6ZX /tmp/tmp.X6eLSgsrdV /tmp/tmp.Zpp0gxadZd			Jump to behavior

Source: /tmp/i586.xxx.elf (PID: 6277)

Queries kernel information via 'uname':

Jump to behavior

Source: i586.xxx.elf, 6277.1.00007ffcf4a16000.00007ffcf4a37000.rw-.sdmp, i586.xxx.elf, 6279.1.00007ffcf4a16000.00007ffcf4a37000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-m68k/tmp/i586.xxx.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/i586.xxx.elf
Source: i586.xxx.elf, 6277.1.000055ec0efc4000.000055ec0f028000.rw-.sdmp, i586.xxx.elf, 6279.1.000055ec0efc4000.000055ec0f028000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/m68k
Source: i586.xxx.elf, 6277.1.00007ffcf4a16000.00007ffcf4a37000.rw-.sdmp, i586.xxx.elf, 6279.1.00007ffcf4a16000.00007ffcf4a37000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-m68k
Source: i586.xxx.elf, 6277.1.00007ffcf4a16000.00007ffcf4a37000.rw-.sdmp	Binary or memory string: U/tmp/qemu-open.eYR2KN\T
Source: i586.xxx.elf, 6277.1.00007ffcf4a16000.00007ffcf4a37000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.eYR2KN
Source: i586.xxx.elf, 6277.1.000055ec0efc4000.000055ec0f028000.rw-.sdmp, i586.xxx.elf, 6279.1.000055ec0efc4000.000055ec0f028000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/m68k

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: i586.xxx.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: i586.xxx.elf, type: SAMPLE
Source: Yara match	File source: 6277.1.00007fd724001000.00007fd724018000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6279.1.00007fd724001000.00007fd724018000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: i586.xxx.elf PID: 6277, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: i586.xxx.elf PID: 6279, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: i586.xxx.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: i586.xxx.elf, type: SAMPLE
Source: Yara match	File source: 6277.1.00007fd724001000.00007fd724018000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6279.1.00007fd724001000.00007fd724018000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: i586.xxx.elf PID: 6277, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: i586.xxx.elf PID: 6279, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 File Deletion	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "185.177.25.107:606"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
i586.xxx.elf	58%	Virustotal		Browse
i586.xxx.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
185.177.25.107:606	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
185.177.25.107	unknown	Turkey		18013	ASLINE-AS-APASLINELIMITEDHK	true
109.202.202.202	unknown	Switzerland		13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom		41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom		41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.177.25.107	x32.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	arm5.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	mips.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	arm7.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	m68k.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	ppc.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	arm6.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	mpsl.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	ppc.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	x86.elf	Get hash	malicious	Mirai	Browse
	fruit.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.ppc.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	sshd.elf	Get hash	malicious	Unknown	Browse
	fruit.x86.elf	Get hash	malicious	Mirai, Gafgyt	Browse
91.189.91.42	mips.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	ppc.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	x86.elf	Get hash	malicious	Mirai	Browse
	fruit.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.ppc.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	sshd.elf	Get hash	malicious	Unknown	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	mips.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	ppc.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	x86.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	fruit.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	fruit.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	fruit.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	fruit.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	fruit.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	fruit.ppc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	sshd.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
CANONICAL-ASGB	mips.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	ppc.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	x86.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	fruit.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	fruit.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	fruit.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	fruit.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	fruit.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	fruit.ppc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	sshd.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
INIT7CH	mips.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	ppc.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	x86.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	fruit.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	fruit.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	fruit.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	fruit.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	fruit.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	fruit.ppc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	sshd.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
ASLINE-AS-APASLINELIMITEDHK	x32.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	arm5.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	mips.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	arm7.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	m68k.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	ppc.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	arm6.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	mpsl.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	fruit.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	fruit.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/qemu-open.eYR2KN (deleted)

Process:	/tmp/i586.xxx.elf
File Type:	ASCII text
Category:	dropped
Size (bytes):	230
Entropy (8bit):	3.709552666863289
Encrypted:	false
SSDEEP:	6:iekrEcvwAsE5KlwSd4pzKaV6Lpms/a/1VCxGF:ur+m5MwSdIKaV6L1adVRF
MD5:	2E667F43AE18CD1FE3C108641708A82C
SHA1:	12B90DE2DA0FBCFE66F3D6130905E56C8D6A68D3
SHA-256:	6F721492E7A337C5B498A8F55F5EB7AC745AFF716D0B5B08EFF2C1B6B250F983
SHA-512:	D2A0EE2509154EC1098994F38BE172F98F4150399C534A04D5C675D7C05630802225019F19344CC9070C576BC465A4FEB382AC7712DE6BF25E9244B54A9DB830
Malicious:	false
Reputation:	high, very likely benign file
Preview:	Iface.Destination.Gateway .Flags.RefCnt.Use.Metric.Mask..MTU.Window.IRTT .ens160.00000000.c0a80201.0003.0.0.0.00000000.0.0.0.ens160.c0a80200.00000000.0001.0.0.0.ffffff00.0.0.0.

Static File Info

General

File type:	ELF 32-bit MSB executable, Motorola m68k, 68020, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	6.102796588898889
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	i586.xxx.elf
File size:	117'975 bytes
MD5:	922954d5f061bd6b7c22fe4acbd3b8bc
SHA1:	04b396b5bcfc97e61c18890375e07e78fec80310
SHA256:	3f58a19aee035755606b99ba91e26a21cd911c29346f49d8ec9808f171dc5153
SHA512:	a620bd974f47d3fe1aa32f3ec67b8a4205b7bfe4c1c9a882f8ff57796e502e1b3c6374a627212dce2f7be1e876c0026423a9b13985b1edb32ac9402b9ebb4db2
SSDEEP:	3072:rb1X2QeqacWucW0JcWcBEeeL2jvJY7P8Y0OCEKqElCRmmH/zTLlKHSwn:x2QeqacWucW0JcWcBxecJMP8YUE4sRmL
TLSH:	D3B31993F511DAB6F44AD63308D78B247670FAE10B53152263173BAAEE362D4385BF42
File Content Preview:	.ELF.......................D...4..v<.....4. ...(......................g...g....... .......g...............i....... .dt.Q............................NV..a....da...?.N^NuNV..J9....f>"y...( QJ.g.X.#....(N."y...( QJ.f.A.....J.g.Hy....N.X.........N^NuNV..N^NuN

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MC68000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x80000144
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	95804
Section Header Size:	40
Number of Section Headers:	15
Header String Table Index:	12

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80000094	0x94	0x14	0x0	0x6	AX	0	0	2
.text	PROGBITS	0x800000a8	0xa8	0x13fac	0x0	0x6	AX	0	0	4
.fini	PROGBITS	0x80014054	0x14054	0xe	0x0	0x6	AX	0	0	2
.rodata	PROGBITS	0x80014062	0x14062	0x26a8	0x0	0x2	A	0	0	2
.eh_frame	PROGBITS	0x8001870c	0x1670c	0x4	0x0	0x3	WA	0	0	4
.ctors	PROGBITS	0x80018710	0x16710	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x80018718	0x16718	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x80018720	0x16720	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x80018724	0x16724	0x298	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x800189bc	0x169bc	0x6664	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x169bc	0xc18	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x175d4	0x66	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x17894	0x2fa0	0x10	0x0		14	289	4
.strtab	STRTAB	0x0	0x1a834	0x24a3	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Prog Interpreter	Section Mappings
LOAD	0x0	0x80000000	0x80000000	0x1670a	0x1670a	6.0792	0x5	R E	0x2000		.init .text .fini .rodata
LOAD	0x1670c	0x8001870c	0x8001870c	0x2b0	0x6914	3.8117	0x6	RW	0x2000		.eh_frame .ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Symbols

Name	Version Info Name	Version Info File Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
			.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
			.symtab	0x80000094	0	SECTION	<unknown>	DEFAULT	1
			.symtab	0x800000a8	0	SECTION	<unknown>	DEFAULT	2
			.symtab	0x80014054	0	SECTION	<unknown>	DEFAULT	3
			.symtab	0x80014062	0	SECTION	<unknown>	DEFAULT	4
			.symtab	0x8001870c	0	SECTION	<unknown>	DEFAULT	5
			.symtab	0x80018710	0	SECTION	<unknown>	DEFAULT	6
			.symtab	0x80018718	0	SECTION	<unknown>	DEFAULT	7
			.symtab	0x80018720	0	SECTION	<unknown>	DEFAULT	8
			.symtab	0x80018724	0	SECTION	<unknown>	DEFAULT	9
			.symtab	0x800189bc	0	SECTION	<unknown>	DEFAULT	10
			.symtab	0x0	0	SECTION	<unknown>	DEFAULT	11
Q			.symtab	0x800189ee	16384	OBJECT	<unknown>	DEFAULT	10
Sakura_Bot.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
SendSTD			.symtab	0x800022e8	264	FUNC	<unknown>	DEFAULT	2
SendSTDHEX			.symtab	0x80001b76	280	FUNC	<unknown>	DEFAULT	2
SendSTD_HEX			.symtab	0x80002500	314	FUNC	<unknown>	DEFAULT	2
SendUDP			.symtab	0x800013a2	850	FUNC	<unknown>	DEFAULT	2
_Exit			.symtab	0x8000503c	92	FUNC	<unknown>	DEFAULT	2
_Jv_RegisterClasses			.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__			.symtab	0x80018714	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__			.symtab	0x80018710	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b			.symtab	0x8001875c	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_b.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data			.symtab	0x80015038	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower			.symtab	0x800189b4	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_tolower.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data			.symtab	0x8001640a	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper			.symtab	0x80018764	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_toupper.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data			.symtab	0x80015338	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__			.symtab	0x8001871c	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__			.symtab	0x80018718	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__			.symtab	0x8001870c	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__			.symtab	0x8001870c	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b			.symtab	0x8001875c	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_tolower			.symtab	0x800189b4	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_toupper			.symtab	0x80018764	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_b			.symtab	0x80018760	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_tolower			.symtab	0x800189b8	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_toupper			.symtab	0x80018768	4	OBJECT	<unknown>	HIDDEN	9
__GI___errno_location			.symtab	0x8000571c	16	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel			.symtab	0x80004f0e	302	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked			.symtab	0x8000bc38	500	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r			.symtab	0x80011fd0	36	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location			.symtab	0x8000a7d4	16	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl			.symtab	0x80004de0	302	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset			.symtab	0x8000676c	68	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset			.symtab	0x800067b0	72	FUNC	<unknown>	HIDDEN	2
__GI___sigismember			.symtab	0x8000671c	80	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini			.symtab	0x8000986c	106	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init			.symtab	0x80009976	124	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r			.symtab	0x80011ff4	266	FUNC	<unknown>	HIDDEN	2
__GI__exit			.symtab	0x8000503c	92	FUNC	<unknown>	HIDDEN	2
__GI_abort			.symtab	0x80007f6c	376	FUNC	<unknown>	HIDDEN	2
__GI_atoi			.symtab	0x8000889c	28	FUNC	<unknown>	HIDDEN	2
__GI_brk			.symtab	0x8000d680	64	FUNC	<unknown>	HIDDEN	2
__GI_chdir			.symtab	0x80005168	16	FUNC	<unknown>	HIDDEN	2
__GI_clock_getres			.symtab	0x80009d84	116	FUNC	<unknown>	HIDDEN	2
__GI_close			.symtab	0x80005178	96	FUNC	<unknown>	HIDDEN	2
__GI_closedir			.symtab	0x8000a2b0	292	FUNC	<unknown>	HIDDEN	2
__GI_config_close			.symtab	0x8000a7e4	72	FUNC	<unknown>	HIDDEN	2
__GI_config_open			.symtab	0x8000a82c	106	FUNC	<unknown>	HIDDEN	2
__GI_config_read			.symtab	0x8000aa86	744	FUNC	<unknown>	HIDDEN	2
__GI_connect			.symtab	0x80006484	48	FUNC	<unknown>	HIDDEN	2
__GI_errno			.symtab	0x8001cbec	4	OBJECT	<unknown>	HIDDEN	10
__GI_exit			.symtab	0x80008b14	220	FUNC	<unknown>	HIDDEN	2
__GI_fclose			.symtab	0x8000ad70	476	FUNC	<unknown>	HIDDEN	2
__GI_fcntl			.symtab	0x80004de0	302	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked			.symtab	0x8000ba1a	542	FUNC	<unknown>	HIDDEN	2
__GI_fgetc			.symtab	0x8000b708	278	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked			.symtab	0x8000bc38	500	FUNC	<unknown>	HIDDEN	2
__GI_fgets			.symtab	0x8000b820	158	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked			.symtab	0x8000be2c	226	FUNC	<unknown>	HIDDEN	2
__GI_fopen			.symtab	0x8000af4c	38	FUNC	<unknown>	HIDDEN	2
__GI_fork			.symtab	0x800051d8	86	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked			.symtab	0x80011d84	80	FUNC	<unknown>	HIDDEN	2
__GI_fseek			.symtab	0x80013cc4	38	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64			.symtab	0x80013cec	370	FUNC	<unknown>	HIDDEN	2
__GI_fstat			.symtab	0x8000d74c	148	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked			.symtab	0x80011dd4	162	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked			.symtab	0x8000bc38	500	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize			.symtab	0x80009df8	52	FUNC	<unknown>	HIDDEN	2
__GI_getegid			.symtab	0x80009e2c	30	FUNC	<unknown>	HIDDEN	2
__GI_geteuid			.symtab	0x80009e4c	30	FUNC	<unknown>	HIDDEN	2
__GI_getgid			.symtab	0x80009e6c	30	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname			.symtab	0x80006428	28	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname2			.symtab	0x80006444	64	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname2_r			.symtab	0x8000cad8	928	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r			.symtab	0x8000fe20	1018	FUNC	<unknown>	HIDDEN	2
__GI_gethostname			.symtab	0x8001021c	138	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize			.symtab	0x80009e8c	42	FUNC	<unknown>	HIDDEN	2
__GI_getpid			.symtab	0x80005230	28	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit			.symtab	0x80009eb8	126	FUNC	<unknown>	HIDDEN	2
__GI_getsockname			.symtab	0x800064b4	50	FUNC	<unknown>	HIDDEN	2
__GI_getuid			.symtab	0x80009f38	30	FUNC	<unknown>	HIDDEN	2
__GI_h_errno			.symtab	0x8001cbf0	4	OBJECT	<unknown>	HIDDEN	10
__GI_htonl			.symtab	0x80006316	12	FUNC	<unknown>	HIDDEN	2
__GI_htons			.symtab	0x80006322	22	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr			.symtab	0x800063f8	48	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton			.symtab	0x8000c960	376	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa			.symtab	0x800063d8	30	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r			.symtab	0x80006338	160	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop			.symtab	0x8000ebe0	112	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton			.symtab	0x8000e700	96	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r			.symtab	0x80008746	342	FUNC	<unknown>	HIDDEN	2
__GI_ioctl			.symtab	0x8000524c	172	FUNC	<unknown>	HIDDEN	2
__GI_isatty			.symtab	0x8000c874	52	FUNC	<unknown>	HIDDEN	2
__GI_isspace			.symtab	0x800056b4	40	FUNC	<unknown>	HIDDEN	2
__GI_kill			.symtab	0x80005368	20	FUNC	<unknown>	HIDDEN	2
__GI_lseek64			.symtab	0x8001043c	204	FUNC	<unknown>	HIDDEN	2
__GI_memchr			.symtab	0x8001383c	348	FUNC	<unknown>	HIDDEN	2
__GI_memcpy			.symtab	0x80005b56	240	FUNC	<unknown>	HIDDEN	2
__GI_memmove			.symtab	0x8000c3d0	288	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy			.symtab	0x8000e0e8	42	FUNC	<unknown>	HIDDEN	2
__GI_memrchr			.symtab	0x80013998	358	FUNC	<unknown>	HIDDEN	2
__GI_memset			.symtab	0x80005c48	310	FUNC	<unknown>	HIDDEN	2
__GI_mmap			.symtab	0x80009fba	70	FUNC	<unknown>	HIDDEN	2
__GI_mremap			.symtab	0x8000d7e0	150	FUNC	<unknown>	HIDDEN	2
__GI_munmap			.symtab	0x8000a000	112	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep			.symtab	0x8000a0e2	20	FUNC	<unknown>	HIDDEN	2
__GI_ntohl			.symtab	0x800062f4	12	FUNC	<unknown>	HIDDEN	2
__GI_ntohs			.symtab	0x80006300	22	FUNC	<unknown>	HIDDEN	2
__GI_open			.symtab	0x80005408	80	FUNC	<unknown>	HIDDEN	2
__GI_opendir			.symtab	0x8000a4dc	268	FUNC	<unknown>	HIDDEN	2
__GI_poll			.symtab	0x8001032a	28	FUNC	<unknown>	HIDDEN	2
__GI_raise			.symtab	0x8000ce78	28	FUNC	<unknown>	HIDDEN	2
__GI_random			.symtab	0x800080f4	112	FUNC	<unknown>	HIDDEN	2
__GI_random_r			.symtab	0x80008484	270	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr			.symtab	0x8000e114	270	FUNC	<unknown>	HIDDEN	2
__GI_read			.symtab	0x80005458	128	FUNC	<unknown>	HIDDEN	2
__GI_readdir64			.symtab	0x8000a688	330	FUNC	<unknown>	HIDDEN	2
__GI_recv			.symtab	0x8000652c	56	FUNC	<unknown>	HIDDEN	2
__GI_sbrk			.symtab	0x8000a0f8	106	FUNC	<unknown>	HIDDEN	2
__GI_select			.symtab	0x8000556c	36	FUNC	<unknown>	HIDDEN	2
__GI_send			.symtab	0x80006564	56	FUNC	<unknown>	HIDDEN	2
__GI_sendto			.symtab	0x8000659c	70	FUNC	<unknown>	HIDDEN	2
__GI_setsid			.symtab	0x80005590	86	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt			.symtab	0x800065e4	64	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r			.symtab	0x800082dc	424	FUNC	<unknown>	HIDDEN	2
__GI_sigaction			.symtab	0x8000ce94	34	FUNC	<unknown>	HIDDEN	2
__GI_signal			.symtab	0x80006658	196	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask			.symtab	0x8000a164	162	FUNC	<unknown>	HIDDEN	2
__GI_sleep			.symtab	0x80008bf0	362	FUNC	<unknown>	HIDDEN	2
__GI_socket			.symtab	0x80006624	50	FUNC	<unknown>	HIDDEN	2
__GI_sprintf			.symtab	0x80010508	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r			.symtab	0x80008592	436	FUNC	<unknown>	HIDDEN	2
__GI_stat			.symtab	0x80010348	148	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp			.symtab	0x80013b00	120	FUNC	<unknown>	HIDDEN	2
__GI_strchr			.symtab	0x80005d80	386	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul			.symtab	0x8000c4f0	352	FUNC	<unknown>	HIDDEN	2
__GI_strcmp			.symtab	0x80005f04	110	FUNC	<unknown>	HIDDEN	2
__GI_strcoll			.symtab	0x80005f04	110	FUNC	<unknown>	HIDDEN	2
__GI_strcpy			.symtab	0x80005f74	52	FUNC	<unknown>	HIDDEN	2
__GI_strcspn			.symtab	0x8000c650	86	FUNC	<unknown>	HIDDEN	2
__GI_strdup			.symtab	0x80012100	80	FUNC	<unknown>	HIDDEN	2
__GI_strlen			.symtab	0x80005fa8	264	FUNC	<unknown>	HIDDEN	2
__GI_strncpy			.symtab	0x8000e224	320	FUNC	<unknown>	HIDDEN	2
__GI_strnlen			.symtab	0x80011e78	342	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk			.symtab	0x8000c81c	86	FUNC	<unknown>	HIDDEN	2
__GI_strrchr			.symtab	0x8000c6a8	112	FUNC	<unknown>	HIDDEN	2
__GI_strspn			.symtab	0x8000c718	104	FUNC	<unknown>	HIDDEN	2
__GI_strstr			.symtab	0x800060b0	484	FUNC	<unknown>	HIDDEN	2
__GI_strtok			.symtab	0x800062d0	36	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r			.symtab	0x8000c780	154	FUNC	<unknown>	HIDDEN	2
__GI_strtol			.symtab	0x800088b8	34	FUNC	<unknown>	HIDDEN	2
__GI_sysconf			.symtab	0x80008f7a	2068	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr			.symtab	0x8000c8a8	182	FUNC	<unknown>	HIDDEN	2
__GI_time			.symtab	0x800055e8	38	FUNC	<unknown>	HIDDEN	2
__GI_tolower			.symtab	0x80013c84	64	FUNC	<unknown>	HIDDEN	2
__GI_toupper			.symtab	0x800056dc	64	FUNC	<unknown>	HIDDEN	2
__GI_uname			.symtab	0x800103dc	96	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf			.symtab	0x8001053c	198	FUNC	<unknown>	HIDDEN	2
__GI_wait4			.symtab	0x8000a290	32	FUNC	<unknown>	HIDDEN	2
__GI_waitpid			.symtab	0x80005610	34	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb			.symtab	0x80012834	100	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs			.symtab	0x800128c0	206	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs			.symtab	0x80012898	38	FUNC	<unknown>	HIDDEN	2
__GI_write			.symtab	0x80005634	128	FUNC	<unknown>	HIDDEN	2
__JCR_END__			.symtab	0x80018720	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__			.symtab	0x80018720	0	OBJECT	<unknown>	DEFAULT	8
__app_fini			.symtab	0x8001cbe4	4	OBJECT	<unknown>	HIDDEN	10
__atexit_lock			.symtab	0x80018848	24	OBJECT	<unknown>	DEFAULT	9
__bss_start			.symtab	0x800189bc	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd			.symtab	0x80009932	68	FUNC	<unknown>	DEFAULT	2
__check_suid			.symtab	0x800098d6	92	FUNC	<unknown>	DEFAULT	2
__close_nameservers			.symtab	0x8000fd54	130	FUNC	<unknown>	HIDDEN	2
__ctype_b			.symtab	0x80018760	4	OBJECT	<unknown>	DEFAULT	9
__ctype_tolower			.symtab	0x800189b8	4	OBJECT	<unknown>	DEFAULT	9
__ctype_toupper			.symtab	0x80018768	4	OBJECT	<unknown>	DEFAULT	9
__curbrk			.symtab	0x8001ebfc	4	OBJECT	<unknown>	DEFAULT	10
__data_start			.symtab	0x8001872c	0	NOTYPE	<unknown>	DEFAULT	9
__decode_answer			.symtab	0x8000ee80	452	FUNC	<unknown>	DEFAULT	2
__decode_dotted			.symtab	0x8000ec50	400	FUNC	<unknown>	HIDDEN	2
__decode_header			.symtab	0x80012320	478	FUNC	<unknown>	HIDDEN	2
__deregister_frame_info			.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup			.symtab	0x8000f044	1838	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux			.symtab	0x80014020	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux			.symtab	0x800000a8	0	FUNC	<unknown>	DEFAULT	2
__dso_handle			.symtab	0x80018724	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted			.symtab	0x80013b78	268	FUNC	<unknown>	HIDDEN	2
__encode_header			.symtab	0x80012150	464	FUNC	<unknown>	HIDDEN	2
__encode_question			.symtab	0x80012500	186	FUNC	<unknown>	HIDDEN	2
__environ			.symtab	0x8001cbdc	4	OBJECT	<unknown>	DEFAULT	10
__errno_location			.symtab	0x8000571c	16	FUNC	<unknown>	DEFAULT	2
__errno_location.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup			.symtab	0x8001cbd4	4	OBJECT	<unknown>	HIDDEN	10
__fcntl_nocancel			.symtab	0x80004f0e	302	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked			.symtab	0x8000bc38	500	FUNC	<unknown>	DEFAULT	2
__fini_array_end			.symtab	0x80018710	0	NOTYPE	<unknown>	HIDDEN	6
__fini_array_start			.symtab	0x80018710	0	NOTYPE	<unknown>	HIDDEN	6
__get_hosts_byname_r			.symtab	0x8000fdd8	50	FUNC	<unknown>	HIDDEN	2
__getdents64			.symtab	0x8000dba6	548	FUNC	<unknown>	HIDDEN	2
__getpagesize			.symtab	0x80009e8c	42	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r			.symtab	0x80011fd0	36	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location			.symtab	0x8000a7d4	16	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__init_array_end			.symtab	0x80018710	0	NOTYPE	<unknown>	HIDDEN	6
__init_array_start			.symtab	0x80018710	0	NOTYPE	<unknown>	HIDDEN	6
__length_question			.symtab	0x8000ede0	160	FUNC	<unknown>	DEFAULT	2
__libc_close			.symtab	0x80005178	96	FUNC	<unknown>	DEFAULT	2
__libc_connect			.symtab	0x80006484	48	FUNC	<unknown>	DEFAULT	2
__libc_fcntl			.symtab	0x80004de0	302	FUNC	<unknown>	DEFAULT	2
__libc_fork			.symtab	0x800051d8	86	FUNC	<unknown>	DEFAULT	2
__libc_lseek64			.symtab	0x8001043c	204	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep			.symtab	0x8000a0e2	20	FUNC	<unknown>	DEFAULT	2
__libc_open			.symtab	0x80005408	80	FUNC	<unknown>	DEFAULT	2
__libc_read			.symtab	0x80005458	128	FUNC	<unknown>	DEFAULT	2
__libc_recv			.symtab	0x8000652c	56	FUNC	<unknown>	DEFAULT	2
__libc_select			.symtab	0x8000556c	36	FUNC	<unknown>	DEFAULT	2
__libc_send			.symtab	0x80006564	56	FUNC	<unknown>	DEFAULT	2
__libc_sendto			.symtab	0x8000659c	70	FUNC	<unknown>	DEFAULT	2
__libc_sigaction			.symtab	0x8000ce94	34	FUNC	<unknown>	DEFAULT	2
__libc_stack_end			.symtab	0x8001cbd8	4	OBJECT	<unknown>	DEFAULT	10
__libc_waitpid			.symtab	0x80005610	34	FUNC	<unknown>	DEFAULT	2
__libc_write			.symtab	0x80005634	128	FUNC	<unknown>	DEFAULT	2
__local_nameserver			.symtab	0x8001571c	16	OBJECT	<unknown>	HIDDEN	4
__malloc_alloc			.symtab	0x800068e4	1658	FUNC	<unknown>	DEFAULT	2
__malloc_consolidate			.symtab	0x800078a6	592	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index			.symtab	0x800067f8	236	FUNC	<unknown>	DEFAULT	2
__malloc_lock			.symtab	0x8001876c	24	OBJECT	<unknown>	DEFAULT	9
__malloc_state			.symtab	0x8001ec3c	888	OBJECT	<unknown>	DEFAULT	10
__malloc_trim			.symtab	0x80007af6	254	FUNC	<unknown>	DEFAULT	2
__nameserver			.symtab	0x8001efc4	4	OBJECT	<unknown>	HIDDEN	10
__nameservers			.symtab	0x8001efc8	4	OBJECT	<unknown>	HIDDEN	10
__open_etc_hosts			.symtab	0x800125bc	34	FUNC	<unknown>	HIDDEN	2
__open_nameservers			.symtab	0x8000f832	1314	FUNC	<unknown>	HIDDEN	2
__pagesize			.symtab	0x8001cbe0	4	OBJECT	<unknown>	DEFAULT	10
__preinit_array_end			.symtab	0x80018710	0	NOTYPE	<unknown>	HIDDEN	6
__preinit_array_start			.symtab	0x80018710	0	NOTYPE	<unknown>	HIDDEN	6
__progname			.symtab	0x80018864	4	OBJECT	<unknown>	DEFAULT	9
__progname_full			.symtab	0x80018868	4	OBJECT	<unknown>	DEFAULT	9
__pthread_initialize_minimal			.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init			.symtab	0x80009826	10	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock			.symtab	0x8000981c	10	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock			.symtab	0x8000981c	10	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock			.symtab	0x8000981c	10	FUNC	<unknown>	DEFAULT	2
__pthread_return_0			.symtab	0x8000981c	10	FUNC	<unknown>	DEFAULT	2
__read_etc_hosts_r			.symtab	0x800125de	596	FUNC	<unknown>	HIDDEN	2
__register_frame_info			.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__res_sync			.symtab	0x8001efbc	4	OBJECT	<unknown>	HIDDEN	10
__resolv_attempts			.symtab	0x800189ad	1	OBJECT	<unknown>	HIDDEN	9
__resolv_lock			.symtab	0x8001ec04	24	OBJECT	<unknown>	DEFAULT	10
__resolv_timeout			.symtab	0x800189ac	1	OBJECT	<unknown>	HIDDEN	9
__rtld_fini			.symtab	0x8001cbe8	4	OBJECT	<unknown>	HIDDEN	10
__searchdomain			.symtab	0x8001efc0	4	OBJECT	<unknown>	HIDDEN	10
__searchdomains			.symtab	0x8001efcc	4	OBJECT	<unknown>	HIDDEN	10
__set_h_errno			.symtab	0x8000fe0c	20	FUNC	<unknown>	DEFAULT	2
__sigaddset			.symtab	0x8000676c	68	FUNC	<unknown>	DEFAULT	2
__sigdelset			.symtab	0x800067b0	72	FUNC	<unknown>	DEFAULT	2
__sigismember			.symtab	0x8000671c	80	FUNC	<unknown>	DEFAULT	2
__socketcall			.symtab	0x80009d14	112	FUNC	<unknown>	HIDDEN	2
__socketcall.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__stdin			.symtab	0x80018878	4	OBJECT	<unknown>	DEFAULT	9
__stdio_READ			.symtab	0x8000ddcc	136	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE			.symtab	0x8000de54	338	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position			.symtab	0x80013e60	342	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite			.symtab	0x80012990	518	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex			.symtab	0x8000b3be	32	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.4484			.symtab	0x800156ac	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill			.symtab	0x8000dfa8	90	FUNC	<unknown>	HIDDEN	2
__stdio_seek			.symtab	0x80013fb8	102	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o			.symtab	0x8000e004	226	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o			.symtab	0x80012b98	414	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit			.symtab	0x8000b4d8	116	FUNC	<unknown>	HIDDEN	2
__stdout			.symtab	0x8001887c	4	OBJECT	<unknown>	DEFAULT	9
__syscall_chdir			.symtab	0x80005108	96	FUNC	<unknown>	DEFAULT	2
__syscall_fcntl.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_getdents64			.symtab	0x8000db24	130	FUNC	<unknown>	DEFAULT	2
__syscall_kill			.symtab	0x800052f8	112	FUNC	<unknown>	DEFAULT	2
__syscall_nanosleep			.symtab	0x8000a070	114	FUNC	<unknown>	DEFAULT	2
__syscall_open			.symtab	0x8000537c	140	FUNC	<unknown>	DEFAULT	2
__syscall_poll			.symtab	0x800102a8	130	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction			.symtab	0x8000d6c0	138	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select			.symtab	0x800054d8	148	FUNC	<unknown>	DEFAULT	2
__syscall_wait4			.symtab	0x8000a208	136	FUNC	<unknown>	DEFAULT	2
__uClibc_fini			.symtab	0x8000986c	106	FUNC	<unknown>	DEFAULT	2
__uClibc_init			.symtab	0x80009976	124	FUNC	<unknown>	DEFAULT	2
__uClibc_main			.symtab	0x800099f2	802	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname			.symtab	0x80018860	4	OBJECT	<unknown>	HIDDEN	9
__xpg_strerror_r			.symtab	0x80011ff4	266	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv			.symtab	0x8000d9e0	322	FUNC	<unknown>	HIDDEN	2
__xstat64_conv			.symtab	0x8000d878	360	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec			.symtab	0x8001ec20	10	OBJECT	<unknown>	DEFAULT	10
_charpad			.symtab	0x80010604	74	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo			.symtab	0x8001efd0	40	OBJECT	<unknown>	HIDDEN	10
_custom_printf_handler			.symtab	0x8001eff8	40	OBJECT	<unknown>	HIDDEN	10
_custom_printf_spec			.symtab	0x800189b0	4	OBJECT	<unknown>	HIDDEN	9
_dl_aux_init			.symtab	0x8000d654	44	FUNC	<unknown>	DEFAULT	2
_dl_phdr			.symtab	0x8001efb4	4	OBJECT	<unknown>	DEFAULT	10
_dl_phnum			.symtab	0x8001efb8	4	OBJECT	<unknown>	DEFAULT	10
_do_one_spec			.symtab	0x800106f6	2310	FUNC	<unknown>	DEFAULT	2
_edata			.symtab	0x800189bc	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end			.symtab	0x8001f020	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno			.symtab	0x8001cbec	4	OBJECT	<unknown>	DEFAULT	10
_exit			.symtab	0x8000503c	92	FUNC	<unknown>	DEFAULT	2
_exit.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini			.symtab	0x80014054	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers			.symtab	0x8001cbfc	8192	OBJECT	<unknown>	DEFAULT	10
_fopen.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow			.symtab	0x8001064e	168	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr			.symtab	0x80012e88	2482	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno			.symtab	0x8001cbf0	4	OBJECT	<unknown>	DEFAULT	10
_init			.symtab	0x80000094	0	FUNC	<unknown>	DEFAULT	1
_is_equal_or_bigger_arg			.symtab	0x80011600	102	FUNC	<unknown>	DEFAULT	2
_load_inttype			.symtab	0x80012d38	238	FUNC	<unknown>	HIDDEN	2
_load_inttype.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_mmap			.symtab	0x80009f58	98	FUNC	<unknown>	DEFAULT	2
_ppfs_init			.symtab	0x80011190	208	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec			.symtab	0x80011666	1822	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs			.symtab	0x80011260	108	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs			.symtab	0x800112cc	736	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size			.symtab	0x800115ac	84	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore			.symtab	0x8000984a	34	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer			.symtab	0x80009830	26	FUNC	<unknown>	DEFAULT	2
_rfill.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr			.symtab	0x8001ec34	8	OBJECT	<unknown>	HIDDEN	10
_start			.symtab	0x80000144	0	FUNC	<unknown>	DEFAULT	2
_stdio.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen			.symtab	0x8000af74	1008	FUNC	<unknown>	HIDDEN	2
_stdio_init			.symtab	0x8000b364	90	FUNC	<unknown>	HIDDEN	2
_stdio_openlist			.symtab	0x80018880	4	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_add_lock			.symtab	0x80018884	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use			.symtab	0x8000b8c0	346	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count			.symtab	0x8001cbf8	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_del_lock			.symtab	0x8001889c	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count			.symtab	0x8001cbf4	4	OBJECT	<unknown>	DEFAULT	10
_stdio_streams			.symtab	0x800188b8	240	OBJECT	<unknown>	DEFAULT	9
_stdio_term			.symtab	0x8000b3de	248	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking			.symtab	0x800188b4	4	OBJECT	<unknown>	DEFAULT	9
_stdlib_strto_l			.symtab	0x800088dc	568	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype			.symtab	0x80012e28	96	FUNC	<unknown>	HIDDEN	2
_store_inttype.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs			.symtab	0x800157d9	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr			.symtab	0x8000b54c	442	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal			.symtab	0x80010ffc	404	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wordcopy_bwd_aligned			.symtab	0x8000bf10	638	FUNC	<unknown>	DEFAULT	2
_wordcopy_bwd_dest_aligned			.symtab	0x8000c18e	578	FUNC	<unknown>	DEFAULT	2
_wordcopy_fwd_aligned			.symtab	0x8000572c	566	FUNC	<unknown>	DEFAULT	2
_wordcopy_fwd_dest_aligned			.symtab	0x80005962	500	FUNC	<unknown>	DEFAULT	2
abort			.symtab	0x80007f6c	376	FUNC	<unknown>	DEFAULT	2
abort.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access			.symtab	0x80005098	112	FUNC	<unknown>	DEFAULT	2
access.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
astd			.symtab	0x8000326c	274	FUNC	<unknown>	DEFAULT	2
atcp			.symtab	0x80002dea	1154	FUNC	<unknown>	DEFAULT	2
atoi			.symtab	0x8000889c	28	FUNC	<unknown>	DEFAULT	2
atol			.symtab	0x8000889c	28	FUNC	<unknown>	DEFAULT	2
atol.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
audp			.symtab	0x800029a6	1092	FUNC	<unknown>	DEFAULT	2
bb_get_chunk_with_continuation			.symtab	0x8000a896	496	FUNC	<unknown>	DEFAULT	2
bcopy			.symtab	0x80006294	30	FUNC	<unknown>	DEFAULT	2
bcopy.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that			.symtab	0x8001cbd0	4	OBJECT	<unknown>	DEFAULT	10
brk			.symtab	0x8000d680	64	FUNC	<unknown>	DEFAULT	2
brk.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal			.symtab	0x80006658	196	FUNC	<unknown>	DEFAULT	2
buf.2903			.symtab	0x8001c9f4	16	OBJECT	<unknown>	DEFAULT	10
buf.5403			.symtab	0x8001ca04	440	OBJECT	<unknown>	DEFAULT	10
bzero			.symtab	0x800062b4	28	FUNC	<unknown>	DEFAULT	2
bzero.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
c			.symtab	0x80018754	4	OBJECT	<unknown>	DEFAULT	9
call___do_global_ctors_aux			.symtab	0x8001404a	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux			.symtab	0x800000f6	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy			.symtab	0x8000013c	0	FUNC	<unknown>	DEFAULT	2
calloc			.symtab	0x8000ceb8	382	FUNC	<unknown>	DEFAULT	2
calloc.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
chdir			.symtab	0x80005168	16	FUNC	<unknown>	DEFAULT	2
chdir.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
clock_getres			.symtab	0x80009d84	116	FUNC	<unknown>	DEFAULT	2
clock_getres.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close			.symtab	0x80005178	96	FUNC	<unknown>	DEFAULT	2
close.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closedir			.symtab	0x8000a2b0	292	FUNC	<unknown>	DEFAULT	2
closedir.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closenameservers.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer			.symtab	0x80018730	4	OBJECT	<unknown>	DEFAULT	9
completed.4531			.symtab	0x800189bc	1	OBJECT	<unknown>	DEFAULT	10
connect			.symtab	0x80006484	48	FUNC	<unknown>	DEFAULT	2
connect.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout			.symtab	0x80000e96	476	FUNC	<unknown>	DEFAULT	2
crtstuff.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum			.symtab	0x80001182	228	FUNC	<unknown>	DEFAULT	2
currentServer			.symtab	0x80018750	4	OBJECT	<unknown>	DEFAULT	9
data_start			.symtab	0x8001872c	0	NOTYPE	<unknown>	DEFAULT	9
decoded.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ			.symtab	0x8001cbdc	4	OBJECT	<unknown>	DEFAULT	10
errno			.symtab	0x8001cbec	4	OBJECT	<unknown>	DEFAULT	10
errno.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit			.symtab	0x80008b14	220	FUNC	<unknown>	DEFAULT	2
exit.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table			.symtab	0x8001639e	108	OBJECT	<unknown>	DEFAULT	4
fclose			.symtab	0x8000ad70	476	FUNC	<unknown>	DEFAULT	2
fclose.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl			.symtab	0x80004de0	302	FUNC	<unknown>	DEFAULT	2
fd_to_DIR			.symtab	0x8000a3d4	264	FUNC	<unknown>	DEFAULT	2
fdgets			.symtab	0x8000034c	118	FUNC	<unknown>	DEFAULT	2
fdopendir			.symtab	0x8000a5e8	160	FUNC	<unknown>	DEFAULT	2
fflush_unlocked			.symtab	0x8000ba1a	542	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc			.symtab	0x8000b708	278	FUNC	<unknown>	DEFAULT	2
fgetc.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked			.symtab	0x8000bc38	500	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets			.symtab	0x8000b820	158	FUNC	<unknown>	DEFAULT	2
fgets.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked			.symtab	0x8000be2c	226	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt			.symtab	0x8001638a	20	OBJECT	<unknown>	DEFAULT	4
fopen			.symtab	0x8000af4c	38	FUNC	<unknown>	DEFAULT	2
fopen.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork			.symtab	0x800051d8	86	FUNC	<unknown>	DEFAULT	2
fork.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked			.symtab	0x80011d84	80	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy			.symtab	0x800000fe	0	FUNC	<unknown>	DEFAULT	2
free			.symtab	0x80007bf4	844	FUNC	<unknown>	DEFAULT	2
free.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek			.symtab	0x80013cc4	38	FUNC	<unknown>	DEFAULT	2
fseeko			.symtab	0x80013cc4	38	FUNC	<unknown>	DEFAULT	2
fseeko.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64			.symtab	0x80013cec	370	FUNC	<unknown>	DEFAULT	2
fseeko64.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat			.symtab	0x8000d74c	148	FUNC	<unknown>	DEFAULT	2
fstat.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ftcp			.symtab	0x800016f4	1154	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked			.symtab	0x80011dd4	162	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch			.symtab	0x8000337e	16	FUNC	<unknown>	DEFAULT	2
getHost			.symtab	0x80000c18	56	FUNC	<unknown>	DEFAULT	2
getOurIP			.symtab	0x800003c2	512	FUNC	<unknown>	DEFAULT	2
getPortz			.symtab	0x8000338e	150	FUNC	<unknown>	DEFAULT	2
getRandomIP			.symtab	0x80000314	56	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc			.symtab	0x8000b708	278	FUNC	<unknown>	DEFAULT	2
getc_unlocked			.symtab	0x8000bc38	500	FUNC	<unknown>	DEFAULT	2
getdents64.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize			.symtab	0x80009df8	52	FUNC	<unknown>	DEFAULT	2
getdtablesize.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid			.symtab	0x80009e2c	30	FUNC	<unknown>	DEFAULT	2
getegid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid			.symtab	0x80009e4c	30	FUNC	<unknown>	DEFAULT	2
geteuid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid			.symtab	0x80009e6c	30	FUNC	<unknown>	DEFAULT	2
getgid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname			.symtab	0x80006428	28	FUNC	<unknown>	DEFAULT	2
gethostbyname.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname2			.symtab	0x80006444	64	FUNC	<unknown>	DEFAULT	2
gethostbyname2.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname2_r			.symtab	0x8000cad8	928	FUNC	<unknown>	DEFAULT	2
gethostbyname2_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r			.symtab	0x8000fe20	1018	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostname			.symtab	0x8001021c	138	FUNC	<unknown>	DEFAULT	2
gethostname.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize			.symtab	0x80009e8c	42	FUNC	<unknown>	DEFAULT	2
getpagesize.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid			.symtab	0x80005230	28	FUNC	<unknown>	DEFAULT	2
getpid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit			.symtab	0x80009eb8	126	FUNC	<unknown>	DEFAULT	2
getrlimit.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname			.symtab	0x800064b4	50	FUNC	<unknown>	DEFAULT	2
getsockname.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt			.symtab	0x800064e8	66	FUNC	<unknown>	DEFAULT	2
getsockopt.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid			.symtab	0x80009f38	30	FUNC	<unknown>	DEFAULT	2
getuid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP			.symtab	0x800189dc	4	OBJECT	<unknown>	DEFAULT	10
h_errno			.symtab	0x8001cbf0	4	OBJECT	<unknown>	DEFAULT	10
have_current_got			.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
have_current_got			.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
have_current_got			.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
hoste.5402			.symtab	0x8001cbbc	20	OBJECT	<unknown>	DEFAULT	10
htonl			.symtab	0x80006316	12	FUNC	<unknown>	DEFAULT	2
htons			.symtab	0x80006322	22	FUNC	<unknown>	DEFAULT	2
i.4532			.symtab	0x80018758	4	OBJECT	<unknown>	DEFAULT	9
index			.symtab	0x80005d80	386	FUNC	<unknown>	DEFAULT	2
inet_addr			.symtab	0x800063f8	48	FUNC	<unknown>	DEFAULT	2
inet_aton			.symtab	0x8000c960	376	FUNC	<unknown>	DEFAULT	2
inet_aton.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa			.symtab	0x800063d8	30	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r			.symtab	0x80006338	160	FUNC	<unknown>	DEFAULT	2
inet_ntop			.symtab	0x8000ebe0	112	FUNC	<unknown>	DEFAULT	2
inet_ntop4			.symtab	0x8000e760	438	FUNC	<unknown>	DEFAULT	2
inet_ntop6			.symtab	0x8000e916	714	FUNC	<unknown>	DEFAULT	2
inet_pton			.symtab	0x8000e700	96	FUNC	<unknown>	DEFAULT	2
inet_pton4			.symtab	0x8000e364	284	FUNC	<unknown>	DEFAULT	2
inet_pton6			.symtab	0x8000e480	640	FUNC	<unknown>	DEFAULT	2
initConnection			.symtab	0x80004774	322	FUNC	<unknown>	DEFAULT	2
init_rand			.symtab	0x8000016c	144	FUNC	<unknown>	DEFAULT	2
initstate			.symtab	0x800081ea	136	FUNC	<unknown>	DEFAULT	2
initstate_r			.symtab	0x80008746	342	FUNC	<unknown>	DEFAULT	2
ioctl			.symtab	0x8000524c	172	FUNC	<unknown>	DEFAULT	2
ioctl.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty			.symtab	0x8000c874	52	FUNC	<unknown>	DEFAULT	2
isatty.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace			.symtab	0x800056b4	40	FUNC	<unknown>	DEFAULT	2
isspace.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill			.symtab	0x80005368	20	FUNC	<unknown>	DEFAULT	2
kill.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
last_id.5482			.symtab	0x800189a8	2	OBJECT	<unknown>	DEFAULT	9
last_ns_num.5481			.symtab	0x8001ec00	4	OBJECT	<unknown>	DEFAULT	10
listFork			.symtab	0x80001072	272	FUNC	<unknown>	DEFAULT	2
llseek.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64			.symtab	0x8001043c	204	FUNC	<unknown>	DEFAULT	2
macAddress			.symtab	0x800189e8	6	OBJECT	<unknown>	DEFAULT	10
main			.symtab	0x800048b6	1320	FUNC	<unknown>	DEFAULT	2
mainCommSock			.symtab	0x800189d8	4	OBJECT	<unknown>	DEFAULT	10
makeIPPacket			.symtab	0x8000131e	132	FUNC	<unknown>	DEFAULT	2
makeRandomStr			.symtab	0x80000c50	118	FUNC	<unknown>	DEFAULT	2
makevsepacket			.symtab	0x80001d7e	148	FUNC	<unknown>	DEFAULT	2
malloc			.symtab	0x80006f5e	2182	FUNC	<unknown>	DEFAULT	2
malloc.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_init_state			.symtab	0x800077e4	194	FUNC	<unknown>	DEFAULT	2
malloc_trim			.symtab	0x80007f40	42	FUNC	<unknown>	DEFAULT	2
memchr			.symtab	0x8001383c	348	FUNC	<unknown>	DEFAULT	2
memchr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy			.symtab	0x80005b56	240	FUNC	<unknown>	DEFAULT	2
memcpy.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memmove			.symtab	0x8000c3d0	288	FUNC	<unknown>	DEFAULT	2
memmove.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy			.symtab	0x8000e0e8	42	FUNC	<unknown>	DEFAULT	2
mempcpy.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr			.symtab	0x80013998	358	FUNC	<unknown>	DEFAULT	2
memrchr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset			.symtab	0x80005c48	310	FUNC	<unknown>	DEFAULT	2
memset.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mmap			.symtab	0x80009fba	70	FUNC	<unknown>	DEFAULT	2
mmap.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap			.symtab	0x8000d7e0	150	FUNC	<unknown>	DEFAULT	2
mremap.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap			.symtab	0x8000a000	112	FUNC	<unknown>	DEFAULT	2
munmap.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock			.symtab	0x80018784	24	OBJECT	<unknown>	DEFAULT	9
mylock			.symtab	0x8001879c	24	OBJECT	<unknown>	DEFAULT	9
nanosleep			.symtab	0x8000a0e2	20	FUNC	<unknown>	DEFAULT	2
nanosleep.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1305			.symtab	0x8001c9f0	4	OBJECT	<unknown>	DEFAULT	10
nprocessors_conf			.symtab	0x80008e9c	222	FUNC	<unknown>	DEFAULT	2
nprocessors_onln			.symtab	0x80008d5c	320	FUNC	<unknown>	DEFAULT	2
ntohl			.symtab	0x800062f4	12	FUNC	<unknown>	DEFAULT	2
ntohl.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs			.symtab	0x80006300	22	FUNC	<unknown>	DEFAULT	2
ntop.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids			.symtab	0x800189e0	8	OBJECT	<unknown>	DEFAULT	10
object.4546			.symtab	0x800189be	24	OBJECT	<unknown>	DEFAULT	10
open			.symtab	0x80005408	80	FUNC	<unknown>	DEFAULT	2
open.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opendir			.symtab	0x8000a4dc	268	FUNC	<unknown>	DEFAULT	2
opendir.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP			.symtab	0x8001ec2c	4	OBJECT	<unknown>	DEFAULT	10
p.4529			.symtab	0x80018728	0	OBJECT	<unknown>	DEFAULT	9
parse_config.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
pids			.symtab	0x8001ec30	4	OBJECT	<unknown>	DEFAULT	10
poll			.symtab	0x8001032a	28	FUNC	<unknown>	DEFAULT	2
poll.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4707			.symtab	0x80015739	12	OBJECT	<unknown>	DEFAULT	4
print			.symtab	0x800008bc	692	FUNC	<unknown>	DEFAULT	2
printchar			.symtab	0x80000670	68	FUNC	<unknown>	DEFAULT	2
printi			.symtab	0x8000078a	306	FUNC	<unknown>	DEFAULT	2
prints			.symtab	0x800006b4	214	FUNC	<unknown>	DEFAULT	2
processCmd			.symtab	0x80003424	4944	FUNC	<unknown>	DEFAULT	2
program_invocation_name			.symtab	0x80018868	4	OBJECT	<unknown>	DEFAULT	9
program_invocation_short_name			.symtab	0x80018864	4	OBJECT	<unknown>	DEFAULT	9
qual_chars.4712			.symtab	0x8001574c	20	OBJECT	<unknown>	DEFAULT	4
raise			.symtab	0x8000ce78	28	FUNC	<unknown>	DEFAULT	2
raise.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand			.symtab	0x800080e4	14	FUNC	<unknown>	DEFAULT	2
rand.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc			.symtab	0x800001fc	280	FUNC	<unknown>	DEFAULT	2
random			.symtab	0x800080f4	112	FUNC	<unknown>	DEFAULT	2
random.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info			.symtab	0x80015638	40	OBJECT	<unknown>	DEFAULT	4
random_r			.symtab	0x80008484	270	FUNC	<unknown>	DEFAULT	2
random_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl			.symtab	0x800187c8	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr			.symtab	0x8000e114	270	FUNC	<unknown>	DEFAULT	2
rawmemchr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read			.symtab	0x80005458	128	FUNC	<unknown>	DEFAULT	2
read.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readdir64			.symtab	0x8000a688	330	FUNC	<unknown>	DEFAULT	2
readdir64.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc			.symtab	0x8000d038	1562	FUNC	<unknown>	DEFAULT	2
realloc.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv			.symtab	0x8000652c	56	FUNC	<unknown>	DEFAULT	2
recv.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine			.symtab	0x80000cc6	464	FUNC	<unknown>	DEFAULT	2
resolv_conf_mtime.5444			.symtab	0x8001ec1c	4	OBJECT	<unknown>	DEFAULT	10
rindex			.symtab	0x8000c6a8	112	FUNC	<unknown>	DEFAULT	2
rtcp			.symtab	0x8000263a	876	FUNC	<unknown>	DEFAULT	2
sbrk			.symtab	0x8000a0f8	106	FUNC	<unknown>	DEFAULT	2
sbrk.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select			.symtab	0x8000556c	36	FUNC	<unknown>	DEFAULT	2
select.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send			.symtab	0x80006564	56	FUNC	<unknown>	DEFAULT	2
send.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendto			.symtab	0x8000659c	70	FUNC	<unknown>	DEFAULT	2
sendto.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid			.symtab	0x80005590	86	FUNC	<unknown>	DEFAULT	2
setsid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt			.symtab	0x800065e4	64	FUNC	<unknown>	DEFAULT	2
setsockopt.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate			.symtab	0x80008164	134	FUNC	<unknown>	DEFAULT	2
setstate_r			.symtab	0x800082dc	424	FUNC	<unknown>	DEFAULT	2
sigaction			.symtab	0x8000ce94	34	FUNC	<unknown>	DEFAULT	2
sigaction.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal			.symtab	0x80006658	196	FUNC	<unknown>	DEFAULT	2
signal.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask			.symtab	0x8000a164	162	FUNC	<unknown>	DEFAULT	2
sigprocmask.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
skip_and_NUL_space			.symtab	0x8000f7d4	94	FUNC	<unknown>	DEFAULT	2
skip_nospace			.symtab	0x8000f774	96	FUNC	<unknown>	DEFAULT	2
sleep			.symtab	0x80008bf0	362	FUNC	<unknown>	DEFAULT	2
sleep.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket			.symtab	0x80006624	50	FUNC	<unknown>	DEFAULT	2
socket.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect			.symtab	0x80001c8e	240	FUNC	<unknown>	DEFAULT	2
sockprintf			.symtab	0x80000b70	168	FUNC	<unknown>	DEFAULT	2
spec_and_mask.4711			.symtab	0x80015760	16	OBJECT	<unknown>	DEFAULT	4
spec_base.4706			.symtab	0x80015745	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.4708			.symtab	0x800157ae	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.4707			.symtab	0x800157c3	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4710			.symtab	0x80015770	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4709			.symtab	0x80015780	9	OBJECT	<unknown>	DEFAULT	4
sprintf			.symtab	0x80010508	52	FUNC	<unknown>	DEFAULT	2
sprintf.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand			.symtab	0x80008272	106	FUNC	<unknown>	DEFAULT	2
srandom			.symtab	0x80008272	106	FUNC	<unknown>	DEFAULT	2
srandom_r			.symtab	0x80008592	436	FUNC	<unknown>	DEFAULT	2
stat			.symtab	0x80010348	148	FUNC	<unknown>	DEFAULT	2
stat.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
stderr			.symtab	0x80018874	4	OBJECT	<unknown>	DEFAULT	9
stdhexflood			.symtab	0x800023f0	272	FUNC	<unknown>	DEFAULT	2
stdin			.symtab	0x8001886c	4	OBJECT	<unknown>	DEFAULT	9
stdout			.symtab	0x80018870	4	OBJECT	<unknown>	DEFAULT	9
strcasecmp			.symtab	0x80013b00	120	FUNC	<unknown>	DEFAULT	2
strcasecmp.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr			.symtab	0x80005d80	386	FUNC	<unknown>	DEFAULT	2
strchr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchrnul			.symtab	0x8000c4f0	352	FUNC	<unknown>	DEFAULT	2
strchrnul.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp			.symtab	0x80005f04	110	FUNC	<unknown>	DEFAULT	2
strcmp.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll			.symtab	0x80005f04	110	FUNC	<unknown>	DEFAULT	2
strcpy			.symtab	0x80005f74	52	FUNC	<unknown>	DEFAULT	2
strcpy.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcspn			.symtab	0x8000c650	86	FUNC	<unknown>	DEFAULT	2
strcspn.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup			.symtab	0x80012100	80	FUNC	<unknown>	DEFAULT	2
strdup.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r			.symtab	0x80011ff4	266	FUNC	<unknown>	DEFAULT	2
strlen			.symtab	0x80005fa8	264	FUNC	<unknown>	DEFAULT	2
strlen.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy			.symtab	0x8000e224	320	FUNC	<unknown>	DEFAULT	2
strncpy.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen			.symtab	0x80011e78	342	FUNC	<unknown>	DEFAULT	2
strnlen.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk			.symtab	0x8000c81c	86	FUNC	<unknown>	DEFAULT	2
strpbrk.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strrchr			.symtab	0x8000c6a8	112	FUNC	<unknown>	DEFAULT	2
strrchr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn			.symtab	0x8000c718	104	FUNC	<unknown>	DEFAULT	2
strspn.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr			.symtab	0x800060b0	484	FUNC	<unknown>	DEFAULT	2
strstr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok			.symtab	0x800062d0	36	FUNC	<unknown>	DEFAULT	2
strtok.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r			.symtab	0x8000c780	154	FUNC	<unknown>	DEFAULT	2
strtok_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol			.symtab	0x800088b8	34	FUNC	<unknown>	DEFAULT	2
strtol.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sysconf			.symtab	0x80008f7a	2068	FUNC	<unknown>	DEFAULT	2
sysconf.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr			.symtab	0x8000c8a8	182	FUNC	<unknown>	DEFAULT	2
tcgetattr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum			.symtab	0x80001266	184	FUNC	<unknown>	DEFAULT	2
time			.symtab	0x800055e8	38	FUNC	<unknown>	DEFAULT	2
time.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tolower			.symtab	0x80013c84	64	FUNC	<unknown>	DEFAULT	2
tolower.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper			.symtab	0x800056dc	64	FUNC	<unknown>	DEFAULT	2
toupper.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim			.symtab	0x800005c2	174	FUNC	<unknown>	DEFAULT	2
type_codes			.symtab	0x8001578a	24	OBJECT	<unknown>	DEFAULT	4
type_sizes			.symtab	0x800157a2	12	OBJECT	<unknown>	DEFAULT	4
uname			.symtab	0x800103dc	96	FUNC	<unknown>	DEFAULT	2
uname.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
unknown.1327			.symtab	0x800157cb	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state			.symtab	0x800187b4	20	OBJECT	<unknown>	DEFAULT	9
useragents			.symtab	0x80018734	28	OBJECT	<unknown>	DEFAULT	9
usleep			.symtab	0x80009790	140	FUNC	<unknown>	DEFAULT	2
usleep.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vseattack			.symtab	0x80001e12	1238	FUNC	<unknown>	DEFAULT	2
vsnprintf			.symtab	0x8001053c	198	FUNC	<unknown>	DEFAULT	2
vsnprintf.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wait4			.symtab	0x8000a290	32	FUNC	<unknown>	DEFAULT	2
wait4.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid			.symtab	0x80005610	34	FUNC	<unknown>	DEFAULT	2
waitpid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb			.symtab	0x80012834	100	FUNC	<unknown>	DEFAULT	2
wcrtomb.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs			.symtab	0x800128c0	206	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs			.symtab	0x80012898	38	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write			.symtab	0x80005634	128	FUNC	<unknown>	DEFAULT	2
write.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
xdigits.3400			.symtab	0x800156c7	17	OBJECT	<unknown>	DEFAULT	4
xstatconv.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-12T06:50:34.522006+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57032	185.177.25.107	606	TCP
2024-12-12T06:50:36.733721+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57034	185.177.25.107	606	TCP
2024-12-12T06:50:38.839065+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57036	185.177.25.107	606	TCP
2024-12-12T06:50:40.948938+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57038	185.177.25.107	606	TCP
2024-12-12T06:50:43.074381+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57040	185.177.25.107	606	TCP
2024-12-12T06:50:45.183991+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57042	185.177.25.107	606	TCP
2024-12-12T06:50:47.309256+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57044	185.177.25.107	606	TCP
2024-12-12T06:50:49.433096+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57046	185.177.25.107	606	TCP
2024-12-12T06:50:51.574085+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57048	185.177.25.107	606	TCP
2024-12-12T06:50:53.730494+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57050	185.177.25.107	606	TCP
2024-12-12T06:50:55.856711+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57052	185.177.25.107	606	TCP
2024-12-12T06:50:58.011885+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57054	185.177.25.107	606	TCP
2024-12-12T06:51:00.137146+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57056	185.177.25.107	606	TCP
2024-12-12T06:51:02.245238+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57058	185.177.25.107	606	TCP
2024-12-12T06:51:04.386778+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57060	185.177.25.107	606	TCP
2024-12-12T06:51:06.512051+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57062	185.177.25.107	606	TCP
2024-12-12T06:51:08.638049+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57064	185.177.25.107	606	TCP
2024-12-12T06:51:10.762613+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57066	185.177.25.107	606	TCP
2024-12-12T06:51:12.887464+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57068	185.177.25.107	606	TCP
2024-12-12T06:51:15.013851+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57070	185.177.25.107	606	TCP
2024-12-12T06:51:17.139373+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57072	185.177.25.107	606	TCP
2024-12-12T06:51:19.248065+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57074	185.177.25.107	606	TCP
2024-12-12T06:51:21.373928+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57076	185.177.25.107	606	TCP
2024-12-12T06:51:23.480882+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57078	185.177.25.107	606	TCP
2024-12-12T06:51:25.621042+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57080	185.177.25.107	606	TCP
2024-12-12T06:51:27.747837+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57082	185.177.25.107	606	TCP
2024-12-12T06:51:29.873787+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57084	185.177.25.107	606	TCP
2024-12-12T06:51:31.999569+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57086	185.177.25.107	606	TCP
2024-12-12T06:51:34.123533+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57088	185.177.25.107	606	TCP
2024-12-12T06:51:36.248327+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57090	185.177.25.107	606	TCP
2024-12-12T06:51:38.372883+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57092	185.177.25.107	606	TCP
2024-12-12T06:51:40.501091+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57094	185.177.25.107	606	TCP
2024-12-12T06:51:42.639831+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57096	185.177.25.107	606	TCP
2024-12-12T06:51:44.763858+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57098	185.177.25.107	606	TCP
2024-12-12T06:51:46.890421+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57100	185.177.25.107	606	TCP
2024-12-12T06:51:49.013744+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57102	185.177.25.107	606	TCP
2024-12-12T06:51:51.141063+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57104	185.177.25.107	606	TCP
2024-12-12T06:51:53.252053+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57106	185.177.25.107	606	TCP
2024-12-12T06:51:55.395468+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57108	185.177.25.107	606	TCP
2024-12-12T06:51:57.529670+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57110	185.177.25.107	606	TCP
2024-12-12T06:51:59.670833+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57112	185.177.25.107	606	TCP
2024-12-12T06:52:01.794583+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57114	185.177.25.107	606	TCP
2024-12-12T06:52:03.920621+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57116	185.177.25.107	606	TCP
2024-12-12T06:52:06.064983+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57118	185.177.25.107	606	TCP
2024-12-12T06:52:08.187870+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57120	185.177.25.107	606	TCP
2024-12-12T06:52:10.311523+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57122	185.177.25.107	606	TCP
2024-12-12T06:52:12.435308+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57124	185.177.25.107	606	TCP
2024-12-12T06:52:14.546074+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57126	185.177.25.107	606	TCP
2024-12-12T06:52:16.669314+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57128	185.177.25.107	606	TCP
2024-12-12T06:52:18.796043+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57130	185.177.25.107	606	TCP
2024-12-12T06:52:20.905219+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57132	185.177.25.107	606	TCP
2024-12-12T06:52:23.030899+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57134	185.177.25.107	606	TCP
2024-12-12T06:52:25.156643+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57136	185.177.25.107	606	TCP
2024-12-12T06:52:27.297865+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57138	185.177.25.107	606	TCP
2024-12-12T06:52:29.420962+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57140	185.177.25.107	606	TCP
2024-12-12T06:52:31.547257+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57142	185.177.25.107	606	TCP
2024-12-12T06:52:33.670923+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57144	185.177.25.107	606	TCP
2024-12-12T06:52:35.795865+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57146	185.177.25.107	606	TCP
2024-12-12T06:52:37.921422+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57148	185.177.25.107	606	TCP
2024-12-12T06:52:40.047531+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57150	185.177.25.107	606	TCP
2024-12-12T06:52:42.173441+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57152	185.177.25.107	606	TCP
2024-12-12T06:52:44.299447+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57154	185.177.25.107	606	TCP
2024-12-12T06:52:46.405773+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57156	185.177.25.107	606	TCP
2024-12-12T06:52:48.683696+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57158	185.177.25.107	606	TCP
2024-12-12T06:52:50.812315+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57160	185.177.25.107	606	TCP
2024-12-12T06:52:52.947059+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57162	185.177.25.107	606	TCP
2024-12-12T06:52:55.078813+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57164	185.177.25.107	606	TCP
2024-12-12T06:52:57.203986+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57166	185.177.25.107	606	TCP
2024-12-12T06:52:59.344008+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57168	185.177.25.107	606	TCP
2024-12-12T06:53:01.469088+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57170	185.177.25.107	606	TCP
2024-12-12T06:53:03.593869+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57172	185.177.25.107	606	TCP
2024-12-12T06:53:05.717939+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57174	185.177.25.107	606	TCP
2024-12-12T06:53:07.846423+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57176	185.177.25.107	606	TCP
2024-12-12T06:53:09.968292+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57178	185.177.25.107	606	TCP
2024-12-12T06:53:12.094583+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57180	185.177.25.107	606	TCP
2024-12-12T06:53:14.219077+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57182	185.177.25.107	606	TCP
2024-12-12T06:53:16.347822+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57184	185.177.25.107	606	TCP
2024-12-12T06:53:18.490726+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57186	185.177.25.107	606	TCP
2024-12-12T06:53:20.624359+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57188	185.177.25.107	606	TCP
2024-12-12T06:53:22.749671+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57190	185.177.25.107	606	TCP
2024-12-12T06:53:24.875156+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57192	185.177.25.107	606	TCP
2024-12-12T06:53:27.001458+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57194	185.177.25.107	606	TCP
2024-12-12T06:53:29.124579+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57196	185.177.25.107	606	TCP
2024-12-12T06:53:31.251194+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57198	185.177.25.107	606	TCP
2024-12-12T06:53:33.378334+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57200	185.177.25.107	606	TCP
2024-12-12T06:53:35.499936+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57202	185.177.25.107	606	TCP
2024-12-12T06:53:37.625923+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57204	185.177.25.107	606	TCP
2024-12-12T06:53:39.750378+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57206	185.177.25.107	606	TCP
2024-12-12T06:53:41.876115+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57208	185.177.25.107	606	TCP
2024-12-12T06:53:44.002174+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57210	185.177.25.107	606	TCP
2024-12-12T06:53:46.127139+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57212	185.177.25.107	606	TCP
2024-12-12T06:53:48.251582+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57214	185.177.25.107	606	TCP
2024-12-12T06:53:50.393355+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57216	185.177.25.107	606	TCP
2024-12-12T06:53:52.533275+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57218	185.177.25.107	606	TCP
2024-12-12T06:53:54.703921+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57220	185.177.25.107	606	TCP
2024-12-12T06:53:56.831520+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57222	185.177.25.107	606	TCP
2024-12-12T06:53:58.986703+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57224	185.177.25.107	606	TCP
2024-12-12T06:54:01.127258+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57226	185.177.25.107	606	TCP
2024-12-12T06:54:03.250648+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57228	185.177.25.107	606	TCP
2024-12-12T06:54:05.358386+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57230	185.177.25.107	606	TCP
2024-12-12T06:54:07.483816+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57232	185.177.25.107	606	TCP
2024-12-12T06:54:09.608923+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57234	185.177.25.107	606	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 12, 2024 06:50:33.143201113 CET	43928	443	192.168.2.23	91.189.91.42
Dec 12, 2024 06:50:34.401067019 CET	57032	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:34.520543098 CET	606	57032	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:34.520678997 CET	57032	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:34.522006035 CET	57032	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:34.641563892 CET	606	57032	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:36.612322092 CET	606	57032	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:36.612698078 CET	57032	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:36.613513947 CET	57034	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:36.732017040 CET	606	57032	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:36.733164072 CET	606	57034	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:36.733273029 CET	57034	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:36.733721018 CET	57034	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:36.853017092 CET	606	57034	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:38.718436003 CET	606	57034	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:38.718961000 CET	57034	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:38.719441891 CET	57036	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:38.774436951 CET	42836	443	192.168.2.23	91.189.91.43
Dec 12, 2024 06:50:38.838402033 CET	606	57034	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:38.838861942 CET	606	57036	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:38.838979959 CET	57036	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:38.839065075 CET	57036	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:38.958729029 CET	606	57036	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:39.798391104 CET	42516	80	192.168.2.23	109.202.202.202
Dec 12, 2024 06:50:40.828200102 CET	606	57036	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:40.828555107 CET	57036	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:40.829288960 CET	57038	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:40.948122025 CET	606	57036	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:40.948611975 CET	606	57038	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:40.948838949 CET	57038	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:40.948937893 CET	57038	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:41.068553925 CET	606	57038	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:42.953126907 CET	606	57038	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:42.953531981 CET	57038	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:42.954428911 CET	57040	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:43.073229074 CET	606	57038	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:43.073913097 CET	606	57040	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:43.074166059 CET	57040	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:43.074381113 CET	57040	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:43.193875074 CET	606	57040	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:45.061707020 CET	606	57040	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:45.062011957 CET	57040	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:45.064537048 CET	57042	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:45.181391001 CET	606	57040	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:45.183804035 CET	606	57042	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:45.183909893 CET	57042	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:45.183990955 CET	57042	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:45.303491116 CET	606	57042	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:47.187254906 CET	606	57042	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:47.187695980 CET	57042	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:47.189472914 CET	57044	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:47.307334900 CET	606	57042	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:47.308876991 CET	606	57044	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:47.309009075 CET	57044	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:47.309256077 CET	57044	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:47.428558111 CET	606	57044	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:49.312494993 CET	606	57044	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:49.312741995 CET	57044	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:49.313330889 CET	57046	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:49.432291985 CET	606	57044	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:49.432693958 CET	606	57046	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:49.432805061 CET	57046	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:49.433095932 CET	57046	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:49.552402973 CET	606	57046	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:51.452996016 CET	606	57046	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:51.453198910 CET	57046	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:51.454216957 CET	57048	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:51.573515892 CET	606	57046	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:51.573641062 CET	606	57048	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:51.573892117 CET	57048	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:51.574084997 CET	57048	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:51.693972111 CET	606	57048	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:53.610131979 CET	606	57048	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:53.610270023 CET	57048	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:53.611016989 CET	57050	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:53.729629993 CET	606	57048	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:53.730218887 CET	606	57050	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:53.730330944 CET	57050	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:53.730494022 CET	57050	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:53.849821091 CET	606	57050	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:53.876328945 CET	43928	443	192.168.2.23	91.189.91.42
Dec 12, 2024 06:50:55.735713959 CET	606	57050	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:55.735985994 CET	57050	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:55.737008095 CET	57052	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:55.855856895 CET	606	57050	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:55.856374025 CET	606	57052	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:55.856540918 CET	57052	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:55.856710911 CET	57052	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:55.976219893 CET	606	57052	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:57.891328096 CET	606	57052	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:57.891520977 CET	57052	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:57.892448902 CET	57054	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:58.010986090 CET	606	57052	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:58.011728048 CET	606	57054	185.177.25.107	192.168.2.23
Dec 12, 2024 06:50:58.011884928 CET	57054	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:58.011884928 CET	57054	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:50:58.131679058 CET	606	57054	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:00.016515017 CET	606	57054	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:00.016726017 CET	57054	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:00.017621994 CET	57056	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:00.136845112 CET	606	57054	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:00.136934996 CET	606	57056	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:00.137099981 CET	57056	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:00.137145996 CET	57056	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:00.256726027 CET	606	57056	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:02.124459028 CET	606	57056	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:02.124736071 CET	57056	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:02.125664949 CET	57058	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:02.244229078 CET	606	57056	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:02.244986057 CET	606	57058	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:02.245173931 CET	57058	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:02.245238066 CET	57058	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:02.364850998 CET	606	57058	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:04.265558004 CET	606	57058	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:04.265863895 CET	57058	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:04.266652107 CET	57060	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:04.385456085 CET	606	57058	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:04.386482954 CET	606	57060	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:04.386657000 CET	57060	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:04.386778116 CET	57060	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:04.506118059 CET	606	57060	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:06.162678957 CET	42836	443	192.168.2.23	91.189.91.43
Dec 12, 2024 06:51:06.390044928 CET	606	57060	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:06.390314102 CET	57060	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:06.391418934 CET	57062	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:06.510391951 CET	606	57060	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:06.511615992 CET	606	57062	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:06.511718035 CET	57062	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:06.512051105 CET	57062	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:06.631349087 CET	606	57062	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:08.516673088 CET	606	57062	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:08.517179966 CET	57062	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:08.518254995 CET	57064	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:08.636697054 CET	606	57062	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:08.637737036 CET	606	57064	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:08.637904882 CET	57064	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:08.638048887 CET	57064	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:08.758536100 CET	606	57064	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:10.258268118 CET	42516	80	192.168.2.23	109.202.202.202
Dec 12, 2024 06:51:10.641057968 CET	606	57064	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:10.641341925 CET	57064	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:10.642471075 CET	57066	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:10.760799885 CET	606	57064	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:10.762043953 CET	606	57066	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:10.762418985 CET	57066	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:10.762613058 CET	57066	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:10.883272886 CET	606	57066	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:12.766865015 CET	606	57066	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:12.767239094 CET	57066	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:12.767796993 CET	57068	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:12.886893988 CET	606	57066	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:12.887271881 CET	606	57068	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:12.887384892 CET	57068	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:12.887464046 CET	57068	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:13.006901026 CET	606	57068	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:14.890990973 CET	606	57068	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:14.891242027 CET	57068	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:14.894033909 CET	57070	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:15.010926962 CET	606	57068	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:15.013565063 CET	606	57070	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:15.013766050 CET	57070	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:15.013850927 CET	57070	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:15.134978056 CET	606	57070	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:17.017357111 CET	606	57070	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:17.017936945 CET	57070	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:17.019468069 CET	57072	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:17.137903929 CET	606	57070	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:17.139108896 CET	606	57072	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:17.139373064 CET	57072	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:17.139373064 CET	57072	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:17.259505987 CET	606	57072	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:19.125709057 CET	606	57072	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:19.126121998 CET	57072	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:19.127996922 CET	57074	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:19.246035099 CET	606	57072	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:19.247446060 CET	606	57074	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:19.248001099 CET	57074	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:19.248064995 CET	57074	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:19.367552996 CET	606	57074	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:21.251410007 CET	606	57074	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:21.251893044 CET	57074	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:21.253613949 CET	57076	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:21.371675968 CET	606	57074	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:21.373542070 CET	606	57076	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:21.373928070 CET	57076	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:21.373928070 CET	57076	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:21.494000912 CET	606	57076	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:23.359725952 CET	606	57076	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:23.360037088 CET	57076	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:23.360605955 CET	57078	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:23.479816914 CET	606	57076	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:23.480263948 CET	606	57078	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:23.480638981 CET	57078	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:23.480881929 CET	57078	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:23.600497961 CET	606	57078	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:25.498429060 CET	606	57078	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:25.499001980 CET	57078	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:25.500771999 CET	57080	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:25.618899107 CET	606	57078	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:25.620501041 CET	606	57080	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:25.620774984 CET	57080	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:25.621042013 CET	57080	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:25.740623951 CET	606	57080	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:27.625873089 CET	606	57080	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:27.626382113 CET	57080	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:27.628288984 CET	57082	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:27.745831966 CET	606	57080	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:27.747617006 CET	606	57082	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:27.747837067 CET	57082	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:27.747837067 CET	57082	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:27.867242098 CET	606	57082	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:29.751096010 CET	606	57082	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:29.751539946 CET	57082	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:29.753930092 CET	57084	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:29.871305943 CET	606	57082	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:29.873297930 CET	606	57084	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:29.873639107 CET	57084	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:29.873786926 CET	57084	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:29.993199110 CET	606	57084	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:31.875983953 CET	606	57084	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:31.876470089 CET	57084	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:31.878715038 CET	57086	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:31.997476101 CET	606	57084	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:31.998927116 CET	606	57086	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:31.999568939 CET	57086	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:31.999568939 CET	57086	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:32.119179964 CET	606	57086	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:34.000807047 CET	606	57086	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:34.001358032 CET	57086	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:34.003288984 CET	57088	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:34.121155024 CET	606	57086	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:34.122833967 CET	606	57088	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:34.123174906 CET	57088	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:34.123533010 CET	57088	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:34.243130922 CET	606	57088	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:34.830900908 CET	43928	443	192.168.2.23	91.189.91.42
Dec 12, 2024 06:51:36.126903057 CET	606	57088	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:36.127269983 CET	57088	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:36.128487110 CET	57090	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:36.246881962 CET	606	57088	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:36.247937918 CET	606	57090	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:36.248153925 CET	57090	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:36.248327017 CET	57090	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:36.367726088 CET	606	57090	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:38.251799107 CET	606	57090	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:38.252332926 CET	57090	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:38.253339052 CET	57092	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:38.371810913 CET	606	57090	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:38.372606039 CET	606	57092	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:38.372823954 CET	57092	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:38.372883081 CET	57092	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:38.492312908 CET	606	57092	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:40.376924992 CET	606	57092	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:40.377510071 CET	57092	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:40.378910065 CET	57094	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:40.498634100 CET	606	57092	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:40.500772953 CET	606	57094	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:40.501090050 CET	57094	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:40.501091003 CET	57094	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:40.620646000 CET	606	57094	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:42.518524885 CET	606	57094	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:42.518882990 CET	57094	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:42.520131111 CET	57096	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:42.638703108 CET	606	57094	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:42.639549971 CET	606	57096	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:42.639734983 CET	57096	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:42.639831066 CET	57096	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:42.759331942 CET	606	57096	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:44.642184973 CET	606	57096	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:44.642746925 CET	57096	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:44.644052029 CET	57098	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:44.762343884 CET	606	57096	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:44.763482094 CET	606	57098	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:44.763756990 CET	57098	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:44.763858080 CET	57098	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:44.883238077 CET	606	57098	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:46.769026995 CET	606	57098	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:46.769551039 CET	57098	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:46.770759106 CET	57100	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:46.889055967 CET	606	57098	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:46.890075922 CET	606	57100	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:46.890204906 CET	57100	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:46.890420914 CET	57100	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:47.009783030 CET	606	57100	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:48.892482042 CET	606	57100	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:48.892893076 CET	57100	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:48.894023895 CET	57102	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:49.012461901 CET	606	57100	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:49.013365984 CET	606	57102	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:49.013487101 CET	57102	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:49.013744116 CET	57102	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:49.133377075 CET	606	57102	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:51.018058062 CET	606	57102	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:51.018616915 CET	57102	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:51.020730972 CET	57104	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:51.138278008 CET	606	57102	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:51.140397072 CET	606	57104	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:51.140968084 CET	57104	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:51.141062975 CET	57104	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:51.260541916 CET	606	57104	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:53.131122112 CET	606	57104	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:53.131690025 CET	57104	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:53.132455111 CET	57106	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:53.251178980 CET	606	57104	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:53.251722097 CET	606	57106	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:53.251930952 CET	57106	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:53.252053022 CET	57106	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:53.371449947 CET	606	57106	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:55.273960114 CET	606	57106	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:55.274511099 CET	57106	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:55.275787115 CET	57108	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:55.394937992 CET	606	57106	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:55.395178080 CET	606	57108	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:55.395287037 CET	57108	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:55.395467997 CET	57108	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:55.514952898 CET	606	57108	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:57.408483028 CET	606	57108	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:57.408761978 CET	57108	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:57.409871101 CET	57110	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:57.528796911 CET	606	57108	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:57.529349089 CET	606	57110	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:57.529588938 CET	57110	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:57.529670000 CET	57110	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:57.649384022 CET	606	57110	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:59.549067974 CET	606	57110	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:59.549463987 CET	57110	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:59.550560951 CET	57112	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:59.669142962 CET	606	57110	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:59.670573950 CET	606	57112	185.177.25.107	192.168.2.23
Dec 12, 2024 06:51:59.670690060 CET	57112	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:59.670833111 CET	57112	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:51:59.790405989 CET	606	57112	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:01.673161983 CET	606	57112	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:01.673508883 CET	57112	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:01.674846888 CET	57114	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:01.793036938 CET	606	57112	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:01.794183016 CET	606	57114	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:01.794398069 CET	57114	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:01.794583082 CET	57114	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:01.914125919 CET	606	57114	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:03.798768044 CET	606	57114	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:03.799211979 CET	57114	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:03.800512075 CET	57116	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:03.918836117 CET	606	57114	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:03.920259953 CET	606	57116	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:03.920525074 CET	57116	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:03.920620918 CET	57116	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:04.040689945 CET	606	57116	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:05.940499067 CET	606	57116	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:05.940844059 CET	57116	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:05.942572117 CET	57118	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:06.063158035 CET	606	57116	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:06.064666033 CET	606	57118	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:06.064837933 CET	57118	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:06.064982891 CET	57118	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:06.185822964 CET	606	57118	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:08.063432932 CET	606	57118	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:08.063726902 CET	57118	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:08.065026999 CET	57120	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:08.183403969 CET	606	57118	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:08.186976910 CET	606	57120	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:08.187520981 CET	57120	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:08.187870026 CET	57120	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:08.307214022 CET	606	57120	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:10.190260887 CET	606	57120	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:10.190551996 CET	57120	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:10.191615105 CET	57122	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:10.310077906 CET	606	57120	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:10.311083078 CET	606	57122	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:10.311522961 CET	57122	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:10.311522961 CET	57122	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:10.431126118 CET	606	57122	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:12.313646078 CET	606	57122	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:12.314198971 CET	57122	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:12.315772057 CET	57124	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:12.433897018 CET	606	57122	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:12.435139894 CET	606	57124	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:12.435262918 CET	57124	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:12.435307980 CET	57124	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:12.555183887 CET	606	57124	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:14.423932076 CET	606	57124	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:14.424570084 CET	57124	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:14.426219940 CET	57126	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:14.544014931 CET	606	57124	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:14.545733929 CET	606	57126	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:14.545975924 CET	57126	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:14.546073914 CET	57126	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:14.665493965 CET	606	57126	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:16.548527956 CET	606	57126	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:16.548897028 CET	57126	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:16.549724102 CET	57128	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:16.668417931 CET	606	57126	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:16.669087887 CET	606	57128	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:16.669313908 CET	57128	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:16.669313908 CET	57128	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:16.788881063 CET	606	57128	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:18.674031019 CET	606	57128	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:18.674741030 CET	57128	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:18.676021099 CET	57130	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:18.794554949 CET	606	57128	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:18.795507908 CET	606	57130	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:18.795902014 CET	57130	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:18.796042919 CET	57130	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:18.915579081 CET	606	57130	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:20.782458067 CET	606	57130	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:20.783257008 CET	57130	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:20.785239935 CET	57132	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:20.902738094 CET	606	57130	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:20.904692888 CET	606	57132	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:20.905124903 CET	57132	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:20.905219078 CET	57132	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:21.024650097 CET	606	57132	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:22.909607887 CET	606	57132	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:22.910087109 CET	57132	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:22.910981894 CET	57134	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:23.029774904 CET	606	57132	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:23.030452013 CET	606	57134	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:23.030735016 CET	57134	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:23.030899048 CET	57134	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:23.150552988 CET	606	57134	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:25.034508944 CET	606	57134	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:25.035141945 CET	57134	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:25.036871910 CET	57136	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:25.154881954 CET	606	57134	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:25.156327963 CET	606	57136	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:25.156642914 CET	57136	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:25.156642914 CET	57136	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:25.276470900 CET	606	57136	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:27.176525116 CET	606	57136	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:27.176995993 CET	57136	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:27.178100109 CET	57138	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:27.296561003 CET	606	57136	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:27.297513962 CET	606	57138	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:27.297796965 CET	57138	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:27.297864914 CET	57138	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:27.417330027 CET	606	57138	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:29.298906088 CET	606	57138	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:29.299259901 CET	57138	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:29.301091909 CET	57140	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:29.418761969 CET	606	57138	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:29.420464993 CET	606	57140	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:29.420866966 CET	57140	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:29.420962095 CET	57140	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:29.540272951 CET	606	57140	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:31.424803972 CET	606	57140	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:31.425321102 CET	57140	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:31.427450895 CET	57142	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:31.544816017 CET	606	57140	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:31.546818018 CET	606	57142	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:31.547256947 CET	57142	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:31.547256947 CET	57142	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:31.667026997 CET	606	57142	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:33.549760103 CET	606	57142	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:33.550211906 CET	57142	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:33.551227093 CET	57144	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:33.669714928 CET	606	57142	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:33.670614958 CET	606	57144	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:33.670922995 CET	57144	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:33.670922995 CET	57144	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:33.790452957 CET	606	57144	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:35.674403906 CET	606	57144	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:35.674962997 CET	57144	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:35.676031113 CET	57146	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:35.794433117 CET	606	57144	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:35.795408010 CET	606	57146	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:35.795865059 CET	57146	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:35.795865059 CET	57146	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:35.915479898 CET	606	57146	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:37.799041033 CET	606	57146	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:37.799731970 CET	57146	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:37.801434994 CET	57148	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:37.919142962 CET	606	57146	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:37.921139956 CET	606	57148	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:37.921382904 CET	57148	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:37.921422005 CET	57148	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:38.040817022 CET	606	57148	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:39.924917936 CET	606	57148	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:39.925528049 CET	57148	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:39.927515030 CET	57150	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:40.045857906 CET	606	57148	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:40.047053099 CET	606	57150	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:40.047442913 CET	57150	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:40.047530890 CET	57150	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:40.167193890 CET	606	57150	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:42.051043034 CET	606	57150	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:42.051610947 CET	57150	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:42.053319931 CET	57152	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:42.171802044 CET	606	57150	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:42.172840118 CET	606	57152	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:42.173043966 CET	57152	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:42.173440933 CET	57152	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:42.292958975 CET	606	57152	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:44.176331043 CET	606	57152	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:44.177118063 CET	57152	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:44.179246902 CET	57154	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:44.296799898 CET	606	57152	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:44.298856974 CET	606	57154	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:44.299215078 CET	57154	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:44.299447060 CET	57154	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:44.418832064 CET	606	57154	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:46.282613993 CET	606	57154	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:46.283344030 CET	57154	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:46.285507917 CET	57156	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:46.402779102 CET	606	57154	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:46.405113935 CET	606	57156	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:46.405668974 CET	57156	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:46.405772924 CET	57156	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:46.525176048 CET	606	57156	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:48.561301947 CET	606	57156	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:48.562066078 CET	57156	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:48.563482046 CET	57158	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:48.681607962 CET	606	57156	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:48.682889938 CET	606	57158	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:48.683306932 CET	57158	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:48.683696032 CET	57158	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:48.803172112 CET	606	57158	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:50.689785004 CET	606	57158	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:50.690480947 CET	57158	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:50.692078114 CET	57160	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:50.810143948 CET	606	57158	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:50.811470032 CET	606	57160	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:50.811830044 CET	57160	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:50.812314987 CET	57160	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:50.931902885 CET	606	57160	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:52.824486971 CET	606	57160	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:52.825151920 CET	57160	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:52.826702118 CET	57162	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:52.944915056 CET	606	57160	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:52.946604967 CET	606	57162	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:52.946856022 CET	57162	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:52.947058916 CET	57162	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:53.066498995 CET	606	57162	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:54.956446886 CET	606	57162	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:54.957194090 CET	57162	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:54.958548069 CET	57164	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:55.077218056 CET	606	57162	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:55.078043938 CET	606	57164	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:55.078416109 CET	57164	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:55.078813076 CET	57164	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:55.198146105 CET	606	57164	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:57.081527948 CET	606	57164	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:57.082178116 CET	57164	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:57.083897114 CET	57166	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:57.201802969 CET	606	57164	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:57.203465939 CET	606	57166	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:57.203893900 CET	57166	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:57.203985929 CET	57166	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:57.323381901 CET	606	57166	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:59.222152948 CET	606	57166	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:59.222892046 CET	57166	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:59.224258900 CET	57168	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:59.342272043 CET	606	57166	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:59.343575001 CET	606	57168	185.177.25.107	192.168.2.23
Dec 12, 2024 06:52:59.344007969 CET	57168	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:59.344007969 CET	57168	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:52:59.463357925 CET	606	57168	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:01.346573114 CET	606	57168	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:01.347044945 CET	57168	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:01.348803997 CET	57170	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:01.467119932 CET	606	57168	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:01.468523979 CET	606	57170	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:01.469088078 CET	57170	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:01.469088078 CET	57170	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:01.588685036 CET	606	57170	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:03.471373081 CET	606	57170	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:03.471884012 CET	57170	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:03.473731041 CET	57172	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:03.591356993 CET	606	57170	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:03.593286037 CET	606	57172	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:03.593868971 CET	57172	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:03.593868971 CET	57172	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:03.713458061 CET	606	57172	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:05.596143961 CET	606	57172	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:05.596738100 CET	57172	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:05.598054886 CET	57174	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:05.716376066 CET	606	57172	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:05.717453003 CET	606	57174	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:05.717937946 CET	57174	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:05.717938900 CET	57174	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:05.839716911 CET	606	57174	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:07.723274946 CET	606	57174	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:07.723656893 CET	57174	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:07.725729942 CET	57176	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:07.843946934 CET	606	57174	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:07.846012115 CET	606	57176	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:07.846421957 CET	57176	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:07.846422911 CET	57176	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:07.965991974 CET	606	57176	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:09.846457005 CET	606	57176	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:09.846998930 CET	57176	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:09.848423958 CET	57178	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:09.966536999 CET	606	57176	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:09.967783928 CET	606	57178	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:09.968291998 CET	57178	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:09.968291998 CET	57178	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:10.088044882 CET	606	57178	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:11.972583055 CET	606	57178	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:11.973031998 CET	57178	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:11.974838018 CET	57180	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:12.092813969 CET	606	57178	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:12.094274044 CET	606	57180	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:12.094583035 CET	57180	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:12.094583035 CET	57180	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:12.214073896 CET	606	57180	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:14.096802950 CET	606	57180	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:14.097426891 CET	57180	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:14.099042892 CET	57182	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:14.216938972 CET	606	57180	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:14.218549013 CET	606	57182	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:14.218924046 CET	57182	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:14.219077110 CET	57182	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:14.338754892 CET	606	57182	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:16.222315073 CET	606	57182	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:16.222868919 CET	57182	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:16.224474907 CET	57184	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:16.343136072 CET	606	57182	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:16.347090960 CET	606	57184	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:16.347414017 CET	57184	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:16.347821951 CET	57184	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:16.467461109 CET	606	57184	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:18.346821070 CET	606	57184	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:18.347363949 CET	57184	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:18.370256901 CET	57186	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:18.467423916 CET	606	57184	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:18.490436077 CET	606	57186	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:18.490725040 CET	57186	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:18.490725994 CET	57186	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:18.611073017 CET	606	57186	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:20.503806114 CET	606	57186	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:20.504005909 CET	57186	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:20.504827976 CET	57188	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:20.623742104 CET	606	57186	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:20.624197960 CET	606	57188	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:20.624281883 CET	57188	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:20.624358892 CET	57188	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:20.744008064 CET	606	57188	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:22.628787994 CET	606	57188	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:22.629153967 CET	57188	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:22.630027056 CET	57190	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:22.749222040 CET	606	57188	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:22.749423981 CET	606	57190	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:22.749598980 CET	57190	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:22.749670982 CET	57190	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:22.869128942 CET	606	57190	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:24.753676891 CET	606	57190	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:24.754270077 CET	57190	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:24.755373955 CET	57192	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:24.873832941 CET	606	57190	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:24.874922991 CET	606	57192	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:24.875000000 CET	57192	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:24.875155926 CET	57192	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:24.994765043 CET	606	57192	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:26.879013062 CET	606	57192	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:26.879714012 CET	57192	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:26.881501913 CET	57194	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:26.999771118 CET	606	57192	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:27.000900030 CET	606	57194	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:27.001251936 CET	57194	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:27.001457930 CET	57194	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:27.121124029 CET	606	57194	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:29.002831936 CET	606	57194	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:29.003443003 CET	57194	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:29.004642010 CET	57196	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:29.123153925 CET	606	57194	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:29.124067068 CET	606	57196	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:29.124578953 CET	57196	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:29.124578953 CET	57196	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:29.244132996 CET	606	57196	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:31.127840042 CET	606	57196	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:31.128643990 CET	57196	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:31.130742073 CET	57198	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:31.248245001 CET	606	57196	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:31.250510931 CET	606	57198	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:31.251033068 CET	57198	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:31.251194000 CET	57198	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:31.370876074 CET	606	57198	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:33.255395889 CET	606	57198	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:33.256253958 CET	57198	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:33.257962942 CET	57200	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:33.375943899 CET	606	57198	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:33.377554893 CET	606	57200	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:33.378184080 CET	57200	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:33.378334045 CET	57200	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:33.499067068 CET	606	57200	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:35.378431082 CET	606	57200	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:35.378925085 CET	57200	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:35.380244970 CET	57202	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:35.498796940 CET	606	57200	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:35.499773026 CET	606	57202	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:35.499936104 CET	57202	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:35.499936104 CET	57202	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:35.619663954 CET	606	57202	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:37.503252029 CET	606	57202	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:37.504004955 CET	57202	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:37.505971909 CET	57204	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:37.623425007 CET	606	57202	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:37.625344992 CET	606	57204	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:37.625830889 CET	57204	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:37.625922918 CET	57204	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:37.745234013 CET	606	57204	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:39.629055023 CET	606	57204	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:39.629616022 CET	57204	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:39.630747080 CET	57206	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:39.749207020 CET	606	57204	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:39.750087023 CET	606	57206	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:39.750307083 CET	57206	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:39.750377893 CET	57206	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:39.869729996 CET	606	57206	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:41.753937960 CET	606	57206	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:41.754400015 CET	57206	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:41.756413937 CET	57208	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:41.873794079 CET	606	57206	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:41.875715971 CET	606	57208	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:41.876070023 CET	57208	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:41.876115084 CET	57208	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:41.995687962 CET	606	57208	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:43.879038095 CET	606	57208	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:43.879493952 CET	57208	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:43.881015062 CET	57210	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:44.000514030 CET	606	57208	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:44.001890898 CET	606	57210	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:44.002127886 CET	57210	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:44.002173901 CET	57210	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:44.122077942 CET	606	57210	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:46.003978968 CET	606	57210	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:46.004478931 CET	57210	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:46.006680965 CET	57212	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:46.124550104 CET	606	57210	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:46.126652002 CET	606	57212	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:46.127137899 CET	57212	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:46.127139091 CET	57212	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:46.246716976 CET	606	57212	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:48.129195929 CET	606	57212	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:48.129756927 CET	57212	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:48.130848885 CET	57214	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:48.250262022 CET	606	57212	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:48.251209021 CET	606	57214	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:48.251581907 CET	57214	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:48.251581907 CET	57214	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:48.373121977 CET	606	57214	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:50.270131111 CET	606	57214	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:50.270725965 CET	57214	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:50.272587061 CET	57216	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:50.390613079 CET	606	57214	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:50.392621994 CET	606	57216	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:50.393064022 CET	57216	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:50.393354893 CET	57216	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:50.513715029 CET	606	57216	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:52.410769939 CET	606	57216	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:52.411401987 CET	57216	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:52.413285017 CET	57218	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:52.530956984 CET	606	57216	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:52.532646894 CET	606	57218	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:52.533186913 CET	57218	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:52.533274889 CET	57218	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:52.653709888 CET	606	57218	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:54.582065105 CET	606	57218	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:54.582544088 CET	57218	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:54.583919048 CET	57220	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:54.703421116 CET	606	57218	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:54.703473091 CET	606	57220	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:54.703919888 CET	57220	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:54.703921080 CET	57220	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:54.823415041 CET	606	57220	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:56.707575083 CET	606	57220	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:56.707895994 CET	57220	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:56.709114075 CET	57222	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:56.830651045 CET	606	57220	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:56.831110954 CET	606	57222	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:56.831520081 CET	57222	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:56.831520081 CET	57222	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:56.951607943 CET	606	57222	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:58.864377975 CET	606	57222	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:58.864891052 CET	57222	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:58.866213083 CET	57224	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:58.985573053 CET	606	57222	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:58.986287117 CET	606	57224	185.177.25.107	192.168.2.23
Dec 12, 2024 06:53:58.986702919 CET	57224	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:58.986702919 CET	57224	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:53:59.106425047 CET	606	57224	185.177.25.107	192.168.2.23
Dec 12, 2024 06:54:01.004726887 CET	606	57224	185.177.25.107	192.168.2.23
Dec 12, 2024 06:54:01.005194902 CET	57224	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:54:01.007569075 CET	57226	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:54:01.124988079 CET	606	57224	185.177.25.107	192.168.2.23
Dec 12, 2024 06:54:01.126857042 CET	606	57226	185.177.25.107	192.168.2.23
Dec 12, 2024 06:54:01.127190113 CET	57226	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:54:01.127258062 CET	57226	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:54:01.246614933 CET	606	57226	185.177.25.107	192.168.2.23
Dec 12, 2024 06:54:03.128990889 CET	606	57226	185.177.25.107	192.168.2.23
Dec 12, 2024 06:54:03.129314899 CET	57226	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:54:03.130752087 CET	57228	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:54:03.248994112 CET	606	57226	185.177.25.107	192.168.2.23
Dec 12, 2024 06:54:03.250142097 CET	606	57228	185.177.25.107	192.168.2.23
Dec 12, 2024 06:54:03.250648022 CET	57228	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:54:03.250648022 CET	57228	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:54:03.370294094 CET	606	57228	185.177.25.107	192.168.2.23
Dec 12, 2024 06:54:05.237157106 CET	606	57228	185.177.25.107	192.168.2.23
Dec 12, 2024 06:54:05.237447977 CET	57228	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:54:05.238831043 CET	57230	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:54:05.356967926 CET	606	57228	185.177.25.107	192.168.2.23
Dec 12, 2024 06:54:05.358154058 CET	606	57230	185.177.25.107	192.168.2.23
Dec 12, 2024 06:54:05.358351946 CET	57230	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:54:05.358386040 CET	57230	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:54:05.477647066 CET	606	57230	185.177.25.107	192.168.2.23
Dec 12, 2024 06:54:07.363023043 CET	606	57230	185.177.25.107	192.168.2.23
Dec 12, 2024 06:54:07.363280058 CET	57230	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:54:07.364211082 CET	57232	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:54:07.482851982 CET	606	57230	185.177.25.107	192.168.2.23
Dec 12, 2024 06:54:07.483550072 CET	606	57232	185.177.25.107	192.168.2.23
Dec 12, 2024 06:54:07.483671904 CET	57232	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:54:07.483815908 CET	57232	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:54:07.603441954 CET	606	57232	185.177.25.107	192.168.2.23
Dec 12, 2024 06:54:09.488055944 CET	606	57232	185.177.25.107	192.168.2.23
Dec 12, 2024 06:54:09.488423109 CET	57232	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:54:09.489289045 CET	57234	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:54:09.608110905 CET	606	57232	185.177.25.107	192.168.2.23
Dec 12, 2024 06:54:09.608654022 CET	606	57234	185.177.25.107	192.168.2.23
Dec 12, 2024 06:54:09.608823061 CET	57234	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:54:09.608922958 CET	57234	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:54:09.728673935 CET	606	57234	185.177.25.107	192.168.2.23

System Behavior

Analysis Process: dash PID: 6242, Parent PID: 4341

General

Start time (UTC):	05:50:31
Start date (UTC):	12/12/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 6242, Parent PID: 4341

General

Start time (UTC):	05:50:31
Start date (UTC):	12/12/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.AxUoZqs6ZX /tmp/tmp.X6eLSgsrdV /tmp/tmp.Zpp0gxadZd
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: dash PID: 6243, Parent PID: 4341

General

Start time (UTC):	05:50:31
Start date (UTC):	12/12/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: cat PID: 6243, Parent PID: 4341

General

Start time (UTC):	05:50:31
Start date (UTC):	12/12/2024
Path:	/usr/bin/cat
Arguments:	cat /tmp/tmp.AxUoZqs6ZX
File size:	43416 bytes
MD5 hash:	7e9d213e404ad3bb82e4ebb2e1f2c1b3

Chronological Activities

Analysis Process: dash PID: 6244, Parent PID: 4341

General

Start time (UTC):	05:50:31
Start date (UTC):	12/12/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: head PID: 6244, Parent PID: 4341

General

Start time (UTC):	05:50:31
Start date (UTC):	12/12/2024
Path:	/usr/bin/head
Arguments:	head -n 10
File size:	47480 bytes
MD5 hash:	fd96a67145172477dd57131396fc9608

Chronological Activities

Analysis Process: dash PID: 6245, Parent PID: 4341

General

Start time (UTC):	05:50:31
Start date (UTC):	12/12/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: tr PID: 6245, Parent PID: 4341

General

Start time (UTC):	05:50:31
Start date (UTC):	12/12/2024
Path:	/usr/bin/tr
Arguments:	tr -d \\000-\\011\\013\\014\\016-\\037
File size:	51544 bytes
MD5 hash:	fbd1402dd9f72d8ebfff00ce7c3a7bb5

Chronological Activities

Analysis Process: dash PID: 6246, Parent PID: 4341

General

Start time (UTC):	05:50:31
Start date (UTC):	12/12/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: cut PID: 6246, Parent PID: 4341

General

Start time (UTC):	05:50:31
Start date (UTC):	12/12/2024
Path:	/usr/bin/cut
Arguments:	cut -c -80
File size:	47480 bytes
MD5 hash:	d8ed0ea8f22c0de0f8692d4d9f1759d3

Chronological Activities

Analysis Process: dash PID: 6247, Parent PID: 4341

General

Start time (UTC):	05:50:31
Start date (UTC):	12/12/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: cat PID: 6247, Parent PID: 4341

General

Start time (UTC):	05:50:31
Start date (UTC):	12/12/2024
Path:	/usr/bin/cat
Arguments:	cat /tmp/tmp.AxUoZqs6ZX
File size:	43416 bytes
MD5 hash:	7e9d213e404ad3bb82e4ebb2e1f2c1b3

Chronological Activities

Analysis Process: dash PID: 6248, Parent PID: 4341

General

Start time (UTC):	05:50:31
Start date (UTC):	12/12/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: head PID: 6248, Parent PID: 4341

General

Start time (UTC):	05:50:31
Start date (UTC):	12/12/2024
Path:	/usr/bin/head
Arguments:	head -n 10
File size:	47480 bytes
MD5 hash:	fd96a67145172477dd57131396fc9608

Chronological Activities

Analysis Process: dash PID: 6249, Parent PID: 4341

General

Start time (UTC):	05:50:31
Start date (UTC):	12/12/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: tr PID: 6249, Parent PID: 4341

General

Start time (UTC):	05:50:31
Start date (UTC):	12/12/2024
Path:	/usr/bin/tr
Arguments:	tr -d \\000-\\011\\013\\014\\016-\\037
File size:	51544 bytes
MD5 hash:	fbd1402dd9f72d8ebfff00ce7c3a7bb5

Chronological Activities

Analysis Process: dash PID: 6250, Parent PID: 4341

General

Start time (UTC):	05:50:31
Start date (UTC):	12/12/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: cut PID: 6250, Parent PID: 4341

General

Start time (UTC):	05:50:31
Start date (UTC):	12/12/2024
Path:	/usr/bin/cut
Arguments:	cut -c -80
File size:	47480 bytes
MD5 hash:	d8ed0ea8f22c0de0f8692d4d9f1759d3

Chronological Activities

Analysis Process: dash PID: 6251, Parent PID: 4341

General

Start time (UTC):	05:50:31
Start date (UTC):	12/12/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 6251, Parent PID: 4341

General

Start time (UTC):	05:50:31
Start date (UTC):	12/12/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.AxUoZqs6ZX /tmp/tmp.X6eLSgsrdV /tmp/tmp.Zpp0gxadZd
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: i586.xxx.elf PID: 6277, Parent PID: 6172

General

Start time (UTC):	05:50:33
Start date (UTC):	12/12/2024
Path:	/tmp/i586.xxx.elf
Arguments:	/tmp/i586.xxx.elf
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Chronological Activities

Analysis Process: i586.xxx.elf PID: 6279, Parent PID: 6277

General

Start time (UTC):	05:50:33
Start date (UTC):	12/12/2024
Path:	/tmp/i586.xxx.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Chronological Activities

Analysis Process: i586.xxx.elf PID: 6281, Parent PID: 6279

General

Start time (UTC):	05:50:33
Start date (UTC):	12/12/2024
Path:	/tmp/i586.xxx.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Chronological Activities