Edit tour

Linux Analysis Report
x-8.6-.Logicnet.elf

Overview

General Information

Sample name:	x-8.6-.Logicnet.elf
Analysis ID:	1574900
MD5:	c5f57160a1e62fedc1906e8f080d94f0
SHA1:	56505da441ef10f038418676c225ca923366fa8a
SHA256:	11006e12b11f9855795c44b328bd2dbcb75f12e0eab84f04f7d16b5996e857d0
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Contains symbols with names commonly found in malware

Machine Learning detection for sample

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Executes the "rm" command used to delete files or directories

Sample contains strings that are user agent strings indicative of HTTP manipulation

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1574900
Start date and time:	2024-12-13 18:57:02 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	x-8.6-.Logicnet.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@0/0

Warnings

VT rate limit hit for: x-8.6-.Logicnet.elf

Runtime Messages

Command:	/tmp/x-8.6-.Logicnet.elf
PID:	6282
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

x-8.6-.Logicnet.elf (PID: 6282, Parent: 6204, MD5: c5f57160a1e62fedc1906e8f080d94f0) Arguments: /tmp/x-8.6-.Logicnet.elf

x-8.6-.Logicnet.elf New Fork (PID: 6283, Parent: 6282)

x-8.6-.Logicnet.elf New Fork (PID: 6284, Parent: 6283)

dash New Fork (PID: 6292, Parent: 4331)

rm (PID: 6292, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.jB8LsceBYd /tmp/tmp.oTlykcB98P /tmp/tmp.p55eR7WZvg

dash New Fork (PID: 6293, Parent: 4331)

rm (PID: 6293, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.jB8LsceBYd /tmp/tmp.oTlykcB98P /tmp/tmp.p55eR7WZvg

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
x-8.6-.Logicnet.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
x-8.6-.Logicnet.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
x-8.6-.Logicnet.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xd830:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd844:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd858:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd86c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd880:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd894:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd90c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd920:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd934:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd948:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd95c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd970:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd984:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd998:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd9ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd9c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
x-8.6-.Logicnet.elf	Linux_Trojan_Gafgyt_a6a2adb9	unknown	unknown	0x8af:$a: CC 01 C2 89 55 B4 8B 45 B4 C9 C3 55 48 89 E5 48 81 EC 90 00
x-8.6-.Logicnet.elf	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0x682c:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
x-8.6-.Logicnet.elf	Linux_Trojan_Gafgyt_f3d83a74	unknown	unknown	0x7d6:$a: DC 00 74 1B 83 7D E0 0A 75 15 83 7D E4 00 79 0F C7 45 C8 01 00
x-8.6-.Logicnet.elf	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0x6fe3:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
x-8.6-.Logicnet.elf	Linux_Trojan_Gafgyt_a0a4de11	unknown	unknown	0x1c03:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88 0x355f:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88
x-8.6-.Logicnet.elf	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x5b16:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x5c7c:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
x-8.6-.Logicnet.elf	Linux_Trojan_Gafgyt_09c3070e	unknown	unknown	0xfdd:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x1090:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x12c3:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83
x-8.6-.Logicnet.elf	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0xcd0e:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
x-8.6-.Logicnet.elf	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0xa83e:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
x-8.6-.Logicnet.elf	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0x6ba3:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
x-8.6-.Logicnet.elf	Linux_Trojan_Gafgyt_dd0d6173	unknown	unknown	0x164b:$a: 55 F8 8B 45 F0 89 42 0C 48 8B 55 F8 8B 45 F4 89 42 10 C9 C3 55 48
x-8.6-.Logicnet.elf	Linux_Trojan_Gafgyt_779e142f	unknown	unknown	0x6fe:$a: EC 8B 45 E8 83 E0 02 85 C0 74 07 C7 45 D8 30 00 00 00 8B 45 E8 83
x-8.6-.Logicnet.elf	Linux_Trojan_Gafgyt_cf84c9f2	unknown	unknown	0x31f:$a: 55 48 89 E5 48 83 EC 30 48 89 7D E8 89 75 E4 89 55 E0 C7 45 F8 01 00
x-8.6-.Logicnet.elf	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0x8896:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
x-8.6-.Logicnet.elf	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0x6e6e:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
x-8.6-.Logicnet.elf	Linux_Trojan_Gafgyt_e4a1982b	unknown	unknown	0x313:$a: 8B 45 EC F7 D0 21 D0 33 45 FC C9 C3 55 48 89 E5 48 83 EC 30 48 89
x-8.6-.Logicnet.elf	Linux_Trojan_Gafgyt_32eb0c81	unknown	unknown	0x74b:$a: D4 48 FF 45 F0 48 8B 45 F0 0F B6 00 84 C0 75 DB EB 12 48 8B
x-8.6-.Logicnet.elf	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0x8a8f:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
Click to see the 16 entries

Memory Dumps

Source	Rule	Description	Author	Strings
6283.1.0000000000400000.0000000000410000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6283.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xd830:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd844:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd858:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd86c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd880:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd894:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd90c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd920:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd934:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd948:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd95c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd970:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd984:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd998:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd9ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd9c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6283.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_a6a2adb9	unknown	unknown	0x8af:$a: CC 01 C2 89 55 B4 8B 45 B4 C9 C3 55 48 89 E5 48 81 EC 90 00
6283.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0x682c:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
6283.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_f3d83a74	unknown	unknown	0x7d6:$a: DC 00 74 1B 83 7D E0 0A 75 15 83 7D E4 00 79 0F C7 45 C8 01 00
6283.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0x6fe3:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
6283.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_a0a4de11	unknown	unknown	0x1c03:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88 0x355f:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88
6283.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x5b16:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x5c7c:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
6283.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_09c3070e	unknown	unknown	0xfdd:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x1090:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x12c3:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83
6283.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0xcd0e:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
6283.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0xa83e:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
6283.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0x6ba3:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
6283.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_dd0d6173	unknown	unknown	0x164b:$a: 55 F8 8B 45 F0 89 42 0C 48 8B 55 F8 8B 45 F4 89 42 10 C9 C3 55 48
6283.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_779e142f	unknown	unknown	0x6fe:$a: EC 8B 45 E8 83 E0 02 85 C0 74 07 C7 45 D8 30 00 00 00 8B 45 E8 83
6283.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_cf84c9f2	unknown	unknown	0x31f:$a: 55 48 89 E5 48 83 EC 30 48 89 7D E8 89 75 E4 89 55 E0 C7 45 F8 01 00
6283.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0x8896:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
6283.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0x6e6e:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
6283.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_e4a1982b	unknown	unknown	0x313:$a: 8B 45 EC F7 D0 21 D0 33 45 FC C9 C3 55 48 89 E5 48 83 EC 30 48 89
6283.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_32eb0c81	unknown	unknown	0x74b:$a: D4 48 FF 45 F0 48 8B 45 F0 0F B6 00 84 C0 75 DB EB 12 48 8B
6283.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0x8a8f:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
6282.1.0000000000400000.0000000000410000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6282.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xd830:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd844:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd858:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd86c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd880:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd894:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd90c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd920:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd934:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd948:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd95c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd970:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd984:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd998:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd9ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd9c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6282.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_a6a2adb9	unknown	unknown	0x8af:$a: CC 01 C2 89 55 B4 8B 45 B4 C9 C3 55 48 89 E5 48 81 EC 90 00
6282.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0x682c:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
6282.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_f3d83a74	unknown	unknown	0x7d6:$a: DC 00 74 1B 83 7D E0 0A 75 15 83 7D E4 00 79 0F C7 45 C8 01 00
6282.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0x6fe3:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
6282.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_a0a4de11	unknown	unknown	0x1c03:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88 0x355f:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88
6282.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x5b16:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x5c7c:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
6282.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_09c3070e	unknown	unknown	0xfdd:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x1090:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x12c3:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83
6282.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0xcd0e:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
6282.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0xa83e:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
6282.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0x6ba3:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
6282.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_dd0d6173	unknown	unknown	0x164b:$a: 55 F8 8B 45 F0 89 42 0C 48 8B 55 F8 8B 45 F4 89 42 10 C9 C3 55 48
6282.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_779e142f	unknown	unknown	0x6fe:$a: EC 8B 45 E8 83 E0 02 85 C0 74 07 C7 45 D8 30 00 00 00 8B 45 E8 83
6282.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_cf84c9f2	unknown	unknown	0x31f:$a: 55 48 89 E5 48 83 EC 30 48 89 7D E8 89 75 E4 89 55 E0 C7 45 F8 01 00
6282.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0x8896:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
6282.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0x6e6e:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
6282.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_e4a1982b	unknown	unknown	0x313:$a: 8B 45 EC F7 D0 21 D0 33 45 FC C9 C3 55 48 89 E5 48 83 EC 30 48 89
6282.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_32eb0c81	unknown	unknown	0x74b:$a: D4 48 FF 45 F0 48 8B 45 F0 0F B6 00 84 C0 75 DB EB 12 48 8B
6282.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0x8a8f:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
Process Memory Space: x-8.6-.Logicnet.elf PID: 6282	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: x-8.6-.Logicnet.elf PID: 6282	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x284c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2860:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2874:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2888:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x289c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x28b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x28c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x28d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x28ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2900:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2914:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2928:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x293c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2950:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2964:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2978:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x298c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x29a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x29b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x29c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x29dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: x-8.6-.Logicnet.elf PID: 6283	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: x-8.6-.Logicnet.elf PID: 6283	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x25d5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x25e9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x25fd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2611:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2625:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2639:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x264d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2661:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2675:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2689:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x269d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x26b1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x26c5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x26d9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x26ed:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2701:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2715:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2729:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x273d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2751:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2765:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 39 entries

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-13T18:58:20.270878+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40772	154.213.187.62	1865	TCP
2024-12-13T18:58:21.452990+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40774	154.213.187.62	1865	TCP
2024-12-13T18:58:22.813050+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40776	154.213.187.62	1865	TCP
2024-12-13T18:58:23.991352+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40778	154.213.187.62	1865	TCP
2024-12-13T18:58:34.414536+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40780	154.213.187.62	1865	TCP
2024-12-13T18:58:35.621410+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40782	154.213.187.62	1865	TCP
2024-12-13T18:58:36.818008+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40784	154.213.187.62	1865	TCP
2024-12-13T18:58:38.007181+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40786	154.213.187.62	1865	TCP
2024-12-13T18:58:40.197105+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40788	154.213.187.62	1865	TCP
2024-12-13T18:58:42.629539+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40790	154.213.187.62	1865	TCP
2024-12-13T18:58:43.798875+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40792	154.213.187.62	1865	TCP
2024-12-13T18:58:44.967789+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40794	154.213.187.62	1865	TCP
2024-12-13T18:58:47.170607+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40796	154.213.187.62	1865	TCP
2024-12-13T18:58:48.356218+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40798	154.213.187.62	1865	TCP
2024-12-13T18:58:49.525858+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40800	154.213.187.62	1865	TCP
2024-12-13T18:58:50.703366+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40802	154.213.187.62	1865	TCP
2024-12-13T18:58:51.879497+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40804	154.213.187.62	1865	TCP
2024-12-13T18:58:54.082349+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40806	154.213.187.62	1865	TCP
2024-12-13T18:58:55.251759+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40808	154.213.187.62	1865	TCP
2024-12-13T18:58:57.550321+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40810	154.213.187.62	1865	TCP
2024-12-13T18:58:58.718026+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40812	154.213.187.62	1865	TCP
2024-12-13T18:59:00.928833+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40814	154.213.187.62	1865	TCP
2024-12-13T18:59:02.357525+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40816	154.213.187.62	1865	TCP
2024-12-13T18:59:03.529945+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40818	154.213.187.62	1865	TCP
2024-12-13T18:59:05.749497+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40820	154.213.187.62	1865	TCP
2024-12-13T18:59:07.009464+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40822	154.213.187.62	1865	TCP
2024-12-13T18:59:08.200973+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40824	154.213.187.62	1865	TCP
2024-12-13T18:59:09.412894+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40826	154.213.187.62	1865	TCP
2024-12-13T18:59:10.586902+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40828	154.213.187.62	1865	TCP
2024-12-13T18:59:11.805058+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40830	154.213.187.62	1865	TCP
2024-12-13T18:59:12.978003+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40832	154.213.187.62	1865	TCP
2024-12-13T18:59:15.204688+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40834	154.213.187.62	1865	TCP
2024-12-13T18:59:16.375069+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40836	154.213.187.62	1865	TCP
2024-12-13T18:59:17.547020+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40838	154.213.187.62	1865	TCP
2024-12-13T18:59:18.725141+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40840	154.213.187.62	1865	TCP
2024-12-13T18:59:20.966274+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40842	154.213.187.62	1865	TCP
2024-12-13T18:59:22.147293+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40844	154.213.187.62	1865	TCP
2024-12-13T18:59:23.327508+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40846	154.213.187.62	1865	TCP
2024-12-13T18:59:24.507568+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40848	154.213.187.62	1865	TCP
2024-12-13T18:59:26.917188+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40850	154.213.187.62	1865	TCP
2024-12-13T18:59:28.092473+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40852	154.213.187.62	1865	TCP
2024-12-13T18:59:30.309023+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40854	154.213.187.62	1865	TCP
2024-12-13T18:59:31.485907+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40856	154.213.187.62	1865	TCP
2024-12-13T18:59:32.658095+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40858	154.213.187.62	1865	TCP
2024-12-13T18:59:33.833774+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40860	154.213.187.62	1865	TCP
2024-12-13T18:59:35.314381+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40862	154.213.187.62	1865	TCP
2024-12-13T18:59:36.929399+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40864	154.213.187.62	1865	TCP
2024-12-13T18:59:38.106817+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40866	154.213.187.62	1865	TCP
2024-12-13T18:59:39.277776+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40868	154.213.187.62	1865	TCP
2024-12-13T18:59:40.651662+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40870	154.213.187.62	1865	TCP
2024-12-13T18:59:41.949078+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40872	154.213.187.62	1865	TCP
2024-12-13T18:59:44.201606+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40874	154.213.187.62	1865	TCP
2024-12-13T18:59:45.387045+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40876	154.213.187.62	1865	TCP
2024-12-13T18:59:46.803012+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40878	154.213.187.62	1865	TCP
2024-12-13T18:59:47.985882+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40880	154.213.187.62	1865	TCP
2024-12-13T18:59:49.350825+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40882	154.213.187.62	1865	TCP
2024-12-13T18:59:50.529299+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40884	154.213.187.62	1865	TCP
2024-12-13T18:59:51.712961+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40886	154.213.187.62	1865	TCP
2024-12-13T18:59:52.892119+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40888	154.213.187.62	1865	TCP
2024-12-13T18:59:54.076897+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40890	154.213.187.62	1865	TCP
2024-12-13T18:59:58.255580+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40892	154.213.187.62	1865	TCP
2024-12-13T19:00:00.452090+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40894	154.213.187.62	1865	TCP
2024-12-13T19:00:02.695450+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40896	154.213.187.62	1865	TCP
2024-12-13T19:00:03.873211+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40898	154.213.187.62	1865	TCP
2024-12-13T19:00:05.170055+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40900	154.213.187.62	1865	TCP
2024-12-13T19:00:06.409664+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40902	154.213.187.62	1865	TCP
2024-12-13T19:00:07.774919+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40904	154.213.187.62	1865	TCP
2024-12-13T19:00:08.964522+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40906	154.213.187.62	1865	TCP
2024-12-13T19:00:10.133573+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40908	154.213.187.62	1865	TCP
2024-12-13T19:00:11.301872+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40910	154.213.187.62	1865	TCP
2024-12-13T19:00:12.491434+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40912	154.213.187.62	1865	TCP
2024-12-13T19:00:13.668467+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40914	154.213.187.62	1865	TCP
2024-12-13T19:00:14.844977+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40916	154.213.187.62	1865	TCP
2024-12-13T19:00:16.016626+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40918	154.213.187.62	1865	TCP
2024-12-13T19:00:17.200203+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40920	154.213.187.62	1865	TCP
2024-12-13T19:00:19.461131+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40922	154.213.187.62	1865	TCP
2024-12-13T19:00:20.639097+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40924	154.213.187.62	1865	TCP
2024-12-13T19:00:21.808319+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40926	154.213.187.62	1865	TCP
2024-12-13T19:00:22.994596+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40928	154.213.187.62	1865	TCP
2024-12-13T19:00:24.163300+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40930	154.213.187.62	1865	TCP
2024-12-13T19:00:25.334846+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40932	154.213.187.62	1865	TCP
2024-12-13T19:00:27.520001+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40934	154.213.187.62	1865	TCP
2024-12-13T19:00:28.690677+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40936	154.213.187.62	1865	TCP
2024-12-13T19:00:32.858748+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40938	154.213.187.62	1865	TCP
2024-12-13T19:00:34.229690+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40940	154.213.187.62	1865	TCP
2024-12-13T19:00:35.409695+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40942	154.213.187.62	1865	TCP
2024-12-13T19:00:36.589563+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40944	154.213.187.62	1865	TCP
2024-12-13T19:00:37.965504+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40946	154.213.187.62	1865	TCP
2024-12-13T19:00:40.204889+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40948	154.213.187.62	1865	TCP
2024-12-13T19:00:41.379174+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40950	154.213.187.62	1865	TCP
2024-12-13T19:00:42.571101+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40952	154.213.187.62	1865	TCP
2024-12-13T19:00:43.764155+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40954	154.213.187.62	1865	TCP
2024-12-13T19:00:47.944658+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40956	154.213.187.62	1865	TCP
2024-12-13T19:00:52.137831+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40958	154.213.187.62	1865	TCP
2024-12-13T19:00:53.319684+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40960	154.213.187.62	1865	TCP
2024-12-13T19:00:54.501945+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40962	154.213.187.62	1865	TCP
2024-12-13T19:00:55.681274+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40964	154.213.187.62	1865	TCP
2024-12-13T19:00:57.926556+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40966	154.213.187.62	1865	TCP
2024-12-13T19:00:59.095087+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40968	154.213.187.62	1865	TCP
2024-12-13T19:01:00.275446+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40970	154.213.187.62	1865	TCP
2024-12-13T19:01:01.504337+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40972	154.213.187.62	1865	TCP
2024-12-13T19:01:03.699640+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40974	154.213.187.62	1865	TCP
2024-12-13T19:01:04.898421+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40976	154.213.187.62	1865	TCP
2024-12-13T19:01:06.068926+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40978	154.213.187.62	1865	TCP
2024-12-13T19:01:07.271036+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40980	154.213.187.62	1865	TCP
2024-12-13T19:01:09.502852+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40982	154.213.187.62	1865	TCP
2024-12-13T19:01:10.871140+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40984	154.213.187.62	1865	TCP
2024-12-13T19:01:12.049691+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40986	154.213.187.62	1865	TCP
2024-12-13T19:01:13.421282+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40988	154.213.187.62	1865	TCP
2024-12-13T19:01:14.617470+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40990	154.213.187.62	1865	TCP
2024-12-13T19:01:15.790218+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40992	154.213.187.62	1865	TCP
2024-12-13T19:01:16.957220+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40994	154.213.187.62	1865	TCP
2024-12-13T19:01:18.175239+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40996	154.213.187.62	1865	TCP
2024-12-13T19:01:19.421592+0100	2846526	1	A Network Trojan was detected	192.168.2.23	40998	154.213.187.62	1865	TCP
2024-12-13T19:01:20.595601+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41000	154.213.187.62	1865	TCP
2024-12-13T19:01:21.774148+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41002	154.213.187.62	1865	TCP
2024-12-13T19:01:22.952503+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41004	154.213.187.62	1865	TCP
2024-12-13T19:01:24.132736+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41006	154.213.187.62	1865	TCP
2024-12-13T19:01:25.319363+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41008	154.213.187.62	1865	TCP
2024-12-13T19:01:26.490256+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41010	154.213.187.62	1865	TCP
2024-12-13T19:01:27.721495+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41012	154.213.187.62	1865	TCP
2024-12-13T19:01:28.892657+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41014	154.213.187.62	1865	TCP
2024-12-13T19:01:30.063381+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41016	154.213.187.62	1865	TCP
2024-12-13T19:01:31.239609+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41018	154.213.187.62	1865	TCP
2024-12-13T19:01:32.425053+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41020	154.213.187.62	1865	TCP
2024-12-13T19:01:34.661099+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41022	154.213.187.62	1865	TCP
2024-12-13T19:01:35.839347+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41024	154.213.187.62	1865	TCP
2024-12-13T19:01:38.059021+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41026	154.213.187.62	1865	TCP
2024-12-13T19:01:39.239971+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41028	154.213.187.62	1865	TCP
2024-12-13T19:01:40.419975+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41030	154.213.187.62	1865	TCP
2024-12-13T19:01:41.597220+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41032	154.213.187.62	1865	TCP
2024-12-13T19:01:42.984454+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41034	154.213.187.62	1865	TCP
2024-12-13T19:01:44.172834+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41036	154.213.187.62	1865	TCP
2024-12-13T19:01:45.349386+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41038	154.213.187.62	1865	TCP
2024-12-13T19:01:46.551612+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41040	154.213.187.62	1865	TCP
2024-12-13T19:01:47.726673+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41042	154.213.187.62	1865	TCP
2024-12-13T19:01:48.901704+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41044	154.213.187.62	1865	TCP
2024-12-13T19:01:50.076650+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41046	154.213.187.62	1865	TCP
2024-12-13T19:01:52.254377+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41048	154.213.187.62	1865	TCP
2024-12-13T19:01:53.616763+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41050	154.213.187.62	1865	TCP
2024-12-13T19:01:54.791285+0100	2846526	1	A Network Trojan was detected	192.168.2.23	41052	154.213.187.62	1865	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: x-8.6-.Logicnet.elf

Avira: detected

Found malware configuration

Source: x-8.6-.Logicnet.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "154.213.187.62:1865"}

Multi AV Scanner detection for submitted file

Source: x-8.6-.Logicnet.elf

ReversingLabs: Detection: 71%

Machine Learning detection for sample

Source: x-8.6-.Logicnet.elf

Joe Sandbox ML: detected

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/x-8.6-.Logicnet.elf (PID: 6282)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40776 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40834 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40786 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40826 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40836 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40796 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40790 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40780 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40772 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40840 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40800 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40804 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40802 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40862 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40792 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40842 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40892 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40808 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40818 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40820 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40906 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40876 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40858 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40806 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40828 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40794 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40932 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40822 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40914 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40938 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40918 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40824 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40866 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40830 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40838 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40864 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40814 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40890 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40882 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40798 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40920 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40924 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40874 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40816 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40966 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40844 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40900 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40910 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40832 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40888 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40982 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40988 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40912 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40972 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40958 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40930 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40956 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40788 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40850 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40978 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40992 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40870 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40902 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40950 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40996 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41040 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40904 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40898 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40964 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40940 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40878 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40922 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40974 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40884 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40854 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40990 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40894 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40916 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41014 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40952 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41002 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40960 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40852 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40970 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41024 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40980 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40774 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40968 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41010 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41016 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40782 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40946 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40860 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40984 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40928 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40812 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41046 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41006 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40872 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40856 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41008 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40846 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41000 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40896 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41028 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40908 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41012 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40942 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40962 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40954 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41038 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41034 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41004 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40976 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41030 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41050 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41052 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41044 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40986 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40994 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40934 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40998 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41048 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41022 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41018 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40926 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41020 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40944 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40936 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41032 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41042 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41036 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40778 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40784 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40810 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40848 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40868 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40880 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40886 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:40948 -> 154.213.187.62:1865
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:41026 -> 154.213.187.62:1865

Source: global traffic

TCP traffic: 192.168.2.23:40772 -> 154.213.187.62:1865

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 34.249.145.219
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.62

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39256
Source: unknown	Network traffic detected: HTTP traffic on port 39256 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 Author: unknown
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 Author: unknown
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 Author: unknown
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_09c3070e Author: unknown
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 Author: unknown
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_779e142f Author: unknown
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 Author: unknown
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_e4a1982b Author: unknown
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 Author: unknown
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 Author: unknown
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 Author: unknown
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 Author: unknown
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e Author: unknown
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 Author: unknown
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f Author: unknown
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 Author: unknown
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e4a1982b Author: unknown
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 Author: unknown
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 Author: unknown
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 Author: unknown
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 Author: unknown
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e Author: unknown
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 Author: unknown
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f Author: unknown
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 Author: unknown
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e4a1982b Author: unknown
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 Author: unknown
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: Process Memory Space: x-8.6-.Logicnet.elf PID: 6282, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: x-8.6-.Logicnet.elf PID: 6283, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample

Name: vseattack

Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = cdd0bb9ce40a000bb86b0c76616fe71fb7dbb87a044ddd778b7a07fdf804b877, id = a6a2adb9-9d54-42d4-abed-5b30d8062e97, last_modified = 2021-09-16
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 1c5df68501b688905484ed47dc588306828aa7c114644428e22e5021bb39bd4a, id = f3d83a74-2888-435a-9a3c-b7de25084e9a, last_modified = 2021-09-16
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 reference_sample = cf1ca1d824c8687e87a5b0275a0e39fa101442b4bbf470859ddda9982f9b3417, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 891cfc6a4c38fb257ada29050e0047bd1301e8f0a6a1a919685b1fcc2960b047, id = a0a4de11-fe65-449f-a990-ad5f18ac66f0, last_modified = 2021-09-16
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_09c3070e reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 84fad96b60b297736c149e14de12671ff778bff427ab7684df2c541a6f6d7e7d, id = 09c3070e-4b71-45a0-aa62-0cc6e496644a, last_modified = 2021-09-16
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 5e2cb111c2b712951b71166111d339724b4f52b93f90cb474f1e67598212605f, id = dd0d6173-b863-45cf-9348-3375a4e624cf, last_modified = 2021-09-16
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_779e142f reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 83377b6fa77fda4544c409487d2d2c1ddcef8f7d4120f49a18888c7536f3969f, id = 779e142f-b867-46e6-b1fb-9105976f42fd, last_modified = 2021-09-16
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = bb766b356c3e8706740e3bb9b4a7171d8eb5137e09fc7ab6952412fa55e2dcfc, id = cf84c9f2-7435-4faf-8c5f-d14945ffad7a, last_modified = 2021-09-16
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_e4a1982b os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d9f852c28433128b0fd330bee35f7bd4aada5226e9ca865fe5cd8cca52b2a622, id = e4a1982b-928a-4da5-b497-cedc1d26e845, last_modified = 2021-09-16
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 7c50ed29e2dd75a6a85afc43f8452794cb787ecd2061f4bf415d7038c14c523f, id = 32eb0c81-25af-4670-ab77-07ea7ce1874a, last_modified = 2021-09-16
Source: x-8.6-.Logicnet.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = cdd0bb9ce40a000bb86b0c76616fe71fb7dbb87a044ddd778b7a07fdf804b877, id = a6a2adb9-9d54-42d4-abed-5b30d8062e97, last_modified = 2021-09-16
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 1c5df68501b688905484ed47dc588306828aa7c114644428e22e5021bb39bd4a, id = f3d83a74-2888-435a-9a3c-b7de25084e9a, last_modified = 2021-09-16
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 reference_sample = cf1ca1d824c8687e87a5b0275a0e39fa101442b4bbf470859ddda9982f9b3417, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 891cfc6a4c38fb257ada29050e0047bd1301e8f0a6a1a919685b1fcc2960b047, id = a0a4de11-fe65-449f-a990-ad5f18ac66f0, last_modified = 2021-09-16
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 84fad96b60b297736c149e14de12671ff778bff427ab7684df2c541a6f6d7e7d, id = 09c3070e-4b71-45a0-aa62-0cc6e496644a, last_modified = 2021-09-16
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 5e2cb111c2b712951b71166111d339724b4f52b93f90cb474f1e67598212605f, id = dd0d6173-b863-45cf-9348-3375a4e624cf, last_modified = 2021-09-16
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 83377b6fa77fda4544c409487d2d2c1ddcef8f7d4120f49a18888c7536f3969f, id = 779e142f-b867-46e6-b1fb-9105976f42fd, last_modified = 2021-09-16
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = bb766b356c3e8706740e3bb9b4a7171d8eb5137e09fc7ab6952412fa55e2dcfc, id = cf84c9f2-7435-4faf-8c5f-d14945ffad7a, last_modified = 2021-09-16
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e4a1982b os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d9f852c28433128b0fd330bee35f7bd4aada5226e9ca865fe5cd8cca52b2a622, id = e4a1982b-928a-4da5-b497-cedc1d26e845, last_modified = 2021-09-16
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 7c50ed29e2dd75a6a85afc43f8452794cb787ecd2061f4bf415d7038c14c523f, id = 32eb0c81-25af-4670-ab77-07ea7ce1874a, last_modified = 2021-09-16
Source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = cdd0bb9ce40a000bb86b0c76616fe71fb7dbb87a044ddd778b7a07fdf804b877, id = a6a2adb9-9d54-42d4-abed-5b30d8062e97, last_modified = 2021-09-16
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 1c5df68501b688905484ed47dc588306828aa7c114644428e22e5021bb39bd4a, id = f3d83a74-2888-435a-9a3c-b7de25084e9a, last_modified = 2021-09-16
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 reference_sample = cf1ca1d824c8687e87a5b0275a0e39fa101442b4bbf470859ddda9982f9b3417, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 891cfc6a4c38fb257ada29050e0047bd1301e8f0a6a1a919685b1fcc2960b047, id = a0a4de11-fe65-449f-a990-ad5f18ac66f0, last_modified = 2021-09-16
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 84fad96b60b297736c149e14de12671ff778bff427ab7684df2c541a6f6d7e7d, id = 09c3070e-4b71-45a0-aa62-0cc6e496644a, last_modified = 2021-09-16
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 5e2cb111c2b712951b71166111d339724b4f52b93f90cb474f1e67598212605f, id = dd0d6173-b863-45cf-9348-3375a4e624cf, last_modified = 2021-09-16
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 83377b6fa77fda4544c409487d2d2c1ddcef8f7d4120f49a18888c7536f3969f, id = 779e142f-b867-46e6-b1fb-9105976f42fd, last_modified = 2021-09-16
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = bb766b356c3e8706740e3bb9b4a7171d8eb5137e09fc7ab6952412fa55e2dcfc, id = cf84c9f2-7435-4faf-8c5f-d14945ffad7a, last_modified = 2021-09-16
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e4a1982b os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d9f852c28433128b0fd330bee35f7bd4aada5226e9ca865fe5cd8cca52b2a622, id = e4a1982b-928a-4da5-b497-cedc1d26e845, last_modified = 2021-09-16
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 7c50ed29e2dd75a6a85afc43f8452794cb787ecd2061f4bf415d7038c14c523f, id = 32eb0c81-25af-4670-ab77-07ea7ce1874a, last_modified = 2021-09-16
Source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: Process Memory Space: x-8.6-.Logicnet.elf PID: 6282, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: x-8.6-.Logicnet.elf PID: 6283, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@0/0

Source: x-8.6-.Logicnet.elf	ELF static info symbol of initial sample: libc/string/x86_64/memcpy.S
Source: x-8.6-.Logicnet.elf	ELF static info symbol of initial sample: libc/string/x86_64/mempcpy.S
Source: x-8.6-.Logicnet.elf	ELF static info symbol of initial sample: libc/string/x86_64/memset.S
Source: x-8.6-.Logicnet.elf	ELF static info symbol of initial sample: libc/string/x86_64/strchr.S
Source: x-8.6-.Logicnet.elf	ELF static info symbol of initial sample: libc/string/x86_64/strcmp.S
Source: x-8.6-.Logicnet.elf	ELF static info symbol of initial sample: libc/string/x86_64/strcpy.S
Source: x-8.6-.Logicnet.elf	ELF static info symbol of initial sample: libc/string/x86_64/strlen.S
Source: x-8.6-.Logicnet.elf	ELF static info symbol of initial sample: libc/string/x86_64/strpbrk.S
Source: x-8.6-.Logicnet.elf	ELF static info symbol of initial sample: libc/string/x86_64/strspn.S
Source: x-8.6-.Logicnet.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/x86_64/crt1.S
Source: x-8.6-.Logicnet.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/x86_64/crti.S
Source: x-8.6-.Logicnet.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/x86_64/crtn.S

Source: /usr/bin/dash (PID: 6292)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.jB8LsceBYd /tmp/tmp.oTlykcB98P /tmp/tmp.p55eR7WZvg			Jump to behavior
Source: /usr/bin/dash (PID: 6293)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.jB8LsceBYd /tmp/tmp.oTlykcB98P /tmp/tmp.p55eR7WZvg			Jump to behavior

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: x-8.6-.Logicnet.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: x-8.6-.Logicnet.elf, type: SAMPLE
Source: Yara match	File source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: x-8.6-.Logicnet.elf PID: 6282, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: x-8.6-.Logicnet.elf PID: 6283, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: x-8.6-.Logicnet.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: x-8.6-.Logicnet.elf, type: SAMPLE
Source: Yara match	File source: 6283.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6282.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: x-8.6-.Logicnet.elf PID: 6282, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: x-8.6-.Logicnet.elf PID: 6283, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 File Deletion	OS Credential Dumping	1 Remote System Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "154.213.187.62:1865"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label
x-8.6-.Logicnet.elf	71%	ReversingLabs	Linux.Exploit.Mirai
x-8.6-.Logicnet.elf	100%	Avira	EXP/ELF.Mirai.Z.A
x-8.6-.Logicnet.elf	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
154.213.187.62:1865	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.249.145.219	unknown	United States	16509	AMAZON-02US	false
154.213.187.62	unknown	Seychelles	22769	DDOSING-BGP-NETWORKUS	true
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
34.249.145.219	arm.elf	Get hash	malicious	Unknown	Browse
	mips.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	main_arm5.elf	Get hash	malicious	Mirai	Browse
	arm7.elf	Get hash	malicious	Unknown	Browse
	mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	roze.ppc.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	sora.i686.elf	Get hash	malicious	Mirai	Browse
	most-x86_64.elf	Get hash	malicious	Mirai	Browse
	Demon.sh4.elf	Get hash	malicious	Mirai, Gafgyt	Browse
	udp.elf	Get hash	malicious	Unknown	Browse
154.213.187.62	a-r.m-6.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	a-r.m-5.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	i-5.8-6.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	a-r.m-4.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	m-p.s-l.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	s-h.4-.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	m-i.p-s.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	m-6.8-k.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	x-3.2-.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.42	i-5.8-6.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	s-h.4-.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	Mozi.m.elf	Get hash	malicious	Mirai	Browse
	la.bot.arm7.elf	Get hash	malicious	Mirai	Browse
	Mozi.m.elf	Get hash	malicious	Mirai	Browse
	wkshindemips.elf	Get hash	malicious	Unknown	Browse
	.5r3fqt67ew531has4231.m68k.elf	Get hash	malicious	Gafgyt, Mirai, Moobot, Okiru	Browse
	.5r3fqt67ew531has4231.arm5.elf	Get hash	malicious	Gafgyt, Mirai, Moobot, Okiru	Browse
	.5r3fqt67ew531has4231.arm.elf	Get hash	malicious	Gafgyt, Mirai, Moobot, Okiru	Browse
	la.bot.sparc.elf	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	i-5.8-6.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	a-r.m-4.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.125.190.26
	s-h.4-.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	Mozi.m.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	la.bot.arm7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	Mozi.m.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	wkshindemips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	elitebotnet.arm6.elf	Get hash	malicious	Mirai, Okiru	Browse	185.125.190.26
	.5r3fqt67ew531has4231.sh4.elf	Get hash	malicious	Gafgyt, Mirai, Moobot, Okiru	Browse	185.125.190.26
	.5r3fqt67ew531has4231.m68k.elf	Get hash	malicious	Gafgyt, Mirai, Moobot, Okiru	Browse	91.189.91.42
DDOSING-BGP-NETWORKUS	a-r.m-6.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse	154.213.187.62
	a-r.m-5.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse	154.213.187.62
	i-5.8-6.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse	154.213.187.62
	a-r.m-4.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse	154.213.187.62
	m-p.s-l.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse	154.213.187.62
	s-h.4-.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse	154.213.187.62
	m-i.p-s.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse	154.213.187.62
	m-6.8-k.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse	154.213.187.62
	x-3.2-.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse	154.213.187.62
	.5r3fqt67ew531has4231.x86.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse	154.213.186.72
INIT7CH	i-5.8-6.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	s-h.4-.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	Mozi.m.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	la.bot.arm7.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	Mozi.m.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	wkshindemips.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	.5r3fqt67ew531has4231.m68k.elf	Get hash	malicious	Gafgyt, Mirai, Moobot, Okiru	Browse	109.202.202.202
	.5r3fqt67ew531has4231.arm5.elf	Get hash	malicious	Gafgyt, Mirai, Moobot, Okiru	Browse	109.202.202.202
	.5r3fqt67ew531has4231.arm.elf	Get hash	malicious	Gafgyt, Mirai, Moobot, Okiru	Browse	109.202.202.202
	la.bot.sparc.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
AMAZON-02US	v.bat	Get hash	malicious	Unknown	Browse	52.58.42.230
	https://artsofbristy.com/?data=ZGdyaW5zdGVhZEBjaXR5b2Zyb3hib3JvLmNvbQ==	Get hash	malicious	Unknown	Browse	13.227.8.64
	Mozi.m.elf	Get hash	malicious	Mirai	Browse	54.171.230.55
	HSBC Payment Notification Scan Copy Ref 62587299-24_PDF.exe	Get hash	malicious	MassLogger RAT	Browse	18.141.10.107
	elitebotnet.mpsl.elf	Get hash	malicious	Mirai, Okiru	Browse	13.244.63.179
	elitebotnet.sh4.elf	Get hash	malicious	Mirai, Okiru	Browse	52.38.155.9
	elitebotnet.m68k.elf	Get hash	malicious	Mirai, Okiru	Browse	52.38.98.71
	elitebotnet.arm7.elf	Get hash	malicious	Mirai, Okiru	Browse	108.158.128.56
	elitebotnet.arm.elf	Get hash	malicious	Mirai, Okiru	Browse	108.130.226.247
	elitebotnet.arm5.elf	Get hash	malicious	Mirai, Okiru	Browse	13.245.236.30

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	6.025612801340202
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	x-8.6-.Logicnet.elf
File size:	94'672 bytes
MD5:	c5f57160a1e62fedc1906e8f080d94f0
SHA1:	56505da441ef10f038418676c225ca923366fa8a
SHA256:	11006e12b11f9855795c44b328bd2dbcb75f12e0eab84f04f7d16b5996e857d0
SHA512:	67c2633a1729c02e9a6431d5c6e831f7621e560d00a7add8c2d7e8fba91e8aa99df90ac6f6c1f67ef70499fe2aded61c7b7521120fbbac2b15f5816ebacab2e0
SSDEEP:	1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3sMtukmA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjK8Mvm/KWOXF7Y
TLSH:	15936D27B552C6BBC18752B42BDFEA615833B4BD0B32720B33D47DA42B259C91E6DB01
File Content Preview:	.ELF..............>.......@.....@...................@.8...@.......................@.......@...............................................P.......P.....8........p..............Q.td....................................................H...._........H........

Static ELF Info

ELF header
Class:	ELF64
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Advanced Micro Devices X86-64
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400194
Flags:	0x0
ELF Header Size:	64
Program Header Offset:	64
Program Header Size:	56
Number of Program Headers:	3
Section Header Offset:	68992
Section Header Size:	64
Number of Section Headers:	15
Header String Table Index:	12

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x4000e8	0xe8	0x13	0x0	0x6	AX	0	0	1
.text	PROGBITS	0x400100	0x100	0xcfe8	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x40d0e8	0xd0e8	0xe	0x0	0x6	AX	0	0	1
.rodata	PROGBITS	0x40d100	0xd100	0x2c90	0x0	0x2	A	0	0	32
.eh_frame	PROGBITS	0x40fd90	0xfd90	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x50fd98	0xfd98	0x10	0x0	0x3	WA	0	0	8
.dtors	PROGBITS	0x50fda8	0xfda8	0x10	0x0	0x3	WA	0	0	8
.jcr	PROGBITS	0x50fdb8	0xfdb8	0x8	0x0	0x3	WA	0	0	8
.data	PROGBITS	0x50fdc0	0xfdc0	0x510	0x0	0x3	WA	0	0	32
.bss	NOBITS	0x5102e0	0x102d0	0x6b50	0x0	0x3	WA	0	0	32
.comment	PROGBITS	0x0	0x102d0	0xa44	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x10d14	0x66	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x11140	0x3ff0	0x18	0x0		14	243	8
.strtab	STRTAB	0x0	0x15130	0x20a0	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0xfd94	0xfd94	6.3993	0x5	R E	0x100000	.init .text .fini .rodata .eh_frame
LOAD	0xfd98	0x50fd98	0x50fd98	0x538	0x7098	2.0632	0x6	RW	0x100000	.ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x8

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x4000e8	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x400100	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x40d0e8	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x40d100	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x40fd90	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x50fd98	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x50fda8	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x50fdb8	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x50fdc0	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x5102e0	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
Q	.symtab	0x510360	16384	OBJECT	<unknown>	DEFAULT	10
SendSTD	.symtab	0x4027ae	249	FUNC	<unknown>	DEFAULT	2
SendSTDHEX	.symtab	0x401fcb	264	FUNC	<unknown>	DEFAULT	2
SendSTD_HEX	.symtab	0x4029a7	299	FUNC	<unknown>	DEFAULT	2
SendUDP	.symtab	0x40165f	858	FUNC	<unknown>	DEFAULT	2
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x50fda0	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x50fd98	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x50fe48	8	OBJECT	<unknown>	DEFAULT	9
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x40e120	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x5102c0	8	OBJECT	<unknown>	DEFAULT	9
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x40ed40	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x50fe58	8	OBJECT	<unknown>	DEFAULT	9
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x40e420	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x50fdb0	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x50fda8	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x40fd90	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x40fd90	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x50fe48	8	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_b_data	.symtab	0x40e120	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower	.symtab	0x5102c0	8	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_tolower_data	.symtab	0x40ed40	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper	.symtab	0x50fe58	8	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_toupper_data	.symtab	0x40e420	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b	.symtab	0x50fe50	8	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_tolower	.symtab	0x5102c8	8	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_toupper	.symtab	0x50fe60	8	OBJECT	<unknown>	HIDDEN	9
__GI___errno_location	.symtab	0x405e88	6	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x40bd5c	222	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x40c02c	14	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x408694	6	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x405b10	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_lseek	.symtab	0x40d080	45	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x405d04	106	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x408068	70	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x4080e7	67	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x40c03c	194	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x405b74	42	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x407668	276	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x407b4c	18	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x409614	43	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x405bcc	38	FUNC	<unknown>	HIDDEN	2
__GI_clock_getres	.symtab	0x408444	41	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x405bf4	41	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x40671c	43	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x5145dc	4	OBJECT	<unknown>	HIDDEN	10
__GI_exit	.symtab	0x407cd8	92	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x40966c	259	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x405b10	100	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64	.symtab	0x405b10	100	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x409c18	329	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x40bd5c	222	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x409ad0	109	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x409d64	116	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x409770	10	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x405c20	38	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x40be3c	56	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x40ceec	5	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x40cef4	218	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x40be74	134	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x40bd5c	222	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x408470	35	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x408494	38	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x4084bc	38	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x4084e4	38	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x406360	53	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x406398	897	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x40850c	19	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x405c48	38	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x408520	40	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x406748	41	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x408548	38	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x5145e0	4	OBJECT	<unknown>	HIDDEN	10
__GI_inet_addr	.symtab	0x406344	28	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x408b8c	137	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x406339	10	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x4062ec	77	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x40a588	527	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x40a283	493	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x407a93	185	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x405c70	104	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x40a170	25	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x405cd8	44	FUNC	<unknown>	HIDDEN	2
__GI_lseek	.symtab	0x40d080	45	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x40d078	5	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x40cd0c	240	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x408760	102	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x4087c8	734	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x40bf00	90	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x40cdfc	237	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x405e90	210	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x408414	48	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x408570	38	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x408598	38	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x405d04	106	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x409640	41	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x4095e8	18	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x407788	72	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x407990	90	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x40a000	190	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x405d7c	39	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x4067a8	11	FUNC	<unknown>	HIDDEN	2
__GI_recvfrom	.symtab	0x4067b4	45	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x4085c0	74	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x405da4	44	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x4067e4	11	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x4067f0	48	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x405dd0	38	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x406820	53	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x4078e8	168	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x40831d	247	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x406888	168	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x40860c	85	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x407d34	415	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x406858	47	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x40adc0	149	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x4079ea	169	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x40c100	48	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x405f70	417	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x409dd8	33	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x409dd8	33	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x406120	213	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x40a138	54	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x409e00	225	FUNC	<unknown>	HIDDEN	2
__GI_strncat	.symtab	0x40a0c0	119	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x408aa8	131	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x40bf5c	206	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x409ee8	140	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x409f78	135	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x4061f8	187	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x4062c4	10	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x408b2c	94	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x407b60	10	FUNC	<unknown>	HIDDEN	2
__GI_strtoll	.symtab	0x407b60	10	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x407ed4	351	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x40a18c	110	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x405df8	39	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x40ada0	30	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x405e68	30	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x40ae58	199	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x408664	47	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x405e20	7	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x40c304	68	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x40c358	140	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x40c348	15	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x405e28	42	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x50fdb8	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x50fdb8	0	OBJECT	<unknown>	DEFAULT	8
__app_fini	.symtab	0x5145c8	8	OBJECT	<unknown>	HIDDEN	10
__atexit_lock	.symtab	0x510000	40	OBJECT	<unknown>	DEFAULT	9
__bsd_signal	.symtab	0x406888	168	FUNC	<unknown>	HIDDEN	2
__bss_start	.symtab	0x5102d0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x4080b2	53	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x50fe50	8	OBJECT	<unknown>	DEFAULT	9
__ctype_tolower	.symtab	0x5102c8	8	OBJECT	<unknown>	DEFAULT	9
__ctype_toupper	.symtab	0x50fe60	8	OBJECT	<unknown>	DEFAULT	9
__curbrk	.symtab	0x514630	8	OBJECT	<unknown>	HIDDEN	10
__data_start	.symtab	0x50fdd0	0	NOTYPE	<unknown>	DEFAULT	9
__decode_answer	.symtab	0x40a944	242	FUNC	<unknown>	HIDDEN	2
__decode_dotted	.symtab	0x40c1d0	246	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x40a83c	161	FUNC	<unknown>	HIDDEN	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup	.symtab	0x408c18	1862	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x40d0b0	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x400100	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x50fdc0	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted	.symtab	0x40c130	160	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x40a798	163	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x40a8e0	80	FUNC	<unknown>	HIDDEN	2
__environ	.symtab	0x5145b8	8	OBJECT	<unknown>	DEFAULT	10
__errno_location	.symtab	0x405e88	6	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x5145a8	8	OBJECT	<unknown>	HIDDEN	10
__fgetc_unlocked	.symtab	0x40bd5c	222	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x50fd94	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x50fd94	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__get_hosts_byname_r	.symtab	0x4095b8	48	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x40850c	19	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x40c02c	14	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x408694	6	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__init_array_end	.symtab	0x50fd94	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x50fd94	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__length_dotted	.symtab	0x40c2c8	59	FUNC	<unknown>	HIDDEN	2
__length_question	.symtab	0x40a930	19	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x405bf4	41	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x40671c	43	FUNC	<unknown>	DEFAULT	2
__libc_creat	.symtab	0x405d6e	14	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0x405b10	100	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64	.symtab	0x405b10	100	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x405c20	38	FUNC	<unknown>	DEFAULT	2
__libc_getpid	.symtab	0x405c48	38	FUNC	<unknown>	DEFAULT	2
__libc_lseek	.symtab	0x40d080	45	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x40d078	5	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x408598	38	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x405d04	106	FUNC	<unknown>	DEFAULT	2
__libc_poll	.symtab	0x409640	41	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x405d7c	39	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x4067a8	11	FUNC	<unknown>	DEFAULT	2
__libc_recvfrom	.symtab	0x4067b4	45	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x405da4	44	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x4067e4	11	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x4067f0	48	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x40831d	247	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x5145b0	8	OBJECT	<unknown>	DEFAULT	10
__libc_waitpid	.symtab	0x405e20	7	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x405e28	42	FUNC	<unknown>	DEFAULT	2
__malloc_consolidate	.symtab	0x4072ed	410	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x40698c	96	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x50fe80	40	OBJECT	<unknown>	DEFAULT	9
__malloc_state	.symtab	0x516700	1752	OBJECT	<unknown>	DEFAULT	10
__malloc_trim	.symtab	0x407254	153	FUNC	<unknown>	DEFAULT	2
__nameserver	.symtab	0x516e00	24	OBJECT	<unknown>	HIDDEN	10
__nameservers	.symtab	0x516e18	4	OBJECT	<unknown>	HIDDEN	10
__open_etc_hosts	.symtab	0x40aa38	42	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x409360	597	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x5145c0	8	OBJECT	<unknown>	DEFAULT	10
__preinit_array_end	.symtab	0x50fd94	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x50fd94	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x4080ae	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x4080ae	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x4080ae	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x4080ae	3	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x4080ae	3	FUNC	<unknown>	DEFAULT	2
__pthread_return_void	.symtab	0x4080b1	1	FUNC	<unknown>	DEFAULT	2
__raise	.symtab	0x4095e8	18	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r	.symtab	0x40aa62	830	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x510040	40	OBJECT	<unknown>	DEFAULT	9
__restore_rt	.symtab	0x408314	0	NOTYPE	<unknown>	DEFAULT	2
__rtld_fini	.symtab	0x5145d0	8	OBJECT	<unknown>	HIDDEN	10
__searchdomain	.symtab	0x516de0	32	OBJECT	<unknown>	HIDDEN	10
__searchdomains	.symtab	0x516e1c	4	OBJECT	<unknown>	HIDDEN	10
__sigaddset	.symtab	0x406950	28	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x40696c	30	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x406930	32	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x510098	8	OBJECT	<unknown>	DEFAULT	9
__stdio_READ	.symtab	0x40c3e4	58	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x40af20	147	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x40cfd0	133	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x40c420	259	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x409a0f	15	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.4280	.symtab	0x40eca0	40	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x40c524	37	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x40d058	31	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x40c54c	90	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x40c5a8	148	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x409aa8	39	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x5100a0	8	OBJECT	<unknown>	DEFAULT	9
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x408068	70	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x4080e7	67	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x40812a	489	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x510028	8	OBJECT	<unknown>	HIDDEN	9
__xpg_strerror_r	.symtab	0x40c03c	194	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x40afb4	68	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x4095fc	23	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x516e20	8	OBJECT	<unknown>	DEFAULT	10
_dl_phnum	.symtab	0x516e28	8	OBJECT	<unknown>	DEFAULT	10
_edata	.symtab	0x5102d0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x516e30	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x5145dc	4	OBJECT	<unknown>	DEFAULT	10
_exit	.symtab	0x405b74	42	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x40d0e8	5	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x514660	8192	OBJECT	<unknown>	DEFAULT	10
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x40aff8	120	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x40c6c4	1608	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x5145e0	4	OBJECT	<unknown>	DEFAULT	10
_init	.symtab	0x4000e8	5	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x40c63c	85	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x40b6ac	114	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x40b95e	1022	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x40b720	67	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x40b764	457	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x40b930	46	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x4080b1	1	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x4080b1	1	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x516680	128	OBJECT	<unknown>	HIDDEN	10
_start	.symtab	0x400194	42	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x40977c	551	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x4099a4	107	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x5100a8	8	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_add_lock	.symtab	0x5100c0	40	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x409b40	216	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count	.symtab	0x514644	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_del_lock	.symtab	0x510100	40	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x514640	4	OBJECT	<unknown>	DEFAULT	10
_stdio_streams	.symtab	0x510140	384	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0x409a1e	135	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x510128	4	OBJECT	<unknown>	DEFAULT	9
_stdlib_strto_l	.symtab	0x407b6c	362	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x40c694	46	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x40f120	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x40869c	187	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x40b070	1595	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x407668	276	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access	.symtab	0x405ba0	41	FUNC	<unknown>	DEFAULT	2
access.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
astd	.symtab	0x403927	260	FUNC	<unknown>	DEFAULT	2
atcp	.symtab	0x403315	1554	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x407b4c	18	FUNC	<unknown>	DEFAULT	2
atoi.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
audp	.symtab	0x402e76	1183	FUNC	<unknown>	DEFAULT	2
bcopy	.symtab	0x4062b4	14	FUNC	<unknown>	DEFAULT	2
bcopy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x5145a0	4	OBJECT	<unknown>	DEFAULT	10
been_there_done_that.3160	.symtab	0x5145d8	4	OBJECT	<unknown>	DEFAULT	10
bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x409614	43	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x406888	168	FUNC	<unknown>	DEFAULT	2
buf.2989	.symtab	0x514370	16	OBJECT	<unknown>	DEFAULT	10
buf.5285	.symtab	0x514380	500	OBJECT	<unknown>	DEFAULT	10
c	.symtab	0x50fe3c	4	OBJECT	<unknown>	DEFAULT	9
chdir	.symtab	0x405bcc	38	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
clock_getres	.symtab	0x408444	41	FUNC	<unknown>	DEFAULT	2
clock_getres.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x405bf4	41	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x50fde0	8	OBJECT	<unknown>	DEFAULT	9
completed.2761	.symtab	0x5102e0	1	OBJECT	<unknown>	DEFAULT	10
connect	.symtab	0x40671c	43	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x40118f	572	FUNC	<unknown>	DEFAULT	2
creat	.symtab	0x405d6e	14	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x401494	115	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x50fe38	4	OBJECT	<unknown>	DEFAULT	9
data_start	.symtab	0x50fdd0	0	NOTYPE	<unknown>	DEFAULT	9
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x5145b8	8	OBJECT	<unknown>	DEFAULT	10
errno	.symtab	0x5145dc	4	OBJECT	<unknown>	DEFAULT	10
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x407cd8	92	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x40fcc0	208	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x40966c	259	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x405b10	100	FUNC	<unknown>	DEFAULT	2
fcntl64	.symtab	0x405b10	100	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x40031f	128	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x409c18	329	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x40bd5c	222	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x409ad0	109	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x409d64	116	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x40fca0	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x409770	10	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x405c20	38	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x40be3c	56	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x400150	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x407487	452	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x40ceec	5	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x40ceec	5	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x40cef4	218	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ftcp	.symtab	0x4019b9	1554	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked	.symtab	0x40be74	134	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0x403a2b	11	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x400ea7	65	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x40039f	484	FUNC	<unknown>	DEFAULT	2
getPortz	.symtab	0x403a36	142	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x4002f0	47	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked	.symtab	0x40bd5c	222	FUNC	<unknown>	DEFAULT	2
getdtablesize	.symtab	0x408470	35	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x408494	38	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x4084bc	38	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x4084e4	38	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x406360	53	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x406398	897	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x40850c	19	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x405c48	38	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x408520	40	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit64	.symtab	0x408520	40	FUNC	<unknown>	DEFAULT	2
getsockname	.symtab	0x406748	41	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x406774	50	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x408548	38	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x510344	4	OBJECT	<unknown>	DEFAULT	10
h.5284	.symtab	0x514580	32	OBJECT	<unknown>	DEFAULT	10
h_errno	.symtab	0x5145e0	4	OBJECT	<unknown>	DEFAULT	10
htonl	.symtab	0x4062d8	5	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x4062d0	8	FUNC	<unknown>	DEFAULT	2
i.4528	.symtab	0x50fe40	4	OBJECT	<unknown>	DEFAULT	9
index	.symtab	0x405f70	417	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x406344	28	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x408b8c	137	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x406339	10	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x4062ec	77	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x40a588	527	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x40a470	280	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x40a283	493	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x40a1fc	135	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0x405444	298	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x4001c0	125	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x407832	110	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x407a93	185	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x405c70	104	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x40a170	25	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x405e54	18	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x405cd8	44	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/mempcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/memset.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strchr.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strcmp.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strlen.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strpbrk.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strspn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/x86_64/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/x86_64/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/x86_64/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x4013cb	201	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek	.symtab	0x40d080	45	FUNC	<unknown>	DEFAULT	2
lseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x40d078	5	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x510350	6	OBJECT	<unknown>	DEFAULT	10
main	.symtab	0x40556e	1439	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x510340	4	OBJECT	<unknown>	DEFAULT	10
makeIPPacket	.symtab	0x4015c6	153	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x400ee8	109	FUNC	<unknown>	DEFAULT	2
makevsepacket	.symtab	0x4021ab	169	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x4069ec	2149	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x40764b	28	FUNC	<unknown>	DEFAULT	2
memchr	.symtab	0x40cd0c	240	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x408760	102	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x4087c8	734	FUNC	<unknown>	DEFAULT	2
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x40bf00	90	FUNC	<unknown>	DEFAULT	2
memrchr	.symtab	0x40cdfc	237	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x405e90	210	FUNC	<unknown>	DEFAULT	2
mmap	.symtab	0x408414	48	FUNC	<unknown>	DEFAULT	2
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x408570	38	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x50fec0	40	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x50ff00	40	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x514600	40	OBJECT	<unknown>	DEFAULT	10
nanosleep	.symtab	0x408598	38	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1440	.symtab	0x514360	8	OBJECT	<unknown>	DEFAULT	10
ntohl	.symtab	0x4062e5	5	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x4062dd	8	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x510348	8	OBJECT	<unknown>	DEFAULT	10
object.2814	.symtab	0x510300	48	OBJECT	<unknown>	DEFAULT	10
open	.symtab	0x405d04	106	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x516660	4	OBJECT	<unknown>	DEFAULT	10
p.2759	.symtab	0x50fdc8	0	OBJECT	<unknown>	DEFAULT	9
pids	.symtab	0x516668	8	OBJECT	<unknown>	DEFAULT	10
poll	.symtab	0x409640	41	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4494	.symtab	0x40f04d	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x4008ba	1085	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x400650	75	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x40077a	320	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x40069b	223	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0x403ac4	6528	FUNC	<unknown>	DEFAULT	2
qual_chars.4498	.symtab	0x40f060	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x4095e8	18	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x40777c	11	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x40023d	179	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x407788	72	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x40e720	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x407990	90	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x50ff80	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr	.symtab	0x40a000	190	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x405d7c	39	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x4067a8	11	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x400f55	570	FUNC	<unknown>	DEFAULT	2
recvfrom	.symtab	0x4067b4	45	FUNC	<unknown>	DEFAULT	2
recvfrom.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rtcp	.symtab	0x402ad2	932	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x4085c0	74	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x405da4	44	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x4067e4	11	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendto	.symtab	0x4067f0	48	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x405dd0	38	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x406820	53	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x4077d0	98	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x4078e8	168	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x40831d	247	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x406888	168	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x40860c	85	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x407d34	415	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x406858	47	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x4020d3	216	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x400cf7	432	FUNC	<unknown>	DEFAULT	2
spec_and_mask.4497	.symtab	0x40f080	16	OBJECT	<unknown>	DEFAULT	4
spec_base.4493	.symtab	0x40f059	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.4494	.symtab	0x40f0b0	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.4493	.symtab	0x40f0c5	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4496	.symtab	0x40f090	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4495	.symtab	0x40f0a0	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x40adc0	149	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x4078a0	72	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x4078a0	72	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x4079ea	169	FUNC	<unknown>	DEFAULT	2
static_id	.symtab	0x510030	2	OBJECT	<unknown>	DEFAULT	9
static_ns	.symtab	0x514628	4	OBJECT	<unknown>	DEFAULT	10
stderr	.symtab	0x510090	8	OBJECT	<unknown>	DEFAULT	9
stdhexflood	.symtab	0x4028a7	256	FUNC	<unknown>	DEFAULT	2
stdin	.symtab	0x510080	8	OBJECT	<unknown>	DEFAULT	9
stdout	.symtab	0x510088	8	OBJECT	<unknown>	DEFAULT	9
strcasecmp	.symtab	0x40c100	48	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x405f70	417	FUNC	<unknown>	DEFAULT	2
strcmp	.symtab	0x409dd8	33	FUNC	<unknown>	DEFAULT	2
strcoll	.symtab	0x409dd8	33	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0x406120	213	FUNC	<unknown>	DEFAULT	2
strdup	.symtab	0x40a138	54	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x40c03c	194	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x409e00	225	FUNC	<unknown>	DEFAULT	2
strncat	.symtab	0x40a0c0	119	FUNC	<unknown>	DEFAULT	2
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x408aa8	131	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x40bf5c	206	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x409ee8	140	FUNC	<unknown>	DEFAULT	2
strspn	.symtab	0x409f78	135	FUNC	<unknown>	DEFAULT	2
strstr	.symtab	0x4061f8	187	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtoimax	.symtab	0x407b60	10	FUNC	<unknown>	DEFAULT	2
strtok	.symtab	0x4062c4	10	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x408b2c	94	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x407b60	10	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtoll	.symtab	0x407b60	10	FUNC	<unknown>	DEFAULT	2
sysconf	.symtab	0x407ed4	351	FUNC	<unknown>	DEFAULT	2
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x40a18c	110	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x401507	191	FUNC	<unknown>	DEFAULT	2
time	.symtab	0x405df8	39	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tolower	.symtab	0x40ada0	30	FUNC	<unknown>	DEFAULT	2
tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x405e68	30	FUNC	<unknown>	DEFAULT	2
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x400583	205	FUNC	<unknown>	DEFAULT	2
type_codes	.symtab	0x40f0d0	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x40f0e8	12	OBJECT	<unknown>	DEFAULT	4
unknown.2050	.symtab	0x40f0f4	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state	.symtab	0x50ff40	48	OBJECT	<unknown>	DEFAULT	9
useragents	.symtab	0x50fe00	56	OBJECT	<unknown>	DEFAULT	9
usleep	.symtab	0x408034	52	FUNC	<unknown>	DEFAULT	2
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vseattack	.symtab	0x402254	1370	FUNC	<unknown>	DEFAULT	2
vsnprintf	.symtab	0x40ae58	199	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wait4	.symtab	0x408664	47	FUNC	<unknown>	DEFAULT	2
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x405e20	7	FUNC	<unknown>	DEFAULT	2
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb	.symtab	0x40c304	68	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x40c358	140	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x40c348	15	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0x405e28	42	FUNC	<unknown>	DEFAULT	2
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
xdigits.3747	.symtab	0x40ecf0	17	OBJECT	<unknown>	DEFAULT	4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-13T18:58:20.270878+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40772	154.213.187.62	1865	TCP
2024-12-13T18:58:21.452990+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40774	154.213.187.62	1865	TCP
2024-12-13T18:58:22.813050+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40776	154.213.187.62	1865	TCP
2024-12-13T18:58:23.991352+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40778	154.213.187.62	1865	TCP
2024-12-13T18:58:34.414536+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40780	154.213.187.62	1865	TCP
2024-12-13T18:58:35.621410+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40782	154.213.187.62	1865	TCP
2024-12-13T18:58:36.818008+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40784	154.213.187.62	1865	TCP
2024-12-13T18:58:38.007181+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40786	154.213.187.62	1865	TCP
2024-12-13T18:58:40.197105+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40788	154.213.187.62	1865	TCP
2024-12-13T18:58:42.629539+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40790	154.213.187.62	1865	TCP
2024-12-13T18:58:43.798875+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40792	154.213.187.62	1865	TCP
2024-12-13T18:58:44.967789+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40794	154.213.187.62	1865	TCP
2024-12-13T18:58:47.170607+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40796	154.213.187.62	1865	TCP
2024-12-13T18:58:48.356218+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40798	154.213.187.62	1865	TCP
2024-12-13T18:58:49.525858+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40800	154.213.187.62	1865	TCP
2024-12-13T18:58:50.703366+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40802	154.213.187.62	1865	TCP
2024-12-13T18:58:51.879497+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40804	154.213.187.62	1865	TCP
2024-12-13T18:58:54.082349+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40806	154.213.187.62	1865	TCP
2024-12-13T18:58:55.251759+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40808	154.213.187.62	1865	TCP
2024-12-13T18:58:57.550321+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40810	154.213.187.62	1865	TCP
2024-12-13T18:58:58.718026+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40812	154.213.187.62	1865	TCP
2024-12-13T18:59:00.928833+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40814	154.213.187.62	1865	TCP
2024-12-13T18:59:02.357525+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40816	154.213.187.62	1865	TCP
2024-12-13T18:59:03.529945+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40818	154.213.187.62	1865	TCP
2024-12-13T18:59:05.749497+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40820	154.213.187.62	1865	TCP
2024-12-13T18:59:07.009464+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40822	154.213.187.62	1865	TCP
2024-12-13T18:59:08.200973+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40824	154.213.187.62	1865	TCP
2024-12-13T18:59:09.412894+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40826	154.213.187.62	1865	TCP
2024-12-13T18:59:10.586902+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40828	154.213.187.62	1865	TCP
2024-12-13T18:59:11.805058+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40830	154.213.187.62	1865	TCP
2024-12-13T18:59:12.978003+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40832	154.213.187.62	1865	TCP
2024-12-13T18:59:15.204688+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40834	154.213.187.62	1865	TCP
2024-12-13T18:59:16.375069+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40836	154.213.187.62	1865	TCP
2024-12-13T18:59:17.547020+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40838	154.213.187.62	1865	TCP
2024-12-13T18:59:18.725141+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40840	154.213.187.62	1865	TCP
2024-12-13T18:59:20.966274+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40842	154.213.187.62	1865	TCP
2024-12-13T18:59:22.147293+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40844	154.213.187.62	1865	TCP
2024-12-13T18:59:23.327508+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40846	154.213.187.62	1865	TCP
2024-12-13T18:59:24.507568+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40848	154.213.187.62	1865	TCP
2024-12-13T18:59:26.917188+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40850	154.213.187.62	1865	TCP
2024-12-13T18:59:28.092473+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40852	154.213.187.62	1865	TCP
2024-12-13T18:59:30.309023+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40854	154.213.187.62	1865	TCP
2024-12-13T18:59:31.485907+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40856	154.213.187.62	1865	TCP
2024-12-13T18:59:32.658095+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40858	154.213.187.62	1865	TCP
2024-12-13T18:59:33.833774+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40860	154.213.187.62	1865	TCP
2024-12-13T18:59:35.314381+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40862	154.213.187.62	1865	TCP
2024-12-13T18:59:36.929399+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40864	154.213.187.62	1865	TCP
2024-12-13T18:59:38.106817+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40866	154.213.187.62	1865	TCP
2024-12-13T18:59:39.277776+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40868	154.213.187.62	1865	TCP
2024-12-13T18:59:40.651662+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40870	154.213.187.62	1865	TCP
2024-12-13T18:59:41.949078+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40872	154.213.187.62	1865	TCP
2024-12-13T18:59:44.201606+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40874	154.213.187.62	1865	TCP
2024-12-13T18:59:45.387045+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40876	154.213.187.62	1865	TCP
2024-12-13T18:59:46.803012+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40878	154.213.187.62	1865	TCP
2024-12-13T18:59:47.985882+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40880	154.213.187.62	1865	TCP
2024-12-13T18:59:49.350825+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40882	154.213.187.62	1865	TCP
2024-12-13T18:59:50.529299+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40884	154.213.187.62	1865	TCP
2024-12-13T18:59:51.712961+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40886	154.213.187.62	1865	TCP
2024-12-13T18:59:52.892119+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40888	154.213.187.62	1865	TCP
2024-12-13T18:59:54.076897+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40890	154.213.187.62	1865	TCP
2024-12-13T18:59:58.255580+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40892	154.213.187.62	1865	TCP
2024-12-13T19:00:00.452090+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40894	154.213.187.62	1865	TCP
2024-12-13T19:00:02.695450+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40896	154.213.187.62	1865	TCP
2024-12-13T19:00:03.873211+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40898	154.213.187.62	1865	TCP
2024-12-13T19:00:05.170055+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40900	154.213.187.62	1865	TCP
2024-12-13T19:00:06.409664+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40902	154.213.187.62	1865	TCP
2024-12-13T19:00:07.774919+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40904	154.213.187.62	1865	TCP
2024-12-13T19:00:08.964522+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40906	154.213.187.62	1865	TCP
2024-12-13T19:00:10.133573+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40908	154.213.187.62	1865	TCP
2024-12-13T19:00:11.301872+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40910	154.213.187.62	1865	TCP
2024-12-13T19:00:12.491434+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40912	154.213.187.62	1865	TCP
2024-12-13T19:00:13.668467+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40914	154.213.187.62	1865	TCP
2024-12-13T19:00:14.844977+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40916	154.213.187.62	1865	TCP
2024-12-13T19:00:16.016626+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40918	154.213.187.62	1865	TCP
2024-12-13T19:00:17.200203+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40920	154.213.187.62	1865	TCP
2024-12-13T19:00:19.461131+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40922	154.213.187.62	1865	TCP
2024-12-13T19:00:20.639097+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40924	154.213.187.62	1865	TCP
2024-12-13T19:00:21.808319+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40926	154.213.187.62	1865	TCP
2024-12-13T19:00:22.994596+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40928	154.213.187.62	1865	TCP
2024-12-13T19:00:24.163300+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40930	154.213.187.62	1865	TCP
2024-12-13T19:00:25.334846+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40932	154.213.187.62	1865	TCP
2024-12-13T19:00:27.520001+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40934	154.213.187.62	1865	TCP
2024-12-13T19:00:28.690677+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40936	154.213.187.62	1865	TCP
2024-12-13T19:00:32.858748+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40938	154.213.187.62	1865	TCP
2024-12-13T19:00:34.229690+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40940	154.213.187.62	1865	TCP
2024-12-13T19:00:35.409695+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40942	154.213.187.62	1865	TCP
2024-12-13T19:00:36.589563+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40944	154.213.187.62	1865	TCP
2024-12-13T19:00:37.965504+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40946	154.213.187.62	1865	TCP
2024-12-13T19:00:40.204889+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40948	154.213.187.62	1865	TCP
2024-12-13T19:00:41.379174+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40950	154.213.187.62	1865	TCP
2024-12-13T19:00:42.571101+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40952	154.213.187.62	1865	TCP
2024-12-13T19:00:43.764155+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40954	154.213.187.62	1865	TCP
2024-12-13T19:00:47.944658+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40956	154.213.187.62	1865	TCP
2024-12-13T19:00:52.137831+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40958	154.213.187.62	1865	TCP
2024-12-13T19:00:53.319684+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40960	154.213.187.62	1865	TCP
2024-12-13T19:00:54.501945+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40962	154.213.187.62	1865	TCP
2024-12-13T19:00:55.681274+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40964	154.213.187.62	1865	TCP
2024-12-13T19:00:57.926556+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40966	154.213.187.62	1865	TCP
2024-12-13T19:00:59.095087+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40968	154.213.187.62	1865	TCP
2024-12-13T19:01:00.275446+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40970	154.213.187.62	1865	TCP
2024-12-13T19:01:01.504337+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40972	154.213.187.62	1865	TCP
2024-12-13T19:01:03.699640+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40974	154.213.187.62	1865	TCP
2024-12-13T19:01:04.898421+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40976	154.213.187.62	1865	TCP
2024-12-13T19:01:06.068926+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40978	154.213.187.62	1865	TCP
2024-12-13T19:01:07.271036+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40980	154.213.187.62	1865	TCP
2024-12-13T19:01:09.502852+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40982	154.213.187.62	1865	TCP
2024-12-13T19:01:10.871140+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40984	154.213.187.62	1865	TCP
2024-12-13T19:01:12.049691+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40986	154.213.187.62	1865	TCP
2024-12-13T19:01:13.421282+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40988	154.213.187.62	1865	TCP
2024-12-13T19:01:14.617470+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40990	154.213.187.62	1865	TCP
2024-12-13T19:01:15.790218+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40992	154.213.187.62	1865	TCP
2024-12-13T19:01:16.957220+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40994	154.213.187.62	1865	TCP
2024-12-13T19:01:18.175239+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40996	154.213.187.62	1865	TCP
2024-12-13T19:01:19.421592+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	40998	154.213.187.62	1865	TCP
2024-12-13T19:01:20.595601+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41000	154.213.187.62	1865	TCP
2024-12-13T19:01:21.774148+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41002	154.213.187.62	1865	TCP
2024-12-13T19:01:22.952503+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41004	154.213.187.62	1865	TCP
2024-12-13T19:01:24.132736+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41006	154.213.187.62	1865	TCP
2024-12-13T19:01:25.319363+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41008	154.213.187.62	1865	TCP
2024-12-13T19:01:26.490256+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41010	154.213.187.62	1865	TCP
2024-12-13T19:01:27.721495+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41012	154.213.187.62	1865	TCP
2024-12-13T19:01:28.892657+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41014	154.213.187.62	1865	TCP
2024-12-13T19:01:30.063381+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41016	154.213.187.62	1865	TCP
2024-12-13T19:01:31.239609+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41018	154.213.187.62	1865	TCP
2024-12-13T19:01:32.425053+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41020	154.213.187.62	1865	TCP
2024-12-13T19:01:34.661099+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41022	154.213.187.62	1865	TCP
2024-12-13T19:01:35.839347+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41024	154.213.187.62	1865	TCP
2024-12-13T19:01:38.059021+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41026	154.213.187.62	1865	TCP
2024-12-13T19:01:39.239971+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41028	154.213.187.62	1865	TCP
2024-12-13T19:01:40.419975+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41030	154.213.187.62	1865	TCP
2024-12-13T19:01:41.597220+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41032	154.213.187.62	1865	TCP
2024-12-13T19:01:42.984454+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41034	154.213.187.62	1865	TCP
2024-12-13T19:01:44.172834+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41036	154.213.187.62	1865	TCP
2024-12-13T19:01:45.349386+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41038	154.213.187.62	1865	TCP
2024-12-13T19:01:46.551612+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41040	154.213.187.62	1865	TCP
2024-12-13T19:01:47.726673+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41042	154.213.187.62	1865	TCP
2024-12-13T19:01:48.901704+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41044	154.213.187.62	1865	TCP
2024-12-13T19:01:50.076650+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41046	154.213.187.62	1865	TCP
2024-12-13T19:01:52.254377+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41048	154.213.187.62	1865	TCP
2024-12-13T19:01:53.616763+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41050	154.213.187.62	1865	TCP
2024-12-13T19:01:54.791285+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	41052	154.213.187.62	1865	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 13, 2024 18:58:18.667531967 CET	43928	443	192.168.2.23	91.189.91.42
Dec 13, 2024 18:58:20.150509119 CET	40772	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:20.270545959 CET	1865	40772	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:20.270768881 CET	40772	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:20.270878077 CET	40772	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:20.390873909 CET	1865	40772	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:21.332092047 CET	1865	40772	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:21.332133055 CET	1865	40772	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:21.332284927 CET	40772	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:21.332310915 CET	40772	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:21.332951069 CET	40774	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:21.452253103 CET	1865	40772	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:21.452858925 CET	1865	40774	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:21.452967882 CET	40774	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:21.452990055 CET	40774	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:21.572809935 CET	1865	40774	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:22.691499949 CET	1865	40774	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:22.691837072 CET	40774	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:22.692856073 CET	40776	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:22.812036991 CET	1865	40774	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:22.812890053 CET	1865	40776	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:22.813050032 CET	40776	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:22.813050032 CET	40776	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:22.933070898 CET	1865	40776	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:23.870790005 CET	1865	40776	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:23.870876074 CET	1865	40776	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:23.871032953 CET	40776	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:23.871062994 CET	40776	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:23.871546984 CET	40778	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:23.990917921 CET	1865	40776	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:23.991230965 CET	1865	40778	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:23.991303921 CET	40778	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:23.991352081 CET	40778	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:24.111206055 CET	1865	40778	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:31.645495892 CET	443	39256	34.249.145.219	192.168.2.23
Dec 13, 2024 18:58:31.645817995 CET	39256	443	192.168.2.23	34.249.145.219
Dec 13, 2024 18:58:31.766098022 CET	443	39256	34.249.145.219	192.168.2.23
Dec 13, 2024 18:58:34.025504112 CET	42516	80	192.168.2.23	109.202.202.202
Dec 13, 2024 18:58:34.293422937 CET	1865	40778	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:34.293876886 CET	40778	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:34.294559002 CET	40780	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:34.413641930 CET	1865	40778	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:34.414380074 CET	1865	40780	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:34.414535999 CET	40780	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:34.414535999 CET	40780	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:34.534404039 CET	1865	40780	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:35.499334097 CET	1865	40780	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:35.499401093 CET	1865	40780	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:35.499577999 CET	40780	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:35.499665976 CET	40780	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:35.500313044 CET	40782	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:35.620567083 CET	1865	40780	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:35.621140957 CET	1865	40782	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:35.621265888 CET	40782	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:35.621409893 CET	40782	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:35.741060972 CET	1865	40782	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:36.694468021 CET	1865	40782	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:36.694561005 CET	1865	40782	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:36.694614887 CET	40782	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:36.694648027 CET	40782	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:36.695137978 CET	40784	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:36.817229986 CET	1865	40782	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:36.817739964 CET	1865	40784	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:36.817944050 CET	40784	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:36.818007946 CET	40784	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:36.938879013 CET	1865	40784	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:37.886342049 CET	1865	40784	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:37.886357069 CET	1865	40784	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:37.886543989 CET	40784	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:37.886632919 CET	40784	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:37.887279034 CET	40786	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:38.006767035 CET	1865	40784	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:38.006995916 CET	1865	40786	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:38.007101059 CET	40786	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:38.007180929 CET	40786	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:38.127005100 CET	1865	40786	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:40.075289011 CET	1865	40786	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:40.075576067 CET	40786	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:40.075809956 CET	1865	40786	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:40.075901031 CET	40786	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:40.077088118 CET	40788	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:40.168659925 CET	43928	443	192.168.2.23	91.189.91.42
Dec 13, 2024 18:58:40.195924997 CET	1865	40786	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:40.196872950 CET	1865	40788	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:40.197027922 CET	40788	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:40.197104931 CET	40788	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:40.317281008 CET	1865	40788	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:42.508744001 CET	1865	40788	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:42.509027958 CET	40788	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:42.509638071 CET	40790	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:42.628851891 CET	1865	40788	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:42.629416943 CET	1865	40790	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:42.629511118 CET	40790	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:42.629539013 CET	40790	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:42.749420881 CET	1865	40790	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:43.677495956 CET	1865	40790	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:43.677654982 CET	1865	40790	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:43.677789927 CET	40790	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:43.677789927 CET	40790	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:43.678953886 CET	40792	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:43.797487974 CET	1865	40790	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:43.798685074 CET	1865	40792	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:43.798815012 CET	40792	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:43.798875093 CET	40792	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:43.918587923 CET	1865	40792	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:44.846350908 CET	1865	40792	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:44.846586943 CET	40792	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:44.846684933 CET	1865	40792	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:44.846749067 CET	40792	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:44.847354889 CET	40794	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:44.966979980 CET	1865	40792	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:44.967586040 CET	1865	40794	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:44.967713118 CET	40794	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:44.967788935 CET	40794	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:45.087661028 CET	1865	40794	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:47.048161030 CET	1865	40794	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:47.048177958 CET	1865	40794	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:47.048394918 CET	40794	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:47.048427105 CET	40794	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:47.048958063 CET	40796	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:47.170140028 CET	1865	40794	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:47.170495033 CET	1865	40796	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:47.170574903 CET	40796	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:47.170607090 CET	40796	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:47.290366888 CET	1865	40796	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:48.234898090 CET	1865	40796	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:48.235034943 CET	1865	40796	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:48.235055923 CET	40796	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:48.235169888 CET	40796	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:48.236066103 CET	40798	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:48.354916096 CET	1865	40796	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:48.355979919 CET	1865	40798	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:48.356110096 CET	40798	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:48.356218100 CET	40798	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:48.475958109 CET	1865	40798	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:49.404158115 CET	1865	40798	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:49.404294968 CET	40798	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:49.404314041 CET	1865	40798	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:49.404490948 CET	40798	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:49.405339003 CET	40800	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:49.524640083 CET	1865	40798	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:49.525510073 CET	1865	40800	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:49.525857925 CET	40800	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:49.525857925 CET	40800	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:49.645950079 CET	1865	40800	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:50.582796097 CET	1865	40800	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:50.582992077 CET	1865	40800	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:50.582998991 CET	40800	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:50.583072901 CET	40800	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:50.583553076 CET	40802	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:50.702759027 CET	1865	40800	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:50.703217983 CET	1865	40802	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:50.703294992 CET	40802	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:50.703366041 CET	40802	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:50.823070049 CET	1865	40802	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:51.757930040 CET	1865	40802	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:51.757971048 CET	1865	40802	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:51.758276939 CET	40802	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:51.758377075 CET	40802	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:51.759550095 CET	40804	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:51.878093958 CET	1865	40802	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:51.879336119 CET	1865	40804	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:51.879497051 CET	40804	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:51.879497051 CET	40804	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:51.999351978 CET	1865	40804	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:53.961105108 CET	1865	40804	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:53.961333990 CET	40804	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:53.961348057 CET	1865	40804	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:53.961468935 CET	40804	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:53.962150097 CET	40806	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:54.081118107 CET	1865	40804	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:54.082154036 CET	1865	40806	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:54.082349062 CET	40806	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:54.082349062 CET	40806	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:54.202260017 CET	1865	40806	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:55.130204916 CET	1865	40806	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:55.130619049 CET	40806	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:55.131232977 CET	1865	40806	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:55.131339073 CET	40806	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:55.131791115 CET	40808	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:55.251044989 CET	1865	40806	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:55.251508951 CET	1865	40808	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:55.251591921 CET	40808	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:55.251759052 CET	40808	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:55.371459007 CET	1865	40808	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:57.429229975 CET	1865	40808	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:57.429275990 CET	1865	40808	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:57.429425955 CET	40808	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:57.429426908 CET	40808	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:57.430375099 CET	40810	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:57.549401045 CET	1865	40808	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:57.550185919 CET	1865	40810	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:57.550287962 CET	40810	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:57.550321102 CET	40810	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:57.670093060 CET	1865	40810	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:58.597218037 CET	1865	40810	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:58.597405910 CET	40810	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:58.597429991 CET	1865	40810	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:58.597517967 CET	40810	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:58.598073959 CET	40812	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:58.717264891 CET	1865	40810	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:58.717889071 CET	1865	40812	154.213.187.62	192.168.2.23
Dec 13, 2024 18:58:58.717963934 CET	40812	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:58.718025923 CET	40812	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:58:58.837861061 CET	1865	40812	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:00.807588100 CET	1865	40812	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:00.807719946 CET	40812	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:00.807821035 CET	1865	40812	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:00.807887077 CET	40812	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:00.808336020 CET	40814	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:00.928247929 CET	1865	40812	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:00.928694010 CET	1865	40814	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:00.928782940 CET	40814	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:00.928833008 CET	40814	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:01.048784018 CET	1865	40814	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:02.236521006 CET	1865	40814	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:02.236792088 CET	40814	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:02.237627983 CET	40816	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:02.356592894 CET	1865	40814	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:02.357393026 CET	1865	40816	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:02.357501984 CET	40816	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:02.357525110 CET	40816	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:02.477322102 CET	1865	40816	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:03.408945084 CET	1865	40816	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:03.409152031 CET	40816	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:03.409313917 CET	1865	40816	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:03.409368992 CET	40816	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:03.410013914 CET	40818	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:03.529102087 CET	1865	40816	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:03.529767990 CET	1865	40818	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:03.529944897 CET	40818	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:03.529944897 CET	40818	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:03.649915934 CET	1865	40818	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:05.628374100 CET	1865	40818	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:05.628387928 CET	1865	40818	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:05.628488064 CET	40818	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:05.628534079 CET	40818	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:05.629363060 CET	40820	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:05.748331070 CET	1865	40818	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:05.749249935 CET	1865	40820	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:05.749355078 CET	40820	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:05.749496937 CET	40820	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:05.869201899 CET	1865	40820	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:06.888701916 CET	1865	40820	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:06.888716936 CET	1865	40820	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:06.888813972 CET	40820	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:06.888840914 CET	40820	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:06.889441967 CET	40822	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:07.008732080 CET	1865	40820	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:07.009196997 CET	1865	40822	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:07.009263039 CET	40822	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:07.009464025 CET	40822	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:07.129333019 CET	1865	40822	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:08.076522112 CET	1865	40822	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:08.076647997 CET	40822	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:08.079437971 CET	1865	40822	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:08.079502106 CET	40822	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:08.080178022 CET	40824	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:08.199892044 CET	1865	40822	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:08.200840950 CET	1865	40824	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:08.200917959 CET	40824	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:08.200973034 CET	40824	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:08.320889950 CET	1865	40824	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:09.291692019 CET	1865	40824	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:09.291903973 CET	40824	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:09.291908979 CET	1865	40824	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:09.292114973 CET	40824	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:09.292920113 CET	40826	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:09.411863089 CET	1865	40824	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:09.412641048 CET	1865	40826	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:09.412798882 CET	40826	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:09.412894011 CET	40826	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:09.532710075 CET	1865	40826	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:10.466000080 CET	1865	40826	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:10.466044903 CET	1865	40826	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:10.466197014 CET	40826	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:10.466403008 CET	40826	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:10.467010975 CET	40828	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:10.586165905 CET	1865	40826	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:10.586745024 CET	1865	40828	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:10.586828947 CET	40828	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:10.586901903 CET	40828	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:10.706680059 CET	1865	40828	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:11.684254885 CET	1865	40828	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:11.684269905 CET	1865	40828	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:11.684421062 CET	40828	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:11.684421062 CET	40828	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:11.684977055 CET	40830	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:11.804383039 CET	1865	40828	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:11.804949999 CET	1865	40830	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:11.805013895 CET	40830	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:11.805058002 CET	40830	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:11.925731897 CET	1865	40830	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:12.857139111 CET	1865	40830	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:12.857321978 CET	1865	40830	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:12.857336998 CET	40830	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:12.857402086 CET	40830	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:12.858063936 CET	40832	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:12.977273941 CET	1865	40830	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:12.977854013 CET	1865	40832	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:12.977965117 CET	40832	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:12.978003025 CET	40832	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:13.097831964 CET	1865	40832	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:15.083344936 CET	1865	40832	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:15.083492041 CET	40832	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:15.083949089 CET	1865	40832	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:15.084029913 CET	40832	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:15.084603071 CET	40834	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:15.203780890 CET	1865	40832	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:15.204586983 CET	1865	40834	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:15.204688072 CET	40834	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:15.204688072 CET	40834	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:15.324724913 CET	1865	40834	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:16.252016068 CET	1865	40834	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:16.252082109 CET	1865	40834	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:16.252197027 CET	40834	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:16.252312899 CET	40834	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:16.253129005 CET	40836	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:16.374262094 CET	1865	40834	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:16.374883890 CET	1865	40836	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:16.375068903 CET	40836	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:16.375068903 CET	40836	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:16.496150017 CET	1865	40836	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:17.426302910 CET	1865	40836	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:17.426444054 CET	1865	40836	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:17.426557064 CET	40836	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:17.426557064 CET	40836	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:17.427081108 CET	40838	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:17.546262026 CET	1865	40836	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:17.546798944 CET	1865	40838	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:17.547019958 CET	40838	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:17.547019958 CET	40838	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:17.667757034 CET	1865	40838	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:18.603919983 CET	1865	40838	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:18.604085922 CET	1865	40838	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:18.604110003 CET	40838	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:18.604199886 CET	40838	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:18.605084896 CET	40840	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:18.724153996 CET	1865	40838	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:18.724917889 CET	1865	40840	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:18.725064993 CET	40840	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:18.725141048 CET	40840	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:18.845132113 CET	1865	40840	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:20.844921112 CET	1865	40840	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:20.845112085 CET	1865	40840	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:20.845146894 CET	40840	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:20.845185995 CET	40840	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:20.846026897 CET	40842	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:20.965168953 CET	1865	40840	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:20.966171026 CET	1865	40842	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:20.966238022 CET	40842	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:20.966274023 CET	40842	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:21.086266994 CET	1865	40842	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:21.123339891 CET	43928	443	192.168.2.23	91.189.91.42
Dec 13, 2024 18:59:22.025808096 CET	1865	40842	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:22.025819063 CET	1865	40842	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:22.026122093 CET	40842	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:22.026191950 CET	40842	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:22.027218103 CET	40844	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:22.146279097 CET	1865	40842	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:22.147100925 CET	1865	40844	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:22.147212982 CET	40844	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:22.147293091 CET	40844	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:22.268094063 CET	1865	40844	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:23.206118107 CET	1865	40844	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:23.206167936 CET	1865	40844	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:23.206356049 CET	40844	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:23.206438065 CET	40844	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:23.207436085 CET	40846	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:23.326214075 CET	1865	40844	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:23.327295065 CET	1865	40846	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:23.327442884 CET	40846	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:23.327507973 CET	40846	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:23.447268963 CET	1865	40846	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:24.383224010 CET	1865	40846	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:24.383378029 CET	1865	40846	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:24.383687973 CET	40846	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:24.383723974 CET	40846	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:24.384638071 CET	40848	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:24.505067110 CET	1865	40846	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:24.507184029 CET	1865	40848	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:24.507567883 CET	40848	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:24.507567883 CET	40848	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:24.627536058 CET	1865	40848	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:26.796474934 CET	1865	40848	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:26.796662092 CET	40848	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:26.797266960 CET	40850	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:26.916574001 CET	1865	40848	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:26.917009115 CET	1865	40850	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:26.917135954 CET	40850	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:26.917187929 CET	40850	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:27.037041903 CET	1865	40850	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:27.971510887 CET	1865	40850	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:27.971695900 CET	40850	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:27.971857071 CET	1865	40850	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:27.971946955 CET	40850	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:27.972413063 CET	40852	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:28.091938972 CET	1865	40850	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:28.092329979 CET	1865	40852	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:28.092448950 CET	40852	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:28.092473030 CET	40852	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:28.213541985 CET	1865	40852	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:30.186630964 CET	1865	40852	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:30.186824083 CET	1865	40852	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:30.186959028 CET	40852	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:30.187016010 CET	40852	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:30.188148975 CET	40854	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:30.307568073 CET	1865	40852	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:30.308788061 CET	1865	40854	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:30.308900118 CET	40854	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:30.309022903 CET	40854	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:30.428720951 CET	1865	40854	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:31.364238977 CET	1865	40854	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:31.364255905 CET	1865	40854	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:31.364411116 CET	40854	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:31.364510059 CET	40854	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:31.365220070 CET	40856	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:31.484757900 CET	1865	40854	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:31.485703945 CET	1865	40856	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:31.485809088 CET	40856	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:31.485907078 CET	40856	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:31.605820894 CET	1865	40856	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:32.536812067 CET	1865	40856	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:32.536938906 CET	1865	40856	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:32.536941051 CET	40856	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:32.537017107 CET	40856	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:32.537476063 CET	40858	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:32.656646967 CET	1865	40856	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:32.657814026 CET	1865	40858	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:32.657900095 CET	40858	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:32.658094883 CET	40858	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:32.777878046 CET	1865	40858	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:33.712846041 CET	1865	40858	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:33.712912083 CET	1865	40858	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:33.712990999 CET	40858	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:33.713136911 CET	40858	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:33.713681936 CET	40860	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:33.832838058 CET	1865	40858	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:33.833533049 CET	1865	40860	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:33.833637953 CET	40860	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:33.833774090 CET	40860	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:33.953445911 CET	1865	40860	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:35.086440086 CET	1865	40860	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:35.086724043 CET	40860	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:35.087341070 CET	40862	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:35.314080954 CET	1865	40860	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:35.314095020 CET	1865	40862	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:35.314380884 CET	40862	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:35.314380884 CET	40862	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:35.441171885 CET	1865	40862	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:36.762478113 CET	1865	40862	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:36.762491941 CET	1865	40862	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:36.762617111 CET	40862	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:36.762826920 CET	40862	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:36.763537884 CET	40864	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:36.876543999 CET	1865	40862	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:36.876652956 CET	40862	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:36.928471088 CET	1865	40862	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:36.929121971 CET	1865	40864	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:36.929352045 CET	40864	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:36.929399014 CET	40864	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:37.049101114 CET	1865	40864	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:37.985136032 CET	1865	40864	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:37.985327959 CET	40864	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:37.985358000 CET	1865	40864	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:37.985456944 CET	40864	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:37.986542940 CET	40866	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:38.105143070 CET	1865	40864	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:38.106586933 CET	1865	40866	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:38.106739998 CET	40866	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:38.106817007 CET	40866	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:38.226782084 CET	1865	40866	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:39.154623032 CET	1865	40866	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:39.154824018 CET	1865	40866	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:39.154841900 CET	40866	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:39.154886007 CET	40866	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:39.155714989 CET	40868	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:39.275352001 CET	1865	40866	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:39.277642012 CET	1865	40868	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:39.277731895 CET	40868	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:39.277776003 CET	40868	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:39.398226976 CET	1865	40868	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:40.526357889 CET	1865	40868	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:40.526693106 CET	40868	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:40.527127981 CET	40870	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:40.651489973 CET	1865	40868	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:40.651505947 CET	1865	40870	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:40.651623964 CET	40870	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:40.651662111 CET	40870	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:40.881047964 CET	1865	40870	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:41.828159094 CET	1865	40870	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:41.828258038 CET	1865	40870	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:41.828468084 CET	40870	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:41.828533888 CET	40870	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:41.829252958 CET	40872	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:41.948402882 CET	1865	40870	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:41.948971987 CET	1865	40872	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:41.949043036 CET	40872	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:41.949078083 CET	40872	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:42.068914890 CET	1865	40872	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:44.079336882 CET	1865	40872	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:44.079514027 CET	40872	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:44.080790997 CET	1865	40872	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:44.080884933 CET	40872	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:44.081512928 CET	40874	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:44.200613022 CET	1865	40872	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:44.201217890 CET	1865	40874	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:44.201517105 CET	40874	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:44.201606035 CET	40874	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:44.322575092 CET	1865	40874	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:45.265296936 CET	1865	40874	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:45.265453100 CET	40874	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:45.265499115 CET	1865	40874	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:45.265559912 CET	40874	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:45.266172886 CET	40876	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:45.385266066 CET	1865	40874	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:45.386838913 CET	1865	40876	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:45.387044907 CET	40876	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:45.387044907 CET	40876	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:45.506792068 CET	1865	40876	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:46.681277037 CET	1865	40876	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:46.681452036 CET	40876	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:46.682068110 CET	40878	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:46.802300930 CET	1865	40876	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:46.802787066 CET	1865	40878	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:46.802938938 CET	40878	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:46.803011894 CET	40878	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:46.922708988 CET	1865	40878	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:47.864388943 CET	1865	40878	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:47.864399910 CET	1865	40878	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:47.864545107 CET	40878	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:47.864545107 CET	40878	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:47.865259886 CET	40880	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:47.984308004 CET	1865	40878	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:47.985646963 CET	1865	40880	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:47.985780001 CET	40880	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:47.985882044 CET	40880	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:48.105575085 CET	1865	40880	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:49.230128050 CET	1865	40880	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:49.230326891 CET	40880	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:49.230933905 CET	40882	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:49.350178003 CET	1865	40880	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:49.350668907 CET	1865	40882	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:49.350825071 CET	40882	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:49.350825071 CET	40882	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:49.470899105 CET	1865	40882	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:50.408118010 CET	1865	40882	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:50.408432007 CET	40882	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:50.408478975 CET	1865	40882	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:50.408581972 CET	40882	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:50.409264088 CET	40884	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:50.528247118 CET	1865	40882	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:50.529005051 CET	1865	40884	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:50.529140949 CET	40884	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:50.529299021 CET	40884	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:50.649199009 CET	1865	40884	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:51.592093945 CET	1865	40884	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:51.592243910 CET	1865	40884	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:51.592257023 CET	40884	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:51.592344046 CET	40884	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:51.592822075 CET	40886	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:51.712244987 CET	1865	40884	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:51.712779999 CET	1865	40886	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:51.712910891 CET	40886	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:51.712960958 CET	40886	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:51.833302021 CET	1865	40886	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:52.770293951 CET	1865	40886	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:52.770435095 CET	1865	40886	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:52.770462036 CET	40886	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:52.770561934 CET	40886	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:52.771234035 CET	40888	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:52.891074896 CET	1865	40886	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:52.891742945 CET	1865	40888	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:52.891869068 CET	40888	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:52.892118931 CET	40888	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:53.011933088 CET	1865	40888	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:53.955401897 CET	1865	40888	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:53.955483913 CET	1865	40888	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:53.955712080 CET	40888	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:53.955795050 CET	40888	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:53.956443071 CET	40890	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:54.075815916 CET	1865	40888	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:54.076646090 CET	1865	40890	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:54.076780081 CET	40890	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:54.076896906 CET	40890	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:54.196664095 CET	1865	40890	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:58.134747028 CET	1865	40890	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:58.134974003 CET	1865	40890	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:58.135035038 CET	40890	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:58.135091066 CET	40890	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:58.135684967 CET	40892	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:58.254976988 CET	1865	40890	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:58.255387068 CET	1865	40892	154.213.187.62	192.168.2.23
Dec 13, 2024 18:59:58.255506992 CET	40892	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:58.255579948 CET	40892	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 18:59:58.375375986 CET	1865	40892	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:00.331389904 CET	1865	40892	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:00.331500053 CET	1865	40892	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:00.331523895 CET	40892	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:00.331590891 CET	40892	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:00.332180023 CET	40894	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:00.451370955 CET	1865	40892	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:00.451889992 CET	1865	40894	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:00.452011108 CET	40894	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:00.452090025 CET	40894	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:00.571806908 CET	1865	40894	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:02.574192047 CET	1865	40894	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:02.574214935 CET	1865	40894	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:02.574472904 CET	40894	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:02.574558973 CET	40894	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:02.575289011 CET	40896	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:02.694761038 CET	1865	40894	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:02.695080996 CET	1865	40896	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:02.695353985 CET	40896	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:02.695450068 CET	40896	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:02.815525055 CET	1865	40896	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:03.752084017 CET	1865	40896	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:03.752172947 CET	1865	40896	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:03.752335072 CET	40896	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:03.752388000 CET	40896	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:03.753230095 CET	40898	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:03.872224092 CET	1865	40896	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:03.872988939 CET	1865	40898	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:03.873171091 CET	40898	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:03.873210907 CET	40898	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:03.994163990 CET	1865	40898	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:05.048996925 CET	1865	40898	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:05.049009085 CET	1865	40898	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:05.049331903 CET	40898	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:05.049417019 CET	40898	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:05.050127983 CET	40900	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:05.169234037 CET	1865	40898	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:05.169867039 CET	1865	40900	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:05.169990063 CET	40900	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:05.170054913 CET	40900	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:05.292671919 CET	1865	40900	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:06.288084030 CET	1865	40900	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:06.288125038 CET	1865	40900	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:06.288268089 CET	40900	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:06.288361073 CET	40900	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:06.289135933 CET	40902	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:06.408750057 CET	1865	40900	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:06.409460068 CET	1865	40902	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:06.409583092 CET	40902	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:06.409663916 CET	40902	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:06.529370070 CET	1865	40902	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:07.653574944 CET	1865	40902	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:07.653830051 CET	40902	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:07.654649973 CET	40904	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:07.773910046 CET	1865	40902	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:07.774717093 CET	1865	40904	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:07.774837017 CET	40904	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:07.774919033 CET	40904	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:07.895813942 CET	1865	40904	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:08.843287945 CET	1865	40904	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:08.843324900 CET	1865	40904	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:08.843504906 CET	40904	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:08.843547106 CET	40904	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:08.844404936 CET	40906	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:08.963351011 CET	1865	40904	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:08.964314938 CET	1865	40906	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:08.964432955 CET	40906	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:08.964521885 CET	40906	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:09.084654093 CET	1865	40906	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:10.013045073 CET	1865	40906	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:10.013092041 CET	1865	40906	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:10.013169050 CET	40906	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:10.013251066 CET	40906	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:10.013781071 CET	40908	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:10.132914066 CET	1865	40906	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:10.133433104 CET	1865	40908	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:10.133527994 CET	40908	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:10.133573055 CET	40908	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:10.253525019 CET	1865	40908	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:11.181242943 CET	1865	40908	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:11.181359053 CET	40908	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:11.181386948 CET	1865	40908	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:11.181438923 CET	40908	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:11.181919098 CET	40910	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:11.301327944 CET	1865	40908	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:11.301711082 CET	1865	40910	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:11.301836967 CET	40910	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:11.301872015 CET	40910	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:11.423296928 CET	1865	40910	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:12.370482922 CET	1865	40910	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:12.370528936 CET	1865	40910	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:12.370784044 CET	40910	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:12.370825052 CET	40910	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:12.371319056 CET	40912	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:12.490931034 CET	1865	40910	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:12.491200924 CET	1865	40912	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:12.491378069 CET	40912	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:12.491434097 CET	40912	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:12.611531019 CET	1865	40912	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:13.547012091 CET	1865	40912	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:13.547082901 CET	1865	40912	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:13.547173023 CET	40912	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:13.547410011 CET	40912	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:13.548000097 CET	40914	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:13.667176008 CET	1865	40912	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:13.668189049 CET	1865	40914	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:13.668297052 CET	40914	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:13.668467045 CET	40914	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:13.788168907 CET	1865	40914	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:14.722595930 CET	1865	40914	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:14.722708941 CET	1865	40914	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:14.722793102 CET	40914	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:14.722836971 CET	40914	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:14.723536968 CET	40916	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:14.844161034 CET	1865	40914	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:14.844762087 CET	1865	40916	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:14.844976902 CET	40916	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:14.844976902 CET	40916	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:14.965411901 CET	1865	40916	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:15.895659924 CET	1865	40916	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:15.895760059 CET	1865	40916	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:15.895839930 CET	40916	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:15.895839930 CET	40916	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:15.896701097 CET	40918	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:16.015850067 CET	1865	40916	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:16.016393900 CET	1865	40918	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:16.016625881 CET	40918	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:16.016625881 CET	40918	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:16.136658907 CET	1865	40918	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:17.064625978 CET	1865	40918	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:17.064857006 CET	40918	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:17.079660892 CET	1865	40918	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:17.079940081 CET	40918	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:17.080341101 CET	40920	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:17.199870110 CET	1865	40918	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:17.200081110 CET	1865	40920	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:17.200167894 CET	40920	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:17.200202942 CET	40920	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:17.322092056 CET	1865	40920	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:19.340387106 CET	1865	40920	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:19.340529919 CET	1865	40920	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:19.340540886 CET	40920	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:19.340601921 CET	40920	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:19.341106892 CET	40922	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:19.460314035 CET	1865	40920	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:19.460978031 CET	1865	40922	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:19.461050987 CET	40922	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:19.461131096 CET	40922	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:19.581321955 CET	1865	40922	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:20.518162012 CET	1865	40922	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:20.518322945 CET	40922	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:20.518368959 CET	1865	40922	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:20.518443108 CET	40922	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:20.519136906 CET	40924	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:20.638083935 CET	1865	40922	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:20.638922930 CET	1865	40924	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:20.639040947 CET	40924	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:20.639096975 CET	40924	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:20.758857012 CET	1865	40924	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:21.686634064 CET	1865	40924	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:21.686779976 CET	40924	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:21.686784983 CET	1865	40924	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:21.686861038 CET	40924	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:21.687469006 CET	40926	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:21.807621956 CET	1865	40924	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:21.808185101 CET	1865	40926	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:21.808293104 CET	40926	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:21.808319092 CET	40926	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:21.931827068 CET	1865	40926	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:22.868792057 CET	1865	40926	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:22.868949890 CET	40926	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:22.869007111 CET	1865	40926	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:22.869122982 CET	40926	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:22.873682976 CET	40928	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:22.989224911 CET	1865	40926	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:22.993988037 CET	1865	40928	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:22.994596004 CET	40928	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:22.994596004 CET	40928	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:23.114662886 CET	1865	40928	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:24.042536974 CET	1865	40928	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:24.042702913 CET	1865	40928	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:24.042773962 CET	40928	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:24.042773962 CET	40928	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:24.043448925 CET	40930	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:24.163047075 CET	1865	40928	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:24.163177967 CET	1865	40930	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:24.163300037 CET	40930	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:24.163300037 CET	40930	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:24.283150911 CET	1865	40930	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:25.212505102 CET	1865	40930	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:25.212647915 CET	40930	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:25.212668896 CET	1865	40930	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:25.212766886 CET	40930	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:25.213396072 CET	40932	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:25.332731009 CET	1865	40930	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:25.334759951 CET	1865	40932	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:25.334846020 CET	40932	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:25.334846020 CET	40932	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:25.454679012 CET	1865	40932	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:27.399199963 CET	1865	40932	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:27.399358988 CET	1865	40932	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:27.399482012 CET	40932	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:27.399482012 CET	40932	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:27.400049925 CET	40934	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:27.519397020 CET	1865	40932	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:27.519824982 CET	1865	40934	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:27.519967079 CET	40934	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:27.520000935 CET	40934	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:27.639956951 CET	1865	40934	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:28.569534063 CET	1865	40934	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:28.569710970 CET	1865	40934	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:28.569905996 CET	40934	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:28.570029020 CET	40934	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:28.570719004 CET	40936	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:28.689757109 CET	1865	40934	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:28.690434933 CET	1865	40936	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:28.690577984 CET	40936	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:28.690676928 CET	40936	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:28.811136007 CET	1865	40936	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:32.737724066 CET	1865	40936	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:32.737879992 CET	1865	40936	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:32.738071918 CET	40936	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:32.738166094 CET	40936	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:32.738815069 CET	40938	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:32.857914925 CET	1865	40936	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:32.858536005 CET	1865	40938	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:32.858681917 CET	40938	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:32.858747959 CET	40938	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:32.978609085 CET	1865	40938	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:34.108810902 CET	1865	40938	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:34.109129906 CET	40938	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:34.109730005 CET	40940	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:34.228856087 CET	1865	40938	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:34.229403973 CET	1865	40940	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:34.229501963 CET	40940	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:34.229690075 CET	40940	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:34.349395990 CET	1865	40940	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:35.288650990 CET	1865	40940	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:35.288700104 CET	1865	40940	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:35.288866043 CET	40940	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:35.288916111 CET	40940	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:35.289549112 CET	40942	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:35.408684015 CET	1865	40940	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:35.409460068 CET	1865	40942	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:35.409609079 CET	40942	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:35.409694910 CET	40942	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:35.530155897 CET	1865	40942	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:36.467077017 CET	1865	40942	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:36.467096090 CET	1865	40942	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:36.467434883 CET	40942	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:36.467477083 CET	40942	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:36.468381882 CET	40944	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:36.589205027 CET	1865	40942	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:36.589220047 CET	1865	40944	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:36.589562893 CET	40944	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:36.589562893 CET	40944	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:36.709419966 CET	1865	40944	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:37.840686083 CET	1865	40944	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:37.841036081 CET	40944	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:37.841511965 CET	40946	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:37.963098049 CET	1865	40944	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:37.965383053 CET	1865	40946	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:37.965466022 CET	40946	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:37.965503931 CET	40946	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:38.086210966 CET	1865	40946	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:40.081269026 CET	1865	40946	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:40.081454992 CET	40946	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:40.084239960 CET	1865	40946	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:40.084377050 CET	40946	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:40.085019112 CET	40948	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:40.204129934 CET	1865	40946	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:40.204682112 CET	1865	40948	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:40.204889059 CET	40948	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:40.204889059 CET	40948	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:40.324928045 CET	1865	40948	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:41.257972956 CET	1865	40948	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:41.257992029 CET	1865	40948	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:41.258305073 CET	40948	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:41.258347034 CET	40948	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:41.258865118 CET	40950	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:41.378360987 CET	1865	40948	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:41.378812075 CET	1865	40950	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:41.379029036 CET	40950	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:41.379173994 CET	40950	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:41.498914957 CET	1865	40950	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:42.449842930 CET	1865	40950	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:42.449884892 CET	1865	40950	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:42.450197935 CET	40950	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:42.450285912 CET	40950	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:42.450990915 CET	40952	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:42.570167065 CET	1865	40950	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:42.570736885 CET	1865	40952	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:42.570846081 CET	40952	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:42.571100950 CET	40952	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:42.690830946 CET	1865	40952	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:43.641967058 CET	1865	40952	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:43.642076969 CET	1865	40952	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:43.642326117 CET	40952	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:43.642326117 CET	40952	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:43.643333912 CET	40954	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:43.762168884 CET	1865	40952	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:43.763067007 CET	1865	40954	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:43.763237000 CET	40954	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:43.764154911 CET	40954	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:43.885673046 CET	1865	40954	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:47.823220015 CET	1865	40954	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:47.823246956 CET	1865	40954	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:47.823441029 CET	40954	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:47.823669910 CET	40954	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:47.824352026 CET	40956	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:47.943670034 CET	1865	40954	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:47.944459915 CET	1865	40956	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:47.944569111 CET	40956	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:47.944658041 CET	40956	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:48.064527035 CET	1865	40956	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:52.016823053 CET	1865	40956	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:52.016957045 CET	1865	40956	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:52.016997099 CET	40956	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:52.017072916 CET	40956	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:52.017738104 CET	40958	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:52.137183905 CET	1865	40956	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:52.137484074 CET	1865	40958	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:52.137598991 CET	40958	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:52.137830973 CET	40958	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:52.257558107 CET	1865	40958	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:53.198318958 CET	1865	40958	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:53.198561907 CET	1865	40958	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:53.198635101 CET	40958	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:53.198806047 CET	40958	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:53.199466944 CET	40960	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:53.318525076 CET	1865	40958	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:53.319287062 CET	1865	40960	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:53.319461107 CET	40960	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:53.319684029 CET	40960	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:53.440607071 CET	1865	40960	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:54.378308058 CET	1865	40960	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:54.378336906 CET	1865	40960	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:54.378537893 CET	40960	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:54.378577948 CET	40960	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:54.379765987 CET	40962	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:54.498411894 CET	1865	40960	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:54.501709938 CET	1865	40962	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:54.501856089 CET	40962	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:54.501945019 CET	40962	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:54.621817112 CET	1865	40962	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:55.559175014 CET	1865	40962	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:55.559225082 CET	1865	40962	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:55.559374094 CET	40962	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:55.559444904 CET	40962	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:55.560328007 CET	40964	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:55.680536985 CET	1865	40962	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:55.681078911 CET	1865	40964	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:55.681200027 CET	40964	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:55.681273937 CET	40964	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:55.803962946 CET	1865	40964	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:57.804697037 CET	1865	40964	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:57.804887056 CET	40964	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:57.805037975 CET	1865	40964	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:57.805099964 CET	40964	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:57.806433916 CET	40966	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:57.924891949 CET	1865	40964	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:57.926156998 CET	1865	40966	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:57.926279068 CET	40966	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:57.926556110 CET	40966	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:58.046389103 CET	1865	40966	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:58.973567009 CET	1865	40966	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:58.973695993 CET	40966	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:58.974189043 CET	1865	40966	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:58.974325895 CET	40966	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:58.975179911 CET	40968	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:59.094010115 CET	1865	40966	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:59.094888926 CET	1865	40968	154.213.187.62	192.168.2.23
Dec 13, 2024 19:00:59.094974995 CET	40968	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:59.095087051 CET	40968	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:00:59.214835882 CET	1865	40968	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:00.151547909 CET	1865	40968	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:00.151607037 CET	1865	40968	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:00.151854992 CET	40968	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:00.152138948 CET	40968	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:00.153012037 CET	40970	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:00.271934032 CET	1865	40968	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:00.275145054 CET	1865	40970	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:00.275284052 CET	40970	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:00.275445938 CET	40970	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:00.395351887 CET	1865	40970	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:01.377624989 CET	1865	40970	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:01.377804995 CET	40970	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:01.382965088 CET	1865	40970	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:01.383105993 CET	40970	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:01.384042025 CET	40972	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:01.502820015 CET	1865	40970	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:01.504089117 CET	1865	40972	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:01.504283905 CET	40972	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:01.504337072 CET	40972	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:01.627527952 CET	1865	40972	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:03.571149111 CET	1865	40972	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:03.571165085 CET	1865	40972	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:03.571278095 CET	40972	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:03.571278095 CET	40972	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:03.579356909 CET	40974	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:03.691066980 CET	1865	40972	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:03.699381113 CET	1865	40974	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:03.699459076 CET	40974	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:03.699640036 CET	40974	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:03.819370031 CET	1865	40974	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:04.777228117 CET	1865	40974	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:04.777297020 CET	40974	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:04.778012037 CET	1865	40974	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:04.778073072 CET	40974	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:04.778590918 CET	40976	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:04.897847891 CET	1865	40974	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:04.898296118 CET	1865	40976	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:04.898387909 CET	40976	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:04.898421049 CET	40976	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:05.021301985 CET	1865	40976	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:05.947340965 CET	1865	40976	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:05.947365999 CET	1865	40976	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:05.947654963 CET	40976	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:05.947732925 CET	40976	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:05.948643923 CET	40978	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:06.067543030 CET	1865	40976	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:06.068550110 CET	1865	40978	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:06.068708897 CET	40978	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:06.068926096 CET	40978	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:06.188564062 CET	1865	40978	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:07.150121927 CET	1865	40978	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:07.150141001 CET	1865	40978	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:07.150329113 CET	40978	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:07.150329113 CET	40978	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:07.151032925 CET	40980	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:07.270298958 CET	1865	40978	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:07.270798922 CET	1865	40980	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:07.270879030 CET	40980	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:07.271035910 CET	40980	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:07.390804052 CET	1865	40980	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:09.381778002 CET	1865	40980	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:09.381863117 CET	1865	40980	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:09.382112026 CET	40980	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:09.382159948 CET	40980	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:09.382878065 CET	40982	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:09.502145052 CET	1865	40980	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:09.502578974 CET	1865	40982	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:09.502806902 CET	40982	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:09.502851963 CET	40982	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:09.625736952 CET	1865	40982	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:10.747356892 CET	1865	40982	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:10.747648001 CET	40982	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:10.748338938 CET	40984	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:10.868701935 CET	1865	40982	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:10.870915890 CET	1865	40984	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:10.871140003 CET	40984	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:10.871140003 CET	40984	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:10.991159916 CET	1865	40984	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:11.928760052 CET	1865	40984	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:11.928782940 CET	1865	40984	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:11.928958893 CET	40984	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:11.929008961 CET	40984	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:11.929594994 CET	40986	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:12.049405098 CET	1865	40984	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:12.049442053 CET	1865	40986	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:12.049624920 CET	40986	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:12.049690962 CET	40986	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:12.172278881 CET	1865	40986	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:13.299845934 CET	1865	40986	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:13.300256014 CET	40986	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:13.300976038 CET	40988	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:13.420573950 CET	1865	40986	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:13.421058893 CET	1865	40988	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:13.421281099 CET	40988	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:13.421282053 CET	40988	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:13.541313887 CET	1865	40988	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:14.496637106 CET	1865	40988	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:14.496669054 CET	1865	40988	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:14.496776104 CET	40988	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:14.496812105 CET	40988	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:14.497468948 CET	40990	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:14.616657972 CET	1865	40988	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:14.617321014 CET	1865	40990	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:14.617408991 CET	40990	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:14.617470026 CET	40990	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:14.737273932 CET	1865	40990	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:15.667407990 CET	1865	40990	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:15.667428017 CET	1865	40990	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:15.667567015 CET	40990	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:15.667618036 CET	40990	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:15.668304920 CET	40992	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:15.787461042 CET	1865	40990	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:15.788034916 CET	1865	40992	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:15.788141012 CET	40992	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:15.790218115 CET	40992	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:15.909974098 CET	1865	40992	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:16.836502075 CET	1865	40992	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:16.836520910 CET	1865	40992	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:16.836633921 CET	40992	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:16.836673021 CET	40992	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:16.837282896 CET	40994	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:16.956598043 CET	1865	40992	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:16.956990004 CET	1865	40994	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:16.957128048 CET	40994	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:16.957220078 CET	40994	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:17.078562975 CET	1865	40994	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:18.053765059 CET	1865	40994	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:18.053796053 CET	1865	40994	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:18.054214001 CET	40994	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:18.054214001 CET	40994	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:18.055174112 CET	40996	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:18.174024105 CET	1865	40994	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:18.175014973 CET	1865	40996	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:18.175158978 CET	40996	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:18.175239086 CET	40996	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:18.295145988 CET	1865	40996	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:19.297796965 CET	1865	40996	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:19.297887087 CET	1865	40996	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:19.297972918 CET	40996	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:19.298067093 CET	40996	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:19.298863888 CET	40998	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:19.420929909 CET	1865	40996	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:19.421372890 CET	1865	40998	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:19.421509981 CET	40998	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:19.421591997 CET	40998	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:19.541554928 CET	1865	40998	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:20.474616051 CET	1865	40998	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:20.474638939 CET	1865	40998	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:20.474787951 CET	40998	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:20.474850893 CET	40998	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:20.475578070 CET	41000	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:20.594863892 CET	1865	40998	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:20.595398903 CET	1865	41000	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:20.595541000 CET	41000	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:20.595601082 CET	41000	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:20.715579033 CET	1865	41000	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:21.653012991 CET	1865	41000	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:21.653192997 CET	1865	41000	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:21.653206110 CET	41000	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:21.653311014 CET	41000	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:21.654170036 CET	41002	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:21.773180962 CET	1865	41000	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:21.774007082 CET	1865	41002	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:21.774097919 CET	41002	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:21.774147987 CET	41002	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:21.894012928 CET	1865	41002	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:22.831551075 CET	1865	41002	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:22.831629038 CET	1865	41002	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:22.831696033 CET	41002	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:22.831747055 CET	41002	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:22.832432985 CET	41004	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:22.951953888 CET	1865	41002	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:22.952374935 CET	1865	41004	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:22.952452898 CET	41004	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:22.952502966 CET	41004	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:23.072431087 CET	1865	41004	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:24.011795044 CET	1865	41004	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:24.011816025 CET	1865	41004	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:24.011920929 CET	41004	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:24.011969090 CET	41004	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:24.012710094 CET	41006	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:24.131867886 CET	1865	41004	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:24.132499933 CET	1865	41006	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:24.132639885 CET	41006	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:24.132735968 CET	41006	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:24.252944946 CET	1865	41006	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:25.198429108 CET	1865	41006	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:25.198492050 CET	1865	41006	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:25.198586941 CET	41006	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:25.198625088 CET	41006	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:25.199294090 CET	41008	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:25.318470955 CET	1865	41006	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:25.319118977 CET	1865	41008	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:25.319273949 CET	41008	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:25.319363117 CET	41008	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:25.439196110 CET	1865	41008	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:26.368357897 CET	1865	41008	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:26.368377924 CET	1865	41008	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:26.368524075 CET	41008	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:26.368557930 CET	41008	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:26.369333029 CET	41010	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:26.489501953 CET	1865	41008	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:26.490045071 CET	1865	41010	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:26.490163088 CET	41010	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:26.490256071 CET	41010	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:26.610068083 CET	1865	41010	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:27.597779036 CET	1865	41010	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:27.597858906 CET	1865	41010	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:27.597955942 CET	41010	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:27.597991943 CET	41010	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:27.598624945 CET	41012	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:27.721173048 CET	1865	41010	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:27.721199989 CET	1865	41012	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:27.721329927 CET	41012	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:27.721494913 CET	41012	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:27.843013048 CET	1865	41012	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:28.771833897 CET	1865	41012	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:28.771881104 CET	1865	41012	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:28.771995068 CET	41012	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:28.772037029 CET	41012	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:28.772582054 CET	41014	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:28.891891003 CET	1865	41012	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:28.892394066 CET	1865	41014	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:28.892488003 CET	41014	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:28.892657042 CET	41014	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:29.012569904 CET	1865	41014	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:29.939912081 CET	1865	41014	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:29.939951897 CET	1865	41014	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:29.940061092 CET	41014	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:29.940102100 CET	41014	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:29.943221092 CET	41016	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:30.059947968 CET	1865	41014	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:30.063201904 CET	1865	41016	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:30.063325882 CET	41016	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:30.063380957 CET	41016	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:30.183590889 CET	1865	41016	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:31.117479086 CET	1865	41016	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:31.117526054 CET	1865	41016	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:31.117707014 CET	41016	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:31.117774010 CET	41016	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:31.118289948 CET	41018	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:31.239027023 CET	1865	41016	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:31.239335060 CET	1865	41018	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:31.239557028 CET	41018	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:31.239609003 CET	41018	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:31.361771107 CET	1865	41018	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:32.304111958 CET	1865	41018	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:32.304171085 CET	1865	41018	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:32.304383039 CET	41018	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:32.304447889 CET	41018	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:32.305186033 CET	41020	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:32.424232006 CET	1865	41018	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:32.424861908 CET	1865	41020	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:32.425004959 CET	41020	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:32.425052881 CET	41020	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:32.545015097 CET	1865	41020	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:34.539995909 CET	1865	41020	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:34.540024042 CET	1865	41020	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:34.540210962 CET	41020	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:34.540306091 CET	41020	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:34.540966034 CET	41022	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:34.660049915 CET	1865	41020	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:34.660713911 CET	1865	41022	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:34.660861015 CET	41022	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:34.661098957 CET	41022	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:34.781847000 CET	1865	41022	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:35.718511105 CET	1865	41022	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:35.718583107 CET	1865	41022	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:35.718754053 CET	41022	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:35.718795061 CET	41022	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:35.719368935 CET	41024	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:35.838620901 CET	1865	41022	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:35.839067936 CET	1865	41024	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:35.839293003 CET	41024	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:35.839346886 CET	41024	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:35.959423065 CET	1865	41024	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:37.936734915 CET	1865	41024	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:37.937105894 CET	1865	41024	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:37.937726021 CET	41024	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:37.937844038 CET	41024	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:37.938688040 CET	41026	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:38.057893038 CET	1865	41024	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:38.058661938 CET	1865	41026	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:38.058937073 CET	41026	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:38.059020996 CET	41026	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:38.178881884 CET	1865	41026	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:39.118709087 CET	1865	41026	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:39.118729115 CET	1865	41026	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:39.118973017 CET	41026	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:39.119064093 CET	41026	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:39.119947910 CET	41028	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:39.238846064 CET	1865	41026	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:39.239844084 CET	1865	41028	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:39.239938974 CET	41028	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:39.239970922 CET	41028	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:39.360866070 CET	1865	41028	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:40.298832893 CET	1865	41028	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:40.298858881 CET	1865	41028	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:40.299047947 CET	41028	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:40.299099922 CET	41028	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:40.299997091 CET	41030	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:40.418899059 CET	1865	41028	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:40.419799089 CET	1865	41030	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:40.419920921 CET	41030	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:40.419975042 CET	41030	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:40.539792061 CET	1865	41030	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:41.475518942 CET	1865	41030	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:41.475543976 CET	1865	41030	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:41.475730896 CET	41030	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:41.475847006 CET	41030	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:41.476676941 CET	41032	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:41.596960068 CET	1865	41030	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:41.596983910 CET	1865	41032	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:41.597219944 CET	41032	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:41.597219944 CET	41032	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:41.719420910 CET	1865	41032	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:42.862345934 CET	1865	41032	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:42.862646103 CET	41032	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:42.863662004 CET	41034	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:42.982561111 CET	1865	41032	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:42.983933926 CET	1865	41034	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:42.984256983 CET	41034	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:42.984453917 CET	41034	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:43.104417086 CET	1865	41034	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:44.050901890 CET	1865	41034	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:44.050924063 CET	1865	41034	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:44.051073074 CET	41034	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:44.051112890 CET	41034	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:44.051637888 CET	41036	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:44.171171904 CET	1865	41034	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:44.172646046 CET	1865	41036	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:44.172770023 CET	41036	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:44.172833920 CET	41036	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:44.292578936 CET	1865	41036	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:45.228235960 CET	1865	41036	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:45.228310108 CET	1865	41036	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:45.228518963 CET	41036	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:45.228553057 CET	41036	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:45.229181051 CET	41038	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:45.348556995 CET	1865	41036	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:45.349169016 CET	1865	41038	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:45.349306107 CET	41038	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:45.349385977 CET	41038	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:45.469347000 CET	1865	41038	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:46.430771112 CET	1865	41038	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:46.430793047 CET	1865	41038	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:46.430964947 CET	41038	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:46.431000948 CET	41038	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:46.431628942 CET	41040	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:46.551011086 CET	1865	41038	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:46.551368952 CET	1865	41040	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:46.551506042 CET	41040	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:46.551611900 CET	41040	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:46.671837091 CET	1865	41040	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:47.605802059 CET	1865	41040	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:47.605920076 CET	1865	41040	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:47.605978966 CET	41040	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:47.606010914 CET	41040	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:47.606508017 CET	41042	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:47.725883961 CET	1865	41040	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:47.726300001 CET	1865	41042	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:47.726449966 CET	41042	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:47.726672888 CET	41042	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:47.846419096 CET	1865	41042	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:48.780453920 CET	1865	41042	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:48.780544043 CET	1865	41042	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:48.780688047 CET	41042	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:48.780733109 CET	41042	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:48.781634092 CET	41044	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:48.900657892 CET	1865	41042	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:48.901428938 CET	1865	41044	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:48.901577950 CET	41044	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:48.901704073 CET	41044	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:49.021739006 CET	1865	41044	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:49.955826998 CET	1865	41044	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:49.955852032 CET	1865	41044	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:49.955980062 CET	41044	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:49.956106901 CET	41044	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:49.956708908 CET	41046	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:50.075829983 CET	1865	41044	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:50.076481104 CET	1865	41046	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:50.076555967 CET	41046	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:50.076649904 CET	41046	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:50.196578026 CET	1865	41046	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:52.133905888 CET	1865	41046	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:52.133965969 CET	1865	41046	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:52.134046078 CET	41046	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:52.134094000 CET	41046	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:52.134552002 CET	41048	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:52.254030943 CET	1865	41046	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:52.254287958 CET	1865	41048	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:52.254344940 CET	41048	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:52.254376888 CET	41048	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:52.374128103 CET	1865	41048	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:53.495976925 CET	1865	41048	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:53.496207952 CET	41048	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:53.496670961 CET	41050	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:53.616157055 CET	1865	41048	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:53.616548061 CET	1865	41050	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:53.616704941 CET	41050	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:53.616763115 CET	41050	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:53.736757040 CET	1865	41050	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:54.670309067 CET	1865	41050	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:54.670440912 CET	1865	41050	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:54.670505047 CET	41050	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:54.670543909 CET	41050	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:54.671255112 CET	41052	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:54.790419102 CET	1865	41050	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:54.791083097 CET	1865	41052	154.213.187.62	192.168.2.23
Dec 13, 2024 19:01:54.791163921 CET	41052	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:54.791285038 CET	41052	1865	192.168.2.23	154.213.187.62
Dec 13, 2024 19:01:54.911160946 CET	1865	41052	154.213.187.62	192.168.2.23

System Behavior

Analysis Process: x-8.6-.Logicnet.elf PID: 6282, Parent PID: 6204

General

Start time (UTC):	17:58:19
Start date (UTC):	13/12/2024
Path:	/tmp/x-8.6-.Logicnet.elf
Arguments:	/tmp/x-8.6-.Logicnet.elf
File size:	94672 bytes
MD5 hash:	c5f57160a1e62fedc1906e8f080d94f0

Chronological Activities

Analysis Process: x-8.6-.Logicnet.elf PID: 6283, Parent PID: 6282

General

Start time (UTC):	17:58:19
Start date (UTC):	13/12/2024
Path:	/tmp/x-8.6-.Logicnet.elf
Arguments:	-
File size:	94672 bytes
MD5 hash:	c5f57160a1e62fedc1906e8f080d94f0

Chronological Activities

Analysis Process: x-8.6-.Logicnet.elf PID: 6284, Parent PID: 6283

General

Start time (UTC):	17:58:19
Start date (UTC):	13/12/2024
Path:	/tmp/x-8.6-.Logicnet.elf
Arguments:	-
File size:	94672 bytes
MD5 hash:	c5f57160a1e62fedc1906e8f080d94f0

Chronological Activities

Analysis Process: dash PID: 6292, Parent PID: 4331

General

Start time (UTC):	17:58:31
Start date (UTC):	13/12/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 6292, Parent PID: 4331

General

Start time (UTC):	17:58:31
Start date (UTC):	13/12/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.jB8LsceBYd /tmp/tmp.oTlykcB98P /tmp/tmp.p55eR7WZvg
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: dash PID: 6293, Parent PID: 4331

General

Start time (UTC):	17:58:31
Start date (UTC):	13/12/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 6293, Parent PID: 4331

General

Start time (UTC):	17:58:31
Start date (UTC):	13/12/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.jB8LsceBYd /tmp/tmp.oTlykcB98P /tmp/tmp.p55eR7WZvg
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report x-8.6-.Logicnet.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Persistence and Installation Behavior

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: x-8.6-.Logicnet.elf PID: 6282, Parent PID: 6204

General

Chronological Activities

Analysis Process: x-8.6-.Logicnet.elf PID: 6283, Parent PID: 6282

General

Chronological Activities

Analysis Process: x-8.6-.Logicnet.elf PID: 6284, Parent PID: 6283

General

Chronological Activities

Analysis Process: dash PID: 6292, Parent PID: 4331

General

Chronological Activities

Analysis Process: rm PID: 6292, Parent PID: 4331

General

Chronological Activities

Linux Analysis Report
x-8.6-.Logicnet.elf