Edit tour

Linux Analysis Report
gigops.i686.elf

Overview

General Information

Sample name:	gigops.i686.elf
Analysis ID:	1585610
MD5:	8ae8b514fc5e56e55e9712b26ddcc7fd
SHA1:	280bce5ab34048c54ab34665469242945195746a
SHA256:	582900900aca4f95f741e0edd3b769c7b5bd1360d5ccbfbd3c69b744c53ab2a3
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt

Score:	88
Range:	0 - 100
Whitelisted:	false

Signatures

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Machine Learning detection for sample

Opens /proc/net/* files useful for finding connected devices and routers

Sample and/or dropped files contains symbols with suspicious names

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1585610
Start date and time:	2025-01-07 22:21:55 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 3s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	gigops.i686.elf
Detection:	MAL
Classification:	mal88.spre.troj.linELF@0/0@2/0

Warnings

VT rate limit hit for: gigops.i686.elf

Runtime Messages

Command:	/tmp/gigops.i686.elf
PID:	5737
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	BUILD DONGS buBUILD DONGS f: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS
Standard Error:

Process Tree

system is lnxubuntu20

gigops.i686.elf (PID: 5737, Parent: 5664, MD5: 8ae8b514fc5e56e55e9712b26ddcc7fd) Arguments: /tmp/gigops.i686.elf

gigops.i686.elf New Fork (PID: 5738, Parent: 5737)

gigops.i686.elf New Fork (PID: 5739, Parent: 5738)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
gigops.i686.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
gigops.i686.elf	Linux_Trojan_Gafgyt_6321b565	unknown	unknown	0x2698:$a: D8 89 D0 01 C0 01 D0 C1 E0 03 8B 04 08 83 E0 1F 0F AB 84 9D 58 FF
gigops.i686.elf	Linux_Trojan_Gafgyt_e6d75e6f	unknown	unknown	0xb3da:$a: 00 00 00 CD 80 C3 8B 54 24 04 8B 4C 24 08 87 D3 B8 5B 00 00 00
gigops.i686.elf	Linux_Trojan_Gafgyt_fb14e81f	unknown	unknown	0xe936:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00

Memory Dumps

Source	Rule	Description	Author	Strings
5737.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Gafgyt_6321b565	unknown	unknown	0x2698:$a: D8 89 D0 01 C0 01 D0 C1 E0 03 8B 04 08 83 E0 1F 0F AB 84 9D 58 FF
5737.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Gafgyt_e6d75e6f	unknown	unknown	0xb3da:$a: 00 00 00 CD 80 C3 8B 54 24 04 8B 4C 24 08 87 D3 B8 5B 00 00 00
5737.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Gafgyt_fb14e81f	unknown	unknown	0xe936:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00
5738.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Gafgyt_6321b565	unknown	unknown	0x2698:$a: D8 89 D0 01 C0 01 D0 C1 E0 03 8B 04 08 83 E0 1F 0F AB 84 9D 58 FF
5738.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Gafgyt_e6d75e6f	unknown	unknown	0xb3da:$a: 00 00 00 CD 80 C3 8B 54 24 04 8B 4C 24 08 87 D3 B8 5B 00 00 00
5738.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Gafgyt_fb14e81f	unknown	unknown	0xe936:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00
Click to see the 1 entries

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-07T22:22:54.834481+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54172	45.128.233.186	23	TCP
2025-01-07T22:22:56.613844+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54174	45.128.233.186	23	TCP
2025-01-07T22:22:58.375630+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54176	45.128.233.186	23	TCP
2025-01-07T22:23:00.122622+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54178	45.128.233.186	23	TCP
2025-01-07T22:23:01.872275+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54180	45.128.233.186	23	TCP
2025-01-07T22:23:03.623202+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54182	45.128.233.186	23	TCP
2025-01-07T22:23:05.536820+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54184	45.128.233.186	23	TCP
2025-01-07T22:23:07.331002+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54186	45.128.233.186	23	TCP
2025-01-07T22:23:09.097359+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54188	45.128.233.186	23	TCP
2025-01-07T22:23:10.884410+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54190	45.128.233.186	23	TCP
2025-01-07T22:23:12.686087+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54192	45.128.233.186	23	TCP
2025-01-07T22:23:14.442494+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54194	45.128.233.186	23	TCP
2025-01-07T22:23:16.189581+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54196	45.128.233.186	23	TCP
2025-01-07T22:23:17.958611+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54198	45.128.233.186	23	TCP
2025-01-07T22:23:19.769797+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54200	45.128.233.186	23	TCP
2025-01-07T22:23:21.531260+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54202	45.128.233.186	23	TCP
2025-01-07T22:23:23.337822+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54204	45.128.233.186	23	TCP
2025-01-07T22:23:25.129877+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54206	45.128.233.186	23	TCP
2025-01-07T22:23:26.910449+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54208	45.128.233.186	23	TCP
2025-01-07T22:23:28.698580+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54210	45.128.233.186	23	TCP
2025-01-07T22:23:30.521910+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54212	45.128.233.186	23	TCP
2025-01-07T22:23:32.262481+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54214	45.128.233.186	23	TCP
2025-01-07T22:23:34.042704+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54216	45.128.233.186	23	TCP
2025-01-07T22:23:35.782049+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54218	45.128.233.186	23	TCP
2025-01-07T22:23:37.568793+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54220	45.128.233.186	23	TCP
2025-01-07T22:23:39.355398+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54222	45.128.233.186	23	TCP
2025-01-07T22:23:41.092307+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54224	45.128.233.186	23	TCP
2025-01-07T22:23:42.875854+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54226	45.128.233.186	23	TCP
2025-01-07T22:23:44.654999+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54228	45.128.233.186	23	TCP
2025-01-07T22:23:46.405480+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54230	45.128.233.186	23	TCP
2025-01-07T22:23:48.190687+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54232	45.128.233.186	23	TCP
2025-01-07T22:23:49.961649+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54234	45.128.233.186	23	TCP
2025-01-07T22:23:51.699013+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54236	45.128.233.186	23	TCP
2025-01-07T22:23:53.499492+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54238	45.128.233.186	23	TCP
2025-01-07T22:23:55.445809+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54240	45.128.233.186	23	TCP
2025-01-07T22:23:57.211458+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54242	45.128.233.186	23	TCP
2025-01-07T22:23:58.954097+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54244	45.128.233.186	23	TCP
2025-01-07T22:24:00.753458+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54246	45.128.233.186	23	TCP
2025-01-07T22:24:02.514944+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54248	45.128.233.186	23	TCP
2025-01-07T22:24:04.310326+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54250	45.128.233.186	23	TCP
2025-01-07T22:24:06.090453+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54252	45.128.233.186	23	TCP
2025-01-07T22:24:07.870113+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54254	45.128.233.186	23	TCP
2025-01-07T22:24:09.692312+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54256	45.128.233.186	23	TCP
2025-01-07T22:24:11.605198+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54258	45.128.233.186	23	TCP
2025-01-07T22:24:13.337933+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54260	45.128.233.186	23	TCP
2025-01-07T22:24:15.115517+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54262	45.128.233.186	23	TCP
2025-01-07T22:24:16.862636+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54264	45.128.233.186	23	TCP
2025-01-07T22:24:18.627294+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54266	45.128.233.186	23	TCP
2025-01-07T22:24:20.370100+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54268	45.128.233.186	23	TCP
2025-01-07T22:24:22.149740+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54270	45.128.233.186	23	TCP
2025-01-07T22:24:23.942474+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54272	45.128.233.186	23	TCP
2025-01-07T22:24:25.699932+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54274	45.128.233.186	23	TCP
2025-01-07T22:24:27.451104+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54276	45.128.233.186	23	TCP
2025-01-07T22:24:29.244863+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54278	45.128.233.186	23	TCP
2025-01-07T22:24:31.046450+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54280	45.128.233.186	23	TCP
2025-01-07T22:24:32.837643+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54282	45.128.233.186	23	TCP
2025-01-07T22:24:35.209983+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54284	45.128.233.186	23	TCP
2025-01-07T22:24:36.956615+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54286	45.128.233.186	23	TCP
2025-01-07T22:24:38.700783+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54288	45.128.233.186	23	TCP
2025-01-07T22:24:40.486963+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54290	45.128.233.186	23	TCP
2025-01-07T22:24:42.272706+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54292	45.128.233.186	23	TCP
2025-01-07T22:24:44.055716+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54294	45.128.233.186	23	TCP
2025-01-07T22:24:45.841272+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54296	45.128.233.186	23	TCP
2025-01-07T22:24:47.639996+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54298	45.128.233.186	23	TCP
2025-01-07T22:24:49.387002+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54300	45.128.233.186	23	TCP
2025-01-07T22:24:51.138562+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54302	45.128.233.186	23	TCP
2025-01-07T22:24:52.904598+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54304	45.128.233.186	23	TCP
2025-01-07T22:24:54.682649+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54306	45.128.233.186	23	TCP
2025-01-07T22:24:56.474848+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54308	45.128.233.186	23	TCP
2025-01-07T22:24:58.220076+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54310	45.128.233.186	23	TCP
2025-01-07T22:24:59.962479+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54312	45.128.233.186	23	TCP
2025-01-07T22:25:01.768460+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54314	45.128.233.186	23	TCP
2025-01-07T22:25:03.536661+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54316	45.128.233.186	23	TCP
2025-01-07T22:25:05.298034+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54318	45.128.233.186	23	TCP
2025-01-07T22:25:07.110033+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54320	45.128.233.186	23	TCP
2025-01-07T22:25:08.902327+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54322	45.128.233.186	23	TCP
2025-01-07T22:25:10.649397+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54324	45.128.233.186	23	TCP
2025-01-07T22:25:12.404238+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54326	45.128.233.186	23	TCP
2025-01-07T22:25:14.158300+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54328	45.128.233.186	23	TCP
2025-01-07T22:25:15.961087+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54330	45.128.233.186	23	TCP
2025-01-07T22:25:17.750077+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54332	45.128.233.186	23	TCP
2025-01-07T22:25:19.520417+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54334	45.128.233.186	23	TCP
2025-01-07T22:25:21.469882+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54336	45.128.233.186	23	TCP
2025-01-07T22:25:23.795305+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54338	45.128.233.186	23	TCP
2025-01-07T22:25:25.926591+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54340	45.128.233.186	23	TCP
2025-01-07T22:25:28.077719+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54342	45.128.233.186	23	TCP
2025-01-07T22:25:29.944807+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54344	45.128.233.186	23	TCP
2025-01-07T22:25:31.727949+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54346	45.128.233.186	23	TCP
2025-01-07T22:25:33.489774+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54348	45.128.233.186	23	TCP
2025-01-07T22:25:35.225417+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54350	45.128.233.186	23	TCP
2025-01-07T22:25:36.969866+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54352	45.128.233.186	23	TCP
2025-01-07T22:25:38.745535+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54354	45.128.233.186	23	TCP
2025-01-07T22:25:40.698848+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54356	45.128.233.186	23	TCP
2025-01-07T22:25:42.504307+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54360	45.128.233.186	23	TCP
2025-01-07T22:25:44.263413+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54362	45.128.233.186	23	TCP
2025-01-07T22:25:46.138056+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54364	45.128.233.186	23	TCP
2025-01-07T22:25:47.893628+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54366	45.128.233.186	23	TCP
2025-01-07T22:25:49.622324+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54368	45.128.233.186	23	TCP
2025-01-07T22:25:51.388520+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54370	45.128.233.186	23	TCP
2025-01-07T22:25:53.177012+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54372	45.128.233.186	23	TCP
2025-01-07T22:25:54.921295+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54374	45.128.233.186	23	TCP
2025-01-07T22:25:56.737979+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54376	45.128.233.186	23	TCP
2025-01-07T22:25:58.504121+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54378	45.128.233.186	23	TCP
2025-01-07T22:26:00.307019+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54380	45.128.233.186	23	TCP
2025-01-07T22:26:02.140246+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54382	45.128.233.186	23	TCP
2025-01-07T22:26:03.899307+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54384	45.128.233.186	23	TCP
2025-01-07T22:26:05.682188+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54386	45.128.233.186	23	TCP
2025-01-07T22:26:07.446346+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54388	45.128.233.186	23	TCP
2025-01-07T22:26:09.248408+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54390	45.128.233.186	23	TCP
2025-01-07T22:26:11.030826+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54392	45.128.233.186	23	TCP
2025-01-07T22:26:12.790613+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54394	45.128.233.186	23	TCP
2025-01-07T22:26:14.530557+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54396	45.128.233.186	23	TCP
2025-01-07T22:26:16.304782+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54398	45.128.233.186	23	TCP
2025-01-07T22:26:18.105341+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54400	45.128.233.186	23	TCP
2025-01-07T22:26:19.878110+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54402	45.128.233.186	23	TCP
2025-01-07T22:26:21.670132+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54404	45.128.233.186	23	TCP
2025-01-07T22:26:23.465336+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54406	45.128.233.186	23	TCP
2025-01-07T22:26:25.249146+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54408	45.128.233.186	23	TCP
2025-01-07T22:26:27.022596+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.15	54410	45.128.233.186	23	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: gigops.i686.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "45.128.233.186:23"}

Multi AV Scanner detection for submitted file

Source: gigops.i686.elf

ReversingLabs: Detection: 71%

Machine Learning detection for sample

Source: gigops.i686.elf

Joe Sandbox ML: detected

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/gigops.i686.elf (PID: 5737)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54186 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54184 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54252 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54258 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54182 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54176 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54200 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54218 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54238 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54274 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54354 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54172 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54262 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54208 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54342 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54192 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54226 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54232 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54310 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54348 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54180 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54376 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54388 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54260 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54272 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54302 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54206 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54188 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54222 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54378 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54196 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54294 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54216 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54234 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54246 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54320 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54278 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54298 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54364 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54396 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54316 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54220 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54330 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54312 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54334 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54398 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54286 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54178 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54204 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54314 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54250 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54336 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54290 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54368 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54344 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54362 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54384 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54224 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54366 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54280 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54212 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54374 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54248 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54340 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54228 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54264 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54256 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54190 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54198 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54390 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54352 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54326 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54392 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54382 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54400 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54406 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54210 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54288 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54242 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54230 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54304 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54296 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54322 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54318 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54360 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54202 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54306 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54356 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54244 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54308 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54394 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54254 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54328 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54346 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54324 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54370 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54372 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54174 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54236 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54214 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54386 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54268 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54270 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54276 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54284 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54408 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54300 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54338 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54194 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54282 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54292 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54240 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54380 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54402 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54266 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54350 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54332 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54404 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.15:54410 -> 45.128.233.186:23

Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: gigops.i686.elf

String found in binary or memory: http://5.206.225.136/bins.sh;

System Summary

Malicious sample detected (through community Yara rule)

Source: gigops.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_6321b565 Author: unknown
Source: gigops.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_e6d75e6f Author: unknown
Source: gigops.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
Source: 5737.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6321b565 Author: unknown
Source: 5737.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e6d75e6f Author: unknown
Source: 5737.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
Source: 5738.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6321b565 Author: unknown
Source: 5738.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e6d75e6f Author: unknown
Source: 5738.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown

Source: gigops.i686.elf	ELF static info symbol of initial sample: passwords
Source: gigops.i686.elf	ELF static info symbol of initial sample: usernames

Source: gigops.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_6321b565 reference_sample = cd48addd392e7912ab15a5464c710055f696990fab564f29f13121e7a5e93730, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = c1d286e82426cbf19fc52836ef9a6b88c1f6e144967f43760df93cf1ab497d07, id = 6321b565-ed25-4bf2-be4f-3ffa0e643085, last_modified = 2021-09-16
Source: gigops.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_e6d75e6f reference_sample = 48b15093f33c18778724c48c34199a420be4beb0d794e36034097806e1521eb8, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e99805e8917d6526031270b6da5c2f3cc1c8235fed1d47134835a107d0df497c, id = e6d75e6f-aa04-4767-8730-6909958044a7, last_modified = 2021-09-16
Source: gigops.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
Source: 5737.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6321b565 reference_sample = cd48addd392e7912ab15a5464c710055f696990fab564f29f13121e7a5e93730, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = c1d286e82426cbf19fc52836ef9a6b88c1f6e144967f43760df93cf1ab497d07, id = 6321b565-ed25-4bf2-be4f-3ffa0e643085, last_modified = 2021-09-16
Source: 5737.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e6d75e6f reference_sample = 48b15093f33c18778724c48c34199a420be4beb0d794e36034097806e1521eb8, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e99805e8917d6526031270b6da5c2f3cc1c8235fed1d47134835a107d0df497c, id = e6d75e6f-aa04-4767-8730-6909958044a7, last_modified = 2021-09-16
Source: 5737.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
Source: 5738.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6321b565 reference_sample = cd48addd392e7912ab15a5464c710055f696990fab564f29f13121e7a5e93730, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = c1d286e82426cbf19fc52836ef9a6b88c1f6e144967f43760df93cf1ab497d07, id = 6321b565-ed25-4bf2-be4f-3ffa0e643085, last_modified = 2021-09-16
Source: 5738.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e6d75e6f reference_sample = 48b15093f33c18778724c48c34199a420be4beb0d794e36034097806e1521eb8, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e99805e8917d6526031270b6da5c2f3cc1c8235fed1d47134835a107d0df497c, id = e6d75e6f-aa04-4767-8730-6909958044a7, last_modified = 2021-09-16
Source: 5738.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26

Source: classification engine

Classification label: mal88.spre.troj.linELF@0/0@2/0

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: gigops.i686.elf, type: SAMPLE

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: gigops.i686.elf, type: SAMPLE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	1 Remote System Discovery	Remote Services	Data from Local System	1 Non-Application Layer Protocol	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service

Malware Configuration

Threatname: Gafgyt

{"C2 url": "45.128.233.186:23"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
gigops.i686.elf	71%	ReversingLabs	Linux.Backdoor.Gafgyt
gigops.i686.elf	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.24	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
45.128.233.186:23	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://5.206.225.136/bins.sh;	gigops.i686.elf	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
45.128.233.186	unknown	United Kingdom		208861	RACKTECHRU	true

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
45.128.233.186	gigops.x86.elf	Get hash	malicious	Gafgyt	Browse
	gigops.arm6.elf	Get hash	malicious	Gafgyt	Browse
	gigops.mips.elf	Get hash	malicious	Gafgyt	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	gigops.mips.elf	Get hash	malicious	Gafgyt	Browse	162.213.35.25
	miori.arc.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	botnet.mips.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	botnet.arm7.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	botnet.arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	sora.ppc.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	sora.sh4.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	sora.arm7.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	sora.mips.elf	Get hash	malicious	Mirai	Browse	162.213.35.25

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
RACKTECHRU	gigops.x86.elf	Get hash	malicious	Gafgyt	Browse	45.128.233.186
	gigops.arm6.elf	Get hash	malicious	Gafgyt	Browse	45.128.233.186
	gigops.mips.elf	Get hash	malicious	Gafgyt	Browse	45.128.233.186
	lEwK4xROgV.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	86.110.194.28
	zZ1Y43bxxV.exe	Get hash	malicious	DCRat	Browse	86.110.194.28
	updIMdPUj8.exe	Get hash	malicious	DCRat	Browse	86.110.194.28
	jew.sh4.elf	Get hash	malicious	Unknown	Browse	91.223.144.119
	la.bot.mipsel.elf	Get hash	malicious	Unknown	Browse	193.38.236.134
	oyCvLcfl3R.exe	Get hash	malicious	XenoRAT	Browse	194.113.106.81
	qsKo.ps1	Get hash	malicious	RHADAMANTHYS	Browse	194.113.106.180

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	6.315916354630842
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	gigops.i686.elf
File size:	95'838 bytes
MD5:	8ae8b514fc5e56e55e9712b26ddcc7fd
SHA1:	280bce5ab34048c54ab34665469242945195746a
SHA256:	582900900aca4f95f741e0edd3b769c7b5bd1360d5ccbfbd3c69b744c53ab2a3
SHA512:	15fa1efc9ddf066224b1cbebb2ea5b2f84064bcbb2c187d732d22519522d282ff769c7afb17395569ed5c343c062f32e12d5267ff26c781913982dee5a303673
SSDEEP:	1536:tPPBCUVFrPjVVj8W929u44KGQ0fy2Nai5gRPnoFZzlSpff0E34LXZJKGe:xBCIFrPjVVj8W92gb628i5gRPOzlSpfx
TLSH:	5E93294AE256C1F7C4460BB50197A9EE0731FC265BBEAE08F35C3EB4AB72498345D316
File Content Preview:	.ELF........................4...........4. ...(.........................................................<z..........................................Q.td............................U..S............h....#...[]...$.............U......=`....t..1..............

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8048188
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	4
Section Header Offset:	72168
Section Header Size:	40
Number of Section Headers:	19
Header String Table Index:	16

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80480b4	0xb4	0x1c	0x0	0x6	AX	0	0	1
.text	PROGBITS	0x80480d0	0xd0	0xe04c	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x805611c	0xe11c	0x17	0x0	0x6	AX	0	0	1
.rodata	PROGBITS	0x8056140	0xe140	0x2069	0x0	0x2	A	0	0	32
.eh_frame	PROGBITS	0x80591ac	0x101ac	0x7f0	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x805999c	0x1099c	0x8	0x0	0x403	WAT	0	0	4
.ctors	PROGBITS	0x805999c	0x1099c	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x80599a4	0x109a4	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x80599ac	0x109ac	0x4	0x0	0x3	WA	0	0	4
.got.plt	PROGBITS	0x80599b0	0x109b0	0xc	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x80599c0	0x109c0	0x2a0	0x0	0x3	WA	0	0	32
.bss	NOBITS	0x8059c60	0x10c60	0x6f88	0x0	0x3	WA	0	0	32
.stab	PROGBITS	0x0	0x10c60	0x138	0xc	0x0		14	0	4
.stabstr	STRTAB	0x0	0x10d98	0xf6	0x0	0x0		0	0	1
.comment	PROGBITS	0x0	0x10e8e	0xad4	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x11962	0x84	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x11ce0	0x3390	0x10	0x0		18	318	4
.strtab	STRTAB	0x0	0x15070	0x25ee	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8048000	0x8048000	0x101a9	0x101a9	6.4052	0x5	R E	0x1000	.init .text .fini .rodata
LOAD	0x101ac	0x80591ac	0x80591ac	0xab4	0x7a3c	4.7335	0x6	RW	0x1000	.eh_frame .tbss .ctors .dtors .jcr .got.plt .data .bss
TLS	0x1099c	0x805999c	0x805999c	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x80480b4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80480d0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x805611c	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x8056140	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x80591ac	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x805999c	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x805999c	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x80599a4	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x80599ac	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x80599b0	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x80599c0	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x8059c60	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
C.11.5298	.symtab	0x8058080	24	OBJECT	<unknown>	DEFAULT	4
POPBX1	.symtab	0x805287f	0	NOTYPE	<unknown>	DEFAULT	2
POPBX1	.symtab	0x80528df	0	NOTYPE	<unknown>	DEFAULT	2
POPBX1	.symtab	0x805293f	0	NOTYPE	<unknown>	DEFAULT	2
POPBX1	.symtab	0x805299f	0	NOTYPE	<unknown>	DEFAULT	2
PUSHBX1	.symtab	0x805286b	0	NOTYPE	<unknown>	DEFAULT	2
PUSHBX1	.symtab	0x80528cb	0	NOTYPE	<unknown>	DEFAULT	2
PUSHBX1	.symtab	0x805292b	0	NOTYPE	<unknown>	DEFAULT	2
PUSHBX1	.symtab	0x805298b	0	NOTYPE	<unknown>	DEFAULT	2
Q	.symtab	0x8059ca0	16384	OBJECT	<unknown>	DEFAULT	12
RESTBX1	.symtab	0x8052829	0	NOTYPE	<unknown>	DEFAULT	2
SAVEBX1	.symtab	0x805281c	0	NOTYPE	<unknown>	DEFAULT	2
StartTheLelz	.symtab	0x804a0d9	5463	FUNC	<unknown>	DEFAULT	2
_Exit	.symtab	0x804ea2c	66	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x80599b0	0	OBJECT	<unknown>	HIDDEN	10
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_L_lock_103	.symtab	0x8053d21	16	FUNC	<unknown>	DEFAULT	2
_L_lock_129	.symtab	0x8053225	16	FUNC	<unknown>	DEFAULT	2
_L_lock_13	.symtab	0x8054f29	16	FUNC	<unknown>	DEFAULT	2
_L_lock_144	.symtab	0x8054f69	16	FUNC	<unknown>	DEFAULT	2
_L_lock_164	.symtab	0x8054f89	16	FUNC	<unknown>	DEFAULT	2
_L_lock_18	.symtab	0x804f2e9	10	FUNC	<unknown>	DEFAULT	2
_L_lock_18	.symtab	0x8053ce7	13	FUNC	<unknown>	DEFAULT	2
_L_lock_18	.symtab	0x8054bf3	10	FUNC	<unknown>	DEFAULT	2
_L_lock_195	.symtab	0x8054fa9	13	FUNC	<unknown>	DEFAULT	2
_L_lock_205	.symtab	0x80541a7	16	FUNC	<unknown>	DEFAULT	2
_L_lock_216	.symtab	0x80541b7	16	FUNC	<unknown>	DEFAULT	2
_L_lock_28	.symtab	0x805267c	16	FUNC	<unknown>	DEFAULT	2
_L_lock_288	.symtab	0x8053245	16	FUNC	<unknown>	DEFAULT	2
_L_lock_30	.symtab	0x80531e5	16	FUNC	<unknown>	DEFAULT	2
_L_lock_30	.symtab	0x8054f39	16	FUNC	<unknown>	DEFAULT	2
_L_lock_34	.symtab	0x8055e87	13	FUNC	<unknown>	DEFAULT	2
_L_lock_35	.symtab	0x8054b61	10	FUNC	<unknown>	DEFAULT	2
_L_lock_53	.symtab	0x8053cf4	16	FUNC	<unknown>	DEFAULT	2
_L_lock_70	.symtab	0x8052574	16	FUNC	<unknown>	DEFAULT	2
_L_lock_74	.symtab	0x8053205	16	FUNC	<unknown>	DEFAULT	2
_L_unlock_104	.symtab	0x8054f59	16	FUNC	<unknown>	DEFAULT	2
_L_unlock_108	.symtab	0x8055e94	10	FUNC	<unknown>	DEFAULT	2
_L_unlock_113	.symtab	0x8053215	16	FUNC	<unknown>	DEFAULT	2
_L_unlock_113	.symtab	0x8053d31	13	FUNC	<unknown>	DEFAULT	2
_L_unlock_156	.symtab	0x8054f79	16	FUNC	<unknown>	DEFAULT	2
_L_unlock_158	.symtab	0x8053235	16	FUNC	<unknown>	DEFAULT	2
_L_unlock_167	.symtab	0x8052584	13	FUNC	<unknown>	DEFAULT	2
_L_unlock_174	.symtab	0x8054f99	16	FUNC	<unknown>	DEFAULT	2
_L_unlock_232	.symtab	0x80541c7	13	FUNC	<unknown>	DEFAULT	2
_L_unlock_239	.symtab	0x8054fb6	13	FUNC	<unknown>	DEFAULT	2
_L_unlock_242	.symtab	0x80541d4	13	FUNC	<unknown>	DEFAULT	2
_L_unlock_328	.symtab	0x8053255	16	FUNC	<unknown>	DEFAULT	2
_L_unlock_43	.symtab	0x8054bfd	10	FUNC	<unknown>	DEFAULT	2
_L_unlock_52	.symtab	0x80531f5	16	FUNC	<unknown>	DEFAULT	2
_L_unlock_62	.symtab	0x804f2f3	10	FUNC	<unknown>	DEFAULT	2
_L_unlock_65	.symtab	0x8053d04	16	FUNC	<unknown>	DEFAULT	2
_L_unlock_65	.symtab	0x8054b6b	10	FUNC	<unknown>	DEFAULT	2
_L_unlock_82	.symtab	0x8053d14	13	FUNC	<unknown>	DEFAULT	2
_L_unlock_88	.symtab	0x8054f49	16	FUNC	<unknown>	DEFAULT	2
_L_unlock_93	.symtab	0x805268c	13	FUNC	<unknown>	DEFAULT	2
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x80599a0	0	OBJECT	<unknown>	DEFAULT	7
__CTOR_LIST__	.symtab	0x805999c	0	OBJECT	<unknown>	DEFAULT	7
__C_ctype_b	.symtab	0x8059a60	4	OBJECT	<unknown>	DEFAULT	11
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x8056a1c	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x8059a68	4	OBJECT	<unknown>	DEFAULT	11
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x8056d1c	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x80599a8	0	OBJECT	<unknown>	DEFAULT	8
__DTOR_LIST__	.symtab	0x80599a4	0	OBJECT	<unknown>	DEFAULT	8
__EH_FRAME_BEGIN__	.symtab	0x80591ac	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x8059998	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x8059a60	4	OBJECT	<unknown>	HIDDEN	11
__GI___C_ctype_toupper	.symtab	0x8059a68	4	OBJECT	<unknown>	HIDDEN	11
__GI___close	.symtab	0x8052810	80	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel	.symtab	0x805281a	27	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b	.symtab	0x8059a64	4	OBJECT	<unknown>	HIDDEN	11
__GI___ctype_toupper	.symtab	0x8059a6c	4	OBJECT	<unknown>	HIDDEN	11
__GI___errno_location	.symtab	0x804edb0	13	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0x804e938	86	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x8054fc4	220	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x80502a8	29	FUNC	<unknown>	HIDDEN	2
__GI___libc_close	.symtab	0x8052810	80	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x804e98e	156	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x8052860	91	FUNC	<unknown>	HIDDEN	2
__GI___libc_read	.symtab	0x8052920	91	FUNC	<unknown>	HIDDEN	2
__GI___libc_waitpid	.symtab	0x8052980	91	FUNC	<unknown>	HIDDEN	2
__GI___libc_write	.symtab	0x80528c0	91	FUNC	<unknown>	HIDDEN	2
__GI___open	.symtab	0x8052860	91	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel	.symtab	0x805286a	33	FUNC	<unknown>	HIDDEN	2
__GI___read	.symtab	0x8052920	91	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel	.symtab	0x805292a	33	FUNC	<unknown>	HIDDEN	2
__GI___register_atfork	.symtab	0x80525b1	203	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0x8050d68	32	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0x8050d88	32	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0x8050d44	36	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x8052ab7	63	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x8052b2a	48	FUNC	<unknown>	HIDDEN	2
__GI___waitpid	.symtab	0x8052980	91	FUNC	<unknown>	HIDDEN	2
__GI___write	.symtab	0x80528c0	91	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel	.symtab	0x80528ca	33	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x80502c8	206	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x804ea2c	66	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x8051958	208	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x8051db0	20	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x8055a64	44	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x804ea70	39	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x8052810	80	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x80534c4	138	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x80539f7	61	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x8053a34	53	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x8053768	655	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x8050a14	91	FUNC	<unknown>	HIDDEN	2
__GI_dup2	.symtab	0x804ea98	43	FUNC	<unknown>	HIDDEN	2
__GI_execl	.symtab	0x8051f70	105	FUNC	<unknown>	HIDDEN	2
__GI_execve	.symtab	0x805337c	47	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x8051f04	106	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x8053b58	399	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x804e98e	156	FUNC	<unknown>	HIDDEN	2
__GI_fdopen	.symtab	0x8053d40	50	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x8054d51	472	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x8054ac4	157	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x8054fc4	220	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x8054b78	123	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x80550a0	107	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x8053d74	24	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x8052368	524	FUNC	<unknown>	HIDDEN	2
__GI_fprintf	.symtab	0x804ee14	30	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x8050000	49	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x8055d64	27	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x8055d80	263	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x8055a90	75	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x8050034	119	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x8054fc4	220	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x804eac4	37	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x80533ac	8	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x80533b4	8	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x80533bc	8	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x80533c4	17	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x805269c	49	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x804eaec	43	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x8050a70	43	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x80533d8	8	FUNC	<unknown>	HIDDEN	2
__GI_htonl	.symtab	0x8050445	7	FUNC	<unknown>	HIDDEN	2
__GI_htons	.symtab	0x8050438	13	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x80509ec	37	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x80552d4	148	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x80509d7	21	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x8050988	79	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x80507ba	460	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x80504dd	466	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x8051c72	155	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x804eb18	142	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x80503b4	29	FUNC	<unknown>	HIDDEN	2
__GI_isspace	.symtab	0x804ed7c	17	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x804eba8	43	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x805608c	85	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x80500ac	41	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x8056068	33	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x8055144	177	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x80500d8	50	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x80532fc	27	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x8055adc	59	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x80533e0	43	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x8053435	61	FUNC	<unknown>	HIDDEN	2
__GI_ntohl	.symtab	0x8050459	7	FUNC	<unknown>	HIDDEN	2
__GI_ntohs	.symtab	0x805044c	13	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x8052860	91	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x80535e2	137	FUNC	<unknown>	HIDDEN	2
__GI_perror	.symtab	0x804edc0	50	FUNC	<unknown>	HIDDEN	2
__GI_pipe	.symtab	0x804ebd4	39	FUNC	<unknown>	HIDDEN	2
__GI_printf	.symtab	0x804edf4	32	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x80526d0	101	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x8051a30	72	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x8051b6c	94	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x8056054	19	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x8052920	91	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x80536e0	134	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x8050ad8	99	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x8053474	78	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x804ec71	113	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x8050b3c	99	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x8050ba0	115	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x804ece4	31	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x8050c14	59	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x8051d0d	161	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x8053287	81	FUNC	<unknown>	HIDDEN	2
__GI_sigaddset	.symtab	0x8050c7c	34	FUNC	<unknown>	HIDDEN	2
__GI_sigemptyset	.symtab	0x8050ca0	20	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x8050cb4	143	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x804ed04	101	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x8052738	204	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x8050c50	43	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x8053d8c	31	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x8051bca	168	FUNC	<unknown>	HIDDEN	2
__GI_strcat	.symtab	0x805010c	35	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x8050130	30	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x805510c	25	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x8050150	29	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x8050150	29	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x8050170	27	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x80551f8	48	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x805018c	19	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x80501a0	38	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x80501c8	24	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x80552b0	35	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x8055128	26	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x8055228	42	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x80501e0	197	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x8050398	25	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x8055254	89	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x8051dc4	26	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x80520b9	543	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x80503d4	99	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x804ed6c	16	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x804ed90	29	FUNC	<unknown>	HIDDEN	2
__GI_vfork	.symtab	0x8052330	56	FUNC	<unknown>	HIDDEN	2
__GI_vfprintf	.symtab	0x804f248	161	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x8053dac	172	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x8052980	91	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x8053a6c	69	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x8053ad4	131	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x8053ab4	30	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x80528c0	91	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x80599ac	0	OBJECT	<unknown>	DEFAULT	9
__JCR_LIST__	.symtab	0x80599ac	0	OBJECT	<unknown>	DEFAULT	9
__app_fini	.symtab	0x8060264	4	OBJECT	<unknown>	HIDDEN	12
__atexit_lock	.symtab	0x8059c38	24	OBJECT	<unknown>	DEFAULT	11
__bss_start	.symtab	0x8059c60	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x8052af6	52	FUNC	<unknown>	DEFAULT	2
__close	.symtab	0x8052810	80	FUNC	<unknown>	DEFAULT	2
__close_nocancel	.symtab	0x805281a	27	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x8059a64	4	OBJECT	<unknown>	DEFAULT	11
__ctype_toupper	.symtab	0x8059a6c	4	OBJECT	<unknown>	DEFAULT	11
__curbrk	.symtab	0x80607d8	4	OBJECT	<unknown>	HIDDEN	12
__data_start	.symtab	0x80599c8	0	NOTYPE	<unknown>	DEFAULT	11
__deregister_frame_info_bases	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__do_global_ctors_aux	.symtab	0x80560f0	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x80480e0	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x80599c0	0	OBJECT	<unknown>	HIDDEN	11
__environ	.symtab	0x806025c	4	OBJECT	<unknown>	DEFAULT	12
__errno_location	.symtab	0x804edb0	13	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x805fd0c	4	OBJECT	<unknown>	HIDDEN	12
__fcntl_nocancel	.symtab	0x804e938	86	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x8054fc4	220	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x805999c	0	NOTYPE	<unknown>	HIDDEN	6
__fini_array_start	.symtab	0x805999c	0	NOTYPE	<unknown>	HIDDEN	6
__fork	.symtab	0x8052368	524	FUNC	<unknown>	DEFAULT	2
__fork_generation_pointer	.symtab	0x8060bb8	4	OBJECT	<unknown>	HIDDEN	12
__fork_handlers	.symtab	0x8060bbc	4	OBJECT	<unknown>	HIDDEN	12
__fork_lock	.symtab	0x805fd10	4	OBJECT	<unknown>	HIDDEN	12
__get_pc_thunk_bx	.symtab	0x80480d0	0	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x8055c48	281	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x80533c4	17	FUNC	<unknown>	DEFAULT	2
__getpid	.symtab	0x805269c	49	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x80502a8	29	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x805999c	0	NOTYPE	<unknown>	HIDDEN	6
__init_array_start	.symtab	0x805999c	0	NOTYPE	<unknown>	HIDDEN	6
__libc_close	.symtab	0x8052810	80	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x8050a14	91	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel	.symtab	0x80529dc	86	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel	.symtab	0x8052a32	84	FUNC	<unknown>	HIDDEN	2
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	6
__libc_fcntl	.symtab	0x804e98e	156	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x8052368	524	FUNC	<unknown>	DEFAULT	2
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	6
__libc_nanosleep	.symtab	0x8053435	61	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x8052860	91	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x8052920	91	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x8050ad8	99	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x804ec71	113	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x8050b3c	99	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x8050ba0	115	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls	.symtab	0x80557f2	512	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x8053287	81	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x8060258	4	OBJECT	<unknown>	DEFAULT	12
__libc_system	.symtab	0x8053193	82	FUNC	<unknown>	DEFAULT	2
__libc_waitpid	.symtab	0x8052980	91	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x80528c0	91	FUNC	<unknown>	DEFAULT	2
__linkin_atfork	.symtab	0x8052594	29	FUNC	<unknown>	HIDDEN	2
__lll_lock_wait_private	.symtab	0x80522e0	40	FUNC	<unknown>	HIDDEN	2
__lll_unlock_wake_private	.symtab	0x8052310	32	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x8051615	386	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x8050da8	38	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x8059b5c	24	OBJECT	<unknown>	DEFAULT	11
__malloc_state	.symtab	0x8060840	888	OBJECT	<unknown>	DEFAULT	12
__malloc_trim	.symtab	0x8051588	141	FUNC	<unknown>	DEFAULT	2
__nptl_deallocate_tsd	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x8052860	91	FUNC	<unknown>	DEFAULT	2
__open_nocancel	.symtab	0x805286a	33	FUNC	<unknown>	DEFAULT	2
__pagesize	.symtab	0x8060260	4	OBJECT	<unknown>	DEFAULT	12
__preinit_array_end	.symtab	0x805999c	0	NOTYPE	<unknown>	HIDDEN	6
__preinit_array_start	.symtab	0x805999c	0	NOTYPE	<unknown>	HIDDEN	6
__progname	.symtab	0x8059c54	4	OBJECT	<unknown>	DEFAULT	11
__progname_full	.symtab	0x8059c58	4	OBJECT	<unknown>	DEFAULT	11
__pthread_initialize_minimal	.symtab	0x80559f2	19	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_init	.symtab	0x8052a8b	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x8052a88	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x8052a88	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x8052a88	3	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x8052a88	3	FUNC	<unknown>	DEFAULT	2
__pthread_unwind	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x8052920	91	FUNC	<unknown>	DEFAULT	2
__read_nocancel	.symtab	0x805292a	33	FUNC	<unknown>	DEFAULT	2
__register_atfork	.symtab	0x80525b1	203	FUNC	<unknown>	DEFAULT	2
__register_frame_info_bases	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__restore	.symtab	0x805327f	0	NOTYPE	<unknown>	DEFAULT	2
__restore_rt	.symtab	0x8053278	0	NOTYPE	<unknown>	DEFAULT	2
__rtld_fini	.symtab	0x8060268	4	OBJECT	<unknown>	HIDDEN	12
__sigaddset	.symtab	0x8050d68	32	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x8050d88	32	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x8050d44	36	FUNC	<unknown>	DEFAULT	2
__socketcall	.symtab	0x8053318	43	FUNC	<unknown>	HIDDEN	2
__socketcall.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__stdin	.symtab	0x8059a7c	4	OBJECT	<unknown>	DEFAULT	11
__stdio_READ	.symtab	0x8055ea0	79	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x8053e58	146	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x8055ef0	150	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x80541e4	250	FUNC	<unknown>	HIDDEN	2
__stdio_rfill	.symtab	0x8055f88	40	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x8056020	51	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x8055fb0	111	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x80542e0	168	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x804f21c	43	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x8059a80	4	OBJECT	<unknown>	DEFAULT	11
__syscall_error	.symtab	0x8053268	15	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x805340c	41	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction	.symtab	0x8053344	53	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0x804ec38	57	FUNC	<unknown>	DEFAULT	2
__uClibc_fini	.symtab	0x8052ab7	63	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x8052b2a	48	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x8052b5a	603	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x8059c50	4	OBJECT	<unknown>	HIDDEN	11
__vfork	.symtab	0x8052330	56	FUNC	<unknown>	HIDDEN	2
__waitpid	.symtab	0x8052980	91	FUNC	<unknown>	DEFAULT	2
__waitpid_nocancel	.symtab	0x805298a	33	FUNC	<unknown>	DEFAULT	2
__write	.symtab	0x80528c0	91	FUNC	<unknown>	DEFAULT	2
__write_nocancel	.symtab	0x80528ca	33	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r	.symtab	0x80502c8	206	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x8055bbb	138	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x8055b18	163	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x805fce8	10	OBJECT	<unknown>	DEFAULT	12
_charpad	.symtab	0x804f300	56	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x80607e8	40	OBJECT	<unknown>	HIDDEN	12
_custom_printf_handler	.symtab	0x8060810	40	OBJECT	<unknown>	HIDDEN	12
_custom_printf_spec	.symtab	0x8059b58	4	OBJECT	<unknown>	HIDDEN	11
_dl_aux_init	.symtab	0x8055a08	18	FUNC	<unknown>	DEFAULT	2
_dl_init_static_tls	.symtab	0x8059c5c	4	OBJECT	<unknown>	DEFAULT	11
_dl_nothread_init_static_tls	.symtab	0x8055a1a	74	FUNC	<unknown>	HIDDEN	2
_dl_phdr	.symtab	0x8060be0	4	OBJECT	<unknown>	DEFAULT	12
_dl_phnum	.symtab	0x8060be4	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_dtv_gaps	.symtab	0x8060bd4	1	OBJECT	<unknown>	DEFAULT	12
_dl_tls_dtv_slotinfo_list	.symtab	0x8060bd0	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_generation	.symtab	0x8060bd8	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_max_dtv_idx	.symtab	0x8060bc8	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_setup	.symtab	0x80557c2	48	FUNC	<unknown>	DEFAULT	2
_dl_tls_static_align	.symtab	0x8060bc4	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_static_nelem	.symtab	0x8060bdc	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_static_size	.symtab	0x8060bcc	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_static_used	.symtab	0x8060bc0	4	OBJECT	<unknown>	DEFAULT	12
_edata	.symtab	0x8059c60	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x8060be8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0x804ea2c	66	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x805611c	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x805dce8	8192	OBJECT	<unknown>	DEFAULT	12
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x804f338	106	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x805450c	1464	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_init	.symtab	0x80480b4	0	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x8054388	94	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x804f9c4	110	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x804fbb9	1094	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x804fa34	66	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x804fa78	277	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x804fb90	41	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x8052aa0	23	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x8052a8e	18	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp	.symtab	0x80532d8	34	FUNC	<unknown>	DEFAULT	2
_sigintr	.symtab	0x8060838	8	OBJECT	<unknown>	HIDDEN	12
_start	.symtab	0x8048188	34	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x8053eec	699	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x804f0f0	80	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x8059a84	4	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_add_lock	.symtab	0x805dcc8	12	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_dec_use	.symtab	0x8054c08	329	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x805dce4	4	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_del_lock	.symtab	0x805dcd4	12	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_use_count	.symtab	0x805dce0	4	OBJECT	<unknown>	DEFAULT	12
_stdio_streams	.symtab	0x8059a8c	204	OBJECT	<unknown>	DEFAULT	11
_stdio_term	.symtab	0x804f140	218	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x8059a88	4	OBJECT	<unknown>	DEFAULT	11
_stdlib_strto_l	.symtab	0x8051de0	291	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x80543e8	61	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x80570e8	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x8054428	228	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x804f3a2	1569	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x8051958	208	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
adaptiveHOLD	.symtab	0x804c4c1	1422	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x8051db0	20	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x8051db0	20	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x805fd08	1	OBJECT	<unknown>	DEFAULT	12
brk	.symtab	0x8055a64	44	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x8050cb4	143	FUNC	<unknown>	DEFAULT	2
buf.4724	.symtab	0x805fcf8	16	OBJECT	<unknown>	DEFAULT	12
c	.symtab	0x8059a58	4	OBJECT	<unknown>	DEFAULT	11
calloc	.symtab	0x8055368	245	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
cancel_handler	.symtab	0x8052db8	165	FUNC	<unknown>	DEFAULT	2
chdir	.symtab	0x804ea70	39	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x8052810	80	FUNC	<unknown>	DEFAULT	2
closedir	.symtab	0x80534c4	138	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x80599e4	4	OBJECT	<unknown>	DEFAULT	11
completed.4963	.symtab	0x8059c60	1	OBJECT	<unknown>	DEFAULT	12
connect	.symtab	0x8050a14	91	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x80493bc	533	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x8049ede	160	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x80599e8	4	OBJECT	<unknown>	DEFAULT	11
data_start	.symtab	0x80599c8	0	NOTYPE	<unknown>	DEFAULT	11
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
do_system	.symtab	0x8052e5d	822	FUNC	<unknown>	DEFAULT	2
dup2	.symtab	0x804ea98	43	FUNC	<unknown>	DEFAULT	2
dup2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x806025c	4	OBJECT	<unknown>	DEFAULT	12
errno	.symtab	0x0	4	TLS	<unknown>	DEFAULT	6
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
execl	.symtab	0x8051f70	105	FUNC	<unknown>	DEFAULT	2
execl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
execve	.symtab	0x805337c	47	FUNC	<unknown>	DEFAULT	2
execve.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x8051f04	106	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x80580c0	156	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x8053b58	399	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x804e98e	156	FUNC	<unknown>	DEFAULT	2
fd_to_DIR	.symtab	0x8053550	146	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x8048ce0	114	FUNC	<unknown>	DEFAULT	2
fdopen	.symtab	0x8053d40	50	FUNC	<unknown>	DEFAULT	2
fdopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fdopen_pids	.symtab	0x805dca0	4	OBJECT	<unknown>	DEFAULT	12
fdopendir	.symtab	0x805366b	114	FUNC	<unknown>	DEFAULT	2
fdpclose	.symtab	0x8048ba7	313	FUNC	<unknown>	DEFAULT	2
fdpopen	.symtab	0x80489bc	491	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x8054d51	472	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x8054ac4	157	FUNC	<unknown>	DEFAULT	2
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x8054fc4	220	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x8054b78	123	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x80550a0	107	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x80580a0	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x8053d74	24	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x8052368	524	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork_handler_pool	.symtab	0x805fd14	1348	OBJECT	<unknown>	DEFAULT	12
fprintf	.symtab	0x804ee14	30	FUNC	<unknown>	DEFAULT	2
fprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x8050000	49	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x8048130	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x8051797	415	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x8055d64	27	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x8055d64	27	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x8055d80	263	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x8055a90	75	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fuckit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0x8050034	119	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getBogos	.symtab	0x8048f31	406	FUNC	<unknown>	DEFAULT	2
getBuild	.symtab	0x804e1bc	10	FUNC	<unknown>	DEFAULT	2
getCores	.symtab	0x80490c7	172	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x8048eca	55	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x804dfa0	540	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x8049eb2	44	FUNC	<unknown>	DEFAULT	2
getRandomPublicIP	.symtab	0x8049af1	961	FUNC	<unknown>	DEFAULT	2
getc	.symtab	0x8054ac4	157	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x8054fc4	220	FUNC	<unknown>	DEFAULT	2
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x804eac4	37	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x80533ac	8	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x80533b4	8	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x80533bc	8	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x80533c4	17	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x805269c	49	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x804eaec	43	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x8050a70	43	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x8050a9c	59	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x80533d8	8	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x8059c84	4	OBJECT	<unknown>	DEFAULT	12
h_errno	.symtab	0x4	4	TLS	<unknown>	DEFAULT	6
hextable	.symtab	0x8056380	1024	OBJECT	<unknown>	DEFAULT	4
htonl	.symtab	0x8050445	7	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x8050438	13	FUNC	<unknown>	DEFAULT	2
i.4853	.symtab	0x8059a5c	4	OBJECT	<unknown>	DEFAULT	11
index	.symtab	0x8050130	30	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x80509ec	37	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x80552d4	148	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x80509d7	21	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x8050988	79	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x80507ba	460	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x80506af	267	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x80504dd	466	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x8050460	125	FUNC	<unknown>	DEFAULT	2
infectline	.symtab	0x80599e0	4	OBJECT	<unknown>	DEFAULT	11
initConnection	.symtab	0x804de51	335	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x80481ac	112	FUNC	<unknown>	DEFAULT	2
init_static_tls	.symtab	0x8055798	42	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x8051ad1	87	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x8051c72	155	FUNC	<unknown>	DEFAULT	2
intr	.symtab	0x806026c	20	OBJECT	<unknown>	DEFAULT	12
ioctl	.symtab	0x804eb18	142	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ipState	.symtab	0x805dca4	5	OBJECT	<unknown>	DEFAULT	12
isatty	.symtab	0x80503b4	29	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x804ed7c	17	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x804eba8	43	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-cancellation.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-tls.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x80495d1	267	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lock	.symtab	0x8060298	4	OBJECT	<unknown>	DEFAULT	12
lseek64	.symtab	0x805608c	85	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x8059c90	6	OBJECT	<unknown>	DEFAULT	12
main	.symtab	0x804e1c6	1906	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x8059c80	4	OBJECT	<unknown>	DEFAULT	12
makeIPPacket	.symtab	0x804a02c	129	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x8049173	96	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x8050dce	1975	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x8051936	34	FUNC	<unknown>	DEFAULT	2
matchPrompt	.symtab	0x804980b	239	FUNC	<unknown>	DEFAULT	2
memcpy	.symtab	0x80500ac	41	FUNC	<unknown>	DEFAULT	2
memcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x8056068	33	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x8055144	177	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x80500d8	50	FUNC	<unknown>	DEFAULT	2
memset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mmap	.symtab	0x80532fc	27	FUNC	<unknown>	DEFAULT	2
mremap	.symtab	0x8055adc	59	FUNC	<unknown>	DEFAULT	2
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x80533e0	43	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x805dcac	24	OBJECT	<unknown>	DEFAULT	12
mylock	.symtab	0x8059b74	24	OBJECT	<unknown>	DEFAULT	11
mylock	.symtab	0x8059b8c	24	OBJECT	<unknown>	DEFAULT	11
nanosleep	.symtab	0x8053435	61	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
negotiate	.symtab	0x80496dc	303	FUNC	<unknown>	DEFAULT	2
next_start.1613	.symtab	0x805fcf4	4	OBJECT	<unknown>	DEFAULT	12
nprocessors_onln	.symtab	0x8051fdc	221	FUNC	<unknown>	DEFAULT	2
ntohl	.symtab	0x8050459	7	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x805044c	13	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x8059c88	8	OBJECT	<unknown>	DEFAULT	12
object.4975	.symtab	0x8059c64	24	OBJECT	<unknown>	DEFAULT	12
open	.symtab	0x8052860	91	FUNC	<unknown>	DEFAULT	2
opendir	.symtab	0x80535e2	137	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x80607dc	4	OBJECT	<unknown>	DEFAULT	12
p.4961	.symtab	0x80599c4	0	OBJECT	<unknown>	DEFAULT	11
parseHex	.symtab	0x8048d52	69	FUNC	<unknown>	DEFAULT	2
parse_config.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
passwords	.symtab	0x8059a20	56	OBJECT	<unknown>	DEFAULT	11
pclose	.symtab	0x804ee34	192	FUNC	<unknown>	DEFAULT	2
perror	.symtab	0x804edc0	50	FUNC	<unknown>	DEFAULT	2
perror.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
pids	.symtab	0x80607e4	4	OBJECT	<unknown>	DEFAULT	12
pipe	.symtab	0x804ebd4	39	FUNC	<unknown>	DEFAULT	2
pipe.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
popen	.symtab	0x804eef4	507	FUNC	<unknown>	DEFAULT	2
popen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
popen_list	.symtab	0x805dcc4	4	OBJECT	<unknown>	DEFAULT	12
prctl	.symtab	0x804ebfc	59	FUNC	<unknown>	DEFAULT	2
prctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.6616	.symtab	0x8057040	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x80485e2	725	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x804837d	66	FUNC	<unknown>	DEFAULT	2
printf	.symtab	0x804edf4	32	FUNC	<unknown>	DEFAULT	2
printf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
printi	.symtab	0x80484a1	321	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x80483bf	226	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0x804ce83	4046	FUNC	<unknown>	DEFAULT	2
program_invocation_name	.symtab	0x8059c58	4	OBJECT	<unknown>	DEFAULT	11
program_invocation_short_name	.symtab	0x8059c54	4	OBJECT	<unknown>	DEFAULT	11
pseudo_cancel	.symtab	0x8052835	0	NOTYPE	<unknown>	DEFAULT	2
pseudo_cancel	.symtab	0x805288b	0	NOTYPE	<unknown>	DEFAULT	2
pseudo_cancel	.symtab	0x80528eb	0	NOTYPE	<unknown>	DEFAULT	2
pseudo_cancel	.symtab	0x805294b	0	NOTYPE	<unknown>	DEFAULT	2
pseudo_cancel	.symtab	0x80529ab	0	NOTYPE	<unknown>	DEFAULT	2
pseudo_end	.symtab	0x805285f	0	NOTYPE	<unknown>	DEFAULT	2
pseudo_end	.symtab	0x80528ba	0	NOTYPE	<unknown>	DEFAULT	2
pseudo_end	.symtab	0x805291a	0	NOTYPE	<unknown>	DEFAULT	2
pseudo_end	.symtab	0x805297a	0	NOTYPE	<unknown>	DEFAULT	2
pseudo_end	.symtab	0x80529da	0	NOTYPE	<unknown>	DEFAULT	2
qual_chars.6625	.symtab	0x8057054	20	OBJECT	<unknown>	DEFAULT	4
quit	.symtab	0x8060280	20	OBJECT	<unknown>	DEFAULT	12
raise	.symtab	0x80526d0	101	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x8051a28	5	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x804821c	195	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x8051a30	72	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x8057c5c	10	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x8051b6c	94	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x8059bb8	128	OBJECT	<unknown>	DEFAULT	11
rawmemchr	.symtab	0x8056054	19	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x8052920	91	FUNC	<unknown>	DEFAULT	2
readUntil	.symtab	0x80498fa	503	FUNC	<unknown>	DEFAULT	2
readdir64	.symtab	0x80536e0	134	FUNC	<unknown>	DEFAULT	2
readdir64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc	.symtab	0x8055460	824	FUNC	<unknown>	DEFAULT	2
realloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x8050ad8	99	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x80491d3	489	FUNC	<unknown>	DEFAULT	2
register-atfork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rindex	.symtab	0x8055128	26	FUNC	<unknown>	DEFAULT	2
sa_refcntr	.symtab	0x8060294	4	OBJECT	<unknown>	DEFAULT	12
sbrk	.symtab	0x8053474	78	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
scanPid	.symtab	0x80607e0	4	OBJECT	<unknown>	DEFAULT	12
sclose	.symtab	0x804a0ad	44	FUNC	<unknown>	DEFAULT	2
select	.symtab	0x804ec71	113	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x8050b3c	99	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendCNC	.symtab	0x804bac9	163	FUNC	<unknown>	DEFAULT	2
sendHOLD	.symtab	0x804ca4f	1076	FUNC	<unknown>	DEFAULT	2
sendHTTP	.symtab	0x804bb6c	123	FUNC	<unknown>	DEFAULT	2
sendJUNK	.symtab	0x804c0d4	1005	FUNC	<unknown>	DEFAULT	2
sendTCP	.symtab	0x804bbe7	1261	FUNC	<unknown>	DEFAULT	2
sendUDP	.symtab	0x804b630	1177	FUNC	<unknown>	DEFAULT	2
sendto	.symtab	0x8050ba0	115	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x804ece4	31	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x8050c14	59	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x8051a78	89	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x8051d0d	161	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x8053287	81	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigaddset	.symtab	0x8050c7c	34	FUNC	<unknown>	DEFAULT	2
sigaddset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigempty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigemptyset	.symtab	0x8050ca0	20	FUNC	<unknown>	DEFAULT	2
signal	.symtab	0x8050cb4	143	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x804ed04	101	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x8052738	204	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x8050c50	43	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sockprintf	.symtab	0x8048906	182	FUNC	<unknown>	DEFAULT	2
spec_and_mask.6624	.symtab	0x8057068	16	OBJECT	<unknown>	DEFAULT	4
spec_base.6615	.symtab	0x805704c	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.6621	.symtab	0x80570b8	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.6620	.symtab	0x80570d0	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.6623	.symtab	0x8057078	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.6622	.symtab	0x8057088	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x8053d8c	31	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x8051b28	67	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x8051b28	67	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x8051bca	168	FUNC	<unknown>	DEFAULT	2
static_dtv	.symtab	0x806029c	512	OBJECT	<unknown>	DEFAULT	12
static_map	.symtab	0x80607a4	52	OBJECT	<unknown>	DEFAULT	12
static_slotinfo	.symtab	0x806049c	776	OBJECT	<unknown>	DEFAULT	12
stderr	.symtab	0x8059a78	4	OBJECT	<unknown>	DEFAULT	11
stdin	.symtab	0x8059a70	4	OBJECT	<unknown>	DEFAULT	11
stdout	.symtab	0x8059a74	4	OBJECT	<unknown>	DEFAULT	11
strcat	.symtab	0x805010c	35	FUNC	<unknown>	DEFAULT	2
strcat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x8050130	30	FUNC	<unknown>	DEFAULT	2
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchrnul	.symtab	0x805510c	25	FUNC	<unknown>	DEFAULT	2
strchrnul.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x8050150	29	FUNC	<unknown>	DEFAULT	2
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x8050150	29	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0x8050170	27	FUNC	<unknown>	DEFAULT	2
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcspn	.symtab	0x80551f8	48	FUNC	<unknown>	DEFAULT	2
strcspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x80502c8	206	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x805018c	19	FUNC	<unknown>	DEFAULT	2
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x80501a0	38	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x80501c8	24	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x80552b0	35	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strrchr	.symtab	0x8055128	26	FUNC	<unknown>	DEFAULT	2
strrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x8055228	42	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x80501e0	197	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x8050398	25	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x8055254	89	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x8051dc4	26	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sysconf	.symtab	0x80520b9	543	FUNC	<unknown>	DEFAULT	2
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
system	.symtab	0x8053193	82	FUNC	<unknown>	DEFAULT	2
system.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
szprintf	.symtab	0x80488df	39	FUNC	<unknown>	DEFAULT	2
tcgetattr	.symtab	0x80503d4	99	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x8049f7e	174	FUNC	<unknown>	DEFAULT	2
time	.symtab	0x804ed6c	16	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x804ed90	29	FUNC	<unknown>	DEFAULT	2
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x80482df	158	FUNC	<unknown>	DEFAULT	2
type_codes	.symtab	0x8057094	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x80570ac	12	OBJECT	<unknown>	DEFAULT	4
unknown.1636	.symtab	0x80570d8	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state	.symtab	0x8059ba4	20	OBJECT	<unknown>	DEFAULT	11
uppercase	.symtab	0x8048f01	48	FUNC	<unknown>	DEFAULT	2
usernames	.symtab	0x80599ec	24	OBJECT	<unknown>	DEFAULT	11
vfork	.symtab	0x8052330	56	FUNC	<unknown>	DEFAULT	2
vfprintf	.symtab	0x804f248	161	FUNC	<unknown>	DEFAULT	2
vfprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vsnprintf	.symtab	0x8053dac	172	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x8052980	91	FUNC	<unknown>	DEFAULT	2
wcrtomb	.symtab	0x8053a6c	69	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x8053ad4	131	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x8053ab4	30	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wildString	.symtab	0x8048d97	307	FUNC	<unknown>	DEFAULT	2
write	.symtab	0x80528c0	91	FUNC	<unknown>	DEFAULT	2
xdigits.5147	.symtab	0x8057c48	17	OBJECT	<unknown>	DEFAULT	4
xstatconv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
zprintf	.symtab	0x80488b7	40	FUNC	<unknown>	DEFAULT	2

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-07T22:22:54.834481+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54172	45.128.233.186	23	TCP
2025-01-07T22:22:56.613844+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54174	45.128.233.186	23	TCP
2025-01-07T22:22:58.375630+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54176	45.128.233.186	23	TCP
2025-01-07T22:23:00.122622+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54178	45.128.233.186	23	TCP
2025-01-07T22:23:01.872275+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54180	45.128.233.186	23	TCP
2025-01-07T22:23:03.623202+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54182	45.128.233.186	23	TCP
2025-01-07T22:23:05.536820+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54184	45.128.233.186	23	TCP
2025-01-07T22:23:07.331002+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54186	45.128.233.186	23	TCP
2025-01-07T22:23:09.097359+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54188	45.128.233.186	23	TCP
2025-01-07T22:23:10.884410+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54190	45.128.233.186	23	TCP
2025-01-07T22:23:12.686087+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54192	45.128.233.186	23	TCP
2025-01-07T22:23:14.442494+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54194	45.128.233.186	23	TCP
2025-01-07T22:23:16.189581+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54196	45.128.233.186	23	TCP
2025-01-07T22:23:17.958611+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54198	45.128.233.186	23	TCP
2025-01-07T22:23:19.769797+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54200	45.128.233.186	23	TCP
2025-01-07T22:23:21.531260+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54202	45.128.233.186	23	TCP
2025-01-07T22:23:23.337822+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54204	45.128.233.186	23	TCP
2025-01-07T22:23:25.129877+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54206	45.128.233.186	23	TCP
2025-01-07T22:23:26.910449+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54208	45.128.233.186	23	TCP
2025-01-07T22:23:28.698580+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54210	45.128.233.186	23	TCP
2025-01-07T22:23:30.521910+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54212	45.128.233.186	23	TCP
2025-01-07T22:23:32.262481+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54214	45.128.233.186	23	TCP
2025-01-07T22:23:34.042704+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54216	45.128.233.186	23	TCP
2025-01-07T22:23:35.782049+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54218	45.128.233.186	23	TCP
2025-01-07T22:23:37.568793+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54220	45.128.233.186	23	TCP
2025-01-07T22:23:39.355398+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54222	45.128.233.186	23	TCP
2025-01-07T22:23:41.092307+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54224	45.128.233.186	23	TCP
2025-01-07T22:23:42.875854+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54226	45.128.233.186	23	TCP
2025-01-07T22:23:44.654999+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54228	45.128.233.186	23	TCP
2025-01-07T22:23:46.405480+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54230	45.128.233.186	23	TCP
2025-01-07T22:23:48.190687+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54232	45.128.233.186	23	TCP
2025-01-07T22:23:49.961649+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54234	45.128.233.186	23	TCP
2025-01-07T22:23:51.699013+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54236	45.128.233.186	23	TCP
2025-01-07T22:23:53.499492+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54238	45.128.233.186	23	TCP
2025-01-07T22:23:55.445809+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54240	45.128.233.186	23	TCP
2025-01-07T22:23:57.211458+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54242	45.128.233.186	23	TCP
2025-01-07T22:23:58.954097+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54244	45.128.233.186	23	TCP
2025-01-07T22:24:00.753458+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54246	45.128.233.186	23	TCP
2025-01-07T22:24:02.514944+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54248	45.128.233.186	23	TCP
2025-01-07T22:24:04.310326+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54250	45.128.233.186	23	TCP
2025-01-07T22:24:06.090453+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54252	45.128.233.186	23	TCP
2025-01-07T22:24:07.870113+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54254	45.128.233.186	23	TCP
2025-01-07T22:24:09.692312+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54256	45.128.233.186	23	TCP
2025-01-07T22:24:11.605198+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54258	45.128.233.186	23	TCP
2025-01-07T22:24:13.337933+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54260	45.128.233.186	23	TCP
2025-01-07T22:24:15.115517+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54262	45.128.233.186	23	TCP
2025-01-07T22:24:16.862636+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54264	45.128.233.186	23	TCP
2025-01-07T22:24:18.627294+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54266	45.128.233.186	23	TCP
2025-01-07T22:24:20.370100+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54268	45.128.233.186	23	TCP
2025-01-07T22:24:22.149740+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54270	45.128.233.186	23	TCP
2025-01-07T22:24:23.942474+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54272	45.128.233.186	23	TCP
2025-01-07T22:24:25.699932+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54274	45.128.233.186	23	TCP
2025-01-07T22:24:27.451104+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54276	45.128.233.186	23	TCP
2025-01-07T22:24:29.244863+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54278	45.128.233.186	23	TCP
2025-01-07T22:24:31.046450+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54280	45.128.233.186	23	TCP
2025-01-07T22:24:32.837643+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54282	45.128.233.186	23	TCP
2025-01-07T22:24:35.209983+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54284	45.128.233.186	23	TCP
2025-01-07T22:24:36.956615+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54286	45.128.233.186	23	TCP
2025-01-07T22:24:38.700783+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54288	45.128.233.186	23	TCP
2025-01-07T22:24:40.486963+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54290	45.128.233.186	23	TCP
2025-01-07T22:24:42.272706+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54292	45.128.233.186	23	TCP
2025-01-07T22:24:44.055716+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54294	45.128.233.186	23	TCP
2025-01-07T22:24:45.841272+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54296	45.128.233.186	23	TCP
2025-01-07T22:24:47.639996+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54298	45.128.233.186	23	TCP
2025-01-07T22:24:49.387002+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54300	45.128.233.186	23	TCP
2025-01-07T22:24:51.138562+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54302	45.128.233.186	23	TCP
2025-01-07T22:24:52.904598+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54304	45.128.233.186	23	TCP
2025-01-07T22:24:54.682649+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54306	45.128.233.186	23	TCP
2025-01-07T22:24:56.474848+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54308	45.128.233.186	23	TCP
2025-01-07T22:24:58.220076+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54310	45.128.233.186	23	TCP
2025-01-07T22:24:59.962479+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54312	45.128.233.186	23	TCP
2025-01-07T22:25:01.768460+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54314	45.128.233.186	23	TCP
2025-01-07T22:25:03.536661+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54316	45.128.233.186	23	TCP
2025-01-07T22:25:05.298034+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54318	45.128.233.186	23	TCP
2025-01-07T22:25:07.110033+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54320	45.128.233.186	23	TCP
2025-01-07T22:25:08.902327+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54322	45.128.233.186	23	TCP
2025-01-07T22:25:10.649397+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54324	45.128.233.186	23	TCP
2025-01-07T22:25:12.404238+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54326	45.128.233.186	23	TCP
2025-01-07T22:25:14.158300+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54328	45.128.233.186	23	TCP
2025-01-07T22:25:15.961087+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54330	45.128.233.186	23	TCP
2025-01-07T22:25:17.750077+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54332	45.128.233.186	23	TCP
2025-01-07T22:25:19.520417+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54334	45.128.233.186	23	TCP
2025-01-07T22:25:21.469882+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54336	45.128.233.186	23	TCP
2025-01-07T22:25:23.795305+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54338	45.128.233.186	23	TCP
2025-01-07T22:25:25.926591+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54340	45.128.233.186	23	TCP
2025-01-07T22:25:28.077719+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54342	45.128.233.186	23	TCP
2025-01-07T22:25:29.944807+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54344	45.128.233.186	23	TCP
2025-01-07T22:25:31.727949+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54346	45.128.233.186	23	TCP
2025-01-07T22:25:33.489774+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54348	45.128.233.186	23	TCP
2025-01-07T22:25:35.225417+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54350	45.128.233.186	23	TCP
2025-01-07T22:25:36.969866+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54352	45.128.233.186	23	TCP
2025-01-07T22:25:38.745535+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54354	45.128.233.186	23	TCP
2025-01-07T22:25:40.698848+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54356	45.128.233.186	23	TCP
2025-01-07T22:25:42.504307+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54360	45.128.233.186	23	TCP
2025-01-07T22:25:44.263413+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54362	45.128.233.186	23	TCP
2025-01-07T22:25:46.138056+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54364	45.128.233.186	23	TCP
2025-01-07T22:25:47.893628+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54366	45.128.233.186	23	TCP
2025-01-07T22:25:49.622324+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54368	45.128.233.186	23	TCP
2025-01-07T22:25:51.388520+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54370	45.128.233.186	23	TCP
2025-01-07T22:25:53.177012+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54372	45.128.233.186	23	TCP
2025-01-07T22:25:54.921295+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54374	45.128.233.186	23	TCP
2025-01-07T22:25:56.737979+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54376	45.128.233.186	23	TCP
2025-01-07T22:25:58.504121+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54378	45.128.233.186	23	TCP
2025-01-07T22:26:00.307019+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54380	45.128.233.186	23	TCP
2025-01-07T22:26:02.140246+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54382	45.128.233.186	23	TCP
2025-01-07T22:26:03.899307+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54384	45.128.233.186	23	TCP
2025-01-07T22:26:05.682188+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54386	45.128.233.186	23	TCP
2025-01-07T22:26:07.446346+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54388	45.128.233.186	23	TCP
2025-01-07T22:26:09.248408+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54390	45.128.233.186	23	TCP
2025-01-07T22:26:11.030826+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54392	45.128.233.186	23	TCP
2025-01-07T22:26:12.790613+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54394	45.128.233.186	23	TCP
2025-01-07T22:26:14.530557+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54396	45.128.233.186	23	TCP
2025-01-07T22:26:16.304782+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54398	45.128.233.186	23	TCP
2025-01-07T22:26:18.105341+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54400	45.128.233.186	23	TCP
2025-01-07T22:26:19.878110+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54402	45.128.233.186	23	TCP
2025-01-07T22:26:21.670132+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54404	45.128.233.186	23	TCP
2025-01-07T22:26:23.465336+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54406	45.128.233.186	23	TCP
2025-01-07T22:26:25.249146+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54408	45.128.233.186	23	TCP
2025-01-07T22:26:27.022596+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.15	54410	45.128.233.186	23	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 7, 2025 22:22:54.801013947 CET	54172	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:22:54.805932999 CET	23	54172	45.128.233.186	192.168.2.15
Jan 7, 2025 22:22:54.806015968 CET	54172	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:22:54.834481001 CET	54172	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:22:54.839246035 CET	23	54172	45.128.233.186	192.168.2.15
Jan 7, 2025 22:22:56.594124079 CET	23	54172	45.128.233.186	192.168.2.15
Jan 7, 2025 22:22:56.594410896 CET	54172	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:22:56.594459057 CET	54174	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:22:56.599293947 CET	23	54172	45.128.233.186	192.168.2.15
Jan 7, 2025 22:22:56.599307060 CET	23	54174	45.128.233.186	192.168.2.15
Jan 7, 2025 22:22:56.599420071 CET	54174	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:22:56.613843918 CET	54174	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:22:56.618642092 CET	23	54174	45.128.233.186	192.168.2.15
Jan 7, 2025 22:22:58.355997086 CET	23	54174	45.128.233.186	192.168.2.15
Jan 7, 2025 22:22:58.356200933 CET	54174	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:22:58.356228113 CET	54176	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:22:58.361063004 CET	23	54174	45.128.233.186	192.168.2.15
Jan 7, 2025 22:22:58.361073971 CET	23	54176	45.128.233.186	192.168.2.15
Jan 7, 2025 22:22:58.361180067 CET	54176	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:22:58.375629902 CET	54176	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:22:58.380439043 CET	23	54176	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:00.102034092 CET	23	54176	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:00.102227926 CET	54176	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:00.102268934 CET	54178	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:00.107137918 CET	23	54176	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:00.107150078 CET	23	54178	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:00.107254028 CET	54178	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:00.122622013 CET	54178	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:00.127413988 CET	23	54178	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:01.852667093 CET	23	54178	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:01.853080988 CET	54178	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:01.853142023 CET	54180	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:01.857947111 CET	23	54178	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:01.857961893 CET	23	54180	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:01.858019114 CET	54180	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:01.872275114 CET	54180	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:01.877161980 CET	23	54180	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:03.603346109 CET	23	54180	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:03.603508949 CET	54180	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:03.603631020 CET	54182	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:03.608328104 CET	23	54180	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:03.608369112 CET	23	54182	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:03.608496904 CET	54182	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:03.623202085 CET	54182	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:03.628091097 CET	23	54182	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:05.513362885 CET	23	54182	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:05.513467073 CET	54182	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:05.513501883 CET	54184	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:05.518296003 CET	23	54182	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:05.518309116 CET	23	54184	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:05.518424034 CET	54184	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:05.536819935 CET	54184	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:05.542130947 CET	23	54184	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:07.311047077 CET	23	54184	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:07.311264038 CET	54184	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:07.311348915 CET	54186	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:07.316142082 CET	23	54184	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:07.316154003 CET	23	54186	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:07.316257000 CET	54186	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:07.331001997 CET	54186	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:07.335859060 CET	23	54186	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:09.074835062 CET	23	54186	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:09.075131893 CET	54186	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:09.075232983 CET	54188	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:09.080003977 CET	23	54186	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:09.080064058 CET	23	54188	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:09.080176115 CET	54188	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:09.097358942 CET	54188	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:09.102180004 CET	23	54188	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:10.859828949 CET	23	54188	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:10.860244989 CET	54188	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:10.860280991 CET	54190	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:10.865092993 CET	23	54188	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:10.865106106 CET	23	54190	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:10.865187883 CET	54190	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:10.884409904 CET	54190	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:10.889200926 CET	23	54190	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:12.658428907 CET	23	54190	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:12.658915997 CET	54190	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:12.658955097 CET	54192	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:12.663801908 CET	23	54190	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:12.663814068 CET	23	54192	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:12.663932085 CET	54192	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:12.686086893 CET	54192	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:12.690871954 CET	23	54192	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:14.416661978 CET	23	54192	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:14.417171001 CET	54192	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:14.417249918 CET	54194	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:14.421966076 CET	23	54192	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:14.422004938 CET	23	54194	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:14.422096014 CET	54194	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:14.442493916 CET	54194	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:14.447285891 CET	23	54194	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:16.162856102 CET	23	54194	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:16.163067102 CET	54194	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:16.163064957 CET	54196	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:16.167947054 CET	23	54194	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:16.167958975 CET	23	54196	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:16.168008089 CET	54196	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:16.189580917 CET	54196	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:16.194466114 CET	23	54196	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:17.938102961 CET	23	54196	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:17.938271046 CET	54196	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:17.938317060 CET	54198	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:17.943181992 CET	23	54196	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:17.943202972 CET	23	54198	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:17.943248034 CET	54198	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:17.958611012 CET	54198	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:17.963406086 CET	23	54198	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:19.750782967 CET	23	54198	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:19.750880003 CET	54198	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:19.750907898 CET	54200	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:19.755786896 CET	23	54198	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:19.755798101 CET	23	54200	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:19.755911112 CET	54200	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:19.769797087 CET	54200	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:19.774565935 CET	23	54200	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:21.507883072 CET	23	54200	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:21.508102894 CET	54200	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:21.508157969 CET	54202	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:21.512939930 CET	23	54200	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:21.512953043 CET	23	54202	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:21.513058901 CET	54202	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:21.531260014 CET	54202	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:21.536160946 CET	23	54202	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:23.318212986 CET	23	54202	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:23.318466902 CET	54202	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:23.318480968 CET	54204	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:23.323328018 CET	23	54202	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:23.323364019 CET	23	54204	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:23.323452950 CET	54204	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:23.337821960 CET	54204	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:23.342689991 CET	23	54204	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:25.108027935 CET	23	54204	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:25.108303070 CET	54204	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:25.108334064 CET	54206	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:25.113118887 CET	23	54204	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:25.113130093 CET	23	54206	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:25.113188028 CET	54206	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:25.129877090 CET	54206	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:25.134639025 CET	23	54206	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:26.890347958 CET	23	54206	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:26.890506029 CET	54206	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:26.890520096 CET	54208	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:26.895333052 CET	23	54206	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:26.895344973 CET	23	54208	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:26.895454884 CET	54208	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:26.910449028 CET	54208	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:26.915374994 CET	23	54208	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:28.673218966 CET	23	54208	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:28.673660994 CET	54208	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:28.673660994 CET	54210	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:28.678478003 CET	23	54208	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:28.678488970 CET	23	54210	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:28.678626060 CET	54210	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:28.698580027 CET	54210	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:28.703357935 CET	23	54210	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:30.497447014 CET	23	54210	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:30.497992039 CET	54210	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:30.498068094 CET	54212	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:30.502854109 CET	23	54210	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:30.502866983 CET	23	54212	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:30.502959967 CET	54212	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:30.521909952 CET	54212	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:30.526793003 CET	23	54212	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:32.237735033 CET	23	54212	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:32.237947941 CET	54212	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:32.238010883 CET	54214	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:32.243125916 CET	23	54212	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:32.243136883 CET	23	54214	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:32.243216038 CET	54214	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:32.262480974 CET	54214	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:32.267287016 CET	23	54214	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:34.017209053 CET	23	54214	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:34.017441034 CET	54214	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:34.017524958 CET	54216	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:34.022238016 CET	23	54214	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:34.022311926 CET	23	54216	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:34.022414923 CET	54216	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:34.042704105 CET	54216	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:34.047527075 CET	23	54216	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:35.756342888 CET	23	54216	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:35.756640911 CET	54216	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:35.756681919 CET	54218	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:35.761471033 CET	23	54216	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:35.761482000 CET	23	54218	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:35.761543036 CET	54218	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:35.782048941 CET	54218	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:35.787307024 CET	23	54218	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:37.547207117 CET	23	54218	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:37.547418118 CET	54218	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:37.547509909 CET	54220	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:37.552191973 CET	23	54218	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:37.552311897 CET	23	54220	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:37.552462101 CET	54220	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:37.568793058 CET	54220	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:37.573565960 CET	23	54220	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:39.330987930 CET	23	54220	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:39.331418991 CET	54220	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:39.331502914 CET	54222	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:39.336221933 CET	23	54220	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:39.336275101 CET	23	54222	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:39.336354971 CET	54222	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:39.355397940 CET	54222	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:39.360270977 CET	23	54222	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:41.070322037 CET	23	54222	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:41.070574999 CET	54224	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:41.070579052 CET	54222	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:41.075409889 CET	23	54224	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:41.075436115 CET	23	54222	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:41.075490952 CET	54224	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:41.092307091 CET	54224	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:41.097084999 CET	23	54224	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:42.854100943 CET	23	54224	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:42.854268074 CET	54224	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:42.854300022 CET	54226	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:42.859131098 CET	23	54224	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:42.859150887 CET	23	54226	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:42.859210968 CET	54226	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:42.875854015 CET	54226	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:42.880667925 CET	23	54226	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:44.634434938 CET	23	54226	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:44.634695053 CET	54226	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:44.634776115 CET	54228	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:44.639537096 CET	23	54226	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:44.639580011 CET	23	54228	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:44.639642000 CET	54228	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:44.654999018 CET	54228	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:44.659815073 CET	23	54228	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:46.382070065 CET	23	54228	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:46.382236958 CET	54228	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:46.382268906 CET	54230	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:46.387067080 CET	23	54228	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:46.387079000 CET	23	54230	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:46.387136936 CET	54230	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:46.405479908 CET	54230	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:46.410260916 CET	23	54230	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:48.162115097 CET	23	54230	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:48.162467003 CET	54230	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:48.162559032 CET	54232	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:48.167258978 CET	23	54230	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:48.167349100 CET	23	54232	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:48.167434931 CET	54232	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:48.190686941 CET	54232	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:48.195406914 CET	23	54232	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:49.936306953 CET	23	54232	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:49.936486959 CET	54232	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:49.936523914 CET	54234	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:49.941292048 CET	23	54232	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:49.941304922 CET	23	54234	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:49.941404104 CET	54234	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:49.961648941 CET	54234	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:49.966447115 CET	23	54234	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:51.677989960 CET	23	54234	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:51.678244114 CET	54234	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:51.678256035 CET	54236	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:51.683130980 CET	23	54234	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:51.683144093 CET	23	54236	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:51.683218956 CET	54236	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:51.699012995 CET	54236	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:51.703808069 CET	23	54236	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:53.477334976 CET	23	54236	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:53.477585077 CET	54236	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:53.477585077 CET	54238	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:53.482494116 CET	23	54236	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:53.482508898 CET	23	54238	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:53.482552052 CET	54238	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:53.499491930 CET	54238	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:53.504281044 CET	23	54238	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:55.423424006 CET	23	54238	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:55.423631907 CET	54238	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:55.423799038 CET	54240	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:55.428522110 CET	23	54238	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:55.428580046 CET	23	54240	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:55.428643942 CET	54240	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:55.445808887 CET	54240	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:55.450670004 CET	23	54240	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:57.184932947 CET	23	54240	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:57.185122967 CET	54240	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:57.185162067 CET	54242	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:57.190155983 CET	23	54240	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:57.190282106 CET	23	54242	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:57.190365076 CET	54242	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:57.211457968 CET	54242	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:57.216298103 CET	23	54242	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:58.932992935 CET	23	54242	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:58.933197021 CET	54242	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:58.933206081 CET	54244	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:58.938030005 CET	23	54242	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:58.938040972 CET	23	54244	45.128.233.186	192.168.2.15
Jan 7, 2025 22:23:58.938153028 CET	54244	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:58.954097033 CET	54244	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:23:58.959089994 CET	23	54244	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:00.731949091 CET	23	54244	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:00.732111931 CET	54244	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:00.732146978 CET	54246	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:00.737493038 CET	23	54244	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:00.737510920 CET	23	54246	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:00.737584114 CET	54246	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:00.753458023 CET	54246	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:00.758234978 CET	23	54246	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:02.489861012 CET	23	54246	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:02.490174055 CET	54246	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:02.490195990 CET	54248	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:02.495081902 CET	23	54246	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:02.495095968 CET	23	54248	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:02.495177984 CET	54248	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:02.514944077 CET	54248	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:02.519825935 CET	23	54248	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:04.288434982 CET	23	54248	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:04.288588047 CET	54248	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:04.288614988 CET	54250	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:04.293369055 CET	23	54248	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:04.293380022 CET	23	54250	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:04.293431044 CET	54250	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:04.310326099 CET	54250	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:04.315128088 CET	23	54250	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:06.068264961 CET	23	54250	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:06.068397045 CET	54250	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:06.068420887 CET	54252	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:06.073762894 CET	23	54250	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:06.073775053 CET	23	54252	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:06.073895931 CET	54252	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:06.090452909 CET	54252	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:06.095280886 CET	23	54252	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:07.842410088 CET	23	54252	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:07.842653990 CET	54252	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:07.842680931 CET	54254	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:07.847549915 CET	23	54252	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:07.847562075 CET	23	54254	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:07.847620010 CET	54254	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:07.870112896 CET	54254	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:07.874871016 CET	23	54254	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:09.664166927 CET	23	54254	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:09.664617062 CET	54254	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:09.664627075 CET	54256	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:09.669476032 CET	23	54254	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:09.669487953 CET	23	54256	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:09.669567108 CET	54256	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:09.692312002 CET	54256	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:09.697134972 CET	23	54256	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:11.579595089 CET	23	54256	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:11.579853058 CET	54256	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:11.579957008 CET	54258	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:11.584625959 CET	23	54256	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:11.584709883 CET	23	54258	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:11.584786892 CET	54258	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:11.605197906 CET	54258	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:11.611294985 CET	23	54258	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:13.316718102 CET	23	54258	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:13.316885948 CET	54258	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:13.316922903 CET	54260	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:13.321749926 CET	23	54258	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:13.321763039 CET	23	54260	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:13.321876049 CET	54260	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:13.337933064 CET	54260	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:13.343209028 CET	23	54260	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:15.092412949 CET	23	54260	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:15.092765093 CET	54260	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:15.092820883 CET	54262	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:15.097667933 CET	23	54260	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:15.097680092 CET	23	54262	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:15.097749949 CET	54262	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:15.115516901 CET	54262	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:15.120299101 CET	23	54262	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:16.836299896 CET	23	54262	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:16.836638927 CET	54262	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:16.836694002 CET	54264	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:16.841478109 CET	23	54262	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:16.841491938 CET	23	54264	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:16.841567993 CET	54264	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:16.862636089 CET	54264	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:16.867444992 CET	23	54264	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:18.607322931 CET	23	54264	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:18.607472897 CET	54264	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:18.607505083 CET	54266	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:18.612341881 CET	23	54264	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:18.612354040 CET	23	54266	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:18.612401962 CET	54266	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:18.627294064 CET	54266	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:18.632092953 CET	23	54266	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:20.348252058 CET	23	54266	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:20.348436117 CET	54266	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:20.348454952 CET	54268	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:20.353302956 CET	23	54266	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:20.353349924 CET	23	54268	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:20.353445053 CET	54268	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:20.370100021 CET	54268	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:20.374882936 CET	23	54268	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:22.122067928 CET	23	54268	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:22.122570992 CET	54268	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:22.122570992 CET	54270	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:22.127542973 CET	23	54268	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:22.127573013 CET	23	54270	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:22.127644062 CET	54270	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:22.149739981 CET	54270	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:22.154562950 CET	23	54270	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:23.913810968 CET	23	54270	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:23.914347887 CET	54272	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:23.914356947 CET	54270	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:23.919795036 CET	23	54270	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:23.919807911 CET	23	54272	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:23.919891119 CET	54272	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:23.942473888 CET	54272	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:23.947297096 CET	23	54272	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:25.677915096 CET	23	54272	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:25.678149939 CET	54272	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:25.678149939 CET	54274	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:25.683053017 CET	23	54272	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:25.683065891 CET	23	54274	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:25.683146000 CET	54274	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:25.699932098 CET	54274	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:25.704761982 CET	23	54274	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:27.431374073 CET	23	54274	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:27.431560993 CET	54274	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:27.431590080 CET	54276	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:27.436429024 CET	23	54274	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:27.436455011 CET	23	54276	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:27.436549902 CET	54276	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:27.451103926 CET	54276	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:27.455842972 CET	23	54276	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:29.227125883 CET	23	54276	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:29.227571964 CET	54276	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:29.227605104 CET	54278	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:29.232495070 CET	23	54276	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:29.232506990 CET	23	54278	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:29.232639074 CET	54278	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:29.244863033 CET	54278	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:29.249638081 CET	23	54278	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:31.023569107 CET	23	54278	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:31.023807049 CET	54278	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:31.023863077 CET	54280	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:31.028665066 CET	23	54278	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:31.028687954 CET	23	54280	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:31.028781891 CET	54280	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:31.046449900 CET	54280	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:31.051305056 CET	23	54280	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:32.816543102 CET	23	54280	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:32.817003012 CET	54280	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:32.817059994 CET	54282	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:32.821890116 CET	23	54280	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:32.821906090 CET	23	54282	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:32.821990967 CET	54282	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:32.837642908 CET	54282	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:32.842422962 CET	23	54282	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:35.185796022 CET	23	54282	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:35.185934067 CET	23	54282	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:35.186079979 CET	54282	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:35.186090946 CET	23	54282	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:35.186135054 CET	54282	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:35.186135054 CET	54282	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:35.186162949 CET	54284	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:35.191296101 CET	23	54282	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:35.191308022 CET	23	54284	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:35.191428900 CET	54284	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:35.209983110 CET	54284	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:35.214762926 CET	23	54284	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:36.932629108 CET	23	54284	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:36.933248997 CET	54284	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:36.933301926 CET	54286	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:36.938469887 CET	23	54284	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:36.938613892 CET	23	54286	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:36.938678980 CET	54286	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:36.956614971 CET	54286	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:36.961334944 CET	23	54286	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:38.678020000 CET	23	54286	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:38.678508043 CET	54286	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:38.678719997 CET	54288	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:38.683330059 CET	23	54286	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:38.683490992 CET	23	54288	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:38.683581114 CET	54288	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:38.700783014 CET	54288	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:38.705630064 CET	23	54288	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:40.469078064 CET	23	54288	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:40.469301939 CET	54290	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:40.469301939 CET	54288	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:40.474303007 CET	23	54290	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:40.474317074 CET	23	54288	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:40.474364996 CET	54290	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:40.486963034 CET	54290	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:40.491767883 CET	23	54290	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:42.255552053 CET	23	54290	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:42.255713940 CET	54290	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:42.255728960 CET	54292	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:42.260482073 CET	23	54290	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:42.260529995 CET	23	54292	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:42.260642052 CET	54292	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:42.272706032 CET	54292	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:42.277491093 CET	23	54292	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:44.032053947 CET	23	54292	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:44.032428026 CET	54292	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:44.032536983 CET	54294	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:44.037233114 CET	23	54292	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:44.037283897 CET	23	54294	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:44.037367105 CET	54294	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:44.055716038 CET	54294	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:44.060544014 CET	23	54294	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:45.819757938 CET	23	54294	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:45.820112944 CET	54294	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:45.820219040 CET	54296	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:45.825000048 CET	23	54294	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:45.825010061 CET	23	54296	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:45.825100899 CET	54296	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:45.841272116 CET	54296	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:45.846146107 CET	23	54296	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:47.621773005 CET	23	54296	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:47.622014046 CET	54296	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:47.622014046 CET	54298	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:47.626943111 CET	23	54296	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:47.626955032 CET	23	54298	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:47.627002001 CET	54298	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:47.639996052 CET	54298	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:47.644727945 CET	23	54298	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:49.368249893 CET	23	54298	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:49.368422031 CET	54298	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:49.368472099 CET	54300	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:49.373215914 CET	23	54298	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:49.373258114 CET	23	54300	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:49.373399019 CET	54300	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:49.387001991 CET	54300	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:49.391782045 CET	23	54300	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:51.120410919 CET	23	54300	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:51.120654106 CET	54300	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:51.120709896 CET	54302	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:51.125566006 CET	23	54300	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:51.125577927 CET	23	54302	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:51.125655890 CET	54302	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:51.138561964 CET	54302	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:51.143384933 CET	23	54302	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:52.886662006 CET	23	54302	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:52.887017012 CET	54302	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:52.887020111 CET	54304	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:52.891839981 CET	23	54302	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:52.891855001 CET	23	54304	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:52.891938925 CET	54304	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:52.904597998 CET	54304	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:52.909382105 CET	23	54304	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:54.663489103 CET	23	54304	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:54.663815975 CET	54306	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:54.663815975 CET	54304	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:54.668740988 CET	23	54306	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:54.668751001 CET	23	54304	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:54.668831110 CET	54306	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:54.682648897 CET	54306	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:54.687527895 CET	23	54306	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:56.451775074 CET	23	54306	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:56.451999903 CET	54306	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:56.452086926 CET	54308	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:56.456738949 CET	23	54306	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:56.456918955 CET	23	54308	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:56.457010031 CET	54308	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:56.474848032 CET	54308	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:56.479654074 CET	23	54308	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:58.196711063 CET	23	54308	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:58.197108030 CET	54308	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:58.197108030 CET	54310	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:58.201921940 CET	23	54308	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:58.201929092 CET	23	54310	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:58.201983929 CET	54310	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:58.220076084 CET	54310	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:58.224845886 CET	23	54310	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:59.944565058 CET	23	54310	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:59.944842100 CET	54310	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:59.944873095 CET	54312	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:59.950272083 CET	23	54310	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:59.950284004 CET	23	54312	45.128.233.186	192.168.2.15
Jan 7, 2025 22:24:59.950392962 CET	54312	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:59.962479115 CET	54312	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:24:59.968251944 CET	23	54312	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:01.744330883 CET	23	54312	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:01.744832993 CET	54312	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:01.744833946 CET	54314	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:01.750566006 CET	23	54312	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:01.750585079 CET	23	54314	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:01.750653028 CET	54314	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:01.768460035 CET	54314	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:01.777679920 CET	23	54314	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:03.514043093 CET	23	54314	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:03.514292002 CET	54314	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:03.514403105 CET	54316	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:03.519145966 CET	23	54314	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:03.519174099 CET	23	54316	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:03.519289970 CET	54316	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:03.536660910 CET	54316	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:03.541414022 CET	23	54316	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:05.272989988 CET	23	54316	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:05.273549080 CET	54316	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:05.273686886 CET	54318	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:05.278404951 CET	23	54316	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:05.278526068 CET	23	54318	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:05.278609991 CET	54318	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:05.298033953 CET	54318	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:05.302862883 CET	23	54318	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:07.091350079 CET	23	54318	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:07.091466904 CET	54318	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:07.091532946 CET	54320	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:07.096296072 CET	23	54318	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:07.096321106 CET	23	54320	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:07.096374035 CET	54320	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:07.110033035 CET	54320	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:07.114828110 CET	23	54320	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:08.884370089 CET	23	54320	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:08.884691000 CET	54320	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:08.884884119 CET	54322	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:08.890068054 CET	23	54320	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:08.890232086 CET	23	54322	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:08.890326977 CET	54322	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:08.902327061 CET	54322	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:08.907118082 CET	23	54322	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:10.630263090 CET	23	54322	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:10.630508900 CET	54322	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:10.630625010 CET	54324	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:10.635354996 CET	23	54322	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:10.635454893 CET	23	54324	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:10.635597944 CET	54324	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:10.649396896 CET	54324	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:10.654267073 CET	23	54324	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:12.388051033 CET	23	54324	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:12.388288975 CET	54324	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:12.388288975 CET	54326	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:12.393135071 CET	23	54324	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:12.393148899 CET	23	54326	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:12.393196106 CET	54326	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:12.404237986 CET	54326	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:12.409085035 CET	23	54326	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:14.133754969 CET	23	54326	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:14.134094000 CET	54326	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:14.134196997 CET	54328	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:14.139103889 CET	23	54326	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:14.139290094 CET	23	54328	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:14.139435053 CET	54328	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:14.158299923 CET	54328	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:14.163114071 CET	23	54328	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:15.938922882 CET	23	54328	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:15.939229012 CET	54328	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:15.939280033 CET	54330	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:15.944083929 CET	23	54328	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:15.944097996 CET	23	54330	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:15.944174051 CET	54330	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:15.961086988 CET	54330	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:15.966001987 CET	23	54330	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:17.726108074 CET	23	54330	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:17.726480007 CET	54330	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:17.726547956 CET	54332	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:17.731363058 CET	23	54330	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:17.731374025 CET	23	54332	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:17.731492043 CET	54332	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:17.750077009 CET	54332	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:17.754894972 CET	23	54332	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:19.501677036 CET	23	54332	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:19.501966953 CET	54332	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:19.501966953 CET	54334	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:19.506818056 CET	23	54332	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:19.506830931 CET	23	54334	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:19.506896973 CET	54334	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:19.520416975 CET	54334	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:19.525218964 CET	23	54334	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:21.451889038 CET	23	54334	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:21.452033997 CET	54334	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:21.452076912 CET	54336	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:21.456901073 CET	23	54334	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:21.456958055 CET	23	54336	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:21.457048893 CET	54336	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:21.469882011 CET	54336	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:21.474626064 CET	23	54336	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:23.776943922 CET	23	54336	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:23.777168989 CET	54336	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:23.777215958 CET	54338	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:23.782063961 CET	23	54336	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:23.782077074 CET	23	54338	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:23.782210112 CET	54338	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:23.795305014 CET	54338	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:23.800129890 CET	23	54338	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:25.901472092 CET	23	54338	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:25.901839972 CET	54338	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:25.901937962 CET	54340	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:25.906646013 CET	23	54338	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:25.906729937 CET	23	54340	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:25.906830072 CET	54340	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:25.926590919 CET	54340	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:25.931361914 CET	23	54340	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:28.059854984 CET	23	54340	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:28.060049057 CET	54340	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:28.060086012 CET	54342	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:28.064910889 CET	23	54340	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:28.064924955 CET	23	54342	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:28.064985991 CET	54342	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:28.077718973 CET	54342	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:28.082546949 CET	23	54342	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:29.927378893 CET	23	54342	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:29.927560091 CET	54342	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:29.927602053 CET	54344	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:29.932405949 CET	23	54342	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:29.932425022 CET	23	54344	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:29.932514906 CET	54344	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:29.944807053 CET	54344	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:29.949624062 CET	23	54344	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:31.708682060 CET	23	54344	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:31.708811998 CET	54344	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:31.708863974 CET	54346	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:31.713684082 CET	23	54344	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:31.713696003 CET	23	54346	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:31.713746071 CET	54346	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:31.727948904 CET	54346	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:31.732810020 CET	23	54346	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:33.463072062 CET	23	54346	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:33.463334084 CET	54346	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:33.463398933 CET	54348	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:33.468231916 CET	23	54346	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:33.468242884 CET	23	54348	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:33.468379974 CET	54348	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:33.489773989 CET	54348	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:33.495383978 CET	23	54348	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:35.205368996 CET	23	54348	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:35.205574036 CET	54348	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:35.205616951 CET	54350	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:35.210467100 CET	23	54348	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:35.210480928 CET	23	54350	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:35.210764885 CET	54350	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:35.225416899 CET	54350	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:35.230251074 CET	23	54350	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:36.944576979 CET	23	54350	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:36.944819927 CET	54350	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:36.944905996 CET	54352	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:36.949681997 CET	23	54350	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:36.949692965 CET	23	54352	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:36.949768066 CET	54352	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:36.969866037 CET	54352	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:36.974653959 CET	23	54352	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:38.725334883 CET	23	54352	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:38.725511074 CET	54352	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:38.725511074 CET	54354	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:38.730345964 CET	23	54352	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:38.730355978 CET	23	54354	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:38.730400085 CET	54354	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:38.745534897 CET	54354	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:38.750418901 CET	23	54354	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:40.679327011 CET	23	54354	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:40.679533005 CET	54354	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:40.679614067 CET	54356	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:40.684417963 CET	23	54354	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:40.684570074 CET	23	54356	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:40.684670925 CET	54356	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:40.698848009 CET	54356	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:40.703645945 CET	23	54356	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:41.324678898 CET	55946	53	192.168.2.15	8.8.8.8
Jan 7, 2025 22:25:41.330122948 CET	53	55946	8.8.8.8	192.168.2.15
Jan 7, 2025 22:25:41.330194950 CET	55946	53	192.168.2.15	8.8.8.8
Jan 7, 2025 22:25:41.330194950 CET	55946	53	192.168.2.15	8.8.8.8
Jan 7, 2025 22:25:41.330230951 CET	55946	53	192.168.2.15	8.8.8.8
Jan 7, 2025 22:25:41.335038900 CET	53	55946	8.8.8.8	192.168.2.15
Jan 7, 2025 22:25:41.335050106 CET	53	55946	8.8.8.8	192.168.2.15
Jan 7, 2025 22:25:41.778091908 CET	53	55946	8.8.8.8	192.168.2.15
Jan 7, 2025 22:25:41.778183937 CET	55946	53	192.168.2.15	8.8.8.8
Jan 7, 2025 22:25:42.458309889 CET	23	54356	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:42.458410978 CET	54356	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:42.458452940 CET	54360	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:42.463191032 CET	23	54356	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:42.463201046 CET	23	54360	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:42.463252068 CET	54360	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:42.504307032 CET	54360	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:42.509144068 CET	23	54360	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:43.779084921 CET	53	55946	8.8.8.8	192.168.2.15
Jan 7, 2025 22:25:43.779371023 CET	55946	53	192.168.2.15	8.8.8.8
Jan 7, 2025 22:25:43.785140038 CET	53	55946	8.8.8.8	192.168.2.15
Jan 7, 2025 22:25:44.243382931 CET	23	54360	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:44.243628979 CET	54360	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:44.243628979 CET	54362	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:44.248441935 CET	23	54360	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:44.248452902 CET	23	54362	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:44.248497963 CET	54362	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:44.263412952 CET	54362	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:44.268176079 CET	23	54362	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:46.112844944 CET	23	54362	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:46.113282919 CET	54362	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:46.113307953 CET	54364	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:46.118086100 CET	23	54362	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:46.118103027 CET	23	54364	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:46.118196964 CET	54364	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:46.138056040 CET	54364	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:46.142930984 CET	23	54364	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:47.870726109 CET	23	54364	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:47.870899916 CET	54364	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:47.870966911 CET	54366	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:47.876209021 CET	23	54364	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:47.876220942 CET	23	54366	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:47.876310110 CET	54366	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:47.893627882 CET	54366	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:47.899285078 CET	23	54366	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:49.601119041 CET	23	54366	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:49.601413965 CET	54366	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:49.601468086 CET	54368	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:49.606306076 CET	23	54366	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:49.606317997 CET	23	54368	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:49.606378078 CET	54368	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:49.622323990 CET	54368	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:49.627099037 CET	23	54368	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:51.362840891 CET	23	54368	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:51.363007069 CET	54368	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:51.363070965 CET	54370	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:51.372416019 CET	23	54368	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:51.372427940 CET	23	54370	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:51.372495890 CET	54370	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:51.388520002 CET	54370	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:51.394567966 CET	23	54370	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:53.156152010 CET	23	54370	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:53.156333923 CET	54370	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:53.156377077 CET	54372	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:53.161140919 CET	23	54370	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:53.161206007 CET	23	54372	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:53.161272049 CET	54372	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:53.177011967 CET	54372	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:53.181868076 CET	23	54372	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:54.899861097 CET	23	54372	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:54.900022030 CET	54372	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:54.900059938 CET	54374	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:54.904922009 CET	23	54372	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:54.904933929 CET	23	54374	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:54.904985905 CET	54374	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:54.921294928 CET	54374	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:54.926098108 CET	23	54374	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:56.716373920 CET	23	54374	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:56.716666937 CET	54374	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:56.716674089 CET	54376	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:56.721712112 CET	23	54374	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:56.721724033 CET	23	54376	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:56.721798897 CET	54376	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:56.737978935 CET	54376	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:56.742786884 CET	23	54376	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:58.477811098 CET	23	54376	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:58.478126049 CET	54376	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:58.478126049 CET	54378	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:58.483042955 CET	23	54376	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:58.483053923 CET	23	54378	45.128.233.186	192.168.2.15
Jan 7, 2025 22:25:58.483160019 CET	54378	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:58.504121065 CET	54378	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:25:58.508939028 CET	23	54378	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:00.285716057 CET	23	54378	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:00.285888910 CET	54378	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:00.285937071 CET	54380	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:00.290693998 CET	23	54378	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:00.290824890 CET	23	54380	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:00.290888071 CET	54380	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:00.307018995 CET	54380	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:00.311920881 CET	23	54380	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:02.114913940 CET	23	54380	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:02.115087032 CET	54380	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:02.115128994 CET	54382	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:02.120018959 CET	23	54380	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:02.120032072 CET	23	54382	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:02.120089054 CET	54382	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:02.140245914 CET	54382	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:02.145009995 CET	23	54382	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:03.874635935 CET	23	54382	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:03.874842882 CET	54382	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:03.874895096 CET	54384	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:03.879636049 CET	23	54382	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:03.879676104 CET	23	54384	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:03.879837036 CET	54384	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:03.899307013 CET	54384	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:03.904058933 CET	23	54384	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:05.658051014 CET	23	54384	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:05.658227921 CET	54384	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:05.658272982 CET	54386	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:05.663048983 CET	23	54384	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:05.663058996 CET	23	54386	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:05.663163900 CET	54386	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:05.682188034 CET	54386	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:05.687427998 CET	23	54386	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:07.420505047 CET	23	54386	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:07.420705080 CET	54386	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:07.420758009 CET	54388	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:07.426430941 CET	23	54386	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:07.426441908 CET	23	54388	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:07.426496029 CET	54388	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:07.446346045 CET	54388	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:07.452007055 CET	23	54388	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:09.223140955 CET	23	54388	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:09.223510981 CET	54388	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:09.223598003 CET	54390	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:09.228848934 CET	23	54388	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:09.228859901 CET	23	54390	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:09.228940010 CET	54390	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:09.248408079 CET	54390	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:09.253197908 CET	23	54390	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:11.005875111 CET	23	54390	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:11.006244898 CET	54390	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:11.006336927 CET	54392	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:11.010988951 CET	23	54390	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:11.011111975 CET	23	54392	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:11.011226892 CET	54392	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:11.030826092 CET	54392	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:11.035584927 CET	23	54392	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:12.764411926 CET	23	54392	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:12.764991045 CET	54392	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:12.765434980 CET	54394	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:12.769762039 CET	23	54392	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:12.770190001 CET	23	54394	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:12.770256042 CET	54394	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:12.790612936 CET	54394	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:12.795371056 CET	23	54394	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:14.523937941 CET	23	54394	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:14.524250031 CET	54394	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:14.524389029 CET	54396	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:14.529031992 CET	23	54394	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:14.529181957 CET	23	54396	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:14.529238939 CET	54396	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:14.530556917 CET	54396	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:14.535341024 CET	23	54396	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:16.299362898 CET	23	54396	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:16.299562931 CET	54396	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:16.299683094 CET	54398	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:16.304405928 CET	23	54396	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:16.304626942 CET	23	54398	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:16.304692984 CET	54398	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:16.304781914 CET	54398	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:16.309535027 CET	23	54398	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:18.100084066 CET	23	54398	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:18.100387096 CET	54400	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:18.100392103 CET	54398	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:18.105232954 CET	23	54398	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:18.105245113 CET	23	54400	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:18.105304956 CET	54400	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:18.105340958 CET	54400	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:18.110212088 CET	23	54400	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:19.872781992 CET	23	54400	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:19.873020887 CET	54400	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:19.873207092 CET	54402	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:19.877780914 CET	23	54400	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:19.877954006 CET	23	54402	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:19.878016949 CET	54402	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:19.878109932 CET	54402	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:19.882852077 CET	23	54402	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:21.664743900 CET	23	54402	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:21.665127993 CET	54402	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:21.665196896 CET	54404	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:21.669891119 CET	23	54402	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:21.669984102 CET	23	54404	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:21.670043945 CET	54404	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:21.670131922 CET	54404	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:21.674900055 CET	23	54404	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:23.457470894 CET	23	54404	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:23.457642078 CET	54404	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:23.457665920 CET	54406	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:23.465225935 CET	23	54404	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:23.465235949 CET	23	54406	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:23.465317011 CET	54406	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:23.465336084 CET	54406	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:23.472908020 CET	23	54406	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:25.244113922 CET	23	54406	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:25.244261026 CET	54406	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:25.244306087 CET	54408	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:25.249034882 CET	23	54406	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:25.249070883 CET	23	54408	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:25.249130011 CET	54408	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:25.249145985 CET	54408	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:25.253905058 CET	23	54408	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:27.017291069 CET	23	54408	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:27.017607927 CET	54408	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:27.017672062 CET	54410	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:27.022402048 CET	23	54408	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:27.022418976 CET	23	54410	45.128.233.186	192.168.2.15
Jan 7, 2025 22:26:27.022531986 CET	54410	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:27.022595882 CET	54410	23	192.168.2.15	45.128.233.186
Jan 7, 2025 22:26:27.027328968 CET	23	54410	45.128.233.186	192.168.2.15

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 7, 2025 22:25:41.330194950 CET	192.168.2.15	8.8.8.8	0xc6b5	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Jan 7, 2025 22:25:41.330230951 CET	192.168.2.15	8.8.8.8	0x8c75	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 7, 2025 22:25:41.778091908 CET	8.8.8.8	192.168.2.15	0xc6b5	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Jan 7, 2025 22:25:41.778091908 CET	8.8.8.8	192.168.2.15	0xc6b5	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: gigops.i686.elf PID: 5737, Parent PID: 5664

General

Start time (UTC):	21:22:53
Start date (UTC):	07/01/2025
Path:	/tmp/gigops.i686.elf
Arguments:	/tmp/gigops.i686.elf
File size:	95838 bytes
MD5 hash:	8ae8b514fc5e56e55e9712b26ddcc7fd

Chronological Activities

Analysis Process: gigops.i686.elf PID: 5738, Parent PID: 5737

General

Start time (UTC):	21:22:53
Start date (UTC):	07/01/2025
Path:	/tmp/gigops.i686.elf
Arguments:	-
File size:	95838 bytes
MD5 hash:	8ae8b514fc5e56e55e9712b26ddcc7fd

Chronological Activities

Analysis Process: gigops.i686.elf PID: 5739, Parent PID: 5738

General

Start time (UTC):	21:22:53
Start date (UTC):	07/01/2025
Path:	/tmp/gigops.i686.elf
Arguments:	-
File size:	95838 bytes
MD5 hash:	8ae8b514fc5e56e55e9712b26ddcc7fd

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report gigops.i686.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: gigops.i686.elf PID: 5737, Parent PID: 5664

General

Chronological Activities

Analysis Process: gigops.i686.elf PID: 5738, Parent PID: 5737

General

Chronological Activities

Analysis Process: gigops.i686.elf PID: 5739, Parent PID: 5738

General

Linux Analysis Report
gigops.i686.elf