Edit tour

Linux Analysis Report
Space.x86.elf

Overview

General Information

Sample name:	Space.x86.elf
Analysis ID:	1584244
MD5:	9e06007e1384257a6df12f7da25e5b19
SHA1:	9c5a1152711a053b141a5c9501ae0e345e94b93d
SHA256:	a0a8c627d6b38d9d59581c9cc98e0a561860e79f37122e18e87d1608cdab3050
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	72
Range:	0 - 100
Whitelisted:	false

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Mirai

Machine Learning detection for sample

Sample is packed with UPX

Detected TCP or UDP traffic on non-standard ports

ELF contains segments with high entropy indicating compressed/encrypted content

Enumerates processes within the "proc" file system

Sample contains only a LOAD segment without any section mappings

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1584244
Start date and time:	2025-01-04 23:52:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 24s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	Space.x86.elf
Detection:	MAL
Classification:	mal72.troj.evad.linELF@0/0@0/0

Warnings

VT rate limit hit for: Space.x86.elf

Runtime Messages

Command:	/tmp/Space.x86.elf
PID:	5484
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	lzrd cock fest"/proc/"/exe
Standard Error:

Process Tree

system is lnxubuntu20

Space.x86.elf (PID: 5484, Parent: 5410, MD5: 9e06007e1384257a6df12f7da25e5b19) Arguments: /tmp/Space.x86.elf

Space.x86.elf New Fork (PID: 5485, Parent: 5484)

Space.x86.elf New Fork (PID: 5486, Parent: 5485)

Space.x86.elf New Fork (PID: 5487, Parent: 5485)

Space.x86.elf New Fork (PID: 5496, Parent: 5484)

Space.x86.elf New Fork (PID: 5497, Parent: 5484)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Memory Dumps

Source	Rule	Description	Author	Strings
5485.1.0000000008048000.0000000008059000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5486.1.0000000008048000.0000000008059000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5484.1.0000000008048000.0000000008059000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5485.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xdc54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdc68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdc7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdc90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdca4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdcb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdccc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdce0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdcf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdda8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xddbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xddd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdde4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5485.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_fa3ad9d0	unknown	unknown	0x46a:$a: CB 08 C1 CB 10 66 C1 CB 08 31 C9 8A 4F 14 D3 E8 01 D8 66 C1
5485.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x4cc0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
5485.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_93fc3657	unknown	unknown	0x4f5:$a: 00 00 00 89 44 24 60 89 D1 31 C0 8B 7C 24 28 FC F3 AB 89 D1 8B 7C
5485.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_804f8e7c	unknown	unknown	0x39b:$a: 31 ED 81 E1 FF 00 00 00 89 4C 24 58 89 EA C6 46 04 00 C1 FA 1F
5485.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_99d78950	unknown	unknown	0xfd0:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x10b9:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1197:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1442:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x18c4:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
5485.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_a68e498c	unknown	unknown	0x2b3:$a: 10 39 D0 7E 25 8B 4C 24 38 01 D1 8A 11 8D 42 9F 3C 19 77 05 8D
5485.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x7462:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
5485.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x2332:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
5485.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xa977:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
5485.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0x9377:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
5485.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x7432:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
5486.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xdc54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdc68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdc7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdc90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdca4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdcb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdccc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdce0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdcf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdda8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xddbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xddd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdde4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5486.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_fa3ad9d0	unknown	unknown	0x46a:$a: CB 08 C1 CB 10 66 C1 CB 08 31 C9 8A 4F 14 D3 E8 01 D8 66 C1
5486.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x4cc0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
5486.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_93fc3657	unknown	unknown	0x4f5:$a: 00 00 00 89 44 24 60 89 D1 31 C0 8B 7C 24 28 FC F3 AB 89 D1 8B 7C
5486.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_804f8e7c	unknown	unknown	0x39b:$a: 31 ED 81 E1 FF 00 00 00 89 4C 24 58 89 EA C6 46 04 00 C1 FA 1F
5486.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_99d78950	unknown	unknown	0xfd0:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x10b9:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1197:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1442:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x18c4:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
5486.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_a68e498c	unknown	unknown	0x2b3:$a: 10 39 D0 7E 25 8B 4C 24 38 01 D1 8A 11 8D 42 9F 3C 19 77 05 8D
5486.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x7462:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
5486.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x2332:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
5486.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xa977:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
5486.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0x9377:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
5486.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x7432:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
5484.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xdc54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdc68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdc7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdc90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdca4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdcb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdccc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdce0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdcf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdda8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xddbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xddd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdde4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5484.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_fa3ad9d0	unknown	unknown	0x46a:$a: CB 08 C1 CB 10 66 C1 CB 08 31 C9 8A 4F 14 D3 E8 01 D8 66 C1
5484.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x4cc0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
5484.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_93fc3657	unknown	unknown	0x4f5:$a: 00 00 00 89 44 24 60 89 D1 31 C0 8B 7C 24 28 FC F3 AB 89 D1 8B 7C
5484.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_804f8e7c	unknown	unknown	0x39b:$a: 31 ED 81 E1 FF 00 00 00 89 4C 24 58 89 EA C6 46 04 00 C1 FA 1F
5484.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_99d78950	unknown	unknown	0xfd0:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x10b9:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1197:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1442:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x18c4:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
5484.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_a68e498c	unknown	unknown	0x2b3:$a: 10 39 D0 7E 25 8B 4C 24 38 01 D1 8A 11 8D 42 9F 3C 19 77 05 8D
5484.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x7462:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
5484.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x2332:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
5484.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xa977:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
5484.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0x9377:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
5484.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x7432:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
5496.1.0000000008048000.0000000008059000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5496.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xdc54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdc68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdc7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdc90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdca4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdcb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdccc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdce0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdcf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdda8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xddbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xddd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdde4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5496.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_fa3ad9d0	unknown	unknown	0x46a:$a: CB 08 C1 CB 10 66 C1 CB 08 31 C9 8A 4F 14 D3 E8 01 D8 66 C1
5496.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x4cc0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
5496.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_93fc3657	unknown	unknown	0x4f5:$a: 00 00 00 89 44 24 60 89 D1 31 C0 8B 7C 24 28 FC F3 AB 89 D1 8B 7C
5496.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_804f8e7c	unknown	unknown	0x39b:$a: 31 ED 81 E1 FF 00 00 00 89 4C 24 58 89 EA C6 46 04 00 C1 FA 1F
5496.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_99d78950	unknown	unknown	0xfd0:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x10b9:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1197:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1442:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x18c4:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
5496.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_a68e498c	unknown	unknown	0x2b3:$a: 10 39 D0 7E 25 8B 4C 24 38 01 D1 8A 11 8D 42 9F 3C 19 77 05 8D
5496.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x7462:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
5496.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x2332:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
5496.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xa977:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
5496.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0x9377:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
5496.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x7432:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
Process Memory Space: Space.x86.elf PID: 5484	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: Space.x86.elf PID: 5484	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x4f2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x506:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x51a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x52e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x542:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x556:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x56a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x57e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x592:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5a6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5ba:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5ce:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5e2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5f6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x60a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x61e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x632:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x646:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x65a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x66e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x682:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: Space.x86.elf PID: 5485	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x105c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1070:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1084:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1098:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1110:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1124:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1138:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x114c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1160:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1174:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1188:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x119c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: Space.x86.elf PID: 5486	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: Space.x86.elf PID: 5486	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x4f2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x506:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x51a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x52e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x542:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x556:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x56a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x57e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x592:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5a6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5ba:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5ce:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5e2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5f6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x60a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x61e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x632:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x646:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x65a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x66e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x682:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: Space.x86.elf PID: 5496	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: Space.x86.elf PID: 5496	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xff5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1009:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x101d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1031:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1045:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1059:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1081:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1095:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10a9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10bd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10e5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10f9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x110d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1121:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1135:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1149:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x115d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1171:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1185:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 54 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: Space.x86.elf

ReversingLabs: Detection: 47%

Machine Learning detection for sample

Source: Space.x86.elf

Joe Sandbox ML: detected

Source: global traffic

TCP traffic: 192.168.2.14:55854 -> 79.133.46.252:3778

Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252
Source: unknown	TCP traffic detected without corresponding DNS query: 79.133.46.252

Source: Space.x86.elf

String found in binary or memory: http://upx.sf.net

System Summary

Malicious sample detected (through community Yara rule)

Source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 Author: unknown
Source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 Author: unknown
Source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c Author: unknown
Source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c Author: unknown
Source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 Author: unknown
Source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 Author: unknown
Source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c Author: unknown
Source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c Author: unknown
Source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 Author: unknown
Source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 Author: unknown
Source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c Author: unknown
Source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c Author: unknown
Source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 Author: unknown
Source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 Author: unknown
Source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c Author: unknown
Source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c Author: unknown
Source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: Process Memory Space: Space.x86.elf PID: 5484, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Space.x86.elf PID: 5485, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Space.x86.elf PID: 5486, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Space.x86.elf PID: 5496, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Source: LOAD without section mappings

Program segment: 0xc01000

Source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = fe93a3552b72b107f95cc5a7e59da64fe84d31df833bf36c81d8f31d8d79d7ca, id = fa3ad9d0-7c55-4621-90fc-6b154c44a67b, last_modified = 2021-09-16
Source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d01a9e85a01fad913ca048b60bda1e5a2762f534e5308132c1d3098ac3f561ee, id = 93fc3657-fd21-4e93-a728-c084fc0a6a4a, last_modified = 2021-09-16
Source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 1080d8502848d532a0b38861437485d98a41d945acaf3cb676a7a2a2f6793ac6, id = 804f8e7c-4786-42bc-92e4-c68c24ca530e, last_modified = 2021-09-16
Source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 951c9dfcba531e5112c872395f6c144c4bc8b71c666d2c7d9d8574a23c163883, id = a68e498c-0768-4321-ab65-42dd6ef85323, last_modified = 2021-09-16
Source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = fe93a3552b72b107f95cc5a7e59da64fe84d31df833bf36c81d8f31d8d79d7ca, id = fa3ad9d0-7c55-4621-90fc-6b154c44a67b, last_modified = 2021-09-16
Source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d01a9e85a01fad913ca048b60bda1e5a2762f534e5308132c1d3098ac3f561ee, id = 93fc3657-fd21-4e93-a728-c084fc0a6a4a, last_modified = 2021-09-16
Source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 1080d8502848d532a0b38861437485d98a41d945acaf3cb676a7a2a2f6793ac6, id = 804f8e7c-4786-42bc-92e4-c68c24ca530e, last_modified = 2021-09-16
Source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 951c9dfcba531e5112c872395f6c144c4bc8b71c666d2c7d9d8574a23c163883, id = a68e498c-0768-4321-ab65-42dd6ef85323, last_modified = 2021-09-16
Source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = fe93a3552b72b107f95cc5a7e59da64fe84d31df833bf36c81d8f31d8d79d7ca, id = fa3ad9d0-7c55-4621-90fc-6b154c44a67b, last_modified = 2021-09-16
Source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d01a9e85a01fad913ca048b60bda1e5a2762f534e5308132c1d3098ac3f561ee, id = 93fc3657-fd21-4e93-a728-c084fc0a6a4a, last_modified = 2021-09-16
Source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 1080d8502848d532a0b38861437485d98a41d945acaf3cb676a7a2a2f6793ac6, id = 804f8e7c-4786-42bc-92e4-c68c24ca530e, last_modified = 2021-09-16
Source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 951c9dfcba531e5112c872395f6c144c4bc8b71c666d2c7d9d8574a23c163883, id = a68e498c-0768-4321-ab65-42dd6ef85323, last_modified = 2021-09-16
Source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = fe93a3552b72b107f95cc5a7e59da64fe84d31df833bf36c81d8f31d8d79d7ca, id = fa3ad9d0-7c55-4621-90fc-6b154c44a67b, last_modified = 2021-09-16
Source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d01a9e85a01fad913ca048b60bda1e5a2762f534e5308132c1d3098ac3f561ee, id = 93fc3657-fd21-4e93-a728-c084fc0a6a4a, last_modified = 2021-09-16
Source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 1080d8502848d532a0b38861437485d98a41d945acaf3cb676a7a2a2f6793ac6, id = 804f8e7c-4786-42bc-92e4-c68c24ca530e, last_modified = 2021-09-16
Source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 951c9dfcba531e5112c872395f6c144c4bc8b71c666d2c7d9d8574a23c163883, id = a68e498c-0768-4321-ab65-42dd6ef85323, last_modified = 2021-09-16
Source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: Process Memory Space: Space.x86.elf PID: 5484, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Space.x86.elf PID: 5485, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Space.x86.elf PID: 5486, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Space.x86.elf PID: 5496, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal72.troj.evad.linELF@0/0@0/0

Data Obfuscation

Sample is packed with UPX

Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Id: UPX 3.94 Copyright (C) 1996-2017 the UPX Team. All Rights Reserved. $

Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/3760/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/3761/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/1583/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/2672/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/110/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/3759/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/111/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/112/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/113/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/234/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/1577/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/114/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/235/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/115/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/116/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/117/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/118/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/119/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/10/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/917/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/11/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/12/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/13/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/14/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/15/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/16/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/17/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/18/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/19/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/1593/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/240/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/120/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/3094/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/121/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/242/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/3406/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/1/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/122/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/243/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/2/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/123/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/244/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/1589/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/3/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/124/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/245/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/1588/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/125/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/4/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/246/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/3402/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/126/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/5/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/247/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/127/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/6/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/248/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/128/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/7/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/249/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/8/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/129/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/800/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/3762/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/9/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/801/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/803/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/20/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/806/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/21/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/807/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/928/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/22/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/23/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/24/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/25/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/26/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/27/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/28/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/29/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/3420/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/490/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/250/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/130/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/251/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/131/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/252/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/132/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/253/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/254/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/255/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/135/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/256/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/1599/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/257/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/378/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/258/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/3412/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/259/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/30/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/35/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/1371/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/260/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/261/status	Jump to behavior
Source: /tmp/Space.x86.elf (PID: 5484)	File opened: /proc/262/status	Jump to behavior

Source: Space.x86.elf

Submission file: segment LOAD with 7.9581 entropy (max. 8.0)

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Space.x86.elf PID: 5484, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Space.x86.elf PID: 5486, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Space.x86.elf PID: 5496, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: 5485.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5486.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5484.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5496.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Space.x86.elf PID: 5484, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Space.x86.elf PID: 5486, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Space.x86.elf PID: 5496, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	11 Obfuscated Files or Information	1 OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
Space.x86.elf	47%	ReversingLabs	Linux.Backdoor.Mirai
Space.x86.elf	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://upx.sf.net	Space.x86.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
79.133.46.252	unknown	Germany		203833	AT-FIRSTCOLOAustriaAT	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
79.133.46.252	Space.mpsl.elf	Get hash	malicious	Unknown	Browse	/hiddenbin/Space.mpsl
	Space.x86.elf	Get hash	malicious	Unknown	Browse	/hiddenbin/Space.x86
	Space.mips.elf	Get hash	malicious	Unknown	Browse	/hiddenbin/Space.mips
	Space.arm7.elf	Get hash	malicious	Unknown	Browse	/hiddenbin/Space.arm7
	Space.arm6.elf	Get hash	malicious	Unknown	Browse	/hiddenbin/Space.arm6

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AT-FIRSTCOLOAustriaAT	Space.arm.elf	Get hash	malicious	Mirai	Browse	79.133.46.252
	Space.ppc.elf	Get hash	malicious	Mirai	Browse	79.133.46.252
	Space.ppc.elf	Get hash	malicious	Mirai	Browse	79.133.46.252
	Space.ppc.elf	Get hash	malicious	Mirai	Browse	79.133.46.252
	Space.mpsl.elf	Get hash	malicious	Unknown	Browse	79.133.46.252
	Space.x86.elf	Get hash	malicious	Unknown	Browse	79.133.46.252
	Space.mips.elf	Get hash	malicious	Unknown	Browse	79.133.46.252
	Space.arm7.elf	Get hash	malicious	Unknown	Browse	79.133.46.252
	Space.arm6.elf	Get hash	malicious	Unknown	Browse	79.133.46.252
	mips.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	79.133.33.157

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (GNU/Linux), statically linked, no section header
Entropy (8bit):	7.955643979739386
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	Space.x86.elf
File size:	35'196 bytes
MD5:	9e06007e1384257a6df12f7da25e5b19
SHA1:	9c5a1152711a053b141a5c9501ae0e345e94b93d
SHA256:	a0a8c627d6b38d9d59581c9cc98e0a561860e79f37122e18e87d1608cdab3050
SHA512:	fdcc99ecbec67f540498ff054986b18a981c96b644890a4b3915b29c9466a1bea74b233483fef48b71d33d30c776296de81823fef639c4e0f8c6053319ecae07
SSDEEP:	768:yuL6rWgJnNCXj2IFvhJKWnO39s2OZ6ZslZGdhmyP9nbcuyD7UHQRji:CrWSnwZTKz0ZCsl4dQu9nouy8Hye
TLSH:	14F2F13862E745A4F54B61340CCFF70F5432972425AB90EFDDC0677A9A60E2ECB25B94
File Content Preview:	.ELF........................4...........4. ...(.....................\|...\|...............@...@...@...................Q.td.............................-[.UPX!........T...T.......V..........?..k.I/.j....\.d*nlz.e........4.0.N..9..y.!..^..L.......u........\|..

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - Linux
ABI Version:	0
Entry Point Address:	0xc08688
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	0
Section Header Size:	40
Number of Section Headers:	0
Header String Table Index:	0

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align
LOAD	0x0	0xc01000	0xc01000	0x887c	0x887c	7.9581	0x5	R E	0x1000
LOAD	0xc40	0x805bc40	0x805bc40	0x0	0x0	0.0000	0x6	RW	0x1000
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 4, 2025 23:52:55.395639896 CET	55854	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:55.400612116 CET	3778	55854	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:55.400695086 CET	55854	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:55.400731087 CET	55854	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:55.405522108 CET	3778	55854	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:55.405569077 CET	55854	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:55.410693884 CET	3778	55854	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:56.411241055 CET	3778	55854	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:56.411631107 CET	55856	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:56.411636114 CET	55854	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:56.411636114 CET	55854	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:56.416476011 CET	3778	55856	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:56.416830063 CET	55856	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:56.416830063 CET	55856	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:56.421654940 CET	3778	55856	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:56.421802044 CET	55856	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:56.426574945 CET	3778	55856	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:57.098911047 CET	3778	55856	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:57.099280119 CET	55856	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:57.099280119 CET	55856	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:57.099280119 CET	55858	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:57.104165077 CET	3778	55858	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:57.104407072 CET	55858	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:57.104407072 CET	55858	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:57.109236956 CET	3778	55858	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:57.109292030 CET	55858	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:57.114131927 CET	3778	55858	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:57.754545927 CET	3778	55858	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:57.754695892 CET	55858	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:57.754695892 CET	55858	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:57.754734993 CET	55860	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:57.759552002 CET	3778	55860	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:57.759632111 CET	55860	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:57.759654045 CET	55860	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:57.764384985 CET	3778	55860	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:57.764431000 CET	55860	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:57.769203901 CET	3778	55860	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:58.444626093 CET	3778	55860	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:58.444989920 CET	55860	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:58.445028067 CET	55860	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:58.445069075 CET	55862	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:58.449835062 CET	3778	55862	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:58.449894905 CET	55862	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:58.449915886 CET	55862	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:58.454674959 CET	3778	55862	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:58.454730034 CET	55862	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:58.459525108 CET	3778	55862	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:59.140991926 CET	3778	55862	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:59.141109943 CET	55862	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:59.141109943 CET	55862	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:59.141150951 CET	55864	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:59.145958900 CET	3778	55864	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:59.146054029 CET	55864	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:59.146085978 CET	55864	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:59.150876045 CET	3778	55864	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:59.150944948 CET	55864	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:59.155749083 CET	3778	55864	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:59.837042093 CET	3778	55864	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:59.837397099 CET	55864	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:59.837397099 CET	55864	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:59.837397099 CET	55866	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:59.842303991 CET	3778	55866	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:59.842361927 CET	55866	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:59.842387915 CET	55866	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:59.847105980 CET	3778	55866	79.133.46.252	192.168.2.14
Jan 4, 2025 23:52:59.847146988 CET	55866	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:52:59.851891994 CET	3778	55866	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:00.507818937 CET	3778	55866	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:00.508002043 CET	55866	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:00.508028984 CET	55866	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:00.508078098 CET	55868	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:00.512866974 CET	3778	55868	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:00.512933016 CET	55868	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:00.512964964 CET	55868	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:00.517879963 CET	3778	55868	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:00.517920017 CET	55868	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:00.523263931 CET	3778	55868	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:00.937560081 CET	55870	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:00.942497969 CET	3778	55870	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:00.942548990 CET	55870	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:00.942626953 CET	55870	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:00.947403908 CET	3778	55870	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:00.947448969 CET	55870	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:00.952240944 CET	3778	55870	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:01.188216925 CET	3778	55868	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:01.188448906 CET	55868	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:01.188482046 CET	55868	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:01.188520908 CET	55872	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:01.193350077 CET	3778	55872	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:01.193423033 CET	55872	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:01.193444967 CET	55872	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:01.198215961 CET	3778	55872	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:01.198276997 CET	55872	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:01.203088045 CET	3778	55872	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:01.625941038 CET	3778	55870	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:01.626188040 CET	55870	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:01.626218081 CET	55870	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:01.626259089 CET	55874	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:01.631340981 CET	3778	55874	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:01.631422997 CET	55874	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:01.631443024 CET	55874	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:01.636473894 CET	3778	55874	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:01.636518002 CET	55874	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:01.641275883 CET	3778	55874	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:01.850259066 CET	3778	55872	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:01.850367069 CET	55872	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:01.850368023 CET	55872	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:01.850416899 CET	55876	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:01.855187893 CET	3778	55876	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:01.855238914 CET	55876	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:01.855258942 CET	55876	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:01.860157013 CET	3778	55876	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:01.860204935 CET	55876	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:01.864953041 CET	3778	55876	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:02.259996891 CET	3778	55874	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:02.260121107 CET	55874	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:02.260149002 CET	55874	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:02.260198116 CET	55878	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:02.264959097 CET	3778	55878	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:02.265028954 CET	55878	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:02.265047073 CET	55878	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:02.269872904 CET	3778	55878	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:02.269923925 CET	55878	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:02.274719000 CET	3778	55878	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:02.534755945 CET	3778	55876	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:02.534981966 CET	55876	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:02.535006046 CET	55876	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:02.535044909 CET	55880	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:02.540827036 CET	3778	55880	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:02.540896893 CET	55880	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:02.540896893 CET	55880	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:02.546694994 CET	3778	55880	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:02.546751976 CET	55880	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:02.552604914 CET	3778	55880	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:02.936769962 CET	3778	55878	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:02.936906099 CET	55878	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:02.937047958 CET	55878	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:02.937129021 CET	55882	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:02.942006111 CET	3778	55882	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:02.942078114 CET	55882	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:02.942099094 CET	55882	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:02.947238922 CET	3778	55882	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:02.947288990 CET	55882	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:02.952102900 CET	3778	55882	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:03.212692976 CET	3778	55880	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:03.212910891 CET	55880	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:03.212937117 CET	55880	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:03.212970972 CET	55884	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:03.217791080 CET	3778	55884	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:03.217844009 CET	55884	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:03.217865944 CET	55884	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:03.222661018 CET	3778	55884	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:03.222704887 CET	55884	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:03.227484941 CET	3778	55884	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:03.568660021 CET	3778	55882	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:03.568757057 CET	55882	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:03.568775892 CET	55882	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:03.568820953 CET	55886	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:03.573637009 CET	3778	55886	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:03.573699951 CET	55886	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:03.573717117 CET	55886	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:03.578474045 CET	3778	55886	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:03.578521013 CET	55886	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:03.583302975 CET	3778	55886	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:03.890861988 CET	3778	55884	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:03.890942097 CET	55884	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:03.890974998 CET	55884	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:03.890999079 CET	55888	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:03.895772934 CET	3778	55888	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:03.895837069 CET	55888	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:03.895848036 CET	55888	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:03.900640965 CET	3778	55888	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:03.900679111 CET	55888	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:03.905414104 CET	3778	55888	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:04.230891943 CET	3778	55886	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:04.231026888 CET	55886	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:04.231180906 CET	55886	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:04.231231928 CET	55890	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:04.236063004 CET	3778	55890	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:04.236123085 CET	55890	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:04.236143112 CET	55890	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:04.240914106 CET	3778	55890	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:04.240952969 CET	55890	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:04.245696068 CET	3778	55890	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:04.521945953 CET	3778	55888	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:04.522051096 CET	55888	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:04.522078991 CET	55888	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:04.522094011 CET	55892	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:04.526849985 CET	3778	55892	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:04.526899099 CET	55892	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:04.526972055 CET	55892	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:04.531724930 CET	3778	55892	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:04.531768084 CET	55892	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:04.536544085 CET	3778	55892	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:04.922770023 CET	3778	55890	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:04.923063040 CET	55890	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:04.923094034 CET	55890	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:04.923142910 CET	55894	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:04.927925110 CET	3778	55894	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:04.927993059 CET	55894	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:04.928018093 CET	55894	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:04.932822943 CET	3778	55894	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:04.932873011 CET	55894	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:04.937628984 CET	3778	55894	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:05.255848885 CET	3778	55892	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:05.255985975 CET	55892	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:05.256023884 CET	55892	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:05.256055117 CET	55896	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:05.260870934 CET	3778	55896	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:05.260935068 CET	55896	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:05.260976076 CET	55896	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:05.265741110 CET	3778	55896	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:05.265785933 CET	55896	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:05.270579100 CET	3778	55896	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:05.643677950 CET	3778	55894	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:05.643739939 CET	55894	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:05.643892050 CET	55894	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:05.643893957 CET	55898	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:05.648710966 CET	3778	55898	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:05.648761988 CET	55898	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:05.648782015 CET	55898	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:05.653623104 CET	3778	55898	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:05.653667927 CET	55898	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:05.658473015 CET	3778	55898	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:05.945755005 CET	3778	55896	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:05.946005106 CET	55896	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:05.946006060 CET	55896	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:05.946003914 CET	55900	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:05.950828075 CET	3778	55900	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:05.950895071 CET	55900	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:05.950923920 CET	55900	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:05.955708027 CET	3778	55900	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:05.955754042 CET	55900	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:05.960520029 CET	3778	55900	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:06.345146894 CET	3778	55898	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:06.345453978 CET	55898	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:06.345453978 CET	55898	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:06.345496893 CET	55902	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:06.350404024 CET	3778	55902	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:06.350509882 CET	55902	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:06.350636959 CET	55902	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:06.355422020 CET	3778	55902	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:06.355499029 CET	55902	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:06.360340118 CET	3778	55902	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:06.718843937 CET	3778	55900	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:06.719075918 CET	55900	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:06.719075918 CET	55900	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:06.719115019 CET	55904	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:06.724010944 CET	3778	55904	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:06.724086046 CET	55904	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:06.724129915 CET	55904	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:06.728924990 CET	3778	55904	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:06.728967905 CET	55904	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:06.733752966 CET	3778	55904	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:06.993834019 CET	3778	55902	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:06.993958950 CET	55902	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:06.993976116 CET	55902	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:06.993983984 CET	55906	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:06.998889923 CET	3778	55906	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:06.999005079 CET	55906	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:06.999017000 CET	55906	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:07.004057884 CET	3778	55906	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:07.004120111 CET	55906	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:07.008979082 CET	3778	55906	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:07.636960030 CET	3778	55906	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:07.637068987 CET	55906	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:07.637096882 CET	55906	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:07.637162924 CET	55908	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:07.641994953 CET	3778	55908	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:07.642085075 CET	55908	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:07.642132044 CET	55908	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:07.646881104 CET	3778	55908	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:07.646924019 CET	55908	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:07.651684999 CET	3778	55908	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:08.283538103 CET	3778	55908	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:08.283665895 CET	55908	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:08.283665895 CET	55908	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:08.283710003 CET	55910	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:08.288774967 CET	3778	55910	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:08.288850069 CET	55910	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:08.288887978 CET	55910	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:08.294842958 CET	3778	55910	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:08.294970036 CET	55910	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:08.299715996 CET	3778	55910	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:08.942071915 CET	3778	55910	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:08.942240953 CET	55910	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:08.942282915 CET	55910	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:08.942332983 CET	55912	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:08.947921991 CET	3778	55912	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:08.948003054 CET	55912	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:08.948050022 CET	55912	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:08.952814102 CET	3778	55912	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:08.952872038 CET	55912	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:08.957629919 CET	3778	55912	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:16.733860016 CET	55904	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:16.738790035 CET	3778	55904	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:16.993731976 CET	3778	55904	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:16.993958950 CET	55904	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:18.955807924 CET	55912	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:18.960715055 CET	3778	55912	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:30.327264071 CET	3778	55912	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:30.327570915 CET	55912	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:30.332386971 CET	3778	55912	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:31.329333067 CET	55914	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:31.334269047 CET	3778	55914	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:31.334387064 CET	55914	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:31.334466934 CET	55914	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:31.339227915 CET	3778	55914	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:31.339273930 CET	55914	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:31.344047070 CET	3778	55914	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:32.003387928 CET	3778	55914	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:32.003526926 CET	55914	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:32.003618956 CET	55914	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:32.003711939 CET	55916	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:32.008481979 CET	3778	55916	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:32.008563995 CET	55916	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:32.008642912 CET	55916	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:32.013452053 CET	3778	55916	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:32.013515949 CET	55916	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:32.018280983 CET	3778	55916	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:32.664927006 CET	3778	55916	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:32.665067911 CET	55916	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:32.665137053 CET	55916	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:32.665225029 CET	55918	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:32.669975042 CET	3778	55918	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:32.670104027 CET	55918	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:32.670145988 CET	55918	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:32.674910069 CET	3778	55918	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:32.674972057 CET	55918	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:32.679826021 CET	3778	55918	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:33.370618105 CET	3778	55918	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:33.370757103 CET	55918	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:33.370922089 CET	55918	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:33.371006012 CET	55920	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:33.375821114 CET	3778	55920	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:33.375910997 CET	55920	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:33.375977993 CET	55920	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:33.380745888 CET	3778	55920	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:33.380806923 CET	55920	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:33.385597944 CET	3778	55920	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:34.017703056 CET	3778	55920	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:34.017781973 CET	55920	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:34.017858982 CET	55920	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:34.017940998 CET	55922	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:34.022710085 CET	3778	55922	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:34.022787094 CET	55922	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:34.022856951 CET	55922	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:34.027646065 CET	3778	55922	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:34.027699947 CET	55922	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:34.032459974 CET	3778	55922	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:34.695837975 CET	3778	55922	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:34.695956945 CET	55922	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:34.695992947 CET	55922	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:34.696017027 CET	55924	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:34.700823069 CET	3778	55924	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:34.700932980 CET	55924	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:34.700954914 CET	55924	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:34.705708027 CET	3778	55924	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:34.705773115 CET	55924	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:34.710531950 CET	3778	55924	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:35.440860987 CET	3778	55924	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:35.441025019 CET	55924	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:35.441025972 CET	55924	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:35.441060066 CET	55926	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:35.445849895 CET	3778	55926	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:35.445910931 CET	55926	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:35.445939064 CET	55926	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:35.450726032 CET	3778	55926	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:35.450777054 CET	55926	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:35.455604076 CET	3778	55926	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:36.100752115 CET	3778	55926	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:36.100876093 CET	55926	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:36.100894928 CET	55926	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:36.100895882 CET	55928	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:36.105741024 CET	3778	55928	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:36.105866909 CET	55928	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:36.105866909 CET	55928	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:36.110682964 CET	3778	55928	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:36.110768080 CET	55928	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:36.115608931 CET	3778	55928	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:36.871925116 CET	3778	55928	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:36.872396946 CET	55928	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:36.872397900 CET	55928	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:36.872397900 CET	55930	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:36.877288103 CET	3778	55930	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:36.877363920 CET	55930	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:36.877386093 CET	55930	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:36.882121086 CET	3778	55930	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:36.882162094 CET	55930	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:36.886900902 CET	3778	55930	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:37.551789045 CET	3778	55930	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:37.552014112 CET	55930	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:37.552016973 CET	55932	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:37.552014112 CET	55930	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:37.556854010 CET	3778	55932	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:37.556993008 CET	55932	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:37.557007074 CET	55932	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:37.562285900 CET	3778	55932	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:37.562350035 CET	55932	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:37.567167044 CET	3778	55932	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:38.233994007 CET	3778	55932	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:38.234354973 CET	55932	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:38.234354973 CET	55932	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:38.234376907 CET	55934	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:38.239226103 CET	3778	55934	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:38.239329100 CET	55934	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:38.239425898 CET	55934	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:38.439239979 CET	3778	55934	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:38.439349890 CET	55934	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:38.444145918 CET	3778	55934	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:39.094078064 CET	3778	55934	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:39.094336033 CET	55934	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:39.094336033 CET	55934	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:39.094336987 CET	55936	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:39.100008011 CET	3778	55936	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:39.100114107 CET	55936	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:39.100135088 CET	55936	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:39.104923964 CET	3778	55936	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:39.104976892 CET	55936	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:39.109780073 CET	3778	55936	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:39.794620037 CET	3778	55936	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:39.794791937 CET	55936	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:39.794856071 CET	55936	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:39.795008898 CET	55938	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:39.799828053 CET	3778	55938	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:39.799917936 CET	55938	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:39.799976110 CET	55938	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:39.804744959 CET	3778	55938	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:39.804807901 CET	55938	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:39.809585094 CET	3778	55938	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:40.471849918 CET	3778	55938	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:40.471945047 CET	55938	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:40.471978903 CET	55938	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:40.472002029 CET	55940	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:40.476803064 CET	3778	55940	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:40.476929903 CET	55940	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:40.476942062 CET	55940	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:40.481729031 CET	3778	55940	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:40.481792927 CET	55940	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:40.486651897 CET	3778	55940	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:41.794226885 CET	3778	55940	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:41.794514894 CET	55940	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:41.794650078 CET	55940	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:41.794742107 CET	55942	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:41.799460888 CET	3778	55942	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:41.799560070 CET	55942	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:41.799626112 CET	55942	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:41.804430008 CET	3778	55942	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:41.804491997 CET	55942	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:41.809319973 CET	3778	55942	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:42.497550964 CET	3778	55942	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:42.497833014 CET	55942	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:42.497888088 CET	55942	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:42.497961998 CET	55944	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:42.502738953 CET	3778	55944	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:42.502846956 CET	55944	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:42.502908945 CET	55944	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:42.507647038 CET	3778	55944	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:42.507715940 CET	55944	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:42.512511969 CET	3778	55944	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:43.169079065 CET	3778	55944	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:43.169503927 CET	55944	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:43.169703007 CET	55944	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:43.169800043 CET	55946	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:43.174621105 CET	3778	55946	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:43.174705029 CET	55946	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:43.174763918 CET	55946	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:43.179600954 CET	3778	55946	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:43.179665089 CET	55946	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:43.184485912 CET	3778	55946	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:43.843943119 CET	3778	55946	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:43.844233990 CET	55946	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:43.844285011 CET	55946	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:43.844376087 CET	55948	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:43.849198103 CET	3778	55948	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:43.849308014 CET	55948	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:43.849370003 CET	55948	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:43.854182005 CET	3778	55948	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:43.854250908 CET	55948	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:43.859113932 CET	3778	55948	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:44.525641918 CET	3778	55948	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:44.525892973 CET	55948	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:44.525960922 CET	55948	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:44.526043892 CET	55950	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:44.530766964 CET	3778	55950	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:44.530842066 CET	55950	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:44.530898094 CET	55950	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:44.535722971 CET	3778	55950	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:44.535813093 CET	55950	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:44.540643930 CET	3778	55950	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:45.156115055 CET	3778	55950	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:45.156383991 CET	55950	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:45.156439066 CET	55950	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:45.156513929 CET	55952	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:45.161360025 CET	3778	55952	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:45.161443949 CET	55952	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:45.161499977 CET	55952	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:45.166235924 CET	3778	55952	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:45.166296959 CET	55952	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:45.171103954 CET	3778	55952	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:45.801240921 CET	3778	55952	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:45.801518917 CET	55952	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:45.801587105 CET	55952	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:45.801656961 CET	55954	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:45.806402922 CET	3778	55954	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:45.806499004 CET	55954	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:45.806566000 CET	55954	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:45.811341047 CET	3778	55954	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:45.811408043 CET	55954	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:45.816159964 CET	3778	55954	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:46.506560087 CET	3778	55954	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:46.506705999 CET	55954	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:46.506867886 CET	55954	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:46.506963015 CET	55956	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:46.511868000 CET	3778	55956	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:46.511949062 CET	55956	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:46.512006998 CET	55956	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:46.516783953 CET	3778	55956	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:46.516858101 CET	55956	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:46.521670103 CET	3778	55956	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:47.228245974 CET	3778	55956	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:47.228435993 CET	55956	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:47.228435993 CET	55956	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:47.228518009 CET	55958	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:47.233325005 CET	3778	55958	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:47.233437061 CET	55958	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:47.233474970 CET	55958	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:47.238275051 CET	3778	55958	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:47.238338947 CET	55958	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:47.243144989 CET	3778	55958	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:47.887651920 CET	3778	55958	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:47.888000965 CET	55958	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:47.888081074 CET	55958	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:47.888123035 CET	55960	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:47.892992020 CET	3778	55960	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:47.893100977 CET	55960	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:47.893167973 CET	55960	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:47.897958994 CET	3778	55960	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:47.898020983 CET	55960	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:47.902867079 CET	3778	55960	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:48.624942064 CET	3778	55960	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:48.625133991 CET	55960	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:48.625161886 CET	55960	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:48.625178099 CET	55962	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:48.630069017 CET	3778	55962	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:48.630179882 CET	55962	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:48.630223989 CET	55962	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:48.634999990 CET	3778	55962	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:48.635080099 CET	55962	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:48.639894962 CET	3778	55962	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:49.327276945 CET	3778	55962	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:49.327466011 CET	55962	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:49.327552080 CET	55962	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:49.327606916 CET	55964	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:49.332401991 CET	3778	55964	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:49.332483053 CET	55964	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:49.332557917 CET	55964	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:49.337327003 CET	3778	55964	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:49.337405920 CET	55964	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:49.342233896 CET	3778	55964	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:49.952774048 CET	3778	55964	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:49.953075886 CET	55964	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:49.953134060 CET	55964	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:49.953212976 CET	55966	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:49.957983971 CET	3778	55966	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:49.958110094 CET	55966	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:49.958168030 CET	55966	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:49.962949038 CET	3778	55966	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:49.963032007 CET	55966	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:49.967837095 CET	3778	55966	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:50.623840094 CET	3778	55966	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:50.624119043 CET	55966	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:50.624275923 CET	55966	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:50.624358892 CET	55968	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:50.629152060 CET	3778	55968	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:50.629235983 CET	55968	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:50.629290104 CET	55968	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:50.634063959 CET	3778	55968	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:50.634143114 CET	55968	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:50.638936996 CET	3778	55968	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:51.264007092 CET	3778	55968	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:51.264312983 CET	55968	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:51.264437914 CET	55968	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:51.264501095 CET	55970	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:51.269301891 CET	3778	55970	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:51.269387960 CET	55970	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:51.269448996 CET	55970	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:51.274198055 CET	3778	55970	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:51.274275064 CET	55970	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:51.279058933 CET	3778	55970	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:51.946913004 CET	3778	55970	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:51.947148085 CET	55970	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:51.947185040 CET	55970	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:51.947268963 CET	55972	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:51.952124119 CET	3778	55972	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:51.952253103 CET	55972	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:51.952308893 CET	55972	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:51.957036018 CET	3778	55972	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:51.957123041 CET	55972	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:51.961934090 CET	3778	55972	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:52.628515959 CET	3778	55972	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:52.628690958 CET	55972	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:52.628863096 CET	55972	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:52.628943920 CET	55974	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:52.633701086 CET	3778	55974	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:52.633780956 CET	55974	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:52.633837938 CET	55974	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:52.638614893 CET	3778	55974	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:52.638691902 CET	55974	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:52.643493891 CET	3778	55974	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:53.271219015 CET	3778	55974	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:53.271485090 CET	55974	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:53.271542072 CET	55974	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:53.271622896 CET	55976	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:53.276823997 CET	3778	55976	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:53.276927948 CET	55976	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:53.276987076 CET	55976	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:53.282186985 CET	3778	55976	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:53.282247066 CET	55976	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:53.287363052 CET	3778	55976	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:53.981676102 CET	3778	55976	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:53.982075930 CET	55976	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:53.982184887 CET	55976	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:53.982261896 CET	55978	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:53.987073898 CET	3778	55978	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:53.987157106 CET	55978	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:53.987219095 CET	55978	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:53.991976976 CET	3778	55978	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:53.992038012 CET	55978	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:53.996862888 CET	3778	55978	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:54.682899952 CET	3778	55978	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:54.683199883 CET	55978	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:54.683260918 CET	55978	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:54.683326006 CET	55980	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:54.688096046 CET	3778	55980	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:54.688199043 CET	55980	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:54.688254118 CET	55980	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:54.693072081 CET	3778	55980	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:54.693177938 CET	55980	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:54.697982073 CET	3778	55980	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:55.364584923 CET	3778	55980	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:55.364866972 CET	55980	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:55.364928961 CET	55980	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:55.365011930 CET	55982	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:55.370979071 CET	3778	55982	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:55.371058941 CET	55982	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:55.371114969 CET	55982	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:55.377059937 CET	3778	55982	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:55.377121925 CET	55982	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:55.381916046 CET	3778	55982	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:56.011291027 CET	3778	55982	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:56.011501074 CET	55982	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:56.011526108 CET	55982	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:56.011567116 CET	55984	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:56.016355038 CET	3778	55984	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:56.016455889 CET	55984	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:56.016516924 CET	55984	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:56.021280050 CET	3778	55984	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:56.021342993 CET	55984	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:56.026087999 CET	3778	55984	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:56.657558918 CET	3778	55984	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:56.657885075 CET	55984	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:56.657946110 CET	55984	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:56.658008099 CET	55986	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:56.662810087 CET	3778	55986	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:56.662919044 CET	55986	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:56.662976980 CET	55986	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:56.667751074 CET	3778	55986	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:56.667819023 CET	55986	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:56.672656059 CET	3778	55986	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:57.343286991 CET	3778	55986	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:57.343589067 CET	55986	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:57.343738079 CET	55986	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:57.343837976 CET	55988	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:57.348640919 CET	3778	55988	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:57.348723888 CET	55988	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:57.348783970 CET	55988	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:57.353605032 CET	3778	55988	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:57.353683949 CET	55988	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:57.358498096 CET	3778	55988	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:58.020770073 CET	3778	55988	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:58.020893097 CET	55988	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:58.020956993 CET	55988	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:58.020971060 CET	55990	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:58.025851965 CET	3778	55990	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:58.025989056 CET	55990	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:58.026000023 CET	55990	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:58.030766964 CET	3778	55990	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:58.030837059 CET	55990	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:58.035651922 CET	3778	55990	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:58.726469994 CET	3778	55990	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:58.726757050 CET	55990	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:58.726860046 CET	55990	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:58.726927996 CET	55992	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:58.731784105 CET	3778	55992	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:58.731863022 CET	55992	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:58.731935978 CET	55992	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:58.736711025 CET	3778	55992	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:58.736771107 CET	55992	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:58.741657019 CET	3778	55992	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:59.418028116 CET	3778	55992	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:59.418262959 CET	55992	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:59.418297052 CET	55992	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:59.418311119 CET	55994	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:59.423095942 CET	3778	55994	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:59.423325062 CET	55994	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:59.423325062 CET	55994	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:59.428163052 CET	3778	55994	79.133.46.252	192.168.2.14
Jan 4, 2025 23:53:59.428246021 CET	55994	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:53:59.433002949 CET	3778	55994	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:00.211831093 CET	3778	55994	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:00.211976051 CET	55994	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:00.211996078 CET	55994	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:00.212028980 CET	55996	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:00.216816902 CET	3778	55996	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:00.216872931 CET	55996	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:00.216901064 CET	55996	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:00.221632004 CET	3778	55996	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:00.221677065 CET	55996	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:00.226485968 CET	3778	55996	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:00.891524076 CET	3778	55996	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:00.891710043 CET	55996	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:00.891736984 CET	55996	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:00.891781092 CET	55998	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:00.896605968 CET	3778	55998	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:00.896725893 CET	55998	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:00.896790981 CET	55998	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:00.901556969 CET	3778	55998	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:00.901623964 CET	55998	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:00.906430006 CET	3778	55998	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:01.581674099 CET	3778	55998	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:01.581933022 CET	55998	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:01.582041025 CET	55998	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:01.582119942 CET	56000	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:01.586932898 CET	3778	56000	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:01.587023020 CET	56000	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:01.587071896 CET	56000	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:01.591810942 CET	3778	56000	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:01.591892004 CET	56000	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:01.596668959 CET	3778	56000	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:02.259046078 CET	3778	56000	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:02.259336948 CET	56000	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:02.259366989 CET	56000	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:02.259442091 CET	56002	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:02.264286041 CET	3778	56002	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:02.264380932 CET	56002	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:02.264442921 CET	56002	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:02.269207954 CET	3778	56002	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:02.269310951 CET	56002	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:02.274112940 CET	3778	56002	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:02.925920963 CET	3778	56002	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:02.926155090 CET	56002	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:02.926192999 CET	56002	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:02.926233053 CET	56004	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:02.931078911 CET	3778	56004	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:02.931221962 CET	56004	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:02.931272984 CET	56004	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:02.936096907 CET	3778	56004	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:02.936186075 CET	56004	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:02.940968037 CET	3778	56004	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:03.611131907 CET	3778	56004	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:03.611310959 CET	56004	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:03.611368895 CET	56004	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:03.611466885 CET	56006	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:03.616275072 CET	3778	56006	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:03.616355896 CET	56006	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:03.616486073 CET	56006	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:03.621268988 CET	3778	56006	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:03.621346951 CET	56006	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:03.626163006 CET	3778	56006	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:04.291102886 CET	3778	56006	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:04.291382074 CET	56006	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:04.291405916 CET	56006	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:04.291455030 CET	56008	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:04.296262980 CET	3778	56008	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:04.296396971 CET	56008	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:04.296448946 CET	56008	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:04.301214933 CET	3778	56008	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:04.301301003 CET	56008	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:04.306066036 CET	3778	56008	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:04.959608078 CET	3778	56008	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:04.959860086 CET	56008	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:04.959924936 CET	56008	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:04.960019112 CET	56010	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:04.964762926 CET	3778	56010	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:04.964848995 CET	56010	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:04.964906931 CET	56010	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:04.969738007 CET	3778	56010	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:04.969804049 CET	56010	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:04.974601984 CET	3778	56010	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:05.654021978 CET	3778	56010	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:05.654182911 CET	56010	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:05.654206038 CET	56010	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:05.654254913 CET	56012	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:05.659063101 CET	3778	56012	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:05.659173012 CET	56012	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:05.659230947 CET	56012	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:05.664040089 CET	3778	56012	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:05.664108992 CET	56012	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:05.668864012 CET	3778	56012	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:06.330492020 CET	3778	56012	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:06.330655098 CET	56012	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:06.330741882 CET	56012	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:06.330792904 CET	56014	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:06.335540056 CET	3778	56014	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:06.335621119 CET	56014	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:06.335680962 CET	56014	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:06.340435028 CET	3778	56014	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:06.340496063 CET	56014	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:06.345289946 CET	3778	56014	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:07.028660059 CET	3778	56014	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:07.028784990 CET	56014	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:07.028825045 CET	56014	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:07.028856039 CET	56016	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:07.033634901 CET	3778	56016	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:07.033713102 CET	56016	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:07.033766031 CET	56016	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:07.038530111 CET	3778	56016	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:07.038609028 CET	56016	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:07.043392897 CET	3778	56016	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:07.711108923 CET	3778	56016	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:07.711226940 CET	56016	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:07.711250067 CET	56016	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:07.711294889 CET	56018	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:07.716157913 CET	3778	56018	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:07.716268063 CET	56018	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:07.716311932 CET	56018	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:07.721060991 CET	3778	56018	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:07.721138954 CET	56018	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:07.725967884 CET	3778	56018	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:08.349973917 CET	3778	56018	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:08.350229025 CET	56018	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:08.350375891 CET	56018	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:08.350450039 CET	56020	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:08.355233908 CET	3778	56020	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:08.355325937 CET	56020	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:08.355385065 CET	56020	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:08.360138893 CET	3778	56020	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:08.360215902 CET	56020	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:08.365010023 CET	3778	56020	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:09.007009029 CET	3778	56020	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:09.007169008 CET	56020	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:09.007246017 CET	56020	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:09.007307053 CET	56022	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:09.012177944 CET	3778	56022	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:09.012281895 CET	56022	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:09.012336016 CET	56022	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:09.017103910 CET	3778	56022	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:09.017169952 CET	56022	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:09.022011995 CET	3778	56022	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:09.744399071 CET	3778	56022	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:09.744546890 CET	56022	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:09.744611979 CET	56022	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:09.744713068 CET	56024	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:09.749587059 CET	3778	56024	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:09.749671936 CET	56024	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:09.749768019 CET	56024	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:09.754580021 CET	3778	56024	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:09.754652977 CET	56024	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:09.760488033 CET	3778	56024	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:10.411228895 CET	3778	56024	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:10.411518097 CET	56024	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:10.411609888 CET	56024	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:10.411700010 CET	56026	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:10.416526079 CET	3778	56026	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:10.416655064 CET	56026	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:10.416702032 CET	56026	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:10.421494961 CET	3778	56026	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:10.421560049 CET	56026	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:10.426392078 CET	3778	56026	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:11.092802048 CET	3778	56026	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:11.092972040 CET	56026	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:11.093132973 CET	56026	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:11.093225002 CET	56028	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:11.098030090 CET	3778	56028	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:11.098119020 CET	56028	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:11.098198891 CET	56028	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:11.103038073 CET	3778	56028	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:11.103113890 CET	56028	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:11.107983112 CET	3778	56028	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:11.746313095 CET	3778	56028	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:11.746484041 CET	56028	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:11.746557951 CET	56028	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:11.746649981 CET	56030	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:11.751446009 CET	3778	56030	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:11.751584053 CET	56030	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:11.751635075 CET	56030	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:11.756397963 CET	3778	56030	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:11.756486893 CET	56030	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:11.761251926 CET	3778	56030	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:12.429058075 CET	3778	56030	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:12.429341078 CET	56030	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:12.429373026 CET	56030	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:12.429416895 CET	56032	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:12.434209108 CET	3778	56032	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:12.434305906 CET	56032	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:12.434317112 CET	56032	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:12.439151049 CET	3778	56032	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:12.439217091 CET	56032	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:12.444082022 CET	3778	56032	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:13.061487913 CET	3778	56032	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:13.061748981 CET	56032	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:13.061765909 CET	56032	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:13.061806917 CET	56034	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:13.066598892 CET	3778	56034	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:13.066656113 CET	56034	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:13.066665888 CET	56034	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:13.071459055 CET	3778	56034	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:13.071505070 CET	56034	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:13.076320887 CET	3778	56034	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:13.737618923 CET	3778	56034	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:13.737740993 CET	56034	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:13.737740993 CET	56034	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:13.737775087 CET	56036	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:13.742733002 CET	3778	56036	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:13.742847919 CET	56036	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:13.742866993 CET	56036	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:13.747715950 CET	3778	56036	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:13.747786045 CET	56036	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:13.752633095 CET	3778	56036	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:14.395172119 CET	3778	56036	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:14.395524979 CET	56036	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:14.395577908 CET	56036	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:14.395577908 CET	56038	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:14.400377989 CET	3778	56038	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:14.400432110 CET	56038	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:14.400449991 CET	56038	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:14.405291080 CET	3778	56038	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:14.405335903 CET	56038	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:14.410166025 CET	3778	56038	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:15.091837883 CET	3778	56038	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:15.091947079 CET	56038	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:15.091948032 CET	56038	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:15.091973066 CET	56040	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:15.096837997 CET	3778	56040	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:15.096914053 CET	56040	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:15.096926928 CET	56040	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:15.101732969 CET	3778	56040	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:15.101782084 CET	56040	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:15.106642962 CET	3778	56040	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:15.807727098 CET	3778	56040	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:15.807830095 CET	56040	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:15.807904959 CET	56040	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:15.807988882 CET	56042	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:15.812809944 CET	3778	56042	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:15.812891006 CET	56042	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:15.812942028 CET	56042	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:15.817783117 CET	3778	56042	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:15.817852974 CET	56042	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:15.822719097 CET	3778	56042	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:16.442245007 CET	3778	56042	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:16.442400932 CET	56042	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:16.442452908 CET	56042	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:16.442524910 CET	56044	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:16.447293043 CET	3778	56044	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:16.447367907 CET	56044	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:16.447431087 CET	56044	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:16.452162981 CET	3778	56044	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:16.452212095 CET	56044	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:16.457061052 CET	3778	56044	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:17.039629936 CET	55904	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:17.045263052 CET	3778	55904	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:17.105941057 CET	3778	56044	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:17.106020927 CET	56044	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:17.106132984 CET	56044	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:17.106220961 CET	56046	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:17.111036062 CET	3778	56046	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:17.111115932 CET	56046	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:17.111174107 CET	56046	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:17.116019964 CET	3778	56046	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:17.116080999 CET	56046	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:17.120841980 CET	3778	56046	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:17.238898993 CET	3778	55904	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:17.238975048 CET	55904	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:17.793351889 CET	3778	56046	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:17.793462992 CET	56046	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:17.793462992 CET	56046	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:17.793504953 CET	56048	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:17.798285007 CET	3778	56048	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:17.798336029 CET	56048	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:17.798350096 CET	56048	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:17.803134918 CET	3778	56048	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:17.803168058 CET	56048	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:17.807895899 CET	3778	56048	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:18.597265005 CET	3778	56048	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:18.597575903 CET	56048	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:18.597575903 CET	56048	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:18.597605944 CET	56050	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:18.602412939 CET	3778	56050	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:18.602473021 CET	56050	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:18.602484941 CET	56050	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:18.607295990 CET	3778	56050	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:18.607352018 CET	56050	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:18.612134933 CET	3778	56050	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:19.304923058 CET	3778	56050	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:19.305116892 CET	56050	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:19.305145979 CET	56050	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:19.305160999 CET	56052	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:19.310039043 CET	3778	56052	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:19.310108900 CET	56052	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:19.310173988 CET	56052	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:19.314927101 CET	3778	56052	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:19.314990044 CET	56052	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:19.319736958 CET	3778	56052	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:20.036500931 CET	3778	56052	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:20.036780119 CET	56052	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:20.036899090 CET	56052	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:20.036993027 CET	56054	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:20.041731119 CET	3778	56054	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:20.041824102 CET	56054	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:20.041906118 CET	56054	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:20.046679974 CET	3778	56054	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:20.046760082 CET	56054	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:20.051573038 CET	3778	56054	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:20.662074089 CET	3778	56054	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:20.662384987 CET	56054	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:20.662421942 CET	56054	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:20.662493944 CET	56056	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:20.668184042 CET	3778	56056	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:20.668323040 CET	56056	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:20.668365955 CET	56056	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:20.673147917 CET	3778	56056	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:20.673194885 CET	56056	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:20.677964926 CET	3778	56056	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:21.351010084 CET	3778	56056	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:21.351330996 CET	56056	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:21.351351976 CET	56056	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:21.351402998 CET	56058	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:21.356167078 CET	3778	56058	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:21.356249094 CET	56058	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:21.356319904 CET	56058	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:21.361069918 CET	3778	56058	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:21.361145973 CET	56058	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:21.365971088 CET	3778	56058	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:22.023438931 CET	3778	56058	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:22.023535967 CET	56058	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:22.023536921 CET	56058	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:22.023581028 CET	56060	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:22.028387070 CET	3778	56060	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:22.028456926 CET	56060	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:22.028475046 CET	56060	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:22.033287048 CET	3778	56060	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:22.033333063 CET	56060	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:22.038085938 CET	3778	56060	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:22.724211931 CET	3778	56060	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:22.724435091 CET	56060	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:22.724469900 CET	56060	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:22.724564075 CET	56062	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:22.729350090 CET	3778	56062	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:22.729438066 CET	56062	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:22.729490995 CET	56062	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:22.734431982 CET	3778	56062	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:22.734497070 CET	56062	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:22.739250898 CET	3778	56062	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:23.372697115 CET	3778	56062	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:23.372989893 CET	56062	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:23.373020887 CET	56062	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:23.373089075 CET	56064	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:23.377898932 CET	3778	56064	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:23.377970934 CET	56064	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:23.378030062 CET	56064	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:23.382863045 CET	3778	56064	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:23.382919073 CET	56064	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:23.387666941 CET	3778	56064	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:24.058804035 CET	3778	56064	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:24.058994055 CET	56064	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:24.059042931 CET	56064	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:24.059115887 CET	56066	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:24.063877106 CET	3778	56066	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:24.063952923 CET	56066	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:24.064008951 CET	56066	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:24.068710089 CET	3778	56066	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:24.068754911 CET	56066	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:24.073596954 CET	3778	56066	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:24.703629971 CET	3778	56066	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:24.703809977 CET	56066	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:24.703957081 CET	56066	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:24.704039097 CET	56068	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:24.710038900 CET	3778	56068	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:24.710131884 CET	56068	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:24.710208893 CET	56068	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:24.716003895 CET	3778	56068	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:24.716068029 CET	56068	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:24.720866919 CET	3778	56068	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:25.411514997 CET	3778	56068	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:25.411830902 CET	56068	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:25.411895037 CET	56068	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:25.411982059 CET	56070	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:25.416793108 CET	3778	56070	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:25.416879892 CET	56070	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:25.416948080 CET	56070	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:25.421777010 CET	3778	56070	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:25.421829939 CET	56070	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:25.426615953 CET	3778	56070	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:26.039397955 CET	3778	56070	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:26.039495945 CET	56070	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:26.039563894 CET	56070	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:26.039647102 CET	56072	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:26.044445038 CET	3778	56072	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:26.044516087 CET	56072	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:26.044599056 CET	56072	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:26.049412012 CET	3778	56072	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:26.049474001 CET	56072	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:26.054265976 CET	3778	56072	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:26.747940063 CET	3778	56072	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:26.748240948 CET	56072	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:26.748316050 CET	56072	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:26.748402119 CET	56074	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:26.753227949 CET	3778	56074	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:26.753314972 CET	56074	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:26.753376007 CET	56074	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:26.758152962 CET	3778	56074	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:26.758203030 CET	56074	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:26.763042927 CET	3778	56074	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:27.459398985 CET	3778	56074	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:27.459681034 CET	56074	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:27.459750891 CET	56074	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:27.459850073 CET	56076	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:27.465054035 CET	3778	56076	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:27.465140104 CET	56076	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:27.465193033 CET	56076	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:27.470828056 CET	3778	56076	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:27.470896959 CET	56076	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:27.476260900 CET	3778	56076	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:28.232440948 CET	3778	56076	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:28.232641935 CET	56076	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:28.232681036 CET	56076	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:28.232758045 CET	56078	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:28.237579107 CET	3778	56078	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:28.237694979 CET	56078	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:28.237751961 CET	56078	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:28.242500067 CET	3778	56078	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:28.242583990 CET	56078	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:28.247353077 CET	3778	56078	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:28.945986986 CET	3778	56078	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:28.946264982 CET	56078	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:28.946353912 CET	56078	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:28.946408987 CET	56080	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:28.951148987 CET	3778	56080	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:28.951235056 CET	56080	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:28.951289892 CET	56080	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:28.956442118 CET	3778	56080	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:28.956511974 CET	56080	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:28.961535931 CET	3778	56080	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:29.635876894 CET	3778	56080	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:29.636173964 CET	56080	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:29.636228085 CET	56080	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:29.636306047 CET	56082	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:29.642081022 CET	3778	56082	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:29.642162085 CET	56082	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:29.642245054 CET	56082	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:29.646976948 CET	3778	56082	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:29.647058010 CET	56082	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:29.651782990 CET	3778	56082	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:30.336237907 CET	3778	56082	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:30.336419106 CET	56082	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:30.336489916 CET	56082	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:30.336576939 CET	56084	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:30.341419935 CET	3778	56084	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:30.341660023 CET	56084	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:30.341711044 CET	56084	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:30.346492052 CET	3778	56084	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:30.346561909 CET	56084	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:30.352288008 CET	3778	56084	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:31.055469990 CET	3778	56084	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:31.055648088 CET	56084	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:31.055741072 CET	56084	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:31.055834055 CET	56086	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:31.060962915 CET	3778	56086	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:31.061043978 CET	56086	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:31.061121941 CET	56086	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:31.066431046 CET	3778	56086	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:31.066492081 CET	56086	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:31.072843075 CET	3778	56086	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:31.701597929 CET	3778	56086	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:31.701875925 CET	56086	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:31.701951027 CET	56086	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:31.702045918 CET	56088	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:31.706814051 CET	3778	56088	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:31.706943035 CET	56088	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:31.707003117 CET	56088	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:31.711755991 CET	3778	56088	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:31.711848021 CET	56088	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:31.716665030 CET	3778	56088	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:32.411817074 CET	3778	56088	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:32.411983967 CET	56088	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:32.412156105 CET	56088	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:32.412251949 CET	56090	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:32.417052031 CET	3778	56090	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:32.417131901 CET	56090	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:32.417211056 CET	56090	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:32.421952009 CET	3778	56090	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:32.422005892 CET	56090	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:32.426815987 CET	3778	56090	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:33.115089893 CET	3778	56090	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:33.115199089 CET	56090	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:33.115225077 CET	56090	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:33.115273952 CET	56092	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:33.120065928 CET	3778	56092	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:33.120168924 CET	56092	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:33.120184898 CET	56092	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:33.124964952 CET	3778	56092	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:33.125027895 CET	56092	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:33.129795074 CET	3778	56092	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:33.841711998 CET	3778	56092	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:33.841852903 CET	56092	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:33.841887951 CET	56092	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:33.841968060 CET	56094	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:33.846847057 CET	3778	56094	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:33.846941948 CET	56094	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:33.846999884 CET	56094	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:33.851799965 CET	3778	56094	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:33.851865053 CET	56094	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:33.856652021 CET	3778	56094	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:34.489356041 CET	3778	56094	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:34.489736080 CET	56094	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:34.489798069 CET	56094	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:34.489912987 CET	56096	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:34.494703054 CET	3778	56096	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:34.494792938 CET	56096	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:34.494857073 CET	56096	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:34.499613047 CET	3778	56096	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:34.499685049 CET	56096	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:34.504463911 CET	3778	56096	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:35.173919916 CET	3778	56096	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:35.174036026 CET	56096	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:35.174036026 CET	56096	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:35.174076080 CET	56098	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:35.178926945 CET	3778	56098	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:35.179068089 CET	56098	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:35.179080009 CET	56098	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:35.183872938 CET	3778	56098	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:35.183933973 CET	56098	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:35.188746929 CET	3778	56098	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:35.860831976 CET	3778	56098	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:35.861020088 CET	56098	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:35.861054897 CET	56098	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:35.861129045 CET	56100	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:35.865936995 CET	3778	56100	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:35.866022110 CET	56100	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:35.866101027 CET	56100	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:35.870867968 CET	3778	56100	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:35.870929003 CET	56100	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:35.875758886 CET	3778	56100	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:36.545265913 CET	3778	56100	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:36.545578003 CET	56100	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:36.545658112 CET	56100	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:36.545753956 CET	56102	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:36.550600052 CET	3778	56102	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:36.550748110 CET	56102	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:36.550764084 CET	56102	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:36.555571079 CET	3778	56102	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:36.555639029 CET	56102	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:36.560458899 CET	3778	56102	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:37.223948002 CET	3778	56102	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:37.224164009 CET	56102	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:37.224324942 CET	56102	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:37.224406004 CET	56104	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:37.229227066 CET	3778	56104	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:37.229307890 CET	56104	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:37.229388952 CET	56104	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:37.234184980 CET	3778	56104	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:37.234245062 CET	56104	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:37.239074945 CET	3778	56104	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:37.898746967 CET	3778	56104	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:37.898876905 CET	56104	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:37.898960114 CET	56104	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:37.899065018 CET	56106	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:37.903851986 CET	3778	56106	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:37.903980970 CET	56106	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:37.904023886 CET	56106	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:37.908771992 CET	3778	56106	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:37.908839941 CET	56106	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:37.913688898 CET	3778	56106	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:38.574223042 CET	3778	56106	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:38.574484110 CET	56106	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:38.574507952 CET	56106	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:38.574583054 CET	56108	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:38.579397917 CET	3778	56108	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:38.579473972 CET	56108	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:38.579555035 CET	56108	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:38.584261894 CET	3778	56108	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:38.584320068 CET	56108	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:38.589127064 CET	3778	56108	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:39.325737000 CET	3778	56108	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:39.326020956 CET	56108	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:39.326116085 CET	56108	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:39.326200008 CET	56110	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:39.331017971 CET	3778	56110	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:39.331249952 CET	56110	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:39.331301928 CET	56110	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:39.336138010 CET	3778	56110	79.133.46.252	192.168.2.14
Jan 4, 2025 23:54:39.336210012 CET	56110	3778	192.168.2.14	79.133.46.252
Jan 4, 2025 23:54:39.340956926 CET	3778	56110	79.133.46.252	192.168.2.14

System Behavior

Analysis Process: Space.x86.elf PID: 5484, Parent PID: 5410

General

Start time (UTC):	22:52:54
Start date (UTC):	04/01/2025
Path:	/tmp/Space.x86.elf
Arguments:	/tmp/Space.x86.elf
File size:	35196 bytes
MD5 hash:	9e06007e1384257a6df12f7da25e5b19

Chronological Activities

Analysis Process: Space.x86.elf PID: 5485, Parent PID: 5484

General

Start time (UTC):	22:52:54
Start date (UTC):	04/01/2025
Path:	/tmp/Space.x86.elf
Arguments:	-
File size:	35196 bytes
MD5 hash:	9e06007e1384257a6df12f7da25e5b19

Chronological Activities

Analysis Process: Space.x86.elf PID: 5486, Parent PID: 5485

General

Start time (UTC):	22:52:54
Start date (UTC):	04/01/2025
Path:	/tmp/Space.x86.elf
Arguments:	-
File size:	35196 bytes
MD5 hash:	9e06007e1384257a6df12f7da25e5b19

Chronological Activities

Analysis Process: Space.x86.elf PID: 5487, Parent PID: 5485

General

Start time (UTC):	22:52:54
Start date (UTC):	04/01/2025
Path:	/tmp/Space.x86.elf
Arguments:	-
File size:	35196 bytes
MD5 hash:	9e06007e1384257a6df12f7da25e5b19

Analysis Process: Space.x86.elf PID: 5496, Parent PID: 5484

General

Start time (UTC):	22:53:00
Start date (UTC):	04/01/2025
Path:	/tmp/Space.x86.elf
Arguments:	-
File size:	35196 bytes
MD5 hash:	9e06007e1384257a6df12f7da25e5b19

Chronological Activities

Analysis Process: Space.x86.elf PID: 5497, Parent PID: 5484

General

Start time (UTC):	22:53:00
Start date (UTC):	04/01/2025
Path:	/tmp/Space.x86.elf
Arguments:	-
File size:	35196 bytes
MD5 hash:	9e06007e1384257a6df12f7da25e5b19

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report Space.x86.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: Space.x86.elf PID: 5484, Parent PID: 5410

General

Chronological Activities

Analysis Process: Space.x86.elf PID: 5485, Parent PID: 5484

General

Chronological Activities

Analysis Process: Space.x86.elf PID: 5486, Parent PID: 5485

General

Chronological Activities

Analysis Process: Space.x86.elf PID: 5487, Parent PID: 5485

General

Analysis Process: Space.x86.elf PID: 5496, Parent PID: 5484

General

Chronological Activities

Analysis Process: Space.x86.elf PID: 5497, Parent PID: 5484

General

Chronological Activities

Linux Analysis Report
Space.x86.elf