Edit tour

Linux Analysis Report
arm5.elf

Overview

General Information

Sample name:	arm5.elf
Analysis ID:	1581789
MD5:	1d1ee9af9f3e99b3c2683a2f741bef3a
SHA1:	e117f0eee985289c7b7b05221c5df20367066a68
SHA256:	eec96d97e6867412ad5b49487ec4d11996c2e76dda69f6802e90d417956a173b
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Detected TCP or UDP traffic on non-standard ports

Sample has stripped symbol table

Sample listens on a socket

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1581789
Start date and time:	2024-12-29 00:12:56 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 33s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	arm5.elf
Detection:	MAL
Classification:	mal56.linELF@0/0@47/0

Warnings

VT rate limit hit for: arm5.elf

Runtime Messages

Command:	/tmp/arm5.elf
PID:	5464
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	have onna deez nutz
Standard Error:

Process Tree

system is lnxubuntu20

arm5.elf (PID: 5464, Parent: 5380, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/arm5.elf

arm5.elf New Fork (PID: 5466, Parent: 5464)

arm5.elf New Fork (PID: 5468, Parent: 5466)

cleanup

Yara Signatures

⊘No yara matches

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: arm5.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: arm5.elf

ReversingLabs: Detection: 29%

Source: global traffic

TCP traffic: 192.168.2.13:58828 -> 83.222.191.146:33211

Source: /tmp/arm5.elf (PID: 5464)

Socket: 127.0.0.1:8345

Jump to behavior

Source: global traffic

TCP traffic: 192.168.2.13:48202 -> 185.125.190.26:443

Source: unknown	TCP traffic detected without corresponding DNS query: 185.125.190.26
Source: unknown	TCP traffic detected without corresponding DNS query: 185.125.190.26

Source: global traffic

DNS traffic detected: DNS query: secure-network-rebirthltd.ru

Source: unknown

Network traffic detected: HTTP traffic on port 48202 -> 443

Source: ELF static info symbol of initial sample

.symtab present: no

Source: classification engine

Classification label: mal56.linELF@0/0@47/0

Source: /tmp/arm5.elf (PID: 5464)

Queries kernel information via 'uname':

Jump to behavior

Source: arm5.elf, 5464.1.000055bda3560000.000055bda36d5000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: arm5.elf, 5464.1.00007fffa7259000.00007fffa727a000.rw-.sdmp	Binary or memory string: C4x86_64/usr/bin/qemu-arm/tmp/arm5.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/arm5.elf
Source: arm5.elf, 5464.1.000055bda3560000.000055bda36d5000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: arm5.elf, 5464.1.00007fffa7259000.00007fffa727a000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
arm5.elf	30%	ReversingLabs	Linux.Backdoor.Mirai
arm5.elf	100%	Avira	EXP/ELF.Mirai.W

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
secure-network-rebirthltd.ru	83.222.191.146	true	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
83.222.191.146	secure-network-rebirthltd.ru	Bulgaria		43561	NET1-ASBG	false
185.125.190.26	unknown	United Kingdom		41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
83.222.191.146	dlr.arm6.elf	Get hash	malicious	Gafgyt	Browse	/binaries/arm6
	dlr.mpsl.elf	Get hash	malicious	Gafgyt	Browse	/binaries/mpsl
	dlr.arm7.elf	Get hash	malicious	Unknown	Browse	/binaries/arm7
	dlr.mips.elf	Get hash	malicious	Gafgyt	Browse	/binaries/mips
185.125.190.26	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse
	nn.elf	Get hash	malicious	Nanominer, Xmrig	Browse
	nshkarm.elf	Get hash	malicious	Unknown	Browse
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse
	mips.elf	Get hash	malicious	Gafgyt	Browse
	yakuza.m68k.elf	Get hash	malicious	Mirai	Browse
	mpsl.elf	Get hash	malicious	Gafgyt	Browse
	yakuza.i586.elf	Get hash	malicious	Mirai	Browse
	x86_64.elf	Get hash	malicious	Gafgyt	Browse
	45.200.149.186-boatnet.arc-2024-12-28T01_22_59.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
secure-network-rebirthltd.ru	m68k.elf	Get hash	malicious	Unknown	Browse	83.222.191.146
	arm4.elf	Get hash	malicious	Unknown	Browse	83.222.191.146
	arm7.elf	Get hash	malicious	Mirai	Browse	83.222.191.146
	spc.elf	Get hash	malicious	Unknown	Browse	83.222.191.146
	mpsl.elf	Get hash	malicious	Unknown	Browse	83.222.191.146
	mips.elf	Get hash	malicious	Unknown	Browse	83.222.191.146
	x86_64.elf	Get hash	malicious	Gafgyt	Browse	83.222.191.146
	mpsl.elf	Get hash	malicious	Gafgyt	Browse	83.222.191.146
	arm4.elf	Get hash	malicious	Gafgyt	Browse	83.222.191.146
	arm5.elf	Get hash	malicious	Gafgyt	Browse	83.222.191.146

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	m68k.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	45.200.149.186-boatnet.arm5-2024-12-28T01_23_00.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	mips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	db0fa4b8db0333367e9bda3ab68b8042.mpsl.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	nn.elf	Get hash	malicious	Nanominer, Xmrig	Browse	185.125.190.26
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
NET1-ASBG	m68k.elf	Get hash	malicious	Unknown	Browse	83.222.191.146
	arm4.elf	Get hash	malicious	Unknown	Browse	83.222.191.146
	arm7.elf	Get hash	malicious	Mirai	Browse	83.222.191.146
	spc.elf	Get hash	malicious	Unknown	Browse	83.222.191.146
	mpsl.elf	Get hash	malicious	Unknown	Browse	83.222.191.146
	mips.elf	Get hash	malicious	Unknown	Browse	83.222.191.146
	x86_64.elf	Get hash	malicious	Gafgyt	Browse	83.222.191.146
	dlr.arm6.elf	Get hash	malicious	Gafgyt	Browse	83.222.191.146
	dlr.mpsl.elf	Get hash	malicious	Gafgyt	Browse	83.222.191.146
	dlr.arm7.elf	Get hash	malicious	Unknown	Browse	83.222.191.146

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, stripped
Entropy (8bit):	6.0669350734084
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	arm5.elf
File size:	54'548 bytes
MD5:	1d1ee9af9f3e99b3c2683a2f741bef3a
SHA1:	e117f0eee985289c7b7b05221c5df20367066a68
SHA256:	eec96d97e6867412ad5b49487ec4d11996c2e76dda69f6802e90d417956a173b
SHA512:	b49feb31e1a9102a08298aa6606d740bb2c341f69d4573086431647fac0ef966ce2cbb7f4ce0d94a4b2a344aa4c6b8f5b91c2b6ae733962c07651d72ccc85c16
SSDEEP:	768:NWSshnrCutvruhZxkWqSPNDlPCs1OiX224NE4ITGEeTMY9A+YLbseonOA1Vs/IH:LshrCSWqWPCs1vPlq6YsweoOAM/0
TLSH:	FE332A81B9C19A13CAD412BBFB1E418C37266368D2EF7203DD265F11778692B0EB7701
File Content Preview:	.ELF...a..........(.........4...........4. ...(.....................h...h...............l...l...l.......8$..........Q.td..................................-...L."..../..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	ARM - ABI
ABI Version:	0
Entry Point Address:	0x8190
Flags:	0x2
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	54148
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8094	0x94	0x18	0x0	0x6	AX	4
.text	PROGBITS	0x80b0	0xb0	0xbe88	0x0	0x6	AX	16
.fini	PROGBITS	0x13f38	0xbf38	0x14	0x0	0x6	AX	4
.rodata	PROGBITS	0x13f4c	0xbf4c	0x111c	0x0	0x2	A	4
.ctors	PROGBITS	0x1d06c	0xd06c	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x1d074	0xd074	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x1d080	0xd080	0x2c4	0x0	0x3	WA	4
.bss	NOBITS	0x1d344	0xd344	0x2160	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0xd344	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8000	0x8000	0xd068	0xd068	6.1144	0x5	R E	0x8000	.init .text .fini .rodata
LOAD	0xd06c	0x1d06c	0x1d06c	0x2d8	0x2438	1.5827	0x6	RW	0x8000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 29, 2024 00:13:49.935534954 CET	58828	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:13:50.055176973 CET	33211	58828	83.222.191.146	192.168.2.13
Dec 29, 2024 00:13:50.055285931 CET	58828	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:13:50.056646109 CET	58828	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:13:50.176249027 CET	33211	58828	83.222.191.146	192.168.2.13
Dec 29, 2024 00:13:50.176398993 CET	58828	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:13:50.296029091 CET	33211	58828	83.222.191.146	192.168.2.13
Dec 29, 2024 00:13:51.401945114 CET	33211	58828	83.222.191.146	192.168.2.13
Dec 29, 2024 00:13:51.402126074 CET	58828	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:13:51.402331114 CET	58828	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:13:52.540002108 CET	58830	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:13:52.659627914 CET	33211	58830	83.222.191.146	192.168.2.13
Dec 29, 2024 00:13:52.659868002 CET	58830	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:13:52.660798073 CET	58830	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:13:52.780332088 CET	33211	58830	83.222.191.146	192.168.2.13
Dec 29, 2024 00:13:52.780600071 CET	58830	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:13:52.900232077 CET	33211	58830	83.222.191.146	192.168.2.13
Dec 29, 2024 00:13:54.051810026 CET	33211	58830	83.222.191.146	192.168.2.13
Dec 29, 2024 00:13:54.052067041 CET	58830	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:13:54.052067041 CET	58830	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:13:55.189083099 CET	58832	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:13:55.308809042 CET	33211	58832	83.222.191.146	192.168.2.13
Dec 29, 2024 00:13:55.308993101 CET	58832	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:13:55.310015917 CET	58832	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:13:55.429500103 CET	33211	58832	83.222.191.146	192.168.2.13
Dec 29, 2024 00:13:55.429604053 CET	58832	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:13:55.549420118 CET	33211	58832	83.222.191.146	192.168.2.13
Dec 29, 2024 00:13:56.654359102 CET	33211	58832	83.222.191.146	192.168.2.13
Dec 29, 2024 00:13:56.654603958 CET	58832	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:13:56.654737949 CET	58832	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:13:57.792140961 CET	58834	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:13:57.911652088 CET	33211	58834	83.222.191.146	192.168.2.13
Dec 29, 2024 00:13:57.911776066 CET	58834	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:13:57.913417101 CET	58834	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:13:58.032912016 CET	33211	58834	83.222.191.146	192.168.2.13
Dec 29, 2024 00:13:58.033030987 CET	58834	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:13:58.152564049 CET	33211	58834	83.222.191.146	192.168.2.13
Dec 29, 2024 00:13:59.304301977 CET	33211	58834	83.222.191.146	192.168.2.13
Dec 29, 2024 00:13:59.304522991 CET	58834	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:13:59.304574966 CET	58834	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:00.442862034 CET	58836	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:00.563401937 CET	33211	58836	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:00.563528061 CET	58836	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:00.564469099 CET	58836	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:00.685267925 CET	33211	58836	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:00.685331106 CET	58836	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:00.719578981 CET	48202	443	192.168.2.13	185.125.190.26
Dec 29, 2024 00:14:00.805047035 CET	33211	58836	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:01.911156893 CET	33211	58836	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:01.911348104 CET	58836	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:01.911348104 CET	58836	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:03.036834002 CET	58838	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:03.156393051 CET	33211	58838	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:03.156531096 CET	58838	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:03.157283068 CET	58838	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:03.276747942 CET	33211	58838	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:03.276839018 CET	58838	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:03.396462917 CET	33211	58838	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:04.503307104 CET	33211	58838	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:04.503550053 CET	58838	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:04.503550053 CET	58838	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:05.641225100 CET	58840	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:05.760898113 CET	33211	58840	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:05.761162996 CET	58840	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:05.762459040 CET	58840	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:05.881977081 CET	33211	58840	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:05.882086992 CET	58840	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:06.002098083 CET	33211	58840	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:07.159526110 CET	33211	58840	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:07.159801960 CET	58840	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:07.159801960 CET	58840	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:08.298621893 CET	58842	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:08.419604063 CET	33211	58842	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:08.419687986 CET	58842	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:08.420542002 CET	58842	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:08.541763067 CET	33211	58842	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:08.541867018 CET	58842	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:08.663044930 CET	33211	58842	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:09.813059092 CET	33211	58842	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:09.813205957 CET	58842	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:09.813282013 CET	58842	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:10.950195074 CET	58844	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:11.069813967 CET	33211	58844	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:11.069927931 CET	58844	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:11.070734024 CET	58844	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:11.190265894 CET	33211	58844	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:11.190427065 CET	58844	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:11.309973001 CET	33211	58844	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:12.423211098 CET	33211	58844	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:12.423367023 CET	58844	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:12.423398972 CET	58844	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:13.549138069 CET	58846	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:13.668684006 CET	33211	58846	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:13.668853045 CET	58846	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:13.670109034 CET	58846	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:13.789576054 CET	33211	58846	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:13.789697886 CET	58846	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:13.909461975 CET	33211	58846	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:14.783335924 CET	58848	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:14.902921915 CET	33211	58848	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:14.903050900 CET	58848	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:14.904386044 CET	58848	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:15.023952961 CET	33211	58848	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:15.024133921 CET	58848	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:15.143991947 CET	33211	58848	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:16.204024076 CET	33211	58848	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:16.204305887 CET	58848	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:16.204845905 CET	58848	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:17.343550920 CET	58850	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:17.463512897 CET	33211	58850	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:17.463641882 CET	58850	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:17.464756966 CET	58850	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:17.584779024 CET	33211	58850	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:17.584918022 CET	58850	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:17.704545975 CET	33211	58850	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:18.823719025 CET	33211	58850	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:18.823980093 CET	58850	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:18.824038029 CET	58850	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:19.962423086 CET	58852	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:20.081974030 CET	33211	58852	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:20.082210064 CET	58852	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:20.083765984 CET	58852	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:20.203260899 CET	33211	58852	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:20.203577995 CET	58852	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:20.323339939 CET	33211	58852	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:21.479757071 CET	33211	58852	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:21.480091095 CET	58852	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:21.480302095 CET	58852	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:22.620316982 CET	58854	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:22.741283894 CET	33211	58854	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:22.741611004 CET	58854	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:22.743280888 CET	58854	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:22.864397049 CET	33211	58854	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:22.864665985 CET	58854	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:22.985722065 CET	33211	58854	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:23.680533886 CET	58846	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:23.801747084 CET	33211	58846	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:24.046170950 CET	33211	58854	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:24.046478033 CET	58854	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:24.046566010 CET	58854	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:24.103338003 CET	33211	58846	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:24.103627920 CET	58846	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:25.186613083 CET	58856	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:25.307861090 CET	33211	58856	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:25.308057070 CET	58856	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:25.309063911 CET	58856	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:25.430233002 CET	33211	58856	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:25.430507898 CET	58856	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:25.551624060 CET	33211	58856	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:26.656234026 CET	33211	58856	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:26.656629086 CET	58856	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:26.656629086 CET	58856	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:27.794891119 CET	58858	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:27.914484978 CET	33211	58858	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:27.914756060 CET	58858	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:27.915975094 CET	58858	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:28.035417080 CET	33211	58858	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:28.035626888 CET	58858	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:28.155342102 CET	33211	58858	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:29.260453939 CET	33211	58858	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:29.260669947 CET	58858	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:29.260719061 CET	58858	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:30.400371075 CET	58860	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:30.519993067 CET	33211	58860	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:30.520214081 CET	58860	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:30.521210909 CET	58860	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:30.640678883 CET	33211	58860	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:30.640800953 CET	58860	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:30.760308027 CET	33211	58860	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:31.866660118 CET	33211	58860	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:31.866764069 CET	58860	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:31.866832018 CET	58860	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:32.207823992 CET	48202	443	192.168.2.13	185.125.190.26
Dec 29, 2024 00:14:32.994326115 CET	58862	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:33.115386009 CET	33211	58862	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:33.115499020 CET	58862	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:33.116852045 CET	58862	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:33.237617016 CET	33211	58862	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:33.237713099 CET	58862	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:33.358911037 CET	33211	58862	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:34.470756054 CET	33211	58862	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:34.471065044 CET	58862	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:34.471163034 CET	58862	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:35.611068010 CET	58864	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:35.732038975 CET	33211	58864	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:35.732284069 CET	58864	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:35.733894110 CET	58864	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:35.854860067 CET	33211	58864	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:35.855003119 CET	58864	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:35.976150990 CET	33211	58864	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:37.171818972 CET	33211	58864	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:37.172121048 CET	58864	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:37.172218084 CET	58864	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:37.268155098 CET	33211	58864	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:37.268285036 CET	58864	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:38.311131954 CET	58866	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:38.430735111 CET	33211	58866	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:38.430986881 CET	58866	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:38.432502031 CET	58866	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:38.552386045 CET	33211	58866	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:38.552622080 CET	58866	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:38.673794985 CET	33211	58866	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:39.823613882 CET	33211	58866	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:39.823941946 CET	58866	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:39.824107885 CET	58866	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:40.962436914 CET	58868	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:41.082349062 CET	33211	58868	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:41.082654953 CET	58868	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:41.084398031 CET	58868	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:41.203857899 CET	33211	58868	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:41.203998089 CET	58868	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:41.323790073 CET	33211	58868	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:42.429328918 CET	33211	58868	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:42.429493904 CET	58868	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:42.429559946 CET	58868	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:43.566534996 CET	58870	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:43.686103106 CET	33211	58870	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:43.686244011 CET	58870	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:43.687453985 CET	58870	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:43.806996107 CET	33211	58870	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:43.807126045 CET	58870	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:43.926675081 CET	33211	58870	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:45.035193920 CET	33211	58870	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:45.035315990 CET	58870	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:45.035353899 CET	58870	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:46.173768997 CET	58872	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:46.293384075 CET	33211	58872	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:46.293673992 CET	58872	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:46.295176029 CET	58872	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:46.414836884 CET	33211	58872	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:46.415008068 CET	58872	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:46.534645081 CET	33211	58872	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:47.693311930 CET	33211	58872	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:47.693658113 CET	58872	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:47.693742990 CET	58872	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:48.937647104 CET	58874	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:49.057246923 CET	33211	58874	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:49.057399988 CET	58874	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:49.058568954 CET	58874	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:49.178272009 CET	33211	58874	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:49.178492069 CET	58874	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:49.298187971 CET	33211	58874	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:50.450148106 CET	33211	58874	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:50.450495958 CET	58874	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:50.450660944 CET	58874	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:51.577389956 CET	58876	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:51.697046041 CET	33211	58876	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:51.697335958 CET	58876	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:51.698453903 CET	58876	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:51.817961931 CET	33211	58876	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:51.818074942 CET	58876	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:51.937659025 CET	33211	58876	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:52.998369932 CET	33211	58876	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:52.998759031 CET	58876	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:52.998815060 CET	58876	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:54.138891935 CET	58878	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:54.261369944 CET	33211	58878	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:54.261845112 CET	58878	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:54.262720108 CET	58878	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:54.384629965 CET	33211	58878	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:54.384783030 CET	58878	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:54.505954981 CET	33211	58878	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:55.609308958 CET	33211	58878	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:55.609515905 CET	58878	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:55.609558105 CET	58878	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:56.737431049 CET	58880	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:56.858932972 CET	33211	58880	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:56.859162092 CET	58880	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:56.859972000 CET	58880	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:56.981813908 CET	33211	58880	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:56.982101917 CET	58880	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:57.101780891 CET	33211	58880	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:58.161463022 CET	33211	58880	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:58.161775112 CET	58880	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:58.161775112 CET	58880	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:58.671015024 CET	33211	58880	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:58.671030045 CET	33211	58880	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:58.671294928 CET	58880	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:58.671323061 CET	58880	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:59.299971104 CET	58882	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:59.419469118 CET	33211	58882	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:59.419668913 CET	58882	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:59.420320034 CET	58882	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:59.539741039 CET	33211	58882	83.222.191.146	192.168.2.13
Dec 29, 2024 00:14:59.539813042 CET	58882	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:14:59.659286022 CET	33211	58882	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:00.766176939 CET	33211	58882	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:00.766334057 CET	58882	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:00.766334057 CET	58882	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:01.902805090 CET	58884	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:02.022316933 CET	33211	58884	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:02.022430897 CET	58884	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:02.023248911 CET	58884	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:02.142678022 CET	33211	58884	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:02.142767906 CET	58884	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:02.262311935 CET	33211	58884	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:03.369113922 CET	33211	58884	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:03.369419098 CET	58884	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:03.369508982 CET	58884	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:04.496032953 CET	58886	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:04.615534067 CET	33211	58886	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:04.615793943 CET	58886	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:04.617120028 CET	58886	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:04.736569881 CET	33211	58886	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:04.736706972 CET	58886	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:04.856194019 CET	33211	58886	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:05.924432993 CET	33211	58886	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:05.924596071 CET	58886	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:05.924650908 CET	58886	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:07.064892054 CET	58888	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:07.186193943 CET	33211	58888	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:07.186489105 CET	58888	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:07.187858105 CET	58888	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:07.307389975 CET	33211	58888	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:07.307463884 CET	58888	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:07.429016113 CET	33211	58888	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:08.487000942 CET	33211	58888	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:08.487307072 CET	58888	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:08.487415075 CET	58888	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:09.615418911 CET	58890	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:09.736917019 CET	33211	58890	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:09.736988068 CET	58890	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:09.738404989 CET	58890	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:09.858741045 CET	33211	58890	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:09.858799934 CET	58890	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:09.978250027 CET	33211	58890	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:11.480030060 CET	33211	58890	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:11.480047941 CET	33211	58890	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:11.480057001 CET	33211	58890	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:11.480156898 CET	58890	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:11.480156898 CET	58890	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:11.480156898 CET	58890	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:11.480401993 CET	58890	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:12.606688023 CET	58892	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:12.726152897 CET	33211	58892	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:12.726402998 CET	58892	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:12.727686882 CET	58892	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:12.847363949 CET	33211	58892	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:12.847579002 CET	58892	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:12.967129946 CET	33211	58892	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:14.026434898 CET	33211	58892	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:14.026724100 CET	58892	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:14.026803970 CET	58892	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:15.153045893 CET	58894	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:15.272653103 CET	33211	58894	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:15.272819042 CET	58894	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:15.274149895 CET	58894	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:15.393604994 CET	33211	58894	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:15.393657923 CET	58894	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:15.513154030 CET	33211	58894	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:16.665071964 CET	33211	58894	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:16.665201902 CET	58894	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:16.665390968 CET	58894	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:18.172858953 CET	58896	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:18.292438030 CET	33211	58896	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:18.292509079 CET	58896	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:18.293740034 CET	58896	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:18.413281918 CET	33211	58896	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:18.413352966 CET	58896	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:18.532824993 CET	33211	58896	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:19.640614986 CET	33211	58896	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:19.640758038 CET	58896	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:19.641000986 CET	58896	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:20.778270006 CET	58898	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:20.897861958 CET	33211	58898	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:20.897941113 CET	58898	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:20.898813009 CET	58898	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:21.018241882 CET	33211	58898	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:21.018315077 CET	58898	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:21.391851902 CET	58898	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:21.518018007 CET	33211	58898	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:21.518050909 CET	33211	58898	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:22.259588957 CET	33211	58898	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:22.259730101 CET	58898	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:22.259768009 CET	58898	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:23.395948887 CET	58900	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:23.515491009 CET	33211	58900	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:23.515810013 CET	58900	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:23.516756058 CET	58900	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:23.636199951 CET	33211	58900	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:23.636327982 CET	58900	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:23.755848885 CET	33211	58900	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:24.151462078 CET	58846	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:24.325155020 CET	33211	58846	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:24.627276897 CET	33211	58846	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:24.627485991 CET	58846	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:24.908113956 CET	33211	58900	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:24.908390999 CET	58900	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:24.908505917 CET	58900	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:26.046973944 CET	58902	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:26.166603088 CET	33211	58902	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:26.166693926 CET	58902	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:26.167856932 CET	58902	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:26.287321091 CET	33211	58902	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:26.287422895 CET	58902	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:26.406917095 CET	33211	58902	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:27.512856960 CET	33211	58902	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:27.512981892 CET	58902	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:27.513031960 CET	58902	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:28.649734974 CET	58904	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:28.769360065 CET	33211	58904	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:28.769449949 CET	58904	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:28.770195007 CET	58904	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:28.889642000 CET	33211	58904	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:28.889703989 CET	58904	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:29.009166956 CET	33211	58904	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:30.116719961 CET	33211	58904	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:30.117121935 CET	58904	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:30.117122889 CET	58904	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:31.255937099 CET	58906	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:31.377388954 CET	33211	58906	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:31.377744913 CET	58906	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:31.378900051 CET	58906	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:31.499608040 CET	33211	58906	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:31.499938965 CET	58906	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:31.620903015 CET	33211	58906	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:32.772022963 CET	33211	58906	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:32.772299051 CET	58906	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:32.772366047 CET	58906	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:33.912110090 CET	58908	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:34.033730030 CET	33211	58908	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:34.033840895 CET	58908	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:34.034605026 CET	58908	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:34.156501055 CET	33211	58908	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:34.156569958 CET	58908	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:34.276185989 CET	33211	58908	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:35.335336924 CET	33211	58908	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:35.335453987 CET	58908	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:35.335501909 CET	58908	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:36.475090981 CET	58910	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:36.596343040 CET	33211	58910	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:36.596541882 CET	58910	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:36.597378969 CET	58910	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:36.975908995 CET	58910	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:37.006226063 CET	33211	58910	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:37.097178936 CET	33211	58910	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:38.232728958 CET	33211	58910	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:38.232894897 CET	58910	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:38.232937098 CET	58910	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:39.370155096 CET	58912	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:39.489666939 CET	33211	58912	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:39.489765882 CET	58912	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:39.490818024 CET	58912	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:39.610300064 CET	33211	58912	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:39.610378027 CET	58912	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:39.729908943 CET	33211	58912	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:40.841672897 CET	33211	58912	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:40.841941118 CET	58912	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:40.841988087 CET	58912	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:41.980608940 CET	58914	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:42.102237940 CET	33211	58914	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:42.102408886 CET	58914	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:42.103696108 CET	58914	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:42.225277901 CET	33211	58914	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:42.225372076 CET	58914	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:42.347179890 CET	33211	58914	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:43.404505014 CET	33211	58914	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:43.404669046 CET	58914	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:43.404778957 CET	58914	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:44.532254934 CET	58916	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:44.653347969 CET	33211	58916	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:44.653461933 CET	58916	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:44.655033112 CET	58916	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:44.775892973 CET	33211	58916	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:44.775964975 CET	58916	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:44.896965027 CET	33211	58916	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:46.060518026 CET	33211	58916	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:46.060729980 CET	58916	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:46.060766935 CET	58916	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:47.199831009 CET	58918	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:47.319442987 CET	33211	58918	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:47.319588900 CET	58918	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:47.321016073 CET	58918	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:47.441893101 CET	33211	58918	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:47.441996098 CET	58918	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:47.563478947 CET	33211	58918	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:48.637552977 CET	33211	58918	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:48.637720108 CET	58918	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:48.637720108 CET	58918	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:49.775369883 CET	58920	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:49.896846056 CET	33211	58920	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:49.896964073 CET	58920	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:49.897624016 CET	58920	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:50.018918991 CET	33211	58920	83.222.191.146	192.168.2.13
Dec 29, 2024 00:15:50.018970013 CET	58920	33211	192.168.2.13	83.222.191.146
Dec 29, 2024 00:15:50.140507936 CET	33211	58920	83.222.191.146	192.168.2.13

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 29, 2024 00:13:49.622962952 CET	47273	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:13:49.934276104 CET	53	47273	8.8.8.8	192.168.2.13
Dec 29, 2024 00:13:52.404764891 CET	36621	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:13:52.539139986 CET	53	36621	8.8.8.8	192.168.2.13
Dec 29, 2024 00:13:55.054286003 CET	43956	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:13:55.188260078 CET	53	43956	8.8.8.8	192.168.2.13
Dec 29, 2024 00:13:57.657412052 CET	37168	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:13:57.791234016 CET	53	37168	8.8.8.8	192.168.2.13
Dec 29, 2024 00:14:00.306613922 CET	48264	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:14:00.442145109 CET	53	48264	8.8.8.8	192.168.2.13
Dec 29, 2024 00:14:02.913604975 CET	60611	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:14:03.036164999 CET	53	60611	8.8.8.8	192.168.2.13
Dec 29, 2024 00:14:05.506067991 CET	42222	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:14:05.640237093 CET	53	42222	8.8.8.8	192.168.2.13
Dec 29, 2024 00:14:08.162570000 CET	44936	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:14:08.297884941 CET	53	44936	8.8.8.8	192.168.2.13
Dec 29, 2024 00:14:10.815366030 CET	53315	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:14:10.949326038 CET	53	53315	8.8.8.8	192.168.2.13
Dec 29, 2024 00:14:13.425689936 CET	46902	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:14:13.548104048 CET	53	46902	8.8.8.8	192.168.2.13
Dec 29, 2024 00:14:14.658997059 CET	55887	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:14:14.781474113 CET	53	55887	8.8.8.8	192.168.2.13
Dec 29, 2024 00:14:17.207742929 CET	41013	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:14:17.342643976 CET	53	41013	8.8.8.8	192.168.2.13
Dec 29, 2024 00:14:19.827136040 CET	33496	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:14:19.961075068 CET	53	33496	8.8.8.8	192.168.2.13
Dec 29, 2024 00:14:22.483613968 CET	52081	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:14:22.619012117 CET	53	52081	8.8.8.8	192.168.2.13
Dec 29, 2024 00:14:25.050323963 CET	45504	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:14:25.185612917 CET	53	45504	8.8.8.8	192.168.2.13
Dec 29, 2024 00:14:27.659733057 CET	42029	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:14:27.793802023 CET	53	42029	8.8.8.8	192.168.2.13
Dec 29, 2024 00:14:30.263416052 CET	44335	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:14:30.399180889 CET	53	44335	8.8.8.8	192.168.2.13
Dec 29, 2024 00:14:32.869461060 CET	48145	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:14:32.993695974 CET	53	48145	8.8.8.8	192.168.2.13
Dec 29, 2024 00:14:35.474591017 CET	44288	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:14:35.610033989 CET	53	44288	8.8.8.8	192.168.2.13
Dec 29, 2024 00:14:38.175538063 CET	42510	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:14:38.310224056 CET	53	42510	8.8.8.8	192.168.2.13
Dec 29, 2024 00:14:40.827724934 CET	40774	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:14:40.961637020 CET	53	40774	8.8.8.8	192.168.2.13
Dec 29, 2024 00:14:43.431901932 CET	51497	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:14:43.565754890 CET	53	51497	8.8.8.8	192.168.2.13
Dec 29, 2024 00:14:46.038139105 CET	54059	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:14:46.172702074 CET	53	54059	8.8.8.8	192.168.2.13
Dec 29, 2024 00:14:48.696631908 CET	33112	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:14:48.936556101 CET	53	33112	8.8.8.8	192.168.2.13
Dec 29, 2024 00:14:51.453680038 CET	45310	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:14:51.576456070 CET	53	45310	8.8.8.8	192.168.2.13
Dec 29, 2024 00:14:54.001430988 CET	44130	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:14:54.137986898 CET	53	44130	8.8.8.8	192.168.2.13
Dec 29, 2024 00:14:56.612102032 CET	57051	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:14:56.736875057 CET	53	57051	8.8.8.8	192.168.2.13
Dec 29, 2024 00:14:59.163647890 CET	44443	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:14:59.299130917 CET	53	44443	8.8.8.8	192.168.2.13
Dec 29, 2024 00:15:01.768402100 CET	38607	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:15:01.902183056 CET	53	38607	8.8.8.8	192.168.2.13
Dec 29, 2024 00:15:04.372184992 CET	46399	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:15:04.494985104 CET	53	46399	8.8.8.8	192.168.2.13
Dec 29, 2024 00:15:06.927333117 CET	42367	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:15:07.063797951 CET	53	42367	8.8.8.8	192.168.2.13
Dec 29, 2024 00:15:09.490267038 CET	42881	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:15:09.614573956 CET	53	42881	8.8.8.8	192.168.2.13
Dec 29, 2024 00:15:12.483407021 CET	59413	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:15:12.605741978 CET	53	59413	8.8.8.8	192.168.2.13
Dec 29, 2024 00:15:15.029705048 CET	34206	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:15:15.152189970 CET	53	34206	8.8.8.8	192.168.2.13
Dec 29, 2024 00:15:17.668391943 CET	60875	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:15:18.171953917 CET	53	60875	8.8.8.8	192.168.2.13
Dec 29, 2024 00:15:20.643274069 CET	43593	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:15:20.777662992 CET	53	43593	8.8.8.8	192.168.2.13
Dec 29, 2024 00:15:23.261647940 CET	59708	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:15:23.395406008 CET	53	59708	8.8.8.8	192.168.2.13
Dec 29, 2024 00:15:25.911741018 CET	52389	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:15:26.046004057 CET	53	52389	8.8.8.8	192.168.2.13
Dec 29, 2024 00:15:28.514997959 CET	43365	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:15:28.649279118 CET	53	43365	8.8.8.8	192.168.2.13
Dec 29, 2024 00:15:31.120372057 CET	56446	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:15:31.254676104 CET	53	56446	8.8.8.8	192.168.2.13
Dec 29, 2024 00:15:33.775214911 CET	36423	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:15:33.911451101 CET	53	36423	8.8.8.8	192.168.2.13
Dec 29, 2024 00:15:36.337804079 CET	43295	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:15:36.474131107 CET	53	43295	8.8.8.8	192.168.2.13
Dec 29, 2024 00:15:39.235563993 CET	42480	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:15:39.369513035 CET	53	42480	8.8.8.8	192.168.2.13
Dec 29, 2024 00:15:41.844127893 CET	44383	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:15:41.979527950 CET	53	44383	8.8.8.8	192.168.2.13
Dec 29, 2024 00:15:44.407196045 CET	37906	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:15:44.531763077 CET	53	37906	8.8.8.8	192.168.2.13
Dec 29, 2024 00:15:47.062997103 CET	39443	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:15:47.198946953 CET	53	39443	8.8.8.8	192.168.2.13
Dec 29, 2024 00:15:49.639681101 CET	55879	53	192.168.2.13	8.8.8.8
Dec 29, 2024 00:15:49.774902105 CET	53	55879	8.8.8.8	192.168.2.13

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 29, 2024 00:13:49.622962952 CET	192.168.2.13	8.8.8.8	0x59cd	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:13:52.404764891 CET	192.168.2.13	8.8.8.8	0x3816	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:13:55.054286003 CET	192.168.2.13	8.8.8.8	0xd076	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:13:57.657412052 CET	192.168.2.13	8.8.8.8	0xcb67	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:00.306613922 CET	192.168.2.13	8.8.8.8	0x279e	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:02.913604975 CET	192.168.2.13	8.8.8.8	0x4f21	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:05.506067991 CET	192.168.2.13	8.8.8.8	0xc87a	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:08.162570000 CET	192.168.2.13	8.8.8.8	0xca9d	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:10.815366030 CET	192.168.2.13	8.8.8.8	0xe437	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:13.425689936 CET	192.168.2.13	8.8.8.8	0xdc1f	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:14.658997059 CET	192.168.2.13	8.8.8.8	0x59cd	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:17.207742929 CET	192.168.2.13	8.8.8.8	0x3816	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:19.827136040 CET	192.168.2.13	8.8.8.8	0xd076	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:22.483613968 CET	192.168.2.13	8.8.8.8	0xcb67	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:25.050323963 CET	192.168.2.13	8.8.8.8	0x279e	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:27.659733057 CET	192.168.2.13	8.8.8.8	0x4f21	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:30.263416052 CET	192.168.2.13	8.8.8.8	0xc87a	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:32.869461060 CET	192.168.2.13	8.8.8.8	0xca9d	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:35.474591017 CET	192.168.2.13	8.8.8.8	0xe437	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:38.175538063 CET	192.168.2.13	8.8.8.8	0xdc1f	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:40.827724934 CET	192.168.2.13	8.8.8.8	0xf53b	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:43.431901932 CET	192.168.2.13	8.8.8.8	0x8c68	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:46.038139105 CET	192.168.2.13	8.8.8.8	0x7e5d	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:48.696631908 CET	192.168.2.13	8.8.8.8	0x55fb	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:51.453680038 CET	192.168.2.13	8.8.8.8	0x16f	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:54.001430988 CET	192.168.2.13	8.8.8.8	0x3214	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:56.612102032 CET	192.168.2.13	8.8.8.8	0xc2a1	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:59.163647890 CET	192.168.2.13	8.8.8.8	0x2828	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:01.768402100 CET	192.168.2.13	8.8.8.8	0x81b7	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:04.372184992 CET	192.168.2.13	8.8.8.8	0x665c	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:06.927333117 CET	192.168.2.13	8.8.8.8	0x25d4	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:09.490267038 CET	192.168.2.13	8.8.8.8	0x32c4	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:12.483407021 CET	192.168.2.13	8.8.8.8	0x962d	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:15.029705048 CET	192.168.2.13	8.8.8.8	0xd5aa	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:17.668391943 CET	192.168.2.13	8.8.8.8	0x5f4b	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:20.643274069 CET	192.168.2.13	8.8.8.8	0x50f	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:23.261647940 CET	192.168.2.13	8.8.8.8	0x6795	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:25.911741018 CET	192.168.2.13	8.8.8.8	0x520b	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:28.514997959 CET	192.168.2.13	8.8.8.8	0x4182	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:31.120372057 CET	192.168.2.13	8.8.8.8	0x24e0	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:33.775214911 CET	192.168.2.13	8.8.8.8	0x2f3e	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:36.337804079 CET	192.168.2.13	8.8.8.8	0x1e3c	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:39.235563993 CET	192.168.2.13	8.8.8.8	0x123e	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:41.844127893 CET	192.168.2.13	8.8.8.8	0xe8b3	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:44.407196045 CET	192.168.2.13	8.8.8.8	0xa654	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:47.062997103 CET	192.168.2.13	8.8.8.8	0xa2ce	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:49.639681101 CET	192.168.2.13	8.8.8.8	0x2b96	Standard query (0)	secure-network-rebirthltd.ru	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Dec 29, 2024 00:13:49.934276104 CET	8.8.8.8	192.168.2.13	0x59cd	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:13:52.539139986 CET	8.8.8.8	192.168.2.13	0x3816	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:13:55.188260078 CET	8.8.8.8	192.168.2.13	0xd076	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:13:57.791234016 CET	8.8.8.8	192.168.2.13	0xcb67	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:00.442145109 CET	8.8.8.8	192.168.2.13	0x279e	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:03.036164999 CET	8.8.8.8	192.168.2.13	0x4f21	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:05.640237093 CET	8.8.8.8	192.168.2.13	0xc87a	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:08.297884941 CET	8.8.8.8	192.168.2.13	0xca9d	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:10.949326038 CET	8.8.8.8	192.168.2.13	0xe437	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:13.548104048 CET	8.8.8.8	192.168.2.13	0xdc1f	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:14.781474113 CET	8.8.8.8	192.168.2.13	0x59cd	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:17.342643976 CET	8.8.8.8	192.168.2.13	0x3816	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:19.961075068 CET	8.8.8.8	192.168.2.13	0xd076	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:22.619012117 CET	8.8.8.8	192.168.2.13	0xcb67	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:25.185612917 CET	8.8.8.8	192.168.2.13	0x279e	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:27.793802023 CET	8.8.8.8	192.168.2.13	0x4f21	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:30.399180889 CET	8.8.8.8	192.168.2.13	0xc87a	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:32.993695974 CET	8.8.8.8	192.168.2.13	0xca9d	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:35.610033989 CET	8.8.8.8	192.168.2.13	0xe437	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:38.310224056 CET	8.8.8.8	192.168.2.13	0xdc1f	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:40.961637020 CET	8.8.8.8	192.168.2.13	0xf53b	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:43.565754890 CET	8.8.8.8	192.168.2.13	0x8c68	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:46.172702074 CET	8.8.8.8	192.168.2.13	0x7e5d	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:48.936556101 CET	8.8.8.8	192.168.2.13	0x55fb	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:51.576456070 CET	8.8.8.8	192.168.2.13	0x16f	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:54.137986898 CET	8.8.8.8	192.168.2.13	0x3214	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:56.736875057 CET	8.8.8.8	192.168.2.13	0xc2a1	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:14:59.299130917 CET	8.8.8.8	192.168.2.13	0x2828	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:01.902183056 CET	8.8.8.8	192.168.2.13	0x81b7	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:04.494985104 CET	8.8.8.8	192.168.2.13	0x665c	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:07.063797951 CET	8.8.8.8	192.168.2.13	0x25d4	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:09.614573956 CET	8.8.8.8	192.168.2.13	0x32c4	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:12.605741978 CET	8.8.8.8	192.168.2.13	0x962d	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:15.152189970 CET	8.8.8.8	192.168.2.13	0xd5aa	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:18.171953917 CET	8.8.8.8	192.168.2.13	0x5f4b	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:20.777662992 CET	8.8.8.8	192.168.2.13	0x50f	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:23.395406008 CET	8.8.8.8	192.168.2.13	0x6795	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:26.046004057 CET	8.8.8.8	192.168.2.13	0x520b	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:28.649279118 CET	8.8.8.8	192.168.2.13	0x4182	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:31.254676104 CET	8.8.8.8	192.168.2.13	0x24e0	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:33.911451101 CET	8.8.8.8	192.168.2.13	0x2f3e	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:36.474131107 CET	8.8.8.8	192.168.2.13	0x1e3c	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:39.369513035 CET	8.8.8.8	192.168.2.13	0x123e	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:41.979527950 CET	8.8.8.8	192.168.2.13	0xe8b3	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:44.531763077 CET	8.8.8.8	192.168.2.13	0xa654	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:47.198946953 CET	8.8.8.8	192.168.2.13	0xa2ce	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false
Dec 29, 2024 00:15:49.774902105 CET	8.8.8.8	192.168.2.13	0x2b96	No error (0)	secure-network-rebirthltd.ru	83.222.191.146	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: arm5.elf PID: 5464, Parent PID: 5380

General

Start time (UTC):	23:13:48
Start date (UTC):	28/12/2024
Path:	/tmp/arm5.elf
Arguments:	/tmp/arm5.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: arm5.elf PID: 5466, Parent PID: 5464

General

Start time (UTC):	23:13:48
Start date (UTC):	28/12/2024
Path:	/tmp/arm5.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: arm5.elf PID: 5468, Parent PID: 5466

General

Start time (UTC):	23:13:48
Start date (UTC):	28/12/2024
Path:	/tmp/arm5.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report arm5.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: arm5.elf PID: 5464, Parent PID: 5380

General

Chronological Activities

Analysis Process: arm5.elf PID: 5466, Parent PID: 5464

General

Chronological Activities

Analysis Process: arm5.elf PID: 5468, Parent PID: 5466

General

Chronological Activities

Linux Analysis Report
arm5.elf