Edit tour

Linux Analysis Report
gigops.arm6.elf

Overview

General Information

Sample name:	gigops.arm6.elf
Analysis ID:	1585605
MD5:	91ee3a6272d8663f951eee23a1a3a043
SHA1:	b95b0a46281ed0e56583755a877918f65f3df4bb
SHA256:	9f56cb9f7f257bf065aef59ea95fd8dfad96c288d7250046914a17dbadef7b3c
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt

Score:	92
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Opens /proc/net/* files useful for finding connected devices and routers

Executes the "rm" command used to delete files or directories

Sample and/or dropped files contains symbols with suspicious names

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1585605
Start date and time:	2025-01-07 22:17:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 3s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	gigops.arm6.elf
Detection:	MAL
Classification:	mal92.spre.troj.linELF@0/0@0/0

Warnings

VT rate limit hit for: gigops.arm6.elf

Runtime Messages

Command:	/tmp/gigops.arm6.elf
PID:	6212
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	BUILD DONGS buf: BUILD DONGS BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS
Standard Error:

Process Tree

system is lnxubuntu20

dash New Fork (PID: 6198, Parent: 4331)

rm (PID: 6198, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.9qacKNxiGJ /tmp/tmp.7wcOgPA9eQ /tmp/tmp.a1PJgk5ton

dash New Fork (PID: 6199, Parent: 4331)

rm (PID: 6199, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.9qacKNxiGJ /tmp/tmp.7wcOgPA9eQ /tmp/tmp.a1PJgk5ton

gigops.arm6.elf (PID: 6212, Parent: 6132, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/gigops.arm6.elf

gigops.arm6.elf New Fork (PID: 6214, Parent: 6212)

gigops.arm6.elf New Fork (PID: 6216, Parent: 6214)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
gigops.arm6.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
gigops.arm6.elf	Linux_Trojan_Gafgyt_6a510422	unknown	unknown	0x14fe:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
gigops.arm6.elf	Linux_Trojan_Gafgyt_d2953f92	unknown	unknown	0x140e:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00
gigops.arm6.elf	Linux_Trojan_Gafgyt_fb14e81f	unknown	unknown	0x13a78:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00

Memory Dumps

Source	Rule	Description	Author	Strings
6212.1.00007f193c017000.00007f193c02c000.r-x.sdmp	Linux_Trojan_Gafgyt_6a510422	unknown	unknown	0x14fe:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
6212.1.00007f193c017000.00007f193c02c000.r-x.sdmp	Linux_Trojan_Gafgyt_d2953f92	unknown	unknown	0x140e:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00
6212.1.00007f193c017000.00007f193c02c000.r-x.sdmp	Linux_Trojan_Gafgyt_fb14e81f	unknown	unknown	0x13a78:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00
6214.1.00007f193c017000.00007f193c02c000.r-x.sdmp	Linux_Trojan_Gafgyt_6a510422	unknown	unknown	0x14fe:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
6214.1.00007f193c017000.00007f193c02c000.r-x.sdmp	Linux_Trojan_Gafgyt_d2953f92	unknown	unknown	0x140e:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00
6214.1.00007f193c017000.00007f193c02c000.r-x.sdmp	Linux_Trojan_Gafgyt_fb14e81f	unknown	unknown	0x13a78:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00
Click to see the 1 entries

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-07T22:17:52.336401+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54330	45.128.233.186	23	TCP
2025-01-07T22:17:54.018407+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54332	45.128.233.186	23	TCP
2025-01-07T22:17:55.770551+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54334	45.128.233.186	23	TCP
2025-01-07T22:17:57.562841+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54336	45.128.233.186	23	TCP
2025-01-07T22:17:59.339544+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54338	45.128.233.186	23	TCP
2025-01-07T22:18:01.083219+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54340	45.128.233.186	23	TCP
2025-01-07T22:18:02.873498+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54342	45.128.233.186	23	TCP
2025-01-07T22:18:04.646436+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54344	45.128.233.186	23	TCP
2025-01-07T22:18:06.445327+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54346	45.128.233.186	23	TCP
2025-01-07T22:18:08.196212+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54348	45.128.233.186	23	TCP
2025-01-07T22:18:09.932145+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54350	45.128.233.186	23	TCP
2025-01-07T22:18:11.668014+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54352	45.128.233.186	23	TCP
2025-01-07T22:18:13.492526+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54354	45.128.233.186	23	TCP
2025-01-07T22:18:15.224672+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54356	45.128.233.186	23	TCP
2025-01-07T22:18:16.960838+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54358	45.128.233.186	23	TCP
2025-01-07T22:18:18.734672+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54360	45.128.233.186	23	TCP
2025-01-07T22:18:20.492913+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54362	45.128.233.186	23	TCP
2025-01-07T22:18:22.260844+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54364	45.128.233.186	23	TCP
2025-01-07T22:18:24.008702+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54366	45.128.233.186	23	TCP
2025-01-07T22:18:25.806686+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54368	45.128.233.186	23	TCP
2025-01-07T22:18:27.649756+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54370	45.128.233.186	23	TCP
2025-01-07T22:18:29.424919+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54372	45.128.233.186	23	TCP
2025-01-07T22:18:31.183932+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54374	45.128.233.186	23	TCP
2025-01-07T22:18:32.996204+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54376	45.128.233.186	23	TCP
2025-01-07T22:18:34.780315+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54378	45.128.233.186	23	TCP
2025-01-07T22:18:36.549514+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54380	45.128.233.186	23	TCP
2025-01-07T22:18:38.307507+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54382	45.128.233.186	23	TCP
2025-01-07T22:18:40.054274+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54384	45.128.233.186	23	TCP
2025-01-07T22:18:41.825842+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54386	45.128.233.186	23	TCP
2025-01-07T22:18:43.588239+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54388	45.128.233.186	23	TCP
2025-01-07T22:18:45.322670+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54390	45.128.233.186	23	TCP
2025-01-07T22:18:47.071875+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54392	45.128.233.186	23	TCP
2025-01-07T22:18:48.881332+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54394	45.128.233.186	23	TCP
2025-01-07T22:18:50.642758+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54396	45.128.233.186	23	TCP
2025-01-07T22:18:52.387594+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54398	45.128.233.186	23	TCP
2025-01-07T22:18:54.114540+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54400	45.128.233.186	23	TCP
2025-01-07T22:18:55.890161+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54402	45.128.233.186	23	TCP
2025-01-07T22:18:57.697966+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54404	45.128.233.186	23	TCP
2025-01-07T22:18:59.481309+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54406	45.128.233.186	23	TCP
2025-01-07T22:19:01.272129+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54408	45.128.233.186	23	TCP
2025-01-07T22:19:03.019709+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54410	45.128.233.186	23	TCP
2025-01-07T22:19:04.784248+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54412	45.128.233.186	23	TCP
2025-01-07T22:19:06.582419+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54414	45.128.233.186	23	TCP
2025-01-07T22:19:08.319518+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54416	45.128.233.186	23	TCP
2025-01-07T22:19:10.054072+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54418	45.128.233.186	23	TCP
2025-01-07T22:19:11.809753+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54420	45.128.233.186	23	TCP
2025-01-07T22:19:13.585547+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54422	45.128.233.186	23	TCP
2025-01-07T22:19:15.358171+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54424	45.128.233.186	23	TCP
2025-01-07T22:19:17.108075+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54426	45.128.233.186	23	TCP
2025-01-07T22:19:18.897301+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54428	45.128.233.186	23	TCP
2025-01-07T22:19:20.712382+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54430	45.128.233.186	23	TCP
2025-01-07T22:19:22.487912+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54432	45.128.233.186	23	TCP
2025-01-07T22:19:24.266572+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54434	45.128.233.186	23	TCP
2025-01-07T22:19:26.046660+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54436	45.128.233.186	23	TCP
2025-01-07T22:19:27.804781+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54438	45.128.233.186	23	TCP
2025-01-07T22:19:29.576706+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54440	45.128.233.186	23	TCP
2025-01-07T22:19:31.355564+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54442	45.128.233.186	23	TCP
2025-01-07T22:19:33.098617+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54444	45.128.233.186	23	TCP
2025-01-07T22:19:34.874828+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54446	45.128.233.186	23	TCP
2025-01-07T22:19:36.648809+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54448	45.128.233.186	23	TCP
2025-01-07T22:19:38.375524+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54450	45.128.233.186	23	TCP
2025-01-07T22:19:40.180027+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54452	45.128.233.186	23	TCP
2025-01-07T22:19:41.945913+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54454	45.128.233.186	23	TCP
2025-01-07T22:19:43.726411+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54456	45.128.233.186	23	TCP
2025-01-07T22:19:45.475822+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54458	45.128.233.186	23	TCP
2025-01-07T22:19:47.299403+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54460	45.128.233.186	23	TCP
2025-01-07T22:19:49.868853+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54462	45.128.233.186	23	TCP
2025-01-07T22:19:51.659082+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54464	45.128.233.186	23	TCP
2025-01-07T22:19:53.436335+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54466	45.128.233.186	23	TCP
2025-01-07T22:19:55.279074+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54468	45.128.233.186	23	TCP
2025-01-07T22:19:57.057411+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54470	45.128.233.186	23	TCP
2025-01-07T22:19:58.869799+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54472	45.128.233.186	23	TCP
2025-01-07T22:20:00.667007+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54474	45.128.233.186	23	TCP
2025-01-07T22:20:02.449546+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54476	45.128.233.186	23	TCP
2025-01-07T22:20:04.253074+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54478	45.128.233.186	23	TCP
2025-01-07T22:20:06.027260+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54480	45.128.233.186	23	TCP
2025-01-07T22:20:07.818818+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54482	45.128.233.186	23	TCP
2025-01-07T22:20:09.598502+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54484	45.128.233.186	23	TCP
2025-01-07T22:20:11.668598+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54486	45.128.233.186	23	TCP
2025-01-07T22:20:13.466777+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54488	45.128.233.186	23	TCP
2025-01-07T22:20:15.198564+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54490	45.128.233.186	23	TCP
2025-01-07T22:20:16.990674+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54492	45.128.233.186	23	TCP
2025-01-07T22:20:18.804616+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54494	45.128.233.186	23	TCP
2025-01-07T22:20:20.629688+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54496	45.128.233.186	23	TCP
2025-01-07T22:20:22.377534+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54498	45.128.233.186	23	TCP
2025-01-07T22:20:24.156678+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54500	45.128.233.186	23	TCP
2025-01-07T22:20:26.636242+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54502	45.128.233.186	23	TCP
2025-01-07T22:20:28.405564+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54504	45.128.233.186	23	TCP
2025-01-07T22:20:30.153627+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54506	45.128.233.186	23	TCP
2025-01-07T22:20:31.919545+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54508	45.128.233.186	23	TCP
2025-01-07T22:20:33.707421+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54510	45.128.233.186	23	TCP
2025-01-07T22:20:35.447827+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54512	45.128.233.186	23	TCP
2025-01-07T22:20:37.175394+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54514	45.128.233.186	23	TCP
2025-01-07T22:20:38.951451+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54516	45.128.233.186	23	TCP
2025-01-07T22:20:40.707260+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54518	45.128.233.186	23	TCP
2025-01-07T22:20:42.485279+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54520	45.128.233.186	23	TCP
2025-01-07T22:20:44.243502+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54522	45.128.233.186	23	TCP
2025-01-07T22:20:45.989619+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54524	45.128.233.186	23	TCP
2025-01-07T22:20:47.797354+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54526	45.128.233.186	23	TCP
2025-01-07T22:20:49.569959+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54528	45.128.233.186	23	TCP
2025-01-07T22:20:51.345361+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54530	45.128.233.186	23	TCP
2025-01-07T22:20:53.126303+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54532	45.128.233.186	23	TCP
2025-01-07T22:20:54.900503+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54534	45.128.233.186	23	TCP
2025-01-07T22:20:56.688754+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54536	45.128.233.186	23	TCP
2025-01-07T22:20:58.453452+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54538	45.128.233.186	23	TCP
2025-01-07T22:21:00.242938+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54540	45.128.233.186	23	TCP
2025-01-07T22:21:02.018403+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54542	45.128.233.186	23	TCP
2025-01-07T22:21:03.805733+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54544	45.128.233.186	23	TCP
2025-01-07T22:21:05.619289+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54546	45.128.233.186	23	TCP
2025-01-07T22:21:07.389602+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54548	45.128.233.186	23	TCP
2025-01-07T22:21:09.178635+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54550	45.128.233.186	23	TCP
2025-01-07T22:21:10.914839+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54552	45.128.233.186	23	TCP
2025-01-07T22:21:12.683816+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54554	45.128.233.186	23	TCP
2025-01-07T22:21:14.490554+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54556	45.128.233.186	23	TCP
2025-01-07T22:21:16.261896+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54558	45.128.233.186	23	TCP
2025-01-07T22:21:18.002978+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54560	45.128.233.186	23	TCP
2025-01-07T22:21:19.743009+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54562	45.128.233.186	23	TCP
2025-01-07T22:21:21.525532+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54564	45.128.233.186	23	TCP
2025-01-07T22:21:23.301154+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54566	45.128.233.186	23	TCP
2025-01-07T22:21:25.071154+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54568	45.128.233.186	23	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: gigops.arm6.elf

Avira: detected

Found malware configuration

Source: gigops.arm6.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "45.128.233.186:23"}

Multi AV Scanner detection for submitted file

Source: gigops.arm6.elf

ReversingLabs: Detection: 73%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/gigops.arm6.elf (PID: 6212)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54346 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54350 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54352 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54460 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54394 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54492 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54434 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54524 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54464 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54532 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54334 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54374 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54480 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54360 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54330 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54554 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54342 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54400 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54332 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54354 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54386 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54540 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54362 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54414 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54422 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54388 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54402 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54420 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54564 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54348 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54452 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54382 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54438 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54376 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54356 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54552 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54358 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54534 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54366 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54406 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54436 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54392 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54372 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54472 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54396 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54424 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54408 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54384 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54428 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54446 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54338 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54512 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54476 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54440 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54410 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54494 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54336 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54418 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54380 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54546 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54562 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54370 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54496 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54550 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54412 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54544 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54490 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54482 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54498 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54486 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54526 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54456 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54548 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54528 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54556 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54542 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54518 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54560 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54522 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54368 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54566 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54568 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54442 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54474 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54538 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54430 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54390 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54468 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54340 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54462 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54404 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54432 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54344 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54364 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54416 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54450 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54378 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54508 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54478 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54530 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54454 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54398 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54458 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54504 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54444 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54520 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54448 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54470 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54506 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54510 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54500 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54502 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54466 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54514 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54484 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54488 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54536 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54558 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54516 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54426 -> 45.128.233.186:23

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186

Source: gigops.arm6.elf

String found in binary or memory: http://5.206.225.136/bins.sh;

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: gigops.arm6.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
Source: gigops.arm6.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
Source: gigops.arm6.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
Source: 6212.1.00007f193c017000.00007f193c02c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
Source: 6212.1.00007f193c017000.00007f193c02c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
Source: 6212.1.00007f193c017000.00007f193c02c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
Source: 6214.1.00007f193c017000.00007f193c02c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
Source: 6214.1.00007f193c017000.00007f193c02c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
Source: 6214.1.00007f193c017000.00007f193c02c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown

Source: gigops.arm6.elf

ELF static info symbol of initial sample: passwords

Source: gigops.arm6.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
Source: gigops.arm6.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
Source: gigops.arm6.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
Source: 6212.1.00007f193c017000.00007f193c02c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
Source: 6212.1.00007f193c017000.00007f193c02c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
Source: 6212.1.00007f193c017000.00007f193c02c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
Source: 6214.1.00007f193c017000.00007f193c02c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
Source: 6214.1.00007f193c017000.00007f193c02c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
Source: 6214.1.00007f193c017000.00007f193c02c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26

Source: classification engine

Classification label: mal92.spre.troj.linELF@0/0@0/0

Source: gigops.arm6.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: gigops.arm6.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: gigops.arm6.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: gigops.arm6.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: gigops.arm6.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: gigops.arm6.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: gigops.arm6.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: gigops.arm6.elf	ELF static info symbol of initial sample: libc/string/arm/_memcpy.S
Source: gigops.arm6.elf	ELF static info symbol of initial sample: libc/string/arm/memcpy.S
Source: gigops.arm6.elf	ELF static info symbol of initial sample: libc/string/arm/memset.S
Source: gigops.arm6.elf	ELF static info symbol of initial sample: libc/string/arm/strcmp.S
Source: gigops.arm6.elf	ELF static info symbol of initial sample: libc/string/arm/strlen.S
Source: gigops.arm6.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crt1.S
Source: gigops.arm6.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crti.S
Source: gigops.arm6.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crtn.S
Source: gigops.arm6.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/sigrestorer.S
Source: gigops.arm6.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/vfork.S

Source: /usr/bin/dash (PID: 6198)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.9qacKNxiGJ /tmp/tmp.7wcOgPA9eQ /tmp/tmp.a1PJgk5ton			Jump to behavior
Source: /usr/bin/dash (PID: 6199)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.9qacKNxiGJ /tmp/tmp.7wcOgPA9eQ /tmp/tmp.a1PJgk5ton			Jump to behavior

Source: /tmp/gigops.arm6.elf (PID: 6212)

Queries kernel information via 'uname':

Jump to behavior

Source: gigops.arm6.elf, 6212.1.000055e0ddba1000.000055e0ddccf000.rw-.sdmp, gigops.arm6.elf, 6214.1.000055e0ddba1000.000055e0ddccf000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: gigops.arm6.elf, 6212.1.000055e0ddba1000.000055e0ddccf000.rw-.sdmp, gigops.arm6.elf, 6214.1.000055e0ddba1000.000055e0ddccf000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: gigops.arm6.elf, 6212.1.00007ffed52dc000.00007ffed52fd000.rw-.sdmp, gigops.arm6.elf, 6214.1.00007ffed52dc000.00007ffed52fd000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: gigops.arm6.elf, 6212.1.00007ffed52dc000.00007ffed52fd000.rw-.sdmp, gigops.arm6.elf, 6214.1.00007ffed52dc000.00007ffed52fd000.rw-.sdmp	Binary or memory string: gx86_64/usr/bin/qemu-arm/tmp/gigops.arm6.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/gigops.arm6.elf

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: gigops.arm6.elf, type: SAMPLE

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: gigops.arm6.elf, type: SAMPLE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 File Deletion	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service

Malware Configuration

Threatname: Gafgyt

{"C2 url": "45.128.233.186:23"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
gigops.arm6.elf	74%	ReversingLabs	Linux.Trojan.Gafgyt
gigops.arm6.elf	100%	Avira	LINUX/Gafgyt.opnd

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
45.128.233.186:23	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://5.206.225.136/bins.sh;	gigops.arm6.elf	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
45.128.233.186	unknown	United Kingdom	208861	RACKTECHRU	true
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	miori.arm6.elf	Get hash	malicious	Unknown	Browse
	botnet.arm6.elf	Get hash	malicious	Unknown	Browse
	.i.elf	Get hash	malicious	Unknown	Browse
	94.156.227.153-sora.arm6-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse
	94.156.227.153-sora.arm-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse
	main_m68k.elf	Get hash	malicious	Mirai	Browse
	main_m68k.elf	Get hash	malicious	Mirai	Browse
	main_arm6.elf	Get hash	malicious	Mirai	Browse
	mips.elf	Get hash	malicious	Mirai	Browse
	sshd.elf	Get hash	malicious	Unknown	Browse
91.189.91.42	miori.arm6.elf	Get hash	malicious	Unknown	Browse
	botnet.arm6.elf	Get hash	malicious	Unknown	Browse
	.i.elf	Get hash	malicious	Unknown	Browse
	94.156.227.153-sora.arm6-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse
	94.156.227.153-sora.arm-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse
	main_m68k.elf	Get hash	malicious	Mirai	Browse
	main_m68k.elf	Get hash	malicious	Mirai	Browse
	main_arm6.elf	Get hash	malicious	Mirai	Browse
	mips.elf	Get hash	malicious	Mirai	Browse
	sshd.elf	Get hash	malicious	Unknown	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	miori.arm6.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	botnet.arm6.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	.i.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	94.156.227.153-sora.arm6-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	94.156.227.153-sora.arm-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	94.156.227.153-sora.arm5-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	94.156.227.153-sora.m68k-2025-01-07T16_09_14.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	main_m68k.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	main_m68k.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	main_arm6.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
CANONICAL-ASGB	miori.arm6.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	botnet.arm6.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	.i.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	94.156.227.153-sora.arm6-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	94.156.227.153-sora.arm-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	94.156.227.153-sora.arm5-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	94.156.227.153-sora.m68k-2025-01-07T16_09_14.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	main_m68k.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	main_m68k.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	main_arm6.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
RACKTECHRU	lEwK4xROgV.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	86.110.194.28
	zZ1Y43bxxV.exe	Get hash	malicious	DCRat	Browse	86.110.194.28
	updIMdPUj8.exe	Get hash	malicious	DCRat	Browse	86.110.194.28
	jew.sh4.elf	Get hash	malicious	Unknown	Browse	91.223.144.119
	la.bot.mipsel.elf	Get hash	malicious	Unknown	Browse	193.38.236.134
	oyCvLcfl3R.exe	Get hash	malicious	XenoRAT	Browse	194.113.106.81
	qsKo.ps1	Get hash	malicious	RHADAMANTHYS	Browse	194.113.106.180
	GsrDwm0DJG.ps1	Get hash	malicious	RHADAMANTHYS	Browse	194.113.106.180
	HeggBkMoYE.ps1	Get hash	malicious	RHADAMANTHYS	Browse	194.113.106.180
	b2J6hgvd51.elf	Get hash	malicious	Unknown	Browse	45.128.232.191
INIT7CH	miori.arm6.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	botnet.arm6.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	.i.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	94.156.227.153-sora.arm6-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	94.156.227.153-sora.arm-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	main_m68k.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	miori.arm5.elf	Get hash	malicious	Unknown	Browse	77.109.182.70
	main_m68k.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	main_arm6.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	mips.elf	Get hash	malicious	Mirai	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	5.9322327738793685
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	gigops.arm6.elf
File size:	122'380 bytes
MD5:	91ee3a6272d8663f951eee23a1a3a043
SHA1:	b95b0a46281ed0e56583755a877918f65f3df4bb
SHA256:	9f56cb9f7f257bf065aef59ea95fd8dfad96c288d7250046914a17dbadef7b3c
SHA512:	36eebf660350326c662118397100e76b6eecea11b7bac8d043ae73c298344a4fdc4f284faa5a27b79fa90469f16d86953c5ad1b543e5864b509c9cf29b1dbc2e
SSDEEP:	3072:KozW1mCnL9DQMPPhdFByu2z1hUneGpJwrahKr3zCOM9l2BWzK2y+MWV1:GSahKr3PBWzdMWv
TLSH:	6BC30909D9505737C2D23BBAF79A82CE73261FA85797331186287BF41BE5B9D1E39020
File Content Preview:	.ELF..............(.........4...ll......4. ...(........p.N...........................................O...O...............P...P...P..H....g..........Q.td..................................-...L..................G.F.G.F.G.F.G.F G.F(G.F0G.F8G.F@G.FHG.FPG.FXG.

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x81b0
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	4
Section Header Offset:	93292
Section Header Size:	40
Number of Section Headers:	24
Header String Table Index:	21

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80b4	0xb4	0x10	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80d0	0xd0	0x1318c	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x1b25c	0x1325c	0x10	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x1b270	0x13270	0x1c70	0x0	0x2	A	0	0	8
.ARM.extab	PROGBITS	0x1cee0	0x14ee0	0x18	0x0	0x2	A	0	0	4
.ARM.exidx	ARM_EXIDX	0x1cef8	0x14ef8	0x10	0x0	0x82	AL	2	0	4
.eh_frame	PROGBITS	0x25000	0x15000	0x4	0x0	0x3	WA	0	0	4
.init_array	INIT_ARRAY	0x25004	0x15004	0x4	0x0	0x3	WA	0	0	4
.fini_array	FINI_ARRAY	0x25008	0x15008	0x4	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x2500c	0x1500c	0x4	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x25010	0x15010	0x7c	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x2508c	0x1508c	0x2bc	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x25348	0x15348	0x6498	0x0	0x3	WA	0	0	8
.comment	PROGBITS	0x0	0x15348	0xb68	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x15eb0	0xe0	0x0	0x0		0	0	8
.debug_info	PROGBITS	0x0	0x15f90	0x4b0	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x16440	0x8c	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x164cc	0x655	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x16b24	0x58	0x0	0x0		0	0	4
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x16b7c	0x10	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x16b8c	0xdd	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x1702c	0x4860	0x10	0x0		23	622	4
.strtab	STRTAB	0x0	0x1b88c	0x2580	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
EXIDX	0x14ef8	0x1cef8	0x1cef8	0x10	0x10	2.4056	0x4	R	0x4	.ARM.exidx
LOAD	0x0	0x8000	0x8000	0x14f08	0x14f08	5.9601	0x5	R E	0x8000	.init .text .fini .rodata .ARM.extab .ARM.exidx
LOAD	0x15000	0x25000	0x25000	0x348	0x67e0	3.7867	0x6	RW	0x8000	.eh_frame .init_array .fini_array .jcr .got .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x80b4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80d0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x1b25c	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x1b270	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x1cee0	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x1cef8	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x25000	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x25004	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x25008	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x2500c	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x25010	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x2508c	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x25348	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
$a	.symtab	0x80b4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1b25c	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80c0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1b268	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x810c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8150	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x82c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8408	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8d14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8e80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9108	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9290	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x93e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9894	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9980	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9a38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9d28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa144	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa448	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xabd8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xac3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb1c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcbf8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd4b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd634	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdd48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe9ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10018	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10378	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10634	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10658	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x110a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x111bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x111d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11210	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11244	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x112a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x112d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x112ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1131c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1135c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11390	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x113ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x113ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11420	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11454	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11480	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x114b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x114e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x115c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x115f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11628	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1167c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x116a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x116e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11714	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1173c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1176c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11788	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x117fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11848	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11878	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x119b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11c74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11cdc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11d10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11de4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11e14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11ef8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x126b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12758	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1279c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1294c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x129a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13000	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x130a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13100	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13120	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13130	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1322c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x132f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13320	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13344	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13400	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x134f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13508	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13538	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13638	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1365c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x136d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13738	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13a24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13dec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13e94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13ebc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13ef4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13f2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13f70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13fa8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13fe0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14020	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14064	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1409c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x140b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x140fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14110	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x141c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14234	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14bcc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1506c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x150ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x151d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x151ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15290	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15348	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15408	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x154ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15590	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15620	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x156f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x157dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x157fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15818	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x159d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15a90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15b3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15c88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16260	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1630c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x163cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16420	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1648c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16760	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x168bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16924	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16944	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x169cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x169d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x169e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16a18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16a4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16a74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16a88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16abc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16af0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16b04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16b18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16b84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16b98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16bcc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16c00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16c34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16d2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16dfc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ea8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1702c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x173d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17424	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17448	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x174f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x176ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x176e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17708	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1773c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x177f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x178a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17bac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17cec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17dbc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17e2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17e58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17fb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x187a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18884	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18940	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18ac8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18cd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18e00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18ea0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19330	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19420	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19498	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x194dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1958c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1966c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x196b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19708	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1972c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19818	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19858	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19950	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19a84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19e38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19e70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19ebc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19ec8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19f20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a150	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a2d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a2f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a448	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a4a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a564	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a594	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a62c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a668	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a6cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a810	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ac2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b0c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b208	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8144	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25008	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x819c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25004	0	NOTYPE	<unknown>	DEFAULT	8
$d	.symtab	0x25090	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x81e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25094	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x82bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x83fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8d10	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8e7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x90f8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x928c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b4b8	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x93e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x988c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9978	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9a34	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9d20	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa13c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa444	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xabcc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xac38	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb1a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xcbd0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd4ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd62c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdd1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe9d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xffb0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1036c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10620	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10654	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11068	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11734	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11764	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x250f8	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x25100	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x11780	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x117ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11840	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11994	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11c4c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11cd4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11d08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11dd0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2513c	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x25108	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x1c1a4	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x11ee4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12698	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12948	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12994	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12ee0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25244	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x132f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x134e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13530	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1362c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x136d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13a18	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13de0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13e8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13ef0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13f28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13f6c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13fa4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13fdc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1401c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14060	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14098	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x141c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14bb0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25248	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x15050	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x150a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x151c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25260	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x15274	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1532c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x153ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15490	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25278	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x25310	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x15588	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1561c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x156ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x157d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cde8	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x159d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15a70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25324	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x15b38	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15c64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1623c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16304	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x163b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16418	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1647c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16720	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2533c	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x168ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x169c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16a6c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16b7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16d18	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16df4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16ea4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ce64	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x17018	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2b3f0	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x173c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1768c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17b78	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18788	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ce98	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x18870	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1892c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18a9c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18cb0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18df8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19418	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19584	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19664	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19810	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19948	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19a6c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19e1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19e64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19eb4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a434	0	NOTYPE	<unknown>	DEFAULT	2
$t	.symtab	0x80d0	0	NOTYPE	<unknown>	DEFAULT	2
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
C.1.3506	.symtab	0x1ce64	24	OBJECT	<unknown>	DEFAULT	4
C.381.6767	.symtab	0x1b9d0	8	OBJECT	<unknown>	DEFAULT	4
Laligned	.symtab	0x130c8	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0x130e4	0	NOTYPE	<unknown>	DEFAULT	2
Q	.symtab	0x25380	16384	OBJECT	<unknown>	DEFAULT	13
StartTheLelz	.symtab	0xafb4	7972	FUNC	<unknown>	DEFAULT	2
_Exit	.symtab	0x1167c	44	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x25010	0	OBJECT	<unknown>	HIDDEN	11
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b	.symtab	0x250f8	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x1bb88	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x25100	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x1be88	768	OBJECT	<unknown>	DEFAULT	4
__EH_FRAME_BEGIN__	.symtab	0x25000	0	OBJECT	<unknown>	DEFAULT	7
__FRAME_END__	.symtab	0x25000	0	OBJECT	<unknown>	DEFAULT	7
__GI___C_ctype_b	.symtab	0x250f8	4	OBJECT	<unknown>	HIDDEN	12
__GI___C_ctype_toupper	.symtab	0x25100	4	OBJECT	<unknown>	HIDDEN	12
__GI___ctype_b	.symtab	0x250fc	4	OBJECT	<unknown>	HIDDEN	12
__GI___ctype_toupper	.symtab	0x25104	4	OBJECT	<unknown>	HIDDEN	12
__GI___errno_location	.symtab	0x1176c	28	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0x11554	108	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x18cd4	300	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x134f0	24	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x114e8	108	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0x141ec	36	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0x14210	36	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0x141c8	36	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x16350	124	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x16420	108	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x13538	256	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x1167c	44	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x150ac	296	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x157dc	32	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x19e70	76	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x113ec	52	FUNC	<unknown>	HIDDEN	2
__GI_clock_getres	.symtab	0x16a88	52	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x116e0	52	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x16c34	248	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x17354	52	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x17388	72	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x1702c	808	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x13ebc	56	FUNC	<unknown>	HIDDEN	2
__GI_dup2	.symtab	0x11210	52	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x2b3f0	4	OBJECT	<unknown>	HIDDEN	13
__GI_execl	.symtab	0x16260	172	FUNC	<unknown>	HIDDEN	2
__GI_execve	.symtab	0x16a18	52	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x159d8	184	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x174f8	436	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x114e8	108	FUNC	<unknown>	HIDDEN	2
__GI_fdopen	.symtab	0x176ac	60	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x18ac8	524	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x187a8	220	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x18cd4	300	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x18884	188	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x18e00	160	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x176e8	32	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x1135c	52	FUNC	<unknown>	HIDDEN	2
__GI_fprintf	.symtab	0x11848	48	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x12f10	56	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x1a2d4	36	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x1a2f8	336	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x19ec8	88	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x12f48	176	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x18cd4	300	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x11454	44	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x16af0	20	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x16b04	20	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x16b84	20	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x16a4c	40	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x112d8	20	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x16abc	52	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x13ef4	56	FUNC	<unknown>	HIDDEN	2
__GI_gettimeofday	.symtab	0x114b4	52	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x16a74	20	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x2b3f4	4	OBJECT	<unknown>	HIDDEN	13
__GI_htonl	.symtab	0x136e8	32	FUNC	<unknown>	HIDDEN	2
__GI_htons	.symtab	0x136d8	16	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x13e94	40	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x19858	248	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x13e78	28	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x13dec	140	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x13b68	644	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x13808	540	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x156f8	228	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x11628	84	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x13638	36	FUNC	<unknown>	HIDDEN	2
__GI_isspace	.symtab	0x11714	40	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x11480	52	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x1a668	100	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x19330	240	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x13120	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x19708	36	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x1958c	224	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x13000	156	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x168bc	104	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x1a150	64	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x16b98	52	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x16bcc	52	FUNC	<unknown>	HIDDEN	2
__GI_ntohl	.symtab	0x13718	32	FUNC	<unknown>	HIDDEN	2
__GI_ntohs	.symtab	0x13708	16	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x11244	96	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x16dfc	172	FUNC	<unknown>	HIDDEN	2
__GI_perror	.symtab	0x11788	116	FUNC	<unknown>	HIDDEN	2
__GI_pipe	.symtab	0x112a4	52	FUNC	<unknown>	HIDDEN	2
__GI_printf	.symtab	0x117fc	76	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x1409c	28	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x151ec	164	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x15590	144	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x194dc	176	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x11420	52	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x16f40	236	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x13f70	56	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x16b18	108	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x113ac	64	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x13fa8	56	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x13fe0	64	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x115f4	52	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x14020	68	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x154ac	228	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x16944	136	FUNC	<unknown>	HIDDEN	2
__GI_sigaddset	.symtab	0x140b8	68	FUNC	<unknown>	HIDDEN	2
__GI_sigemptyset	.symtab	0x140fc	20	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x14110	184	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x116a8	56	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x15a90	172	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x14064	56	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x17708	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x15620	216	FUNC	<unknown>	HIDDEN	2
__GI_strcat	.symtab	0x132f8	40	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x13400	240	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x1972c	236	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x13100	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x13100	28	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x13320	36	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x19498	68	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x130a0	96	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x13344	188	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x1322c	204	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x19818	64	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x196b8	80	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x1966c	76	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x13130	252	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x13508	48	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x19420	120	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x157fc	28	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x15c88	1496	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x1365c	124	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x112ec	48	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x1173c	48	FUNC	<unknown>	HIDDEN	2
__GI_vfork	.symtab	0x111d0	64	FUNC	<unknown>	HIDDEN	2
__GI_vfprintf	.symtab	0x11e14	228	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x1773c	180	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x169e4	52	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x11390	28	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x173d0	84	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x17448	176	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x17424	36	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x115c0	52	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x2500c	0	OBJECT	<unknown>	DEFAULT	10
__JCR_LIST__	.symtab	0x2500c	0	OBJECT	<unknown>	DEFAULT	10
__adddf3	.symtab	0x1a81c	784	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmpeq	.symtab	0x1b178	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmple	.symtab	0x1b178	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdrcmple	.symtab	0x1b15c	52	FUNC	<unknown>	HIDDEN	2
__aeabi_d2uiz	.symtab	0x1b208	84	FUNC	<unknown>	HIDDEN	2
__aeabi_dadd	.symtab	0x1a81c	784	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpeq	.symtab	0x1b190	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpge	.symtab	0x1b1d8	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpgt	.symtab	0x1b1f0	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmple	.symtab	0x1b1c0	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmplt	.symtab	0x1b1a8	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ddiv	.symtab	0x1aebc	524	FUNC	<unknown>	HIDDEN	2
__aeabi_dmul	.symtab	0x1ac2c	656	FUNC	<unknown>	HIDDEN	2
__aeabi_drsub	.symtab	0x1a810	0	FUNC	<unknown>	HIDDEN	2
__aeabi_dsub	.symtab	0x1a818	788	FUNC	<unknown>	HIDDEN	2
__aeabi_f2d	.symtab	0x1ab78	64	FUNC	<unknown>	HIDDEN	2
__aeabi_i2d	.symtab	0x1ab50	40	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv	.symtab	0x1a6cc	0	FUNC	<unknown>	HIDDEN	2
__aeabi_idivmod	.symtab	0x1a7f8	24	FUNC	<unknown>	HIDDEN	2
__aeabi_l2d	.symtab	0x1abcc	96	FUNC	<unknown>	HIDDEN	2
__aeabi_ui2d	.symtab	0x1ab2c	36	FUNC	<unknown>	HIDDEN	2
__aeabi_uidiv	.symtab	0x110a8	0	FUNC	<unknown>	HIDDEN	2
__aeabi_uidivmod	.symtab	0x111a4	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ul2d	.symtab	0x1abb8	116	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr0	.symtab	0x19ebc	4	FUNC	<unknown>	DEFAULT	2
__aeabi_unwind_cpp_pr1	.symtab	0x19ec0	4	FUNC	<unknown>	DEFAULT	2
__aeabi_unwind_cpp_pr2	.symtab	0x19ec4	4	FUNC	<unknown>	DEFAULT	2
__app_fini	.symtab	0x2b3e8	4	OBJECT	<unknown>	HIDDEN	13
__atexit_lock	.symtab	0x25324	24	OBJECT	<unknown>	DEFAULT	12
__bss_end__	.symtab	0x2b7e0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x25348	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x25348	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x163cc	84	FUNC	<unknown>	DEFAULT	2
__cmpdf2	.symtab	0x1b0d8	132	FUNC	<unknown>	HIDDEN	2
__ctype_b	.symtab	0x250fc	4	OBJECT	<unknown>	DEFAULT	12
__ctype_toupper	.symtab	0x25104	4	OBJECT	<unknown>	DEFAULT	12
__curbrk	.symtab	0x2b3f8	4	OBJECT	<unknown>	HIDDEN	13
__data_start	.symtab	0x2508c	0	NOTYPE	<unknown>	DEFAULT	12
__default_rt_sa_restorer	.symtab	0x169dc	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x169d0	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0x111bc	20	FUNC	<unknown>	HIDDEN	2
__divdf3	.symtab	0x1aebc	524	FUNC	<unknown>	HIDDEN	2
__divsi3	.symtab	0x1a6cc	300	FUNC	<unknown>	HIDDEN	2
__do_global_dtors_aux	.symtab	0x810c	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux_fini_array_entry	.symtab	0x25008	0	OBJECT	<unknown>	DEFAULT	9
__dso_handle	.symtab	0x2508c	0	OBJECT	<unknown>	HIDDEN	12
__end__	.symtab	0x2b7e0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x2b3e0	4	OBJECT	<unknown>	DEFAULT	13
__eqdf2	.symtab	0x1b0d8	132	FUNC	<unknown>	HIDDEN	2
__errno_location	.symtab	0x1176c	28	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__error	.symtab	0x1120c	0	NOTYPE	<unknown>	DEFAULT	2
__exidx_end	.symtab	0x1cf08	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exidx_start	.symtab	0x1cef8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x2b3d8	4	OBJECT	<unknown>	HIDDEN	13
__extendsfdf2	.symtab	0x1ab78	64	FUNC	<unknown>	HIDDEN	2
__fcntl_nocancel	.symtab	0x11554	108	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x18cd4	300	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x2500c	0	NOTYPE	<unknown>	HIDDEN	9
__fini_array_start	.symtab	0x25008	0	NOTYPE	<unknown>	HIDDEN	9
__fixunsdfsi	.symtab	0x1b208	84	FUNC	<unknown>	HIDDEN	2
__floatdidf	.symtab	0x1abcc	96	FUNC	<unknown>	HIDDEN	2
__floatsidf	.symtab	0x1ab50	40	FUNC	<unknown>	HIDDEN	2
__floatundidf	.symtab	0x1abb8	116	FUNC	<unknown>	HIDDEN	2
__floatunsidf	.symtab	0x1ab2c	36	FUNC	<unknown>	HIDDEN	2
__frame_dummy_init_array_entry	.symtab	0x25004	0	OBJECT	<unknown>	DEFAULT	8
__gedf2	.symtab	0x1b0c8	148	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x1a190	324	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x16a4c	40	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x134f0	24	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__gtdf2	.symtab	0x1b0c8	148	FUNC	<unknown>	HIDDEN	2
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x25008	0	NOTYPE	<unknown>	HIDDEN	8
__init_array_start	.symtab	0x25004	0	NOTYPE	<unknown>	HIDDEN	8
__ledf2	.symtab	0x1b0d0	140	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x116e0	52	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x13ebc	56	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0x114e8	108	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x1135c	52	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x1a668	100	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x16bcc	52	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x11244	96	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x11420	52	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x13f70	56	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x113ac	64	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x13fa8	56	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x13fe0	64	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x16944	136	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x2b3dc	4	OBJECT	<unknown>	DEFAULT	13
__libc_system	.symtab	0x16760	348	FUNC	<unknown>	DEFAULT	2
__libc_waitpid	.symtab	0x11390	28	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x115c0	52	FUNC	<unknown>	DEFAULT	2
__ltdf2	.symtab	0x1b0d0	140	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x14c7c	436	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x14234	120	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x25248	24	OBJECT	<unknown>	DEFAULT	12
__malloc_state	.symtab	0x2b460	888	OBJECT	<unknown>	DEFAULT	13
__malloc_trim	.symtab	0x14bcc	176	FUNC	<unknown>	DEFAULT	2
__muldf3	.symtab	0x1ac2c	656	FUNC	<unknown>	HIDDEN	2
__nedf2	.symtab	0x1b0d8	132	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x2b3e4	4	OBJECT	<unknown>	DEFAULT	13
__preinit_array_end	.symtab	0x25004	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x25004	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__progname	.symtab	0x25340	4	OBJECT	<unknown>	DEFAULT	12
__progname_full	.symtab	0x25344	4	OBJECT	<unknown>	DEFAULT	12
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x16314	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x1630c	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x1630c	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x1630c	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x1630c	8	FUNC	<unknown>	DEFAULT	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__rtld_fini	.symtab	0x2b3ec	4	OBJECT	<unknown>	HIDDEN	13
__sigaddset	.symtab	0x141ec	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x14210	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x141c8	36	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x25148	4	OBJECT	<unknown>	DEFAULT	12
__stdio_READ	.symtab	0x1a448	88	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x177f0	180	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x1a4a0	196	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x17bac	320	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x11cdc	52	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.4636	.symtab	0x1c1a4	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x1a564	48	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x1a62c	60	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x1a594	152	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x17cec	208	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x11de4	48	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x2514c	4	OBJECT	<unknown>	DEFAULT	12
__subdf3	.symtab	0x1a818	788	FUNC	<unknown>	HIDDEN	2
__syscall_error	.symtab	0x16924	32	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x16c00	52	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x16350	124	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x16420	108	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x1648c	724	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x2533c	4	OBJECT	<unknown>	HIDDEN	12
__udivsi3	.symtab	0x110a8	252	FUNC	<unknown>	HIDDEN	2
__vfork	.symtab	0x111d0	64	FUNC	<unknown>	HIDDEN	2
__xpg_strerror_r	.symtab	0x13538	256	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x19fec	172	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x19f20	204	FUNC	<unknown>	HIDDEN	2
__xstat_conv	.symtab	0x1a098	184	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x2b3b4	10	OBJECT	<unknown>	DEFAULT	13
_bss_end__	.symtab	0x2b7e0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_call_via_fp	.symtab	0x80fd	4	FUNC	<unknown>	HIDDEN	2
_call_via_ip	.symtab	0x8101	4	FUNC	<unknown>	HIDDEN	2
_call_via_lr	.symtab	0x8109	4	FUNC	<unknown>	HIDDEN	2
_call_via_r0	.symtab	0x80d1	4	FUNC	<unknown>	HIDDEN	2
_call_via_r1	.symtab	0x80d5	4	FUNC	<unknown>	HIDDEN	2
_call_via_r2	.symtab	0x80d9	4	FUNC	<unknown>	HIDDEN	2
_call_via_r3	.symtab	0x80dd	4	FUNC	<unknown>	HIDDEN	2
_call_via_r4	.symtab	0x80e1	4	FUNC	<unknown>	HIDDEN	2
_call_via_r5	.symtab	0x80e5	4	FUNC	<unknown>	HIDDEN	2
_call_via_r6	.symtab	0x80e9	4	FUNC	<unknown>	HIDDEN	2
_call_via_r7	.symtab	0x80ed	4	FUNC	<unknown>	HIDDEN	2
_call_via_r8	.symtab	0x80f1	4	FUNC	<unknown>	HIDDEN	2
_call_via_r9	.symtab	0x80f5	4	FUNC	<unknown>	HIDDEN	2
_call_via_sl	.symtab	0x80f9	4	FUNC	<unknown>	HIDDEN	2
_call_via_sp	.symtab	0x8105	4	FUNC	<unknown>	HIDDEN	2
_charpad	.symtab	0x11ef8	84	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x2b408	40	OBJECT	<unknown>	HIDDEN	13
_custom_printf_handler	.symtab	0x2b430	40	OBJECT	<unknown>	HIDDEN	13
_custom_printf_spec	.symtab	0x25244	4	OBJECT	<unknown>	HIDDEN	12
_dl_aux_init	.symtab	0x19e38	56	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x2b7d8	4	OBJECT	<unknown>	DEFAULT	13
_dl_phnum	.symtab	0x2b7dc	4	OBJECT	<unknown>	DEFAULT	13
_edata	.symtab	0x25348	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x2b7e0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x2b3f0	4	OBJECT	<unknown>	DEFAULT	13
_exit	.symtab	0x1167c	44	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x1b25c	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x293b4	8192	OBJECT	<unknown>	DEFAULT	13
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x11f4c	132	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x17fb4	2036	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x2b3f4	4	OBJECT	<unknown>	DEFAULT	13
_init	.symtab	0x80b4	0	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x17dbc	112	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_memcpy	.symtab	0x18ea0	0	FUNC	<unknown>	HIDDEN	2
_ppfs_init	.symtab	0x126b8	160	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x129a0	1392	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x12758	68	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x1279c	432	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x1294c	84	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x16324	44	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x1631c	8	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x2b458	8	OBJECT	<unknown>	HIDDEN	13
_start	.symtab	0x81b0	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x178a4	776	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x11c74	104	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x25150	4	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_add_lock	.symtab	0x25108	24	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_dec_use	.symtab	0x18940	392	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x293b0	4	OBJECT	<unknown>	DEFAULT	13
_stdio_openlist_del_lock	.symtab	0x25120	24	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_use_count	.symtab	0x293ac	4	OBJECT	<unknown>	DEFAULT	13
_stdio_streams	.symtab	0x25154	240	OBJECT	<unknown>	DEFAULT	12
_stdio_term	.symtab	0x11d10	212	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x25138	4	OBJECT	<unknown>	DEFAULT	12
_stdlib_strto_l	.symtab	0x15818	448	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x17e2c	44	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x1c274	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x17e58	348	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x11fd0	1768	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x150ac	296	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
adaptiveHOLD	.symtab	0xe24c	1952	FUNC	<unknown>	DEFAULT	2
aeabi_unwind_cpp_pr1.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atoi	.symtab	0x157dc	32	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x157dc	32	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x2b3d4	4	OBJECT	<unknown>	DEFAULT	13
brk	.symtab	0x19e70	76	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x14110	184	FUNC	<unknown>	DEFAULT	2
buf.2975	.symtab	0x2b3c4	16	OBJECT	<unknown>	DEFAULT	13
c	.symtab	0x250f0	4	OBJECT	<unknown>	DEFAULT	12
calloc	.symtab	0x19950	308	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
chdir	.symtab	0x113ec	52	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
clock_getres	.symtab	0x16a88	52	FUNC	<unknown>	DEFAULT	2
clock_getres.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x116e0	52	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closedir	.symtab	0x16c34	248	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x25098	4	OBJECT	<unknown>	DEFAULT	12
completed.4959	.symtab	0x25348	1	OBJECT	<unknown>	DEFAULT	13
connect	.symtab	0x13ebc	56	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x9d28	628	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0xac3c	340	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x2509c	4	OBJECT	<unknown>	DEFAULT	12
data_start	.symtab	0x25090	0	NOTYPE	<unknown>	DEFAULT	12
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dup2	.symtab	0x11210	52	FUNC	<unknown>	DEFAULT	2
dup2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x2b3e0	4	OBJECT	<unknown>	DEFAULT	13
errno	.symtab	0x2b3f0	4	OBJECT	<unknown>	DEFAULT	13
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
execl	.symtab	0x16260	172	FUNC	<unknown>	DEFAULT	2
execl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
execve	.symtab	0x16a18	52	FUNC	<unknown>	DEFAULT	2
execve.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x159d8	184	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x1ce98	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x174f8	436	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x114e8	108	FUNC	<unknown>	DEFAULT	2
fd_to_DIR	.symtab	0x16d2c	208	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x9290	212	FUNC	<unknown>	DEFAULT	2
fdopen	.symtab	0x176ac	60	FUNC	<unknown>	DEFAULT	2
fdopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fdopen_pids	.symtab	0x29380	4	OBJECT	<unknown>	DEFAULT	13
fdopendir	.symtab	0x16ea8	152	FUNC	<unknown>	DEFAULT	2
fdpclose	.symtab	0x9108	392	FUNC	<unknown>	DEFAULT	2
fdpopen	.symtab	0x8e80	648	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x18ac8	524	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x187a8	220	FUNC	<unknown>	DEFAULT	2
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x18cd4	300	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x18884	188	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x18e00	160	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x1ce80	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x176e8	32	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x1135c	52	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fprintf	.symtab	0x11848	48	FUNC	<unknown>	DEFAULT	2
fprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x12f10	56	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x8150	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x14e30	572	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x1a2d4	36	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x1a2d4	36	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x1a2f8	336	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x19ec8	88	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fuckit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0x12f48	176	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getBogos	.symtab	0x965c	568	FUNC	<unknown>	DEFAULT	2
getBuild	.symtab	0x10634	36	FUNC	<unknown>	DEFAULT	2
getCores	.symtab	0x9894	236	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x9594	104	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x10378	700	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0xabd8	100	FUNC	<unknown>	DEFAULT	2
getRandomPublicIP	.symtab	0xa6f0	1256	FUNC	<unknown>	DEFAULT	2
getc	.symtab	0x187a8	220	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x18cd4	300	FUNC	<unknown>	DEFAULT	2
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x11454	44	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x16af0	20	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x16b04	20	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x16b84	20	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x16a4c	40	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x112d8	20	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x16abc	52	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x13ef4	56	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x13f2c	68	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gettimeofday	.symtab	0x114b4	52	FUNC	<unknown>	DEFAULT	2
gettimeofday.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x16a74	20	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x2536c	4	OBJECT	<unknown>	DEFAULT	13
h_errno	.symtab	0x2b3f4	4	OBJECT	<unknown>	DEFAULT	13
hextable	.symtab	0x1b4b8	1024	OBJECT	<unknown>	DEFAULT	4
htonl	.symtab	0x136e8	32	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x136d8	16	FUNC	<unknown>	DEFAULT	2
i.4597	.symtab	0x250f4	4	OBJECT	<unknown>	DEFAULT	12
index	.symtab	0x13400	240	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x13e94	40	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x19858	248	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x13e78	28	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x13dec	140	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x13b68	644	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x13a24	324	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x13808	540	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x13738	208	FUNC	<unknown>	DEFAULT	2
infectline	.symtab	0x25094	4	OBJECT	<unknown>	DEFAULT	12
initConnection	.symtab	0x101a8	464	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x81ec	216	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x15348	192	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x156f8	228	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x11628	84	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ipState	.symtab	0x29384	5	OBJECT	<unknown>	DEFAULT	13
isatty	.symtab	0x13638	36	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x11714	40	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x11480	52	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/_memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memset.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/strcmp.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/strlen.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/sigrestorer.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/vfork.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x9f9c	424	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x1a668	100	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x25378	6	OBJECT	<unknown>	DEFAULT	13
main	.symtab	0x10658	2640	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x25368	4	OBJECT	<unknown>	DEFAULT	13
makeIPPacket	.symtab	0xae64	256	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x9980	184	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x142ac	2336	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x1506c	64	FUNC	<unknown>	DEFAULT	2
matchPrompt	.symtab	0xa2d4	372	FUNC	<unknown>	DEFAULT	2
memchr	.symtab	0x19330	240	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x13120	4	FUNC	<unknown>	DEFAULT	2
mempcpy	.symtab	0x19708	36	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x1958c	224	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x13000	156	FUNC	<unknown>	DEFAULT	2
mmap	.symtab	0x168bc	104	FUNC	<unknown>	DEFAULT	2
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap	.symtab	0x1a150	64	FUNC	<unknown>	DEFAULT	2
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x16b98	52	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x29390	24	OBJECT	<unknown>	DEFAULT	13
mylock	.symtab	0x25260	24	OBJECT	<unknown>	DEFAULT	12
mylock	.symtab	0x25278	24	OBJECT	<unknown>	DEFAULT	12
nanosleep	.symtab	0x16bcc	52	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
negotiate	.symtab	0xa144	400	FUNC	<unknown>	DEFAULT	2
next_start.1358	.symtab	0x2b3c0	4	OBJECT	<unknown>	DEFAULT	13
nprocessors_onln	.symtab	0x15b3c	332	FUNC	<unknown>	DEFAULT	2
ntohl	.symtab	0x13718	32	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x13708	16	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x25370	8	OBJECT	<unknown>	DEFAULT	13
object.4967	.symtab	0x2534c	24	OBJECT	<unknown>	DEFAULT	13
open	.symtab	0x11244	96	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opendir	.symtab	0x16dfc	172	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x2b3fc	4	OBJECT	<unknown>	DEFAULT	13
parseHex	.symtab	0x9364	132	FUNC	<unknown>	DEFAULT	2
parse_config.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
passwords	.symtab	0x250b8	56	OBJECT	<unknown>	DEFAULT	12
pclose	.symtab	0x11878	312	FUNC	<unknown>	DEFAULT	2
perror	.symtab	0x11788	116	FUNC	<unknown>	DEFAULT	2
perror.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
pids	.symtab	0x2b404	4	OBJECT	<unknown>	DEFAULT	13
pipe	.symtab	0x112a4	52	FUNC	<unknown>	DEFAULT	2
pipe.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
popen	.symtab	0x119b0	708	FUNC	<unknown>	DEFAULT	2
popen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
popen_list	.symtab	0x293a8	4	OBJECT	<unknown>	DEFAULT	13
prctl	.symtab	0x1131c	64	FUNC	<unknown>	DEFAULT	2
prctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4856	.symtab	0x1c1cc	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x8920	1012	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x853c	112	FUNC	<unknown>	DEFAULT	2
printf	.symtab	0x117fc	76	FUNC	<unknown>	DEFAULT	2
printf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
printi	.symtab	0x8734	492	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x85ac	392	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0xef98	4624	FUNC	<unknown>	DEFAULT	2
program_invocation_name	.symtab	0x25344	4	OBJECT	<unknown>	DEFAULT	12
program_invocation_short_name	.symtab	0x25340	4	OBJECT	<unknown>	DEFAULT	12
qual_chars.4865	.symtab	0x1c1e0	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x1409c	28	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x151d4	24	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x82c4	324	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x151ec	164	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x1cde8	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x15590	144	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x25290	128	OBJECT	<unknown>	DEFAULT	12
rawmemchr	.symtab	0x194dc	176	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x11420	52	FUNC	<unknown>	DEFAULT	2

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-07T22:17:52.336401+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54330	45.128.233.186	23	TCP
2025-01-07T22:17:54.018407+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54332	45.128.233.186	23	TCP
2025-01-07T22:17:55.770551+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54334	45.128.233.186	23	TCP
2025-01-07T22:17:57.562841+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54336	45.128.233.186	23	TCP
2025-01-07T22:17:59.339544+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54338	45.128.233.186	23	TCP
2025-01-07T22:18:01.083219+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54340	45.128.233.186	23	TCP
2025-01-07T22:18:02.873498+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54342	45.128.233.186	23	TCP
2025-01-07T22:18:04.646436+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54344	45.128.233.186	23	TCP
2025-01-07T22:18:06.445327+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54346	45.128.233.186	23	TCP
2025-01-07T22:18:08.196212+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54348	45.128.233.186	23	TCP
2025-01-07T22:18:09.932145+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54350	45.128.233.186	23	TCP
2025-01-07T22:18:11.668014+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54352	45.128.233.186	23	TCP
2025-01-07T22:18:13.492526+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54354	45.128.233.186	23	TCP
2025-01-07T22:18:15.224672+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54356	45.128.233.186	23	TCP
2025-01-07T22:18:16.960838+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54358	45.128.233.186	23	TCP
2025-01-07T22:18:18.734672+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54360	45.128.233.186	23	TCP
2025-01-07T22:18:20.492913+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54362	45.128.233.186	23	TCP
2025-01-07T22:18:22.260844+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54364	45.128.233.186	23	TCP
2025-01-07T22:18:24.008702+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54366	45.128.233.186	23	TCP
2025-01-07T22:18:25.806686+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54368	45.128.233.186	23	TCP
2025-01-07T22:18:27.649756+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54370	45.128.233.186	23	TCP
2025-01-07T22:18:29.424919+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54372	45.128.233.186	23	TCP
2025-01-07T22:18:31.183932+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54374	45.128.233.186	23	TCP
2025-01-07T22:18:32.996204+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54376	45.128.233.186	23	TCP
2025-01-07T22:18:34.780315+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54378	45.128.233.186	23	TCP
2025-01-07T22:18:36.549514+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54380	45.128.233.186	23	TCP
2025-01-07T22:18:38.307507+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54382	45.128.233.186	23	TCP
2025-01-07T22:18:40.054274+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54384	45.128.233.186	23	TCP
2025-01-07T22:18:41.825842+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54386	45.128.233.186	23	TCP
2025-01-07T22:18:43.588239+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54388	45.128.233.186	23	TCP
2025-01-07T22:18:45.322670+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54390	45.128.233.186	23	TCP
2025-01-07T22:18:47.071875+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54392	45.128.233.186	23	TCP
2025-01-07T22:18:48.881332+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54394	45.128.233.186	23	TCP
2025-01-07T22:18:50.642758+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54396	45.128.233.186	23	TCP
2025-01-07T22:18:52.387594+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54398	45.128.233.186	23	TCP
2025-01-07T22:18:54.114540+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54400	45.128.233.186	23	TCP
2025-01-07T22:18:55.890161+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54402	45.128.233.186	23	TCP
2025-01-07T22:18:57.697966+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54404	45.128.233.186	23	TCP
2025-01-07T22:18:59.481309+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54406	45.128.233.186	23	TCP
2025-01-07T22:19:01.272129+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54408	45.128.233.186	23	TCP
2025-01-07T22:19:03.019709+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54410	45.128.233.186	23	TCP
2025-01-07T22:19:04.784248+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54412	45.128.233.186	23	TCP
2025-01-07T22:19:06.582419+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54414	45.128.233.186	23	TCP
2025-01-07T22:19:08.319518+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54416	45.128.233.186	23	TCP
2025-01-07T22:19:10.054072+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54418	45.128.233.186	23	TCP
2025-01-07T22:19:11.809753+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54420	45.128.233.186	23	TCP
2025-01-07T22:19:13.585547+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54422	45.128.233.186	23	TCP
2025-01-07T22:19:15.358171+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54424	45.128.233.186	23	TCP
2025-01-07T22:19:17.108075+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54426	45.128.233.186	23	TCP
2025-01-07T22:19:18.897301+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54428	45.128.233.186	23	TCP
2025-01-07T22:19:20.712382+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54430	45.128.233.186	23	TCP
2025-01-07T22:19:22.487912+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54432	45.128.233.186	23	TCP
2025-01-07T22:19:24.266572+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54434	45.128.233.186	23	TCP
2025-01-07T22:19:26.046660+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54436	45.128.233.186	23	TCP
2025-01-07T22:19:27.804781+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54438	45.128.233.186	23	TCP
2025-01-07T22:19:29.576706+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54440	45.128.233.186	23	TCP
2025-01-07T22:19:31.355564+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54442	45.128.233.186	23	TCP
2025-01-07T22:19:33.098617+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54444	45.128.233.186	23	TCP
2025-01-07T22:19:34.874828+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54446	45.128.233.186	23	TCP
2025-01-07T22:19:36.648809+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54448	45.128.233.186	23	TCP
2025-01-07T22:19:38.375524+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54450	45.128.233.186	23	TCP
2025-01-07T22:19:40.180027+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54452	45.128.233.186	23	TCP
2025-01-07T22:19:41.945913+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54454	45.128.233.186	23	TCP
2025-01-07T22:19:43.726411+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54456	45.128.233.186	23	TCP
2025-01-07T22:19:45.475822+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54458	45.128.233.186	23	TCP
2025-01-07T22:19:47.299403+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54460	45.128.233.186	23	TCP
2025-01-07T22:19:49.868853+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54462	45.128.233.186	23	TCP
2025-01-07T22:19:51.659082+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54464	45.128.233.186	23	TCP
2025-01-07T22:19:53.436335+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54466	45.128.233.186	23	TCP
2025-01-07T22:19:55.279074+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54468	45.128.233.186	23	TCP
2025-01-07T22:19:57.057411+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54470	45.128.233.186	23	TCP
2025-01-07T22:19:58.869799+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54472	45.128.233.186	23	TCP
2025-01-07T22:20:00.667007+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54474	45.128.233.186	23	TCP
2025-01-07T22:20:02.449546+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54476	45.128.233.186	23	TCP
2025-01-07T22:20:04.253074+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54478	45.128.233.186	23	TCP
2025-01-07T22:20:06.027260+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54480	45.128.233.186	23	TCP
2025-01-07T22:20:07.818818+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54482	45.128.233.186	23	TCP
2025-01-07T22:20:09.598502+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54484	45.128.233.186	23	TCP
2025-01-07T22:20:11.668598+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54486	45.128.233.186	23	TCP
2025-01-07T22:20:13.466777+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54488	45.128.233.186	23	TCP
2025-01-07T22:20:15.198564+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54490	45.128.233.186	23	TCP
2025-01-07T22:20:16.990674+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54492	45.128.233.186	23	TCP
2025-01-07T22:20:18.804616+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54494	45.128.233.186	23	TCP
2025-01-07T22:20:20.629688+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54496	45.128.233.186	23	TCP
2025-01-07T22:20:22.377534+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54498	45.128.233.186	23	TCP
2025-01-07T22:20:24.156678+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54500	45.128.233.186	23	TCP
2025-01-07T22:20:26.636242+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54502	45.128.233.186	23	TCP
2025-01-07T22:20:28.405564+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54504	45.128.233.186	23	TCP
2025-01-07T22:20:30.153627+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54506	45.128.233.186	23	TCP
2025-01-07T22:20:31.919545+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54508	45.128.233.186	23	TCP
2025-01-07T22:20:33.707421+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54510	45.128.233.186	23	TCP
2025-01-07T22:20:35.447827+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54512	45.128.233.186	23	TCP
2025-01-07T22:20:37.175394+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54514	45.128.233.186	23	TCP
2025-01-07T22:20:38.951451+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54516	45.128.233.186	23	TCP
2025-01-07T22:20:40.707260+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54518	45.128.233.186	23	TCP
2025-01-07T22:20:42.485279+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54520	45.128.233.186	23	TCP
2025-01-07T22:20:44.243502+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54522	45.128.233.186	23	TCP
2025-01-07T22:20:45.989619+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54524	45.128.233.186	23	TCP
2025-01-07T22:20:47.797354+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54526	45.128.233.186	23	TCP
2025-01-07T22:20:49.569959+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54528	45.128.233.186	23	TCP
2025-01-07T22:20:51.345361+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54530	45.128.233.186	23	TCP
2025-01-07T22:20:53.126303+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54532	45.128.233.186	23	TCP
2025-01-07T22:20:54.900503+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54534	45.128.233.186	23	TCP
2025-01-07T22:20:56.688754+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54536	45.128.233.186	23	TCP
2025-01-07T22:20:58.453452+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54538	45.128.233.186	23	TCP
2025-01-07T22:21:00.242938+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54540	45.128.233.186	23	TCP
2025-01-07T22:21:02.018403+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54542	45.128.233.186	23	TCP
2025-01-07T22:21:03.805733+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54544	45.128.233.186	23	TCP
2025-01-07T22:21:05.619289+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54546	45.128.233.186	23	TCP
2025-01-07T22:21:07.389602+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54548	45.128.233.186	23	TCP
2025-01-07T22:21:09.178635+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54550	45.128.233.186	23	TCP
2025-01-07T22:21:10.914839+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54552	45.128.233.186	23	TCP
2025-01-07T22:21:12.683816+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54554	45.128.233.186	23	TCP
2025-01-07T22:21:14.490554+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54556	45.128.233.186	23	TCP
2025-01-07T22:21:16.261896+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54558	45.128.233.186	23	TCP
2025-01-07T22:21:18.002978+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54560	45.128.233.186	23	TCP
2025-01-07T22:21:19.743009+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54562	45.128.233.186	23	TCP
2025-01-07T22:21:21.525532+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54564	45.128.233.186	23	TCP
2025-01-07T22:21:23.301154+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54566	45.128.233.186	23	TCP
2025-01-07T22:21:25.071154+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54568	45.128.233.186	23	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 7, 2025 22:17:52.216979027 CET	54330	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:17:52.221760035 CET	23	54330	45.128.233.186	192.168.2.23
Jan 7, 2025 22:17:52.221812010 CET	54330	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:17:52.336400986 CET	54330	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:17:52.341167927 CET	23	54330	45.128.233.186	192.168.2.23
Jan 7, 2025 22:17:53.439770937 CET	43928	443	192.168.2.23	91.189.91.42
Jan 7, 2025 22:17:53.996320963 CET	23	54330	45.128.233.186	192.168.2.23
Jan 7, 2025 22:17:53.996917009 CET	54330	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:17:53.997481108 CET	54332	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:17:54.002485991 CET	23	54330	45.128.233.186	192.168.2.23
Jan 7, 2025 22:17:54.002496004 CET	23	54332	45.128.233.186	192.168.2.23
Jan 7, 2025 22:17:54.002562046 CET	54332	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:17:54.018407106 CET	54332	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:17:54.023158073 CET	23	54332	45.128.233.186	192.168.2.23
Jan 7, 2025 22:17:55.749361992 CET	23	54332	45.128.233.186	192.168.2.23
Jan 7, 2025 22:17:55.749581099 CET	54332	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:17:55.750080109 CET	54334	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:17:55.754297972 CET	23	54332	45.128.233.186	192.168.2.23
Jan 7, 2025 22:17:55.754832983 CET	23	54334	45.128.233.186	192.168.2.23
Jan 7, 2025 22:17:55.754884958 CET	54334	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:17:55.770550966 CET	54334	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:17:55.775357962 CET	23	54334	45.128.233.186	192.168.2.23
Jan 7, 2025 22:17:57.540683985 CET	23	54334	45.128.233.186	192.168.2.23
Jan 7, 2025 22:17:57.541111946 CET	54334	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:17:57.541603088 CET	54336	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:17:57.545911074 CET	23	54334	45.128.233.186	192.168.2.23
Jan 7, 2025 22:17:57.546478987 CET	23	54336	45.128.233.186	192.168.2.23
Jan 7, 2025 22:17:57.546574116 CET	54336	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:17:57.562840939 CET	54336	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:17:57.567635059 CET	23	54336	45.128.233.186	192.168.2.23
Jan 7, 2025 22:17:58.815021038 CET	42836	443	192.168.2.23	91.189.91.43
Jan 7, 2025 22:17:59.318672895 CET	23	54336	45.128.233.186	192.168.2.23
Jan 7, 2025 22:17:59.318810940 CET	54336	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:17:59.319331884 CET	54338	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:17:59.323551893 CET	23	54336	45.128.233.186	192.168.2.23
Jan 7, 2025 22:17:59.324152946 CET	23	54338	45.128.233.186	192.168.2.23
Jan 7, 2025 22:17:59.324198961 CET	54338	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:17:59.339544058 CET	54338	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:17:59.344329119 CET	23	54338	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:00.094806910 CET	42516	80	192.168.2.23	109.202.202.202
Jan 7, 2025 22:18:01.062597036 CET	23	54338	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:01.062747002 CET	54338	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:01.063178062 CET	54340	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:01.067467928 CET	23	54338	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:01.067946911 CET	23	54340	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:01.067995071 CET	54340	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:01.083219051 CET	54340	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:01.088120937 CET	23	54340	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:02.850548029 CET	23	54340	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:02.850796938 CET	54340	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:02.851291895 CET	54342	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:02.855606079 CET	23	54340	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:02.856081963 CET	23	54342	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:02.856128931 CET	54342	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:02.873497963 CET	54342	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:02.878304005 CET	23	54342	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:04.617676973 CET	23	54342	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:04.618104935 CET	54342	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:04.618846893 CET	54344	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:04.622956991 CET	23	54342	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:04.623665094 CET	23	54344	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:04.623734951 CET	54344	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:04.646435976 CET	54344	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:04.651196957 CET	23	54344	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:06.422329903 CET	23	54344	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:06.422518969 CET	54344	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:06.423125982 CET	54346	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:06.427340031 CET	23	54344	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:06.427978992 CET	23	54346	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:06.428021908 CET	54346	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:06.445327044 CET	54346	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:06.450056076 CET	23	54346	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:08.171325922 CET	23	54346	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:08.171488047 CET	54346	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:08.172163010 CET	54348	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:08.176352978 CET	23	54346	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:08.177072048 CET	23	54348	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:08.177120924 CET	54348	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:08.196212053 CET	54348	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:08.201071978 CET	23	54348	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:09.903924942 CET	23	54348	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:09.904294014 CET	54348	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:09.904844999 CET	54350	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:09.909640074 CET	23	54348	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:09.909655094 CET	23	54350	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:09.909697056 CET	54350	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:09.932145119 CET	54350	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:09.936944008 CET	23	54350	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:11.640934944 CET	23	54350	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:11.641325951 CET	54350	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:11.641325951 CET	54350	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:11.641870022 CET	54352	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:11.647018909 CET	23	54350	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:11.647691965 CET	23	54352	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:11.647789955 CET	54352	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:11.668014050 CET	54352	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:11.868349075 CET	23	54352	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:13.465852976 CET	23	54352	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:13.466172934 CET	54352	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:13.466883898 CET	54354	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:13.471060991 CET	23	54352	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:13.471684933 CET	23	54354	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:13.471754074 CET	54354	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:13.492526054 CET	54354	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:13.497597933 CET	23	54354	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:14.428838968 CET	43928	443	192.168.2.23	91.189.91.42
Jan 7, 2025 22:18:15.203522921 CET	23	54354	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:15.203851938 CET	54354	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:15.204338074 CET	54356	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:15.208694935 CET	23	54354	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:15.209122896 CET	23	54356	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:15.209172964 CET	54356	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:15.224672079 CET	54356	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:15.230042934 CET	23	54356	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:16.936748028 CET	23	54356	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:16.937072992 CET	54356	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:16.937675953 CET	54358	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:16.941910028 CET	23	54356	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:16.942471027 CET	23	54358	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:16.942543983 CET	54358	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:16.960838079 CET	54358	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:16.968648911 CET	23	54358	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:18.713263035 CET	23	54358	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:18.713527918 CET	54358	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:18.714102983 CET	54360	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:18.718373060 CET	23	54358	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:18.718892097 CET	23	54360	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:18.718939066 CET	54360	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:18.734672070 CET	54360	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:18.739497900 CET	23	54360	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:20.472316980 CET	23	54360	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:20.472573042 CET	54360	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:20.473014116 CET	54362	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:20.477361917 CET	23	54360	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:20.478022099 CET	23	54362	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:20.478071928 CET	54362	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:20.492913008 CET	54362	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:20.497661114 CET	23	54362	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:22.241007090 CET	23	54362	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:22.241138935 CET	54362	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:22.241519928 CET	54364	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:22.245920897 CET	23	54362	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:22.246355057 CET	23	54364	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:22.246421099 CET	54364	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:22.260843992 CET	54364	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:22.265671968 CET	23	54364	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:23.988713980 CET	23	54364	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:23.988957882 CET	54364	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:23.989429951 CET	54366	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:23.993782043 CET	23	54364	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:23.994281054 CET	23	54366	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:23.994324923 CET	54366	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:24.008702040 CET	54366	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:24.013636112 CET	23	54366	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:24.667527914 CET	42836	443	192.168.2.23	91.189.91.43
Jan 7, 2025 22:18:25.783787012 CET	23	54366	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:25.784013033 CET	54366	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:25.784529924 CET	54368	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:25.790637970 CET	23	54366	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:25.791270971 CET	23	54368	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:25.791340113 CET	54368	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:25.806685925 CET	54368	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:25.811470032 CET	23	54368	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:27.629511118 CET	23	54368	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:27.629826069 CET	54368	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:27.630237103 CET	54370	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:27.634675026 CET	23	54368	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:27.635011911 CET	23	54370	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:27.635076046 CET	54370	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:27.649755955 CET	54370	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:27.654511929 CET	23	54370	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:29.401443005 CET	23	54370	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:29.401993036 CET	54370	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:29.402822018 CET	54372	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:29.406769991 CET	23	54370	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:29.407635927 CET	23	54372	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:29.407723904 CET	54372	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:29.424918890 CET	54372	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:29.429760933 CET	23	54372	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:30.810584068 CET	42516	80	192.168.2.23	109.202.202.202
Jan 7, 2025 22:18:31.162537098 CET	23	54372	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:31.162810087 CET	54372	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:31.163281918 CET	54374	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:31.167663097 CET	23	54372	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:31.168085098 CET	23	54374	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:31.168173075 CET	54374	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:31.183932066 CET	54374	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:31.188734055 CET	23	54374	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:32.970618963 CET	23	54374	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:32.970954895 CET	54374	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:32.971406937 CET	54376	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:32.975764036 CET	23	54374	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:32.976923943 CET	23	54376	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:32.977011919 CET	54376	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:32.996203899 CET	54376	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:33.001948118 CET	23	54376	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:34.758897066 CET	23	54376	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:34.759088039 CET	54376	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:34.759555101 CET	54378	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:34.763977051 CET	23	54376	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:34.764337063 CET	23	54378	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:34.764398098 CET	54378	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:34.780314922 CET	54378	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:34.785100937 CET	23	54378	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:36.526716948 CET	23	54378	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:36.527092934 CET	54378	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:36.527597904 CET	54380	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:36.531878948 CET	23	54378	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:36.532413960 CET	23	54380	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:36.532505035 CET	54380	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:36.549514055 CET	54380	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:36.554308891 CET	23	54380	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:38.286185980 CET	23	54380	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:38.286643028 CET	54380	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:38.287267923 CET	54382	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:38.291567087 CET	23	54380	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:38.292090893 CET	23	54382	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:38.292144060 CET	54382	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:38.307507038 CET	54382	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:38.312365055 CET	23	54382	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:40.032068968 CET	23	54382	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:40.032516003 CET	54382	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:40.032932997 CET	54384	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:40.037275076 CET	23	54382	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:40.037782907 CET	23	54384	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:40.037826061 CET	54384	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:40.054274082 CET	54384	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:40.059070110 CET	23	54384	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:41.805589914 CET	23	54384	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:41.805836916 CET	54384	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:41.806315899 CET	54386	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:41.810631990 CET	23	54384	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:41.811162949 CET	23	54386	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:41.811208010 CET	54386	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:41.825841904 CET	54386	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:41.830662012 CET	23	54386	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:43.568022966 CET	23	54386	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:43.568207979 CET	54386	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:43.568696976 CET	54388	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:43.572967052 CET	23	54386	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:43.573491096 CET	23	54388	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:43.573539019 CET	54388	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:43.588238955 CET	54388	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:43.593039989 CET	23	54388	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:45.295037985 CET	23	54388	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:45.295449018 CET	54388	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:45.296186924 CET	54390	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:45.301986933 CET	23	54388	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:45.302493095 CET	23	54390	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:45.302563906 CET	54390	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:45.322669983 CET	54390	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:45.327491999 CET	23	54390	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:47.051573038 CET	23	54390	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:47.051754951 CET	54390	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:47.052407980 CET	54392	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:47.056505919 CET	23	54390	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:47.057171106 CET	23	54392	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:47.057241917 CET	54392	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:47.071875095 CET	54392	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:47.076669931 CET	23	54392	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:48.862045050 CET	23	54392	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:48.862258911 CET	54392	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:48.862643003 CET	54394	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:48.867088079 CET	23	54392	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:48.867490053 CET	23	54394	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:48.867542028 CET	54394	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:48.881331921 CET	54394	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:48.886106014 CET	23	54394	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:50.615506887 CET	23	54394	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:50.615915060 CET	54394	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:50.616106033 CET	54394	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:50.616733074 CET	54396	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:50.622828007 CET	23	54394	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:50.623680115 CET	23	54396	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:50.623745918 CET	54396	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:50.642757893 CET	54396	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:50.647548914 CET	23	54396	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:52.360579967 CET	23	54396	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:52.361047029 CET	54396	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:52.361745119 CET	54398	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:52.365899086 CET	23	54396	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:52.366509914 CET	23	54398	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:52.366579056 CET	54398	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:52.387593985 CET	54398	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:52.392333984 CET	23	54398	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:54.093713999 CET	23	54398	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:54.094090939 CET	54398	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:54.094485998 CET	54400	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:54.098845005 CET	23	54398	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:54.099298000 CET	23	54400	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:54.099345922 CET	54400	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:54.114540100 CET	54400	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:54.119334936 CET	23	54400	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:55.383333921 CET	43928	443	192.168.2.23	91.189.91.42
Jan 7, 2025 22:18:55.862852097 CET	23	54400	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:55.863290071 CET	54400	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:55.863291025 CET	54400	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:55.864068985 CET	54402	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:55.868156910 CET	23	54400	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:55.868855000 CET	23	54402	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:55.868936062 CET	54402	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:55.890161037 CET	54402	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:55.894903898 CET	23	54402	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:57.672432899 CET	23	54402	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:57.672982931 CET	54402	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:57.673626900 CET	54404	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:57.677726030 CET	23	54402	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:57.678395987 CET	23	54404	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:57.678467989 CET	54404	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:57.697966099 CET	54404	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:57.702707052 CET	23	54404	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:59.457043886 CET	23	54404	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:59.457365036 CET	54404	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:59.458095074 CET	54406	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:59.462168932 CET	23	54404	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:59.462889910 CET	23	54406	45.128.233.186	192.168.2.23
Jan 7, 2025 22:18:59.462959051 CET	54406	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:59.481308937 CET	54406	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:18:59.486032963 CET	23	54406	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:01.247900009 CET	23	54406	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:01.248296976 CET	54406	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:01.248934031 CET	54408	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:01.253073931 CET	23	54406	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:01.253700972 CET	23	54408	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:01.253772020 CET	54408	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:01.272129059 CET	54408	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:01.276868105 CET	23	54408	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:02.992186069 CET	23	54408	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:02.992677927 CET	54408	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:02.993319988 CET	54410	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:02.997488022 CET	23	54408	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:02.998119116 CET	23	54410	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:02.998187065 CET	54410	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:03.019709110 CET	54410	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:03.024513006 CET	23	54410	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:04.752270937 CET	23	54410	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:04.752773046 CET	54410	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:04.753490925 CET	54412	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:04.757594109 CET	23	54410	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:04.758323908 CET	23	54412	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:04.758392096 CET	54412	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:04.784248114 CET	54412	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:04.788996935 CET	23	54412	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:06.554156065 CET	23	54412	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:06.554614067 CET	54412	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:06.555233002 CET	54414	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:06.560781956 CET	23	54412	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:06.560791969 CET	23	54414	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:06.560866117 CET	54414	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:06.582418919 CET	54414	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:06.587260962 CET	23	54414	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:08.299276114 CET	23	54414	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:08.299664974 CET	54414	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:08.300012112 CET	54416	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:08.304431915 CET	23	54414	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:08.304775953 CET	23	54416	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:08.304863930 CET	54416	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:08.319518089 CET	54416	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:08.324284077 CET	23	54416	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:10.029683113 CET	23	54416	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:10.030191898 CET	54416	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:10.030802965 CET	54418	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:10.034981966 CET	23	54416	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:10.035578012 CET	23	54418	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:10.035635948 CET	54418	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:10.054071903 CET	54418	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:10.058784008 CET	23	54418	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:11.788642883 CET	23	54418	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:11.789002895 CET	54418	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:11.789396048 CET	54420	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:11.793746948 CET	23	54418	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:11.794178009 CET	23	54420	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:11.794265985 CET	54420	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:11.809752941 CET	54420	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:11.814497948 CET	23	54420	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:13.564642906 CET	23	54420	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:13.564863920 CET	54420	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:13.565361977 CET	54422	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:13.569619894 CET	23	54420	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:13.570085049 CET	23	54422	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:13.570143938 CET	54422	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:13.585546970 CET	54422	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:13.590349913 CET	23	54422	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:15.337994099 CET	23	54422	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:15.338254929 CET	54422	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:15.338757992 CET	54424	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:15.343077898 CET	23	54422	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:15.343513966 CET	23	54424	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:15.343604088 CET	54424	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:15.358170986 CET	54424	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:15.362915039 CET	23	54424	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:15.860450029 CET	42836	443	192.168.2.23	91.189.91.43
Jan 7, 2025 22:19:17.082586050 CET	23	54424	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:17.082875967 CET	54424	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:17.083551884 CET	54426	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:17.087637901 CET	23	54424	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:17.088309050 CET	23	54426	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:17.088371038 CET	54426	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:17.108074903 CET	54426	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:17.115298986 CET	23	54426	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:18.878508091 CET	23	54426	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:18.878714085 CET	54426	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:18.879153013 CET	54428	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:18.883471966 CET	23	54426	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:18.883902073 CET	23	54428	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:18.884011030 CET	54428	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:18.897300959 CET	54428	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:18.902080059 CET	23	54428	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:20.688738108 CET	23	54428	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:20.689234972 CET	54428	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:20.689946890 CET	54430	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:20.694022894 CET	23	54428	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:20.694722891 CET	23	54430	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:20.694785118 CET	54430	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:20.712382078 CET	54430	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:20.717122078 CET	23	54430	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:22.467098951 CET	23	54430	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:22.467252970 CET	54430	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:22.468064070 CET	54432	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:22.472007036 CET	23	54430	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:22.472868919 CET	23	54432	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:22.472958088 CET	54432	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:22.487911940 CET	54432	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:22.492647886 CET	23	54432	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:24.248127937 CET	23	54432	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:24.248469114 CET	54432	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:24.248814106 CET	54434	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:24.253200054 CET	23	54432	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:24.253561020 CET	23	54434	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:24.253607035 CET	54434	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:24.266571999 CET	54434	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:24.271354914 CET	23	54434	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:26.031045914 CET	23	54434	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:26.031332016 CET	54434	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:26.031742096 CET	54436	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:26.036132097 CET	23	54434	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:26.036489964 CET	23	54436	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:26.036533117 CET	54436	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:26.046659946 CET	54436	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:26.051528931 CET	23	54436	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:27.788146973 CET	23	54436	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:27.788467884 CET	54436	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:27.788809061 CET	54438	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:27.793334007 CET	23	54436	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:27.793612003 CET	23	54438	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:27.793656111 CET	54438	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:27.804780960 CET	54438	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:27.809520006 CET	23	54438	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:29.560539961 CET	23	54438	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:29.560760975 CET	54438	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:29.561129093 CET	54440	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:29.565527916 CET	23	54438	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:29.565884113 CET	23	54440	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:29.565927982 CET	54440	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:29.576705933 CET	54440	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:29.581465006 CET	23	54440	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:31.337913036 CET	23	54440	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:31.338124990 CET	54440	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:31.338552952 CET	54442	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:31.342897892 CET	23	54440	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:31.343281031 CET	23	54442	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:31.343327045 CET	54442	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:31.355564117 CET	54442	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:31.360340118 CET	23	54442	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:33.081826925 CET	23	54442	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:33.082138062 CET	54442	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:33.082545042 CET	54444	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:33.086939096 CET	23	54442	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:33.087321997 CET	23	54444	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:33.087368011 CET	54444	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:33.098617077 CET	54444	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:33.103385925 CET	23	54444	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:34.850749016 CET	23	54444	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:34.851104975 CET	54444	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:34.851727009 CET	54446	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:34.855915070 CET	23	54444	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:34.856520891 CET	23	54446	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:34.856584072 CET	54446	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:34.874828100 CET	54446	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:34.879708052 CET	23	54446	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:36.626516104 CET	23	54446	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:36.626961946 CET	54446	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:36.627590895 CET	54448	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:36.635200977 CET	23	54446	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:36.635211945 CET	23	54448	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:36.635330915 CET	54448	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:36.648808956 CET	54448	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:36.655792952 CET	23	54448	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:38.359194040 CET	23	54448	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:38.359586954 CET	54448	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:38.360033989 CET	54450	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:38.364434004 CET	23	54448	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:38.364896059 CET	23	54450	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:38.364958048 CET	54450	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:38.375524044 CET	54450	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:38.380337954 CET	23	54450	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:40.158262014 CET	23	54450	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:40.158813000 CET	54450	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:40.159619093 CET	54452	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:40.163772106 CET	23	54450	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:40.164427996 CET	23	54452	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:40.164482117 CET	54452	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:40.180027008 CET	54452	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:40.184880972 CET	23	54452	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:41.923260927 CET	23	54452	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:41.923579931 CET	54452	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:41.924060106 CET	54454	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:41.928430080 CET	23	54452	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:41.928896904 CET	23	54454	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:41.928958893 CET	54454	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:41.945913076 CET	54454	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:41.950664997 CET	23	54454	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:43.705570936 CET	23	54454	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:43.705873966 CET	54454	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:43.706305981 CET	54456	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:43.710675955 CET	23	54454	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:43.711075068 CET	23	54456	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:43.711163998 CET	54456	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:43.726411104 CET	54456	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:43.731550932 CET	23	54456	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:45.453193903 CET	23	54456	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:45.453826904 CET	54456	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:45.454511881 CET	54458	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:45.458653927 CET	23	54456	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:45.459265947 CET	23	54458	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:45.459356070 CET	54458	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:45.475821972 CET	54458	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:45.480587006 CET	23	54458	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:47.281218052 CET	23	54458	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:47.281450033 CET	54458	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:47.281892061 CET	54460	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:47.286218882 CET	23	54458	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:47.286668062 CET	23	54460	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:47.286734104 CET	54460	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:47.299402952 CET	54460	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:47.304336071 CET	23	54460	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:49.844969988 CET	23	54460	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:49.845415115 CET	23	54460	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:49.845499992 CET	54460	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:49.845535994 CET	54460	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:49.846597910 CET	54462	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:49.846853018 CET	23	54460	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:49.846941948 CET	54460	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:49.855395079 CET	23	54460	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:49.856319904 CET	23	54462	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:49.856376886 CET	54462	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:49.868853092 CET	54462	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:49.873644114 CET	23	54462	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:51.637054920 CET	23	54462	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:51.637434006 CET	54462	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:51.638133049 CET	54464	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:51.642309904 CET	23	54462	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:51.642910957 CET	23	54464	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:51.642987967 CET	54464	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:51.659081936 CET	54464	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:51.663883924 CET	23	54464	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:53.414136887 CET	23	54464	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:53.414650917 CET	54464	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:53.415276051 CET	54466	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:53.419435024 CET	23	54464	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:53.420025110 CET	23	54466	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:53.420098066 CET	54466	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:53.436335087 CET	54466	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:53.441169977 CET	23	54466	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:55.261161089 CET	23	54466	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:55.261867046 CET	54466	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:55.262499094 CET	54468	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:55.266609907 CET	23	54466	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:55.267338991 CET	23	54468	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:55.267390013 CET	54468	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:55.279073954 CET	54468	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:55.283845901 CET	23	54468	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:57.034873009 CET	23	54468	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:57.035486937 CET	54468	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:57.036139965 CET	54470	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:57.040268898 CET	23	54468	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:57.040910959 CET	23	54470	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:57.040980101 CET	54470	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:57.057410955 CET	54470	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:57.062151909 CET	23	54470	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:58.850398064 CET	23	54470	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:58.850850105 CET	54470	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:58.851532936 CET	54472	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:58.855633974 CET	23	54470	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:58.856319904 CET	23	54472	45.128.233.186	192.168.2.23
Jan 7, 2025 22:19:58.856383085 CET	54472	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:58.869798899 CET	54472	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:19:58.874588966 CET	23	54472	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:00.647106886 CET	23	54472	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:00.647646904 CET	54472	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:00.648271084 CET	54474	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:00.652436972 CET	23	54472	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:00.653068066 CET	23	54474	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:00.653131008 CET	54474	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:00.667006969 CET	54474	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:00.671789885 CET	23	54474	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:02.428430080 CET	23	54474	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:02.428798914 CET	54474	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:02.429449081 CET	54476	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:02.434397936 CET	23	54474	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:02.434416056 CET	23	54476	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:02.434489965 CET	54476	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:02.449546099 CET	54476	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:02.454313993 CET	23	54476	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:04.232142925 CET	23	54476	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:04.232634068 CET	54476	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:04.233194113 CET	54478	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:04.237437010 CET	23	54476	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:04.237970114 CET	23	54478	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:04.238018036 CET	54478	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:04.253073931 CET	54478	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:04.259937048 CET	23	54478	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:06.006298065 CET	23	54478	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:06.006556988 CET	54478	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:06.006959915 CET	54480	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:06.011286020 CET	23	54478	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:06.011709929 CET	23	54480	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:06.011841059 CET	54480	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:06.027260065 CET	54480	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:06.032016039 CET	23	54480	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:07.800638914 CET	23	54480	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:07.801012993 CET	54480	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:07.801676989 CET	54482	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:07.805780888 CET	23	54480	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:07.806484938 CET	23	54482	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:07.806575060 CET	54482	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:07.818818092 CET	54482	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:07.823587894 CET	23	54482	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:09.582560062 CET	23	54482	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:09.582895994 CET	54482	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:09.583319902 CET	54484	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:09.587647915 CET	23	54482	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:09.588131905 CET	23	54484	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:09.588222027 CET	54484	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:09.598501921 CET	54484	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:09.603286028 CET	23	54484	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:11.641639948 CET	23	54484	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:11.642128944 CET	54484	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:11.642173052 CET	23	54484	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:11.642237902 CET	54484	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:11.642926931 CET	54486	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:11.655205965 CET	23	54484	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:11.657367945 CET	23	54486	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:11.657434940 CET	54486	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:11.668597937 CET	54486	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:11.673335075 CET	23	54486	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:13.444183111 CET	23	54486	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:13.444787979 CET	54486	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:13.445513964 CET	54488	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:13.449538946 CET	23	54486	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:13.450365067 CET	23	54488	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:13.450452089 CET	54488	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:13.466777086 CET	54488	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:13.471534967 CET	23	54488	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:15.176100969 CET	23	54488	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:15.176562071 CET	54488	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:15.177407980 CET	54490	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:15.184329987 CET	23	54488	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:15.184340954 CET	23	54490	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:15.184494972 CET	54490	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:15.198564053 CET	54490	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:15.204041958 CET	23	54490	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:16.970010996 CET	23	54490	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:16.970382929 CET	54490	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:16.971111059 CET	54492	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:16.975153923 CET	23	54490	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:16.975900888 CET	23	54492	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:16.975965977 CET	54492	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:16.990674019 CET	54492	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:16.995404005 CET	23	54492	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:18.786211014 CET	23	54492	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:18.786648035 CET	54492	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:18.787091970 CET	54494	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:18.791425943 CET	23	54492	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:18.791866064 CET	23	54494	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:18.791930914 CET	54494	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:18.804615974 CET	54494	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:18.809387922 CET	23	54494	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:20.612368107 CET	23	54494	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:20.612749100 CET	54494	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:20.613100052 CET	54496	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:20.618185997 CET	23	54494	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:20.618196011 CET	23	54496	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:20.618242025 CET	54496	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:20.629688025 CET	54496	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:20.635719061 CET	23	54496	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:22.361213923 CET	23	54496	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:22.361488104 CET	54496	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:22.361876965 CET	54498	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:22.366265059 CET	23	54496	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:22.366640091 CET	23	54498	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:22.366719007 CET	54498	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:22.377533913 CET	54498	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:22.382256985 CET	23	54498	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:24.134021997 CET	23	54498	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:24.134496927 CET	54498	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:24.135107040 CET	54500	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:24.139262915 CET	23	54498	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:24.139853954 CET	23	54500	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:24.139925003 CET	54500	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:24.156677961 CET	54500	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:24.161439896 CET	23	54500	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:26.607180119 CET	23	54500	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:26.607531071 CET	54500	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:26.607666969 CET	23	54500	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:26.607772112 CET	54500	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:26.608207941 CET	54502	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:26.608302116 CET	23	54500	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:26.608361006 CET	54500	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:26.617908001 CET	23	54500	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:26.619062901 CET	23	54502	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:26.619127989 CET	54502	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:26.636241913 CET	54502	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:26.640979052 CET	23	54502	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:28.381501913 CET	23	54502	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:28.381946087 CET	54502	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:28.382654905 CET	54504	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:28.386732101 CET	23	54502	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:28.387402058 CET	23	54504	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:28.387464046 CET	54504	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:28.405564070 CET	54504	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:28.410321951 CET	23	54504	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:30.131006002 CET	23	54504	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:30.131334066 CET	54504	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:30.131942987 CET	54506	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:30.136115074 CET	23	54504	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:30.136696100 CET	23	54506	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:30.136790037 CET	54506	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:30.153626919 CET	54506	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:30.158368111 CET	23	54506	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:31.899229050 CET	23	54506	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:31.899692059 CET	54506	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:31.900374889 CET	54508	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:31.904467106 CET	23	54506	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:31.905172110 CET	23	54508	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:31.905241966 CET	54508	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:31.919544935 CET	54508	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:31.924381018 CET	23	54508	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:33.685786963 CET	23	54508	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:33.686094046 CET	54508	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:33.686741114 CET	54510	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:33.691096067 CET	23	54508	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:33.691644907 CET	23	54510	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:33.691709995 CET	54510	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:33.707421064 CET	54510	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:33.712335110 CET	23	54510	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:35.425163984 CET	23	54510	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:35.425481081 CET	54510	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:35.425940037 CET	54512	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:35.430330992 CET	23	54510	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:35.430743933 CET	23	54512	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:35.430836916 CET	54512	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:35.447827101 CET	54512	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:35.452615976 CET	23	54512	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:37.157581091 CET	23	54512	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:37.157870054 CET	54512	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:37.158417940 CET	54514	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:37.162651062 CET	23	54512	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:37.163209915 CET	23	54514	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:37.163266897 CET	54514	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:37.175394058 CET	54514	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:37.180188894 CET	23	54514	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:38.931855917 CET	23	54514	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:38.932074070 CET	54514	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:38.932564974 CET	54516	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:38.936856031 CET	23	54514	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:38.937334061 CET	23	54516	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:38.937393904 CET	54516	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:38.951451063 CET	54516	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:38.956264019 CET	23	54516	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:40.689598083 CET	23	54516	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:40.689905882 CET	54516	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:40.690288067 CET	54518	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:40.694681883 CET	23	54516	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:40.695060015 CET	23	54518	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:40.695120096 CET	54518	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:40.707259893 CET	54518	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:40.712069988 CET	23	54518	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:42.467183113 CET	23	54518	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:42.467546940 CET	54518	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:42.467865944 CET	54520	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:42.472342968 CET	23	54518	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:42.472662926 CET	23	54520	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:42.472721100 CET	54520	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:42.485279083 CET	54520	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:42.490056992 CET	23	54520	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:44.225955963 CET	23	54520	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:44.226317883 CET	54520	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:44.226773977 CET	54522	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:44.231117010 CET	23	54520	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:44.231574059 CET	23	54522	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:44.231621981 CET	54522	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:44.243501902 CET	54522	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:44.248361111 CET	23	54522	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:45.971605062 CET	23	54522	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:45.971875906 CET	54522	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:45.971889019 CET	54522	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:45.972402096 CET	54524	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:45.976632118 CET	23	54522	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:45.977186918 CET	23	54524	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:45.977278948 CET	54524	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:45.989619017 CET	54524	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:45.994383097 CET	23	54524	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:47.779628038 CET	23	54524	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:47.779990911 CET	54524	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:47.780615091 CET	54526	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:47.784792900 CET	23	54524	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:47.785429955 CET	23	54526	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:47.785479069 CET	54526	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:47.797353983 CET	54526	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:47.802125931 CET	23	54526	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:49.552438974 CET	23	54526	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:49.552736044 CET	54526	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:49.553241968 CET	54528	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:49.557512045 CET	23	54526	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:49.558085918 CET	23	54528	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:49.558137894 CET	54528	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:49.569958925 CET	54528	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:49.575563908 CET	23	54528	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:51.321904898 CET	23	54528	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:51.322078943 CET	54528	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:51.322585106 CET	54530	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:51.332401037 CET	23	54528	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:51.332436085 CET	23	54530	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:51.332520962 CET	54530	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:51.345360994 CET	54530	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:51.350172997 CET	23	54530	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:53.107749939 CET	23	54530	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:53.107969046 CET	54530	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:53.108450890 CET	54532	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:53.113785982 CET	23	54530	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:53.114232063 CET	23	54532	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:53.114275932 CET	54532	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:53.126302958 CET	54532	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:53.131046057 CET	23	54532	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:54.881222010 CET	23	54532	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:54.881577969 CET	54532	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:54.882172108 CET	54534	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:54.886382103 CET	23	54532	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:54.886933088 CET	23	54534	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:54.886990070 CET	54534	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:54.900502920 CET	54534	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:54.905247927 CET	23	54534	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:56.671791077 CET	23	54534	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:56.671967983 CET	54534	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:56.672698021 CET	54536	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:56.676799059 CET	23	54534	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:56.677578926 CET	23	54536	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:56.677613020 CET	54536	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:56.688754082 CET	54536	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:56.693547010 CET	23	54536	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:58.431859016 CET	23	54536	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:58.432140112 CET	54536	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:58.432920933 CET	54538	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:58.438271999 CET	23	54536	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:58.438282967 CET	23	54538	45.128.233.186	192.168.2.23
Jan 7, 2025 22:20:58.438363075 CET	54538	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:58.453452110 CET	54538	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:20:58.458842993 CET	23	54538	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:00.225356102 CET	23	54538	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:00.225533009 CET	54538	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:00.226035118 CET	54540	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:00.230310917 CET	23	54538	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:00.230815887 CET	23	54540	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:00.230869055 CET	54540	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:00.242938042 CET	54540	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:00.247771025 CET	23	54540	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:01.999814034 CET	23	54540	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:02.000000954 CET	54540	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:02.000571012 CET	54542	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:02.006603956 CET	23	54540	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:02.006616116 CET	23	54542	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:02.006654978 CET	54542	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:02.018403053 CET	54542	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:02.023197889 CET	23	54542	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:03.783421040 CET	23	54542	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:03.783767939 CET	54542	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:03.784528017 CET	54544	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:03.788590908 CET	23	54542	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:03.789235115 CET	23	54544	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:03.789339066 CET	54544	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:03.805732965 CET	54544	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:03.810439110 CET	23	54544	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:05.596884966 CET	23	54544	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:05.597377062 CET	54544	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:05.598306894 CET	54546	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:05.602205992 CET	23	54544	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:05.603163004 CET	23	54546	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:05.603269100 CET	54546	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:05.619288921 CET	54546	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:05.624089003 CET	23	54546	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:07.370378017 CET	23	54546	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:07.370851040 CET	54546	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:07.371665001 CET	54548	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:07.375667095 CET	23	54546	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:07.376512051 CET	23	54548	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:07.376569033 CET	54548	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:07.389601946 CET	54548	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:07.394365072 CET	23	54548	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:09.159935951 CET	23	54548	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:09.160249949 CET	54548	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:09.160823107 CET	54550	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:09.165143967 CET	23	54548	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:09.165601015 CET	23	54550	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:09.165682077 CET	54550	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:09.178634882 CET	54550	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:09.187616110 CET	23	54550	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:10.907983065 CET	23	54550	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:10.908221006 CET	54550	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:10.908808947 CET	54552	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:10.913060904 CET	23	54550	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:10.913686991 CET	23	54552	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:10.913757086 CET	54552	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:10.914839029 CET	54552	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:10.919595957 CET	23	54552	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:12.678143978 CET	23	54552	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:12.678383112 CET	54552	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:12.678859949 CET	54554	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:12.683252096 CET	23	54552	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:12.683675051 CET	23	54554	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:12.683773041 CET	54554	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:12.683815956 CET	54554	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:12.688652039 CET	23	54554	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:14.484366894 CET	23	54554	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:14.484648943 CET	54554	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:14.485465050 CET	54556	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:14.489500999 CET	23	54554	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:14.490297079 CET	23	54556	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:14.490362883 CET	54556	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:14.490554094 CET	54556	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:14.495307922 CET	23	54556	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:16.255966902 CET	23	54556	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:16.256186008 CET	54556	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:16.256984949 CET	54558	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:16.260960102 CET	23	54556	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:16.261780977 CET	23	54558	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:16.261827946 CET	54558	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:16.261895895 CET	54558	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:16.266659975 CET	23	54558	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:17.997040987 CET	23	54558	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:17.997360945 CET	54558	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:17.998059034 CET	54560	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:18.002165079 CET	23	54558	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:18.002851963 CET	23	54560	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:18.002934933 CET	54560	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:18.002978086 CET	54560	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:18.007735014 CET	23	54560	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:19.737179995 CET	23	54560	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:19.737544060 CET	54560	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:19.738048077 CET	54562	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:19.742328882 CET	23	54560	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:19.742798090 CET	23	54562	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:19.742871046 CET	54562	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:19.743009090 CET	54562	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:19.747750998 CET	23	54562	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:21.519814014 CET	23	54562	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:21.520132065 CET	54562	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:21.520634890 CET	54564	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:21.524930000 CET	23	54562	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:21.525437117 CET	23	54564	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:21.525480986 CET	54564	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:21.525532007 CET	54564	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:21.530272007 CET	23	54564	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:23.295449972 CET	23	54564	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:23.295779943 CET	54564	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:23.296227932 CET	54566	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:23.300569057 CET	23	54564	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:23.301035881 CET	23	54566	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:23.301091909 CET	54566	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:23.301153898 CET	54566	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:23.305927038 CET	23	54566	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:25.064862013 CET	23	54566	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:25.065175056 CET	54566	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:25.065960884 CET	54568	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:25.069983959 CET	23	54566	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:25.070957899 CET	23	54568	45.128.233.186	192.168.2.23
Jan 7, 2025 22:21:25.071041107 CET	54568	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:25.071154118 CET	54568	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:21:25.075947046 CET	23	54568	45.128.233.186	192.168.2.23

System Behavior

Analysis Process: dash PID: 6198, Parent PID: 4331

General

Start time (UTC):	21:17:43
Start date (UTC):	07/01/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 6198, Parent PID: 4331

General

Start time (UTC):	21:17:43
Start date (UTC):	07/01/2025
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.9qacKNxiGJ /tmp/tmp.7wcOgPA9eQ /tmp/tmp.a1PJgk5ton
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: dash PID: 6199, Parent PID: 4331

General

Start time (UTC):	21:17:43
Start date (UTC):	07/01/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 6199, Parent PID: 4331

General

Start time (UTC):	21:17:43
Start date (UTC):	07/01/2025
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.9qacKNxiGJ /tmp/tmp.7wcOgPA9eQ /tmp/tmp.a1PJgk5ton
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: gigops.arm6.elf PID: 6212, Parent PID: 6132

General

Start time (UTC):	21:17:50
Start date (UTC):	07/01/2025
Path:	/tmp/gigops.arm6.elf
Arguments:	/tmp/gigops.arm6.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: gigops.arm6.elf PID: 6214, Parent PID: 6212

General

Start time (UTC):	21:17:51
Start date (UTC):	07/01/2025
Path:	/tmp/gigops.arm6.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: gigops.arm6.elf PID: 6216, Parent PID: 6214

General

Start time (UTC):	21:17:51
Start date (UTC):	07/01/2025
Path:	/tmp/gigops.arm6.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report gigops.arm6.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: dash PID: 6198, Parent PID: 4331

General

Chronological Activities

Analysis Process: rm PID: 6198, Parent PID: 4331

General

Chronological Activities

Analysis Process: dash PID: 6199, Parent PID: 4331

General

Chronological Activities

Analysis Process: rm PID: 6199, Parent PID: 4331

General

Chronological Activities

Analysis Process: gigops.arm6.elf PID: 6212, Parent PID: 6132

General

Chronological Activities

Linux Analysis Report
gigops.arm6.elf