Edit tour

Linux Analysis Report
gigops.i586.elf

Overview

General Information

Sample name:	gigops.i586.elf
Analysis ID:	1585611
MD5:	ef14cc6be56c5ee13d4813fd249a0d08
SHA1:	f5f5509009e266e5d36770c45a3b4d93e9ff6f1f
SHA256:	c2f70963280ee679302a9e5697ef3320bfcfa0c722bfa958daa45ba2e1636a5a
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt

Score:	88
Range:	0 - 100
Whitelisted:	false

Signatures

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Machine Learning detection for sample

Opens /proc/net/* files useful for finding connected devices and routers

Sample and/or dropped files contains symbols with suspicious names

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1585611
Start date and time:	2025-01-07 22:22:31 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 53s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	gigops.i586.elf
Detection:	MAL
Classification:	mal88.spre.troj.linELF@0/0@0/0

Warnings

VT rate limit hit for: gigops.i586.elf

Runtime Messages

Command:	/tmp/gigops.i586.elf
PID:	6223
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	BUILD DONGS BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS
Standard Error:

Process Tree

system is lnxubuntu20

gigops.i586.elf (PID: 6223, Parent: 6138, MD5: ef14cc6be56c5ee13d4813fd249a0d08) Arguments: /tmp/gigops.i586.elf

gigops.i586.elf New Fork (PID: 6224, Parent: 6223)

gigops.i586.elf New Fork (PID: 6225, Parent: 6224)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
gigops.i586.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
gigops.i586.elf	Linux_Trojan_Gafgyt_6321b565	unknown	unknown	0x23a3:$a: D8 89 D0 01 C0 01 D0 C1 E0 03 8B 04 08 83 E0 1F 0F AB 84 9D 58 FF
gigops.i586.elf	Linux_Trojan_Gafgyt_c573932b	unknown	unknown	0x557:$a: 83 7D 18 00 74 22 8B 45 1C 83 E0 02 85 C0 74 18 83 EC 08 6A 2D FF
gigops.i586.elf	Linux_Trojan_Gafgyt_750fe002	unknown	unknown	0x15e0:$a: 10 8B 45 0C 40 8A 00 3C FC 75 06 C6 45 FF FE EB 50 8B 45 0C 40
gigops.i586.elf	Linux_Trojan_Gafgyt_71e487ea	unknown	unknown	0x3f67:$a: E0 8B 45 D8 8B 04 D0 8D 50 01 83 EC 0C 8D 85 40 FF FF FF 50
gigops.i586.elf	Linux_Trojan_Gafgyt_e6d75e6f	unknown	unknown	0xab62:$a: 00 00 00 CD 80 C3 8B 54 24 04 8B 4C 24 08 87 D3 B8 5B 00 00 00
gigops.i586.elf	Linux_Trojan_Gafgyt_7167d08f	unknown	unknown	0x5f4:$a: 0C 8A 00 3C 2D 75 13 FF 45 0C C7 45 E4 01 00 00 00 EB 07 FF
gigops.i586.elf	Linux_Trojan_Gafgyt_20f5e74f	unknown	unknown	0x4921:$a: D8 8B 45 D0 8B 04 D0 8D 50 01 83 EC 0C 8D 85 38 FF FF FF 50 8D 85 40 FF
gigops.i586.elf	Linux_Trojan_Gafgyt_fb14e81f	unknown	unknown	0xded6:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00
gigops.i586.elf	Linux_Trojan_Mirai_122ff2e6	unknown	unknown	0x88af:$a: 24 EB 15 89 F0 83 C8 01 EB 03 8B 5B 08 3B 43 04 72 F8 8B 4B 0C 89
gigops.i586.elf	Linux_Trojan_Mirai_fa48b592	unknown	unknown	0xceb1:$a: 31 C0 BA 01 00 00 00 B9 01 00 00 00 03 04 24 89 D7 31 D2 F7 F7 0F
Click to see the 6 entries

Memory Dumps

Source	Rule	Description	Author	Strings
6223.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Gafgyt_6321b565	unknown	unknown	0x23a3:$a: D8 89 D0 01 C0 01 D0 C1 E0 03 8B 04 08 83 E0 1F 0F AB 84 9D 58 FF
6223.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Gafgyt_c573932b	unknown	unknown	0x557:$a: 83 7D 18 00 74 22 8B 45 1C 83 E0 02 85 C0 74 18 83 EC 08 6A 2D FF
6223.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Gafgyt_750fe002	unknown	unknown	0x15e0:$a: 10 8B 45 0C 40 8A 00 3C FC 75 06 C6 45 FF FE EB 50 8B 45 0C 40
6223.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Gafgyt_71e487ea	unknown	unknown	0x3f67:$a: E0 8B 45 D8 8B 04 D0 8D 50 01 83 EC 0C 8D 85 40 FF FF FF 50
6223.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Gafgyt_e6d75e6f	unknown	unknown	0xab62:$a: 00 00 00 CD 80 C3 8B 54 24 04 8B 4C 24 08 87 D3 B8 5B 00 00 00
6223.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Gafgyt_7167d08f	unknown	unknown	0x5f4:$a: 0C 8A 00 3C 2D 75 13 FF 45 0C C7 45 E4 01 00 00 00 EB 07 FF
6223.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Gafgyt_20f5e74f	unknown	unknown	0x4921:$a: D8 8B 45 D0 8B 04 D0 8D 50 01 83 EC 0C 8D 85 38 FF FF FF 50 8D 85 40 FF
6223.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Gafgyt_fb14e81f	unknown	unknown	0xded6:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00
6223.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_122ff2e6	unknown	unknown	0x88af:$a: 24 EB 15 89 F0 83 C8 01 EB 03 8B 5B 08 3B 43 04 72 F8 8B 4B 0C 89
6223.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_fa48b592	unknown	unknown	0xceb1:$a: 31 C0 BA 01 00 00 00 B9 01 00 00 00 03 04 24 89 D7 31 D2 F7 F7 0F
6224.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Gafgyt_6321b565	unknown	unknown	0x23a3:$a: D8 89 D0 01 C0 01 D0 C1 E0 03 8B 04 08 83 E0 1F 0F AB 84 9D 58 FF
6224.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Gafgyt_c573932b	unknown	unknown	0x557:$a: 83 7D 18 00 74 22 8B 45 1C 83 E0 02 85 C0 74 18 83 EC 08 6A 2D FF
6224.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Gafgyt_750fe002	unknown	unknown	0x15e0:$a: 10 8B 45 0C 40 8A 00 3C FC 75 06 C6 45 FF FE EB 50 8B 45 0C 40
6224.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Gafgyt_71e487ea	unknown	unknown	0x3f67:$a: E0 8B 45 D8 8B 04 D0 8D 50 01 83 EC 0C 8D 85 40 FF FF FF 50
6224.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Gafgyt_e6d75e6f	unknown	unknown	0xab62:$a: 00 00 00 CD 80 C3 8B 54 24 04 8B 4C 24 08 87 D3 B8 5B 00 00 00
6224.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Gafgyt_7167d08f	unknown	unknown	0x5f4:$a: 0C 8A 00 3C 2D 75 13 FF 45 0C C7 45 E4 01 00 00 00 EB 07 FF
6224.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Gafgyt_20f5e74f	unknown	unknown	0x4921:$a: D8 8B 45 D0 8B 04 D0 8D 50 01 83 EC 0C 8D 85 38 FF FF FF 50 8D 85 40 FF
6224.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Gafgyt_fb14e81f	unknown	unknown	0xded6:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00
6224.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_122ff2e6	unknown	unknown	0x88af:$a: 24 EB 15 89 F0 83 C8 01 EB 03 8B 5B 08 3B 43 04 72 F8 8B 4B 0C 89
6224.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_fa48b592	unknown	unknown	0xceb1:$a: 31 C0 BA 01 00 00 00 B9 01 00 00 00 03 04 24 89 D7 31 D2 F7 F7 0F
Click to see the 15 entries

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-07T22:23:11.604188+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54316	45.128.233.186	23	TCP
2025-01-07T22:23:13.345070+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54318	45.128.233.186	23	TCP
2025-01-07T22:23:15.124987+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54320	45.128.233.186	23	TCP
2025-01-07T22:23:16.893210+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54322	45.128.233.186	23	TCP
2025-01-07T22:23:18.688845+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54324	45.128.233.186	23	TCP
2025-01-07T22:23:20.484939+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54326	45.128.233.186	23	TCP
2025-01-07T22:23:22.214736+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54328	45.128.233.186	23	TCP
2025-01-07T22:23:24.001460+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54330	45.128.233.186	23	TCP
2025-01-07T22:23:25.747239+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54332	45.128.233.186	23	TCP
2025-01-07T22:23:27.517240+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54334	45.128.233.186	23	TCP
2025-01-07T22:23:29.317876+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54336	45.128.233.186	23	TCP
2025-01-07T22:23:31.061597+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54338	45.128.233.186	23	TCP
2025-01-07T22:23:32.831988+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54340	45.128.233.186	23	TCP
2025-01-07T22:23:34.633206+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54342	45.128.233.186	23	TCP
2025-01-07T22:23:36.371485+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54344	45.128.233.186	23	TCP
2025-01-07T22:23:38.126554+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54346	45.128.233.186	23	TCP
2025-01-07T22:23:39.940854+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54348	45.128.233.186	23	TCP
2025-01-07T22:23:41.706020+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54350	45.128.233.186	23	TCP
2025-01-07T22:23:43.496715+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54352	45.128.233.186	23	TCP
2025-01-07T22:23:45.268624+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54354	45.128.233.186	23	TCP
2025-01-07T22:23:47.020184+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54356	45.128.233.186	23	TCP
2025-01-07T22:23:48.761161+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54358	45.128.233.186	23	TCP
2025-01-07T22:23:50.526508+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54360	45.128.233.186	23	TCP
2025-01-07T22:23:52.294053+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54362	45.128.233.186	23	TCP
2025-01-07T22:23:54.051988+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54364	45.128.233.186	23	TCP
2025-01-07T22:23:55.924063+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54366	45.128.233.186	23	TCP
2025-01-07T22:23:57.673493+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54368	45.128.233.186	23	TCP
2025-01-07T22:23:59.444248+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54370	45.128.233.186	23	TCP
2025-01-07T22:24:01.192587+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54372	45.128.233.186	23	TCP
2025-01-07T22:24:02.940930+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54374	45.128.233.186	23	TCP
2025-01-07T22:24:04.748177+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54376	45.128.233.186	23	TCP
2025-01-07T22:24:06.478700+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54378	45.128.233.186	23	TCP
2025-01-07T22:24:08.220534+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54380	45.128.233.186	23	TCP
2025-01-07T22:24:09.968369+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54382	45.128.233.186	23	TCP
2025-01-07T22:24:11.744785+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54384	45.128.233.186	23	TCP
2025-01-07T22:24:13.498349+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54386	45.128.233.186	23	TCP
2025-01-07T22:24:15.232084+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54388	45.128.233.186	23	TCP
2025-01-07T22:24:17.004683+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54390	45.128.233.186	23	TCP
2025-01-07T22:24:17.212386+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54390	45.128.233.186	23	TCP
2025-01-07T22:24:18.782485+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54392	45.128.233.186	23	TCP
2025-01-07T22:24:20.515352+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54394	45.128.233.186	23	TCP
2025-01-07T22:24:22.253003+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54396	45.128.233.186	23	TCP
2025-01-07T22:24:24.233825+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54398	45.128.233.186	23	TCP
2025-01-07T22:24:26.050462+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54400	45.128.233.186	23	TCP
2025-01-07T22:24:27.829358+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54402	45.128.233.186	23	TCP
2025-01-07T22:24:29.581874+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54404	45.128.233.186	23	TCP
2025-01-07T22:24:31.373462+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54406	45.128.233.186	23	TCP
2025-01-07T22:24:33.154792+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54408	45.128.233.186	23	TCP
2025-01-07T22:24:35.209634+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54410	45.128.233.186	23	TCP
2025-01-07T22:24:36.983385+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54412	45.128.233.186	23	TCP
2025-01-07T22:24:38.780192+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54414	45.128.233.186	23	TCP
2025-01-07T22:24:40.516709+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54416	45.128.233.186	23	TCP
2025-01-07T22:24:42.309629+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54418	45.128.233.186	23	TCP
2025-01-07T22:24:44.088230+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54420	45.128.233.186	23	TCP
2025-01-07T22:24:45.890582+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54422	45.128.233.186	23	TCP
2025-01-07T22:24:47.661690+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54424	45.128.233.186	23	TCP
2025-01-07T22:24:49.408267+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54426	45.128.233.186	23	TCP
2025-01-07T22:24:51.178721+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54428	45.128.233.186	23	TCP
2025-01-07T22:24:52.961271+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54430	45.128.233.186	23	TCP
2025-01-07T22:24:54.776920+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54432	45.128.233.186	23	TCP
2025-01-07T22:24:56.589003+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54434	45.128.233.186	23	TCP
2025-01-07T22:24:58.326655+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54436	45.128.233.186	23	TCP
2025-01-07T22:25:00.101713+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54438	45.128.233.186	23	TCP
2025-01-07T22:25:01.886992+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54440	45.128.233.186	23	TCP
2025-01-07T22:25:03.622540+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54442	45.128.233.186	23	TCP
2025-01-07T22:25:05.417891+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54444	45.128.233.186	23	TCP
2025-01-07T22:25:07.197933+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54446	45.128.233.186	23	TCP
2025-01-07T22:25:08.995171+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54448	45.128.233.186	23	TCP
2025-01-07T22:25:10.772030+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54450	45.128.233.186	23	TCP
2025-01-07T22:25:12.500409+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54452	45.128.233.186	23	TCP
2025-01-07T22:25:14.302478+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54454	45.128.233.186	23	TCP
2025-01-07T22:25:16.049905+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54456	45.128.233.186	23	TCP
2025-01-07T22:25:17.783010+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54458	45.128.233.186	23	TCP
2025-01-07T22:25:19.580541+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54460	45.128.233.186	23	TCP
2025-01-07T22:25:21.556748+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54462	45.128.233.186	23	TCP
2025-01-07T22:25:23.871986+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54464	45.128.233.186	23	TCP
2025-01-07T22:25:26.074094+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54466	45.128.233.186	23	TCP
2025-01-07T22:25:28.228138+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54468	45.128.233.186	23	TCP
2025-01-07T22:25:30.121994+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54470	45.128.233.186	23	TCP
2025-01-07T22:25:31.879425+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54472	45.128.233.186	23	TCP
2025-01-07T22:25:33.674446+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54474	45.128.233.186	23	TCP
2025-01-07T22:25:35.446548+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54476	45.128.233.186	23	TCP
2025-01-07T22:25:37.222051+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54478	45.128.233.186	23	TCP
2025-01-07T22:25:39.027568+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54480	45.128.233.186	23	TCP
2025-01-07T22:25:40.799110+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54482	45.128.233.186	23	TCP
2025-01-07T22:25:42.602992+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54484	45.128.233.186	23	TCP
2025-01-07T22:25:44.327283+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54486	45.128.233.186	23	TCP
2025-01-07T22:25:46.135508+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54488	45.128.233.186	23	TCP
2025-01-07T22:25:47.920534+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54490	45.128.233.186	23	TCP
2025-01-07T22:25:49.712270+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54492	45.128.233.186	23	TCP
2025-01-07T22:25:51.455452+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54494	45.128.233.186	23	TCP
2025-01-07T22:25:53.231342+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54496	45.128.233.186	23	TCP
2025-01-07T22:25:54.989129+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54498	45.128.233.186	23	TCP
2025-01-07T22:25:56.798600+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54500	45.128.233.186	23	TCP
2025-01-07T22:25:58.550767+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54502	45.128.233.186	23	TCP
2025-01-07T22:26:00.273230+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54504	45.128.233.186	23	TCP
2025-01-07T22:26:02.098432+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54506	45.128.233.186	23	TCP
2025-01-07T22:26:03.906130+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54508	45.128.233.186	23	TCP
2025-01-07T22:26:05.653483+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54510	45.128.233.186	23	TCP
2025-01-07T22:26:07.421075+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54512	45.128.233.186	23	TCP
2025-01-07T22:26:09.170806+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54514	45.128.233.186	23	TCP
2025-01-07T22:26:10.961423+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54516	45.128.233.186	23	TCP
2025-01-07T22:26:12.699686+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54518	45.128.233.186	23	TCP
2025-01-07T22:26:14.467543+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54520	45.128.233.186	23	TCP
2025-01-07T22:26:16.220748+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54522	45.128.233.186	23	TCP
2025-01-07T22:26:17.999745+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54524	45.128.233.186	23	TCP
2025-01-07T22:26:19.830918+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54526	45.128.233.186	23	TCP
2025-01-07T22:26:21.658106+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54528	45.128.233.186	23	TCP
2025-01-07T22:26:23.421617+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54530	45.128.233.186	23	TCP
2025-01-07T22:26:25.194222+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54532	45.128.233.186	23	TCP
2025-01-07T22:26:26.977827+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54534	45.128.233.186	23	TCP
2025-01-07T22:26:28.739108+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54536	45.128.233.186	23	TCP
2025-01-07T22:26:30.586327+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54538	45.128.233.186	23	TCP
2025-01-07T22:26:32.376285+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54540	45.128.233.186	23	TCP
2025-01-07T22:26:34.177217+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54542	45.128.233.186	23	TCP
2025-01-07T22:26:35.975039+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54544	45.128.233.186	23	TCP
2025-01-07T22:26:37.701826+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54546	45.128.233.186	23	TCP
2025-01-07T22:26:39.458105+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54548	45.128.233.186	23	TCP
2025-01-07T22:26:41.185700+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54550	45.128.233.186	23	TCP
2025-01-07T22:26:42.936550+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54552	45.128.233.186	23	TCP
2025-01-07T22:26:44.686646+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.23	54554	45.128.233.186	23	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: gigops.i586.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "45.128.233.186:23"}

Multi AV Scanner detection for submitted file

Source: gigops.i586.elf

ReversingLabs: Detection: 71%

Machine Learning detection for sample

Source: gigops.i586.elf

Joe Sandbox ML: detected

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/gigops.i586.elf (PID: 6223)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54340 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54352 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54394 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54326 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54416 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54354 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54476 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54320 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54364 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54386 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54500 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54334 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54460 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54324 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54492 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54348 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54520 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54322 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54446 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54524 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54408 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54538 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54450 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54328 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54330 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54466 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54422 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54388 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54546 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54552 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54536 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54374 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54404 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54316 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54342 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54434 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54452 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54462 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54432 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54346 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54454 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54338 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54540 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54430 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54530 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54368 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54366 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54390 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54406 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54372 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54384 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54398 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54442 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54412 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54504 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54516 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54514 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54472 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54464 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54480 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54344 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54336 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54380 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54528 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54544 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54542 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54360 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54362 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54550 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54482 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54356 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54392 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54456 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54376 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54440 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54382 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54418 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54400 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54512 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54468 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54428 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54526 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54410 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54414 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54496 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54494 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54424 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54506 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54438 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54332 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54426 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54396 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54474 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54548 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54420 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54358 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54458 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54498 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54318 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54490 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54378 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54478 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54502 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54402 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54436 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54350 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54448 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54444 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54370 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54532 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54518 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54484 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54486 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54534 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54488 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54508 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54470 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54522 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54554 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.23:54510 -> 45.128.233.186:23

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186

Source: gigops.i586.elf

String found in binary or memory: http://5.206.225.136/bins.sh;

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: gigops.i586.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_6321b565 Author: unknown
Source: gigops.i586.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_c573932b Author: unknown
Source: gigops.i586.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_750fe002 Author: unknown
Source: gigops.i586.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_71e487ea Author: unknown
Source: gigops.i586.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_e6d75e6f Author: unknown
Source: gigops.i586.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_7167d08f Author: unknown
Source: gigops.i586.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_20f5e74f Author: unknown
Source: gigops.i586.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
Source: gigops.i586.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_122ff2e6 Author: unknown
Source: gigops.i586.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_fa48b592 Author: unknown
Source: 6223.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6321b565 Author: unknown
Source: 6223.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_c573932b Author: unknown
Source: 6223.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_750fe002 Author: unknown
Source: 6223.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_71e487ea Author: unknown
Source: 6223.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e6d75e6f Author: unknown
Source: 6223.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_7167d08f Author: unknown
Source: 6223.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_20f5e74f Author: unknown
Source: 6223.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
Source: 6223.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_122ff2e6 Author: unknown
Source: 6223.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa48b592 Author: unknown
Source: 6224.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6321b565 Author: unknown
Source: 6224.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_c573932b Author: unknown
Source: 6224.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_750fe002 Author: unknown
Source: 6224.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_71e487ea Author: unknown
Source: 6224.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e6d75e6f Author: unknown
Source: 6224.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_7167d08f Author: unknown
Source: 6224.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_20f5e74f Author: unknown
Source: 6224.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
Source: 6224.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_122ff2e6 Author: unknown
Source: 6224.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa48b592 Author: unknown

Source: gigops.i586.elf	ELF static info symbol of initial sample: passwords
Source: gigops.i586.elf	ELF static info symbol of initial sample: usernames

Source: gigops.i586.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_6321b565 reference_sample = cd48addd392e7912ab15a5464c710055f696990fab564f29f13121e7a5e93730, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = c1d286e82426cbf19fc52836ef9a6b88c1f6e144967f43760df93cf1ab497d07, id = 6321b565-ed25-4bf2-be4f-3ffa0e643085, last_modified = 2021-09-16
Source: gigops.i586.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_c573932b reference_sample = 4c6aeaa6f6a0c40a3f4116a2e19e669188a8b1678a8930350889da1bab531c68, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 18a3025ebb8af46605970ee8d7d18214854b86200001d576553e102cb71df266, id = c573932b-9b3f-4ab7-a6b6-32dcc7473790, last_modified = 2021-09-16
Source: gigops.i586.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_750fe002 reference_sample = 4c6aeaa6f6a0c40a3f4116a2e19e669188a8b1678a8930350889da1bab531c68, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f51347158a6477b0da4ed4df3374fbad92b6ac137aa4775f83035d1e30cba7dc, id = 750fe002-cac1-4832-94d2-212aa5ec17e3, last_modified = 2021-09-16
Source: gigops.i586.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_71e487ea reference_sample = b8d044f2de21d20c7e4b43a2baf5d8cdb97fba95c3b99816848c0f214515295b, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8df69968ddfec5821500949015192b6cdbc188c74f785a272effd7bc9707f661, id = 71e487ea-a592-469c-a03e-0c64d2549e74, last_modified = 2021-09-16
Source: gigops.i586.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_e6d75e6f reference_sample = 48b15093f33c18778724c48c34199a420be4beb0d794e36034097806e1521eb8, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e99805e8917d6526031270b6da5c2f3cc1c8235fed1d47134835a107d0df497c, id = e6d75e6f-aa04-4767-8730-6909958044a7, last_modified = 2021-09-16
Source: gigops.i586.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_7167d08f reference_sample = 4c6aeaa6f6a0c40a3f4116a2e19e669188a8b1678a8930350889da1bab531c68, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = b9df4ab322a2a329168f684b07b7b05ee3d03165c5b9050a4710eae7aeca6cd9, id = 7167d08f-bfeb-4d78-9783-3a1df2ef0ed3, last_modified = 2021-09-16
Source: gigops.i586.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_20f5e74f reference_sample = 9084b00f9bb71524987dc000fb2bc6f38e722e2be2832589ca4bb1671e852f5b, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 070fe0d678612b4ec8447a07ead0990a0abd908ce714388720e7fd7055bf1175, id = 20f5e74f-9f94-431b-877c-9b0d78a1d4eb, last_modified = 2021-09-16
Source: gigops.i586.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
Source: gigops.i586.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_122ff2e6 reference_sample = c7dd999a033fa3edc1936785b87cd69ce2f5cac5a084ddfaf527a1094e718bc4, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3c9ffd7537e30a21eefa6c174f801264b92a85a1bc73e34e6dc9e29f84658348, id = 122ff2e6-56e6-4aa8-a3ec-c19d31eb1f80, last_modified = 2021-09-16
Source: gigops.i586.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_fa48b592 reference_sample = c9e33befeec133720b3ba40bb3cd7f636aad80f72f324c5fe65ac7af271c49ee, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 8838d2752b310dbf7d12f6cf023244aaff4fdf5b55cf1e3b71843210df0fcf88, id = fa48b592-8d80-45af-a3e4-232695b8f5dd, last_modified = 2021-09-16
Source: 6223.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6321b565 reference_sample = cd48addd392e7912ab15a5464c710055f696990fab564f29f13121e7a5e93730, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = c1d286e82426cbf19fc52836ef9a6b88c1f6e144967f43760df93cf1ab497d07, id = 6321b565-ed25-4bf2-be4f-3ffa0e643085, last_modified = 2021-09-16
Source: 6223.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_c573932b reference_sample = 4c6aeaa6f6a0c40a3f4116a2e19e669188a8b1678a8930350889da1bab531c68, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 18a3025ebb8af46605970ee8d7d18214854b86200001d576553e102cb71df266, id = c573932b-9b3f-4ab7-a6b6-32dcc7473790, last_modified = 2021-09-16
Source: 6223.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_750fe002 reference_sample = 4c6aeaa6f6a0c40a3f4116a2e19e669188a8b1678a8930350889da1bab531c68, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f51347158a6477b0da4ed4df3374fbad92b6ac137aa4775f83035d1e30cba7dc, id = 750fe002-cac1-4832-94d2-212aa5ec17e3, last_modified = 2021-09-16
Source: 6223.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_71e487ea reference_sample = b8d044f2de21d20c7e4b43a2baf5d8cdb97fba95c3b99816848c0f214515295b, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8df69968ddfec5821500949015192b6cdbc188c74f785a272effd7bc9707f661, id = 71e487ea-a592-469c-a03e-0c64d2549e74, last_modified = 2021-09-16
Source: 6223.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e6d75e6f reference_sample = 48b15093f33c18778724c48c34199a420be4beb0d794e36034097806e1521eb8, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e99805e8917d6526031270b6da5c2f3cc1c8235fed1d47134835a107d0df497c, id = e6d75e6f-aa04-4767-8730-6909958044a7, last_modified = 2021-09-16
Source: 6223.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_7167d08f reference_sample = 4c6aeaa6f6a0c40a3f4116a2e19e669188a8b1678a8930350889da1bab531c68, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = b9df4ab322a2a329168f684b07b7b05ee3d03165c5b9050a4710eae7aeca6cd9, id = 7167d08f-bfeb-4d78-9783-3a1df2ef0ed3, last_modified = 2021-09-16
Source: 6223.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_20f5e74f reference_sample = 9084b00f9bb71524987dc000fb2bc6f38e722e2be2832589ca4bb1671e852f5b, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 070fe0d678612b4ec8447a07ead0990a0abd908ce714388720e7fd7055bf1175, id = 20f5e74f-9f94-431b-877c-9b0d78a1d4eb, last_modified = 2021-09-16
Source: 6223.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
Source: 6223.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_122ff2e6 reference_sample = c7dd999a033fa3edc1936785b87cd69ce2f5cac5a084ddfaf527a1094e718bc4, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3c9ffd7537e30a21eefa6c174f801264b92a85a1bc73e34e6dc9e29f84658348, id = 122ff2e6-56e6-4aa8-a3ec-c19d31eb1f80, last_modified = 2021-09-16
Source: 6223.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa48b592 reference_sample = c9e33befeec133720b3ba40bb3cd7f636aad80f72f324c5fe65ac7af271c49ee, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 8838d2752b310dbf7d12f6cf023244aaff4fdf5b55cf1e3b71843210df0fcf88, id = fa48b592-8d80-45af-a3e4-232695b8f5dd, last_modified = 2021-09-16
Source: 6224.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6321b565 reference_sample = cd48addd392e7912ab15a5464c710055f696990fab564f29f13121e7a5e93730, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = c1d286e82426cbf19fc52836ef9a6b88c1f6e144967f43760df93cf1ab497d07, id = 6321b565-ed25-4bf2-be4f-3ffa0e643085, last_modified = 2021-09-16
Source: 6224.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_c573932b reference_sample = 4c6aeaa6f6a0c40a3f4116a2e19e669188a8b1678a8930350889da1bab531c68, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 18a3025ebb8af46605970ee8d7d18214854b86200001d576553e102cb71df266, id = c573932b-9b3f-4ab7-a6b6-32dcc7473790, last_modified = 2021-09-16
Source: 6224.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_750fe002 reference_sample = 4c6aeaa6f6a0c40a3f4116a2e19e669188a8b1678a8930350889da1bab531c68, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f51347158a6477b0da4ed4df3374fbad92b6ac137aa4775f83035d1e30cba7dc, id = 750fe002-cac1-4832-94d2-212aa5ec17e3, last_modified = 2021-09-16
Source: 6224.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_71e487ea reference_sample = b8d044f2de21d20c7e4b43a2baf5d8cdb97fba95c3b99816848c0f214515295b, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8df69968ddfec5821500949015192b6cdbc188c74f785a272effd7bc9707f661, id = 71e487ea-a592-469c-a03e-0c64d2549e74, last_modified = 2021-09-16
Source: 6224.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e6d75e6f reference_sample = 48b15093f33c18778724c48c34199a420be4beb0d794e36034097806e1521eb8, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e99805e8917d6526031270b6da5c2f3cc1c8235fed1d47134835a107d0df497c, id = e6d75e6f-aa04-4767-8730-6909958044a7, last_modified = 2021-09-16
Source: 6224.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_7167d08f reference_sample = 4c6aeaa6f6a0c40a3f4116a2e19e669188a8b1678a8930350889da1bab531c68, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = b9df4ab322a2a329168f684b07b7b05ee3d03165c5b9050a4710eae7aeca6cd9, id = 7167d08f-bfeb-4d78-9783-3a1df2ef0ed3, last_modified = 2021-09-16
Source: 6224.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_20f5e74f reference_sample = 9084b00f9bb71524987dc000fb2bc6f38e722e2be2832589ca4bb1671e852f5b, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 070fe0d678612b4ec8447a07ead0990a0abd908ce714388720e7fd7055bf1175, id = 20f5e74f-9f94-431b-877c-9b0d78a1d4eb, last_modified = 2021-09-16
Source: 6224.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
Source: 6224.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_122ff2e6 reference_sample = c7dd999a033fa3edc1936785b87cd69ce2f5cac5a084ddfaf527a1094e718bc4, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3c9ffd7537e30a21eefa6c174f801264b92a85a1bc73e34e6dc9e29f84658348, id = 122ff2e6-56e6-4aa8-a3ec-c19d31eb1f80, last_modified = 2021-09-16
Source: 6224.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa48b592 reference_sample = c9e33befeec133720b3ba40bb3cd7f636aad80f72f324c5fe65ac7af271c49ee, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 8838d2752b310dbf7d12f6cf023244aaff4fdf5b55cf1e3b71843210df0fcf88, id = fa48b592-8d80-45af-a3e4-232695b8f5dd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal88.spre.troj.linELF@0/0@0/0

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: gigops.i586.elf, type: SAMPLE

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: gigops.i586.elf, type: SAMPLE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	1 Remote System Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service

Malware Configuration

Threatname: Gafgyt

{"C2 url": "45.128.233.186:23"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
gigops.i586.elf	71%	ReversingLabs	Linux.Backdoor.Gafgyt
gigops.i586.elf	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
45.128.233.186:23	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://5.206.225.136/bins.sh;	gigops.i586.elf	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
45.128.233.186	unknown	United Kingdom	208861	RACKTECHRU	true
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
45.128.233.186	gigops.i686.elf	Get hash	malicious	Gafgyt	Browse
	gigops.mpsl.elf	Get hash	malicious	Gafgyt	Browse
	gigops.x86.elf	Get hash	malicious	Gafgyt	Browse
	gigops.arm6.elf	Get hash	malicious	Gafgyt	Browse
	gigops.mips.elf	Get hash	malicious	Gafgyt	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	gigops.arm6.elf	Get hash	malicious	Gafgyt	Browse
	miori.arm6.elf	Get hash	malicious	Unknown	Browse
	botnet.arm6.elf	Get hash	malicious	Unknown	Browse
	.i.elf	Get hash	malicious	Unknown	Browse
	94.156.227.153-sora.arm6-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse
	94.156.227.153-sora.arm-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse
	main_m68k.elf	Get hash	malicious	Mirai	Browse
	main_m68k.elf	Get hash	malicious	Mirai	Browse
	main_arm6.elf	Get hash	malicious	Mirai	Browse
	mips.elf	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	gigops.mpsl.elf	Get hash	malicious	Gafgyt	Browse	185.125.190.26
	gigops.arm6.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	miori.arm6.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	botnet.arm6.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	.i.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	94.156.227.153-sora.arm6-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	94.156.227.153-sora.arm-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	94.156.227.153-sora.arm5-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	94.156.227.153-sora.m68k-2025-01-07T16_09_14.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	main_m68k.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
CANONICAL-ASGB	gigops.mpsl.elf	Get hash	malicious	Gafgyt	Browse	185.125.190.26
	gigops.arm6.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	miori.arm6.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	botnet.arm6.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	.i.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	94.156.227.153-sora.arm6-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	94.156.227.153-sora.arm-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	94.156.227.153-sora.arm5-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	94.156.227.153-sora.m68k-2025-01-07T16_09_14.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	main_m68k.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
RACKTECHRU	gigops.i686.elf	Get hash	malicious	Gafgyt	Browse	45.128.233.186
	gigops.mpsl.elf	Get hash	malicious	Gafgyt	Browse	45.128.233.186
	gigops.x86.elf	Get hash	malicious	Gafgyt	Browse	45.128.233.186
	gigops.arm6.elf	Get hash	malicious	Gafgyt	Browse	45.128.233.186
	gigops.mips.elf	Get hash	malicious	Gafgyt	Browse	45.128.233.186
	lEwK4xROgV.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	86.110.194.28
	zZ1Y43bxxV.exe	Get hash	malicious	DCRat	Browse	86.110.194.28
	updIMdPUj8.exe	Get hash	malicious	DCRat	Browse	86.110.194.28
	jew.sh4.elf	Get hash	malicious	Unknown	Browse	91.223.144.119
	la.bot.mipsel.elf	Get hash	malicious	Unknown	Browse	193.38.236.134
INIT7CH	gigops.arm6.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	miori.arm6.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	botnet.arm6.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	.i.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	94.156.227.153-sora.arm6-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	94.156.227.153-sora.arm-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	main_m68k.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	miori.arm5.elf	Get hash	malicious	Unknown	Browse	77.109.182.70
	main_m68k.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	main_arm6.elf	Get hash	malicious	Mirai	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	6.268175741986019
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	gigops.i586.elf
File size:	95'446 bytes
MD5:	ef14cc6be56c5ee13d4813fd249a0d08
SHA1:	f5f5509009e266e5d36770c45a3b4d93e9ff6f1f
SHA256:	c2f70963280ee679302a9e5697ef3320bfcfa0c722bfa958daa45ba2e1636a5a
SHA512:	f8cf2b21b1f1be9b50a950ba8cd787518270c64fe3d5c2154feaa514beb5b08ecb549f80f936106aabb3a1df75f6da5b08f0f4218acc08800b67faf46771ebf4
SSDEEP:	1536:lQyp/93Ijpz2JKQXEX1PMBIZseeqV/iGuf0ulhy4QBqPMUZJKGe:lQk/93Ijpz2JVXBBIhH9of0uvQGe
TLSH:	7F932949A2A1C0F7D282077501A39BEA0672FD771BFE9D05F3983EF45E3509035A972A
File Content Preview:	.ELF........................4...H.......4. ...(.....................I...I...............................Hz..........................................Q.td............................U..S.......C....h........[]...$.............U......=.....t..5....$......$..

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8048184
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	4
Section Header Offset:	71752
Section Header Size:	40
Number of Section Headers:	19
Header String Table Index:	16

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80480b4	0xb4	0x1c	0x0	0x6	AX	0	0	1
.text	PROGBITS	0x80480d0	0xd0	0xd5f8	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x80556c8	0xd6c8	0x17	0x0	0x6	AX	0	0	1
.rodata	PROGBITS	0x80556e0	0xd6e0	0x2069	0x0	0x2	A	0	0	32
.eh_frame	PROGBITS	0x8058000	0x10000	0x7ec	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x80587ec	0x107ec	0x8	0x0	0x403	WAT	0	0	4
.ctors	PROGBITS	0x80587ec	0x107ec	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x80587f4	0x107f4	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x80587fc	0x107fc	0x4	0x0	0x3	WA	0	0	4
.got.plt	PROGBITS	0x8058800	0x10800	0xc	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x8058820	0x10820	0x2a0	0x0	0x3	WA	0	0	32
.bss	NOBITS	0x8058ac0	0x10ac0	0x6f88	0x0	0x3	WA	0	0	32
.stab	PROGBITS	0x0	0x10ac0	0x138	0xc	0x0		14	0	4
.stabstr	STRTAB	0x0	0x10bf8	0xf6	0x0	0x0		0	0	1
.comment	PROGBITS	0x0	0x10cee	0xad4	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x117c2	0x84	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x11b40	0x3390	0x10	0x0		18	318	4
.strtab	STRTAB	0x0	0x14ed0	0x2606	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8048000	0x8048000	0xf749	0xf749	6.4833	0x5	R E	0x1000	.init .text .fini .rodata
LOAD	0x10000	0x8058000	0x8058000	0xac0	0x7a48	4.6939	0x6	RW	0x1000	.eh_frame .tbss .ctors .dtors .jcr .got.plt .data .bss
TLS	0x107ec	0x80587ec	0x80587ec	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x80480b4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80480d0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x80556c8	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x80556e0	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x8058000	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x80587ec	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x80587ec	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x80587f4	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x80587fc	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x8058800	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x8058820	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x8058ac0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
C.11.5136	.symtab	0x8057620	24	OBJECT	<unknown>	DEFAULT	4
POPBX1	.symtab	0x805207f	0	NOTYPE	<unknown>	DEFAULT	2
POPBX1	.symtab	0x80520df	0	NOTYPE	<unknown>	DEFAULT	2
POPBX1	.symtab	0x805213f	0	NOTYPE	<unknown>	DEFAULT	2
POPBX1	.symtab	0x805219f	0	NOTYPE	<unknown>	DEFAULT	2
PUSHBX1	.symtab	0x805206b	0	NOTYPE	<unknown>	DEFAULT	2
PUSHBX1	.symtab	0x80520cb	0	NOTYPE	<unknown>	DEFAULT	2
PUSHBX1	.symtab	0x805212b	0	NOTYPE	<unknown>	DEFAULT	2
PUSHBX1	.symtab	0x805218b	0	NOTYPE	<unknown>	DEFAULT	2
Q	.symtab	0x8058b00	16384	OBJECT	<unknown>	DEFAULT	12
RESTBX1	.symtab	0x8052029	0	NOTYPE	<unknown>	DEFAULT	2
SAVEBX1	.symtab	0x805201c	0	NOTYPE	<unknown>	DEFAULT	2
StartTheLelz	.symtab	0x8049e46	5274	FUNC	<unknown>	DEFAULT	2
_Exit	.symtab	0x804e4e4	66	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x8058800	0	OBJECT	<unknown>	HIDDEN	10
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_L_lock_103	.symtab	0x8053412	16	FUNC	<unknown>	DEFAULT	2
_L_lock_115	.symtab	0x80529b0	16	FUNC	<unknown>	DEFAULT	2
_L_lock_12	.symtab	0x805459b	16	FUNC	<unknown>	DEFAULT	2
_L_lock_140	.symtab	0x80545db	16	FUNC	<unknown>	DEFAULT	2
_L_lock_160	.symtab	0x80545fb	16	FUNC	<unknown>	DEFAULT	2
_L_lock_17	.symtab	0x804ed19	10	FUNC	<unknown>	DEFAULT	2
_L_lock_17	.symtab	0x8054286	10	FUNC	<unknown>	DEFAULT	2
_L_lock_18	.symtab	0x80533d8	13	FUNC	<unknown>	DEFAULT	2
_L_lock_191	.symtab	0x805461b	13	FUNC	<unknown>	DEFAULT	2
_L_lock_198	.symtab	0x8053864	16	FUNC	<unknown>	DEFAULT	2
_L_lock_209	.symtab	0x8053874	16	FUNC	<unknown>	DEFAULT	2
_L_lock_256	.symtab	0x80529d0	16	FUNC	<unknown>	DEFAULT	2
_L_lock_27	.symtab	0x8051e94	16	FUNC	<unknown>	DEFAULT	2
_L_lock_27	.symtab	0x8052970	16	FUNC	<unknown>	DEFAULT	2
_L_lock_29	.symtab	0x80545ab	16	FUNC	<unknown>	DEFAULT	2
_L_lock_32	.symtab	0x80541f9	10	FUNC	<unknown>	DEFAULT	2
_L_lock_34	.symtab	0x8055466	13	FUNC	<unknown>	DEFAULT	2
_L_lock_54	.symtab	0x80533e5	16	FUNC	<unknown>	DEFAULT	2
_L_lock_66	.symtab	0x8052990	16	FUNC	<unknown>	DEFAULT	2
_L_lock_70	.symtab	0x8051d94	16	FUNC	<unknown>	DEFAULT	2
_L_unlock_101	.symtab	0x80529a0	16	FUNC	<unknown>	DEFAULT	2
_L_unlock_101	.symtab	0x8055473	10	FUNC	<unknown>	DEFAULT	2
_L_unlock_102	.symtab	0x80545cb	16	FUNC	<unknown>	DEFAULT	2
_L_unlock_113	.symtab	0x8053422	13	FUNC	<unknown>	DEFAULT	2
_L_unlock_140	.symtab	0x80529c0	16	FUNC	<unknown>	DEFAULT	2
_L_unlock_152	.symtab	0x80545eb	16	FUNC	<unknown>	DEFAULT	2
_L_unlock_167	.symtab	0x8051da4	13	FUNC	<unknown>	DEFAULT	2
_L_unlock_170	.symtab	0x805460b	16	FUNC	<unknown>	DEFAULT	2
_L_unlock_225	.symtab	0x8053884	13	FUNC	<unknown>	DEFAULT	2
_L_unlock_232	.symtab	0x8054628	13	FUNC	<unknown>	DEFAULT	2
_L_unlock_235	.symtab	0x8053891	13	FUNC	<unknown>	DEFAULT	2
_L_unlock_291	.symtab	0x80529e0	16	FUNC	<unknown>	DEFAULT	2
_L_unlock_40	.symtab	0x8054290	10	FUNC	<unknown>	DEFAULT	2
_L_unlock_46	.symtab	0x8052980	16	FUNC	<unknown>	DEFAULT	2
_L_unlock_57	.symtab	0x804ed23	10	FUNC	<unknown>	DEFAULT	2
_L_unlock_61	.symtab	0x8054203	10	FUNC	<unknown>	DEFAULT	2
_L_unlock_66	.symtab	0x80533f5	16	FUNC	<unknown>	DEFAULT	2
_L_unlock_83	.symtab	0x8053405	13	FUNC	<unknown>	DEFAULT	2
_L_unlock_86	.symtab	0x80545bb	16	FUNC	<unknown>	DEFAULT	2
_L_unlock_90	.symtab	0x8051ea4	13	FUNC	<unknown>	DEFAULT	2
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x80587f0	0	OBJECT	<unknown>	DEFAULT	7
__CTOR_LIST__	.symtab	0x80587ec	0	OBJECT	<unknown>	DEFAULT	7
__C_ctype_b	.symtab	0x80588c0	4	OBJECT	<unknown>	DEFAULT	11
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x8055fbc	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x80588c8	4	OBJECT	<unknown>	DEFAULT	11
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x80562bc	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x80587f8	0	OBJECT	<unknown>	DEFAULT	8
__DTOR_LIST__	.symtab	0x80587f4	0	OBJECT	<unknown>	DEFAULT	8
__EH_FRAME_BEGIN__	.symtab	0x8058000	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x80587e8	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x80588c0	4	OBJECT	<unknown>	HIDDEN	11
__GI___C_ctype_toupper	.symtab	0x80588c8	4	OBJECT	<unknown>	HIDDEN	11
__GI___close	.symtab	0x8052010	80	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel	.symtab	0x805201a	27	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b	.symtab	0x80588c4	4	OBJECT	<unknown>	HIDDEN	11
__GI___ctype_toupper	.symtab	0x80588cc	4	OBJECT	<unknown>	HIDDEN	11
__GI___errno_location	.symtab	0x804e854	13	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0x804e3f8	83	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x8054638	204	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x804fc50	26	FUNC	<unknown>	HIDDEN	2
__GI___libc_close	.symtab	0x8052010	80	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x804e44b	153	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x8052060	91	FUNC	<unknown>	HIDDEN	2
__GI___libc_read	.symtab	0x8052120	91	FUNC	<unknown>	HIDDEN	2
__GI___libc_waitpid	.symtab	0x8052180	91	FUNC	<unknown>	HIDDEN	2
__GI___libc_write	.symtab	0x80520c0	91	FUNC	<unknown>	HIDDEN	2
__GI___open	.symtab	0x8052060	91	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel	.symtab	0x805206a	33	FUNC	<unknown>	HIDDEN	2
__GI___read	.symtab	0x8052120	91	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel	.symtab	0x805212a	33	FUNC	<unknown>	HIDDEN	2
__GI___register_atfork	.symtab	0x8051dd1	195	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0x8050660	32	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0x8050680	32	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0x805063c	36	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x80522b3	56	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x8052317	39	FUNC	<unknown>	HIDDEN	2
__GI___waitpid	.symtab	0x8052180	91	FUNC	<unknown>	HIDDEN	2
__GI___write	.symtab	0x80520c0	91	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel	.symtab	0x80520ca	33	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x804fc6c	191	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x804e4e4	66	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x80511f4	191	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x8051624	17	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x8055060	44	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x804e528	39	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x8052010	80	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x8052c3c	130	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x8053126	44	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x8053152	44	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x8052ebc	618	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x8050344	84	FUNC	<unknown>	HIDDEN	2
__GI_dup2	.symtab	0x804e550	43	FUNC	<unknown>	HIDDEN	2
__GI_execl	.symtab	0x80517c8	101	FUNC	<unknown>	HIDDEN	2
__GI_execve	.symtab	0x8052b04	47	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x8051768	93	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x805325c	380	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x804e44b	153	FUNC	<unknown>	HIDDEN	2
__GI_fdopen	.symtab	0x8053430	44	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x80543dc	447	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x8054168	145	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x8054638	204	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x8054210	118	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x8054704	94	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x805345c	21	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x8051b88	524	FUNC	<unknown>	HIDDEN	2
__GI_fprintf	.symtab	0x804e8b4	28	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x804f9b4	45	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x8055358	24	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x8055370	246	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x805508c	70	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x804f9e4	111	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x8054638	204	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x804e57c	32	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x8052b34	8	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x8052b3c	8	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x8052b44	8	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x8052b4c	19	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x8051eb4	49	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x804e59c	43	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x8050398	40	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x8052b60	8	FUNC	<unknown>	HIDDEN	2
__GI_htonl	.symtab	0x804fdcc	7	FUNC	<unknown>	HIDDEN	2
__GI_htons	.symtab	0x804fdc0	12	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x8050324	31	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x8054920	148	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x8050310	17	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x80502c4	76	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x8050112	432	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x804fe5f	459	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x80514e7	155	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x804e5c8	139	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x804fd44	27	FUNC	<unknown>	HIDDEN	2
__GI_isspace	.symtab	0x804e820	17	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x804e654	43	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x8055644	90	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x804fa54	41	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x8055624	30	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x805479c	177	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x804fa80	50	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x8052a84	27	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x80550d4	59	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x8052b68	43	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x8052bbd	61	FUNC	<unknown>	HIDDEN	2
__GI_ntohl	.symtab	0x804fddf	7	FUNC	<unknown>	HIDDEN	2
__GI_ntohs	.symtab	0x804fdd3	12	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x8052060	91	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x8052d48	132	FUNC	<unknown>	HIDDEN	2
__GI_perror	.symtab	0x804e864	47	FUNC	<unknown>	HIDDEN	2
__GI_pipe	.symtab	0x804e680	39	FUNC	<unknown>	HIDDEN	2
__GI_printf	.symtab	0x804e894	30	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x8051ee8	100	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x80512bc	66	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x80513e8	95	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x8055610	19	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x8052120	91	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x8052e38	129	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x80503f8	92	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x8052bfc	64	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x804e71d	108	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x8050454	92	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x80504b0	108	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x804e78c	31	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x805051c	56	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x8051582	161	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x8052a0f	80	FUNC	<unknown>	HIDDEN	2
__GI_sigaddset	.symtab	0x805057c	34	FUNC	<unknown>	HIDDEN	2
__GI_sigemptyset	.symtab	0x80505a0	20	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x80505b4	136	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x804e7ac	97	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x8051f4c	195	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x8050554	40	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x8053474	30	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x8051447	160	FUNC	<unknown>	HIDDEN	2
__GI_strcat	.symtab	0x804fab4	35	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x804fad8	30	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x8054764	25	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x804faf8	29	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x804faf8	29	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x804fb18	27	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x8054850	45	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x804fb34	19	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x804fb48	38	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x804fb70	24	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x80548fc	35	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x8054780	26	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x8054880	42	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x804fb88	197	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x804fd2c	22	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x80548ac	80	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x8051638	23	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x80518f4	523	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x804fd60	96	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x804e810	16	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x804e834	29	FUNC	<unknown>	HIDDEN	2
__GI_vfork	.symtab	0x8051b50	56	FUNC	<unknown>	HIDDEN	2
__GI_vfprintf	.symtab	0x804ec80	153	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x8053494	172	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x8052180	91	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x8053180	63	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x80531dc	128	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x80531c0	27	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x80520c0	91	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x80587fc	0	OBJECT	<unknown>	DEFAULT	9
__JCR_LIST__	.symtab	0x80587fc	0	OBJECT	<unknown>	DEFAULT	9
__app_fini	.symtab	0x805f0c4	4	OBJECT	<unknown>	HIDDEN	12
__atexit_lock	.symtab	0x8058a98	24	OBJECT	<unknown>	DEFAULT	11
__bss_start	.symtab	0x8058ac0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x80522eb	44	FUNC	<unknown>	DEFAULT	2
__close	.symtab	0x8052010	80	FUNC	<unknown>	DEFAULT	2
__close_nocancel	.symtab	0x805201a	27	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x80588c4	4	OBJECT	<unknown>	DEFAULT	11
__ctype_toupper	.symtab	0x80588cc	4	OBJECT	<unknown>	DEFAULT	11
__curbrk	.symtab	0x805f638	4	OBJECT	<unknown>	HIDDEN	12
__data_start	.symtab	0x8058828	0	NOTYPE	<unknown>	DEFAULT	11
__deregister_frame_info_bases	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__do_global_ctors_aux	.symtab	0x80556a0	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x80480e0	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x8058820	0	OBJECT	<unknown>	HIDDEN	11
__environ	.symtab	0x805f0bc	4	OBJECT	<unknown>	DEFAULT	12
__errno_location	.symtab	0x804e854	13	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x805eb6c	4	OBJECT	<unknown>	HIDDEN	12
__fcntl_nocancel	.symtab	0x804e3f8	83	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x8054638	204	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x80587ec	0	NOTYPE	<unknown>	HIDDEN	6
__fini_array_start	.symtab	0x80587ec	0	NOTYPE	<unknown>	HIDDEN	6
__fork	.symtab	0x8051b88	524	FUNC	<unknown>	DEFAULT	2
__fork_generation_pointer	.symtab	0x805fa18	4	OBJECT	<unknown>	HIDDEN	12
__fork_handlers	.symtab	0x805fa1c	4	OBJECT	<unknown>	HIDDEN	12
__fork_lock	.symtab	0x805eb70	4	OBJECT	<unknown>	HIDDEN	12
__get_pc_thunk_bx	.symtab	0x80480d0	0	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x8055240	280	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x8052b4c	19	FUNC	<unknown>	DEFAULT	2
__getpid	.symtab	0x8051eb4	49	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x804fc50	26	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x80587ec	0	NOTYPE	<unknown>	HIDDEN	6
__init_array_start	.symtab	0x80587ec	0	NOTYPE	<unknown>	HIDDEN	6
__libc_close	.symtab	0x8052010	80	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x8050344	84	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel	.symtab	0x80521dc	86	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel	.symtab	0x8052232	79	FUNC	<unknown>	HIDDEN	2
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	6
__libc_fcntl	.symtab	0x804e44b	153	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x8051b88	524	FUNC	<unknown>	DEFAULT	2
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	6
__libc_nanosleep	.symtab	0x8052bbd	61	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x8052060	91	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x8052120	91	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x80503f8	92	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x804e71d	108	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x8050454	92	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x80504b0	108	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls	.symtab	0x8054df6	513	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x8052a0f	80	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x805f0b8	4	OBJECT	<unknown>	DEFAULT	12
__libc_system	.symtab	0x8052923	77	FUNC	<unknown>	DEFAULT	2
__libc_waitpid	.symtab	0x8052180	91	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x80520c0	91	FUNC	<unknown>	DEFAULT	2
__linkin_atfork	.symtab	0x8051db4	29	FUNC	<unknown>	HIDDEN	2
__lll_lock_wait_private	.symtab	0x8051b00	40	FUNC	<unknown>	HIDDEN	2
__lll_unlock_wake_private	.symtab	0x8051b30	32	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x8050ecd	379	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x80506a0	38	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x80589bc	24	OBJECT	<unknown>	DEFAULT	11
__malloc_state	.symtab	0x805f6a0	888	OBJECT	<unknown>	DEFAULT	12
__malloc_trim	.symtab	0x8050e50	125	FUNC	<unknown>	DEFAULT	2
__nptl_deallocate_tsd	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x8052060	91	FUNC	<unknown>	DEFAULT	2
__open_nocancel	.symtab	0x805206a	33	FUNC	<unknown>	DEFAULT	2
__pagesize	.symtab	0x805f0c0	4	OBJECT	<unknown>	DEFAULT	12
__preinit_array_end	.symtab	0x80587ec	0	NOTYPE	<unknown>	HIDDEN	6
__preinit_array_start	.symtab	0x80587ec	0	NOTYPE	<unknown>	HIDDEN	6
__progname	.symtab	0x8058ab4	4	OBJECT	<unknown>	DEFAULT	11
__progname_full	.symtab	0x8058ab8	4	OBJECT	<unknown>	DEFAULT	11
__pthread_initialize_minimal	.symtab	0x8054ff7	15	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_init	.symtab	0x8052287	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x8052284	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x8052284	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x8052284	3	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x8052284	3	FUNC	<unknown>	DEFAULT	2
__pthread_unwind	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x8052120	91	FUNC	<unknown>	DEFAULT	2
__read_nocancel	.symtab	0x805212a	33	FUNC	<unknown>	DEFAULT	2
__register_atfork	.symtab	0x8051dd1	195	FUNC	<unknown>	DEFAULT	2
__register_frame_info_bases	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__restore	.symtab	0x8052a07	0	NOTYPE	<unknown>	DEFAULT	2
__restore_rt	.symtab	0x8052a00	0	NOTYPE	<unknown>	DEFAULT	2
__rtld_fini	.symtab	0x805f0c8	4	OBJECT	<unknown>	HIDDEN	12
__sigaddset	.symtab	0x8050660	32	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x8050680	32	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x805063c	36	FUNC	<unknown>	DEFAULT	2
__socketcall	.symtab	0x8052aa0	43	FUNC	<unknown>	HIDDEN	2
__socketcall.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__stdin	.symtab	0x80588dc	4	OBJECT	<unknown>	DEFAULT	11
__stdio_READ	.symtab	0x8055480	62	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x8053540	139	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x80554c0	154	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x80538a0	232	FUNC	<unknown>	HIDDEN	2
__stdio_rfill	.symtab	0x805555c	37	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x80555e0	46	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x8055584	92	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x8053988	154	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x804ec58	37	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x80588e0	4	OBJECT	<unknown>	DEFAULT	11
__syscall_error	.symtab	0x80529f0	15	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x8052b94	41	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction	.symtab	0x8052acc	53	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0x804e6e4	57	FUNC	<unknown>	DEFAULT	2
__uClibc_fini	.symtab	0x80522b3	56	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x8052317	39	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x805233e	577	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x8058ab0	4	OBJECT	<unknown>	HIDDEN	11
__vfork	.symtab	0x8051b50	56	FUNC	<unknown>	HIDDEN	2
__waitpid	.symtab	0x8052180	91	FUNC	<unknown>	DEFAULT	2
__waitpid_nocancel	.symtab	0x805218a	33	FUNC	<unknown>	DEFAULT	2
__write	.symtab	0x80520c0	91	FUNC	<unknown>	DEFAULT	2
__write_nocancel	.symtab	0x80520ca	33	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r	.symtab	0x804fc6c	191	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x80551b3	138	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x8055110	163	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x805eb48	10	OBJECT	<unknown>	DEFAULT	12
_charpad	.symtab	0x804ed30	53	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x805f648	40	OBJECT	<unknown>	HIDDEN	12
_custom_printf_handler	.symtab	0x805f670	40	OBJECT	<unknown>	HIDDEN	12
_custom_printf_spec	.symtab	0x80589b8	4	OBJECT	<unknown>	HIDDEN	11
_dl_aux_init	.symtab	0x8055008	18	FUNC	<unknown>	DEFAULT	2
_dl_init_static_tls	.symtab	0x8058abc	4	OBJECT	<unknown>	DEFAULT	11
_dl_nothread_init_static_tls	.symtab	0x805501a	68	FUNC	<unknown>	HIDDEN	2
_dl_phdr	.symtab	0x805fa40	4	OBJECT	<unknown>	DEFAULT	12
_dl_phnum	.symtab	0x805fa44	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_dtv_gaps	.symtab	0x805fa34	1	OBJECT	<unknown>	DEFAULT	12
_dl_tls_dtv_slotinfo_list	.symtab	0x805fa30	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_generation	.symtab	0x805fa38	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_max_dtv_idx	.symtab	0x805fa28	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_setup	.symtab	0x8054dc6	48	FUNC	<unknown>	DEFAULT	2
_dl_tls_static_align	.symtab	0x805fa24	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_static_nelem	.symtab	0x805fa3c	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_static_size	.symtab	0x805fa2c	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_static_used	.symtab	0x805fa20	4	OBJECT	<unknown>	DEFAULT	12
_edata	.symtab	0x8058ac0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x805fa48	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0x804e4e4	66	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x80556c8	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x805cb48	8192	OBJECT	<unknown>	DEFAULT	12
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x804ed65	94	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x8053ba0	1479	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_init	.symtab	0x80480b4	0	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x8053a24	86	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x804f3c0	103	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x804f5a5	1036	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x804f428	57	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x804f464	277	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x804f57c	41	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x805229c	23	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x805228a	18	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp	.symtab	0x8052a60	34	FUNC	<unknown>	DEFAULT	2
_sigintr	.symtab	0x805f698	8	OBJECT	<unknown>	HIDDEN	12
_start	.symtab	0x8048184	34	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x80535cc	664	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x804eb4c	59	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x80588e4	4	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_add_lock	.symtab	0x805cb28	12	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_dec_use	.symtab	0x805429c	320	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x805cb44	4	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_del_lock	.symtab	0x805cb34	12	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_use_count	.symtab	0x805cb40	4	OBJECT	<unknown>	DEFAULT	12
_stdio_streams	.symtab	0x80588ec	204	OBJECT	<unknown>	DEFAULT	11
_stdio_term	.symtab	0x804eb87	208	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x80588e8	4	OBJECT	<unknown>	DEFAULT	11
_stdlib_strto_l	.symtab	0x8051650	278	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x8053a7c	61	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x8056688	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x8053abc	228	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x804edc3	1530	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x80511f4	191	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
adaptiveHOLD	.symtab	0x804c0c6	1258	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x8051624	17	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x8051624	17	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x805eb68	1	OBJECT	<unknown>	DEFAULT	12
brk	.symtab	0x8055060	44	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x80505b4	136	FUNC	<unknown>	DEFAULT	2
buf.4562	.symtab	0x805eb58	16	OBJECT	<unknown>	DEFAULT	12
c	.symtab	0x80588b8	4	OBJECT	<unknown>	DEFAULT	11
calloc	.symtab	0x80549b4	236	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
cancel_handler	.symtab	0x8052580	155	FUNC	<unknown>	DEFAULT	2
chdir	.symtab	0x804e528	39	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x8052010	80	FUNC	<unknown>	DEFAULT	2
closedir	.symtab	0x8052c3c	130	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x8058844	4	OBJECT	<unknown>	DEFAULT	11
completed.4963	.symtab	0x8058ac0	1	OBJECT	<unknown>	DEFAULT	12
connect	.symtab	0x8050344	84	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x80492a5	459	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x8049c46	168	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x8058848	4	OBJECT	<unknown>	DEFAULT	11
data_start	.symtab	0x8058828	0	NOTYPE	<unknown>	DEFAULT	11
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
do_system	.symtab	0x805261b	776	FUNC	<unknown>	DEFAULT	2
dup2	.symtab	0x804e550	43	FUNC	<unknown>	DEFAULT	2
dup2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x805f0bc	4	OBJECT	<unknown>	DEFAULT	12
errno	.symtab	0x0	4	TLS	<unknown>	DEFAULT	6
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
execl	.symtab	0x80517c8	101	FUNC	<unknown>	DEFAULT	2
execl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
execve	.symtab	0x8052b04	47	FUNC	<unknown>	DEFAULT	2
execve.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x8051768	93	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x8057660	156	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x805325c	380	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x804e44b	153	FUNC	<unknown>	DEFAULT	2
fd_to_DIR	.symtab	0x8052cc0	136	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x8048c03	104	FUNC	<unknown>	DEFAULT	2
fdopen	.symtab	0x8053430	44	FUNC	<unknown>	DEFAULT	2
fdopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fdopen_pids	.symtab	0x805cb00	4	OBJECT	<unknown>	DEFAULT	12
fdopendir	.symtab	0x8052dcc	108	FUNC	<unknown>	DEFAULT	2
fdpclose	.symtab	0x8048adb	296	FUNC	<unknown>	DEFAULT	2
fdpopen	.symtab	0x80488e6	501	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x80543dc	447	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x8054168	145	FUNC	<unknown>	DEFAULT	2
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x8054638	204	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x8054210	118	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x8054704	94	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x8057640	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x805345c	21	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x8051b88	524	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork_handler_pool	.symtab	0x805eb74	1348	OBJECT	<unknown>	DEFAULT	12
fprintf	.symtab	0x804e8b4	28	FUNC	<unknown>	DEFAULT	2
fprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x804f9b4	45	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x8048130	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x8051048	399	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x8055358	24	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x8055358	24	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x8055370	246	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x805508c	70	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fuckit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0x804f9e4	111	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getBogos	.symtab	0x8048e53	400	FUNC	<unknown>	DEFAULT	2
getBuild	.symtab	0x804dc97	10	FUNC	<unknown>	DEFAULT	2
getCores	.symtab	0x8048fe3	169	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x8048de5	59	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x804da9c	507	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x8049c16	48	FUNC	<unknown>	DEFAULT	2
getRandomPublicIP	.symtab	0x8049924	754	FUNC	<unknown>	DEFAULT	2
getc	.symtab	0x8054168	145	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x8054638	204	FUNC	<unknown>	DEFAULT	2
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x804e57c	32	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x8052b34	8	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x8052b3c	8	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x8052b44	8	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x8052b4c	19	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x8051eb4	49	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x804e59c	43	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x8050398	40	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x80503c0	56	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x8052b60	8	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x8058ae4	4	OBJECT	<unknown>	DEFAULT	12
h_errno	.symtab	0x4	4	TLS	<unknown>	DEFAULT	6
hextable	.symtab	0x8055920	1024	OBJECT	<unknown>	DEFAULT	4
htonl	.symtab	0x804fdcc	7	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x804fdc0	12	FUNC	<unknown>	DEFAULT	2
i.4853	.symtab	0x80588bc	4	OBJECT	<unknown>	DEFAULT	11
index	.symtab	0x804fad8	30	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x8050324	31	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x8054920	148	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x8050310	17	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x80502c4	76	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x8050112	432	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x805002a	232	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x804fe5f	459	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x804fde8	119	FUNC	<unknown>	DEFAULT	2
infectline	.symtab	0x8058840	4	OBJECT	<unknown>	DEFAULT	11
initConnection	.symtab	0x804d96a	306	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x80481a8	111	FUNC	<unknown>	DEFAULT	2
init_static_tls	.symtab	0x8054d9c	42	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x8051355	85	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x80514e7	155	FUNC	<unknown>	DEFAULT	2
intr	.symtab	0x805f0cc	20	OBJECT	<unknown>	DEFAULT	12
ioctl	.symtab	0x804e5c8	139	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ipState	.symtab	0x805cb04	5	OBJECT	<unknown>	DEFAULT	12
isatty	.symtab	0x804fd44	27	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x804e820	17	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x804e654	43	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-cancellation.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-tls.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x8049470	273	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lock	.symtab	0x805f0f8	4	OBJECT	<unknown>	DEFAULT	12
lseek64	.symtab	0x8055644	90	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x8058af0	6	OBJECT	<unknown>	DEFAULT	12
main	.symtab	0x804dca1	1876	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x8058ae0	4	OBJECT	<unknown>	DEFAULT	12
makeIPPacket	.symtab	0x8049d99	126	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x804908c	103	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x80506c6	1928	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x80511d7	29	FUNC	<unknown>	DEFAULT	2
matchPrompt	.symtab	0x804967c	236	FUNC	<unknown>	DEFAULT	2
memcpy	.symtab	0x804fa54	41	FUNC	<unknown>	DEFAULT	2
memcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x8055624	30	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x805479c	177	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x804fa80	50	FUNC	<unknown>	DEFAULT	2
memset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mmap	.symtab	0x8052a84	27	FUNC	<unknown>	DEFAULT	2
mremap	.symtab	0x80550d4	59	FUNC	<unknown>	DEFAULT	2
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x8052b68	43	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x805cb0c	24	OBJECT	<unknown>	DEFAULT	12
mylock	.symtab	0x80589d4	24	OBJECT	<unknown>	DEFAULT	11
mylock	.symtab	0x80589ec	24	OBJECT	<unknown>	DEFAULT	11
nanosleep	.symtab	0x8052bbd	61	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
negotiate	.symtab	0x8049581	251	FUNC	<unknown>	DEFAULT	2
next_start.1451	.symtab	0x805eb54	4	OBJECT	<unknown>	DEFAULT	12
nprocessors_onln	.symtab	0x8051830	196	FUNC	<unknown>	DEFAULT	2
ntohl	.symtab	0x804fddf	7	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x804fdd3	12	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x8058ae8	8	OBJECT	<unknown>	DEFAULT	12
object.4975	.symtab	0x8058ac4	24	OBJECT	<unknown>	DEFAULT	12
open	.symtab	0x8052060	91	FUNC	<unknown>	DEFAULT	2
opendir	.symtab	0x8052d48	132	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x805f63c	4	OBJECT	<unknown>	DEFAULT	12
p.4961	.symtab	0x8058824	0	OBJECT	<unknown>	DEFAULT	11
parseHex	.symtab	0x8048c6b	68	FUNC	<unknown>	DEFAULT	2
parse_config.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
passwords	.symtab	0x8058880	56	OBJECT	<unknown>	DEFAULT	11
pclose	.symtab	0x804e8d0	180	FUNC	<unknown>	DEFAULT	2
perror	.symtab	0x804e864	47	FUNC	<unknown>	DEFAULT	2
perror.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
pids	.symtab	0x805f644	4	OBJECT	<unknown>	DEFAULT	12
pipe	.symtab	0x804e680	39	FUNC	<unknown>	DEFAULT	2
pipe.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
popen	.symtab	0x804e984	454	FUNC	<unknown>	DEFAULT	2
popen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
popen_list	.symtab	0x805cb24	4	OBJECT	<unknown>	DEFAULT	12
prctl	.symtab	0x804e6a8	59	FUNC	<unknown>	DEFAULT	2
prctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.6454	.symtab	0x80565e0	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x80485a9	581	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x8048376	58	FUNC	<unknown>	DEFAULT	2
printf	.symtab	0x804e894	30	FUNC	<unknown>	DEFAULT	2
printf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
printi	.symtab	0x8048487	290	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x80483b0	215	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0x804c9a4	4038	FUNC	<unknown>	DEFAULT	2
program_invocation_name	.symtab	0x8058ab8	4	OBJECT	<unknown>	DEFAULT	11
program_invocation_short_name	.symtab	0x8058ab4	4	OBJECT	<unknown>	DEFAULT	11
pseudo_cancel	.symtab	0x8052035	0	NOTYPE	<unknown>	DEFAULT	2
pseudo_cancel	.symtab	0x805208b	0	NOTYPE	<unknown>	DEFAULT	2
pseudo_cancel	.symtab	0x80520eb	0	NOTYPE	<unknown>	DEFAULT	2
pseudo_cancel	.symtab	0x805214b	0	NOTYPE	<unknown>	DEFAULT	2
pseudo_cancel	.symtab	0x80521ab	0	NOTYPE	<unknown>	DEFAULT	2
pseudo_end	.symtab	0x805205f	0	NOTYPE	<unknown>	DEFAULT	2
pseudo_end	.symtab	0x80520ba	0	NOTYPE	<unknown>	DEFAULT	2
pseudo_end	.symtab	0x805211a	0	NOTYPE	<unknown>	DEFAULT	2
pseudo_end	.symtab	0x805217a	0	NOTYPE	<unknown>	DEFAULT	2
pseudo_end	.symtab	0x80521da	0	NOTYPE	<unknown>	DEFAULT	2
qual_chars.6463	.symtab	0x80565f4	20	OBJECT	<unknown>	DEFAULT	4
quit	.symtab	0x805f0e0	20	OBJECT	<unknown>	DEFAULT	12
raise	.symtab	0x8051ee8	100	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x80512b4	5	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x8048217	190	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x80512bc	66	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x80571fc	10	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x80513e8	95	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x8058a18	128	OBJECT	<unknown>	DEFAULT	11
rawmemchr	.symtab	0x8055610	19	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x8052120	91	FUNC	<unknown>	DEFAULT	2
readUntil	.symtab	0x8049768	444	FUNC	<unknown>	DEFAULT	2
readdir64	.symtab	0x8052e38	129	FUNC	<unknown>	DEFAULT	2
readdir64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc	.symtab	0x8054aa0	763	FUNC	<unknown>	DEFAULT	2
realloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x80503f8	92	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x80490f3	434	FUNC	<unknown>	DEFAULT	2
register-atfork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rindex	.symtab	0x8054780	26	FUNC	<unknown>	DEFAULT	2
sa_refcntr	.symtab	0x805f0f4	4	OBJECT	<unknown>	DEFAULT	12
sbrk	.symtab	0x8052bfc	64	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
scanPid	.symtab	0x805f640	4	OBJECT	<unknown>	DEFAULT	12
sclose	.symtab	0x8049e17	47	FUNC	<unknown>	DEFAULT	2
select	.symtab	0x804e71d	108	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x8050454	92	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendCNC	.symtab	0x804b73b	162	FUNC	<unknown>	DEFAULT	2
sendHOLD	.symtab	0x804c5b0	1012	FUNC	<unknown>	DEFAULT	2
sendHTTP	.symtab	0x804b7dd	126	FUNC	<unknown>	DEFAULT	2
sendJUNK	.symtab	0x804bd17	943	FUNC	<unknown>	DEFAULT	2
sendTCP	.symtab	0x804b85b	1212	FUNC	<unknown>	DEFAULT	2
sendUDP	.symtab	0x804b2e0	1115	FUNC	<unknown>	DEFAULT	2
sendto	.symtab	0x80504b0	108	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x804e78c	31	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x805051c	56	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x80512fe	87	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x8051582	161	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x8052a0f	80	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigaddset	.symtab	0x805057c	34	FUNC	<unknown>	DEFAULT	2
sigaddset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigempty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigemptyset	.symtab	0x80505a0	20	FUNC	<unknown>	DEFAULT	2
signal	.symtab	0x80505b4	136	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x804e7ac	97	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x8051f4c	195	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x8050554	40	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sockprintf	.symtab	0x8048834	178	FUNC	<unknown>	DEFAULT	2
spec_and_mask.6462	.symtab	0x8056608	16	OBJECT	<unknown>	DEFAULT	4
spec_base.6453	.symtab	0x80565ec	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.6459	.symtab	0x8056658	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.6458	.symtab	0x8056670	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.6461	.symtab	0x8056618	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.6460	.symtab	0x8056628	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x8053474	30	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x80513aa	61	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x80513aa	61	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x8051447	160	FUNC	<unknown>	DEFAULT	2
static_dtv	.symtab	0x805f0fc	512	OBJECT	<unknown>	DEFAULT	12
static_map	.symtab	0x805f604	52	OBJECT	<unknown>	DEFAULT	12
static_slotinfo	.symtab	0x805f2fc	776	OBJECT	<unknown>	DEFAULT	12
stderr	.symtab	0x80588d8	4	OBJECT	<unknown>	DEFAULT	11
stdin	.symtab	0x80588d0	4	OBJECT	<unknown>	DEFAULT	11
stdout	.symtab	0x80588d4	4	OBJECT	<unknown>	DEFAULT	11
strcat	.symtab	0x804fab4	35	FUNC	<unknown>	DEFAULT	2
strcat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x804fad8	30	FUNC	<unknown>	DEFAULT	2
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchrnul	.symtab	0x8054764	25	FUNC	<unknown>	DEFAULT	2
strchrnul.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x804faf8	29	FUNC	<unknown>	DEFAULT	2
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x804faf8	29	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0x804fb18	27	FUNC	<unknown>	DEFAULT	2
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcspn	.symtab	0x8054850	45	FUNC	<unknown>	DEFAULT	2
strcspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x804fc6c	191	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x804fb34	19	FUNC	<unknown>	DEFAULT	2
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x804fb48	38	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x804fb70	24	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x80548fc	35	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strrchr	.symtab	0x8054780	26	FUNC	<unknown>	DEFAULT	2
strrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x8054880	42	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x804fb88	197	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x804fd2c	22	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x80548ac	80	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x8051638	23	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sysconf	.symtab	0x80518f4	523	FUNC	<unknown>	DEFAULT	2
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
system	.symtab	0x8052923	77	FUNC	<unknown>	DEFAULT	2
system.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
szprintf	.symtab	0x8048810	36	FUNC	<unknown>	DEFAULT	2
tcgetattr	.symtab	0x804fd60	96	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x8049cee	171	FUNC	<unknown>	DEFAULT	2
time	.symtab	0x804e810	16	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x804e834	29	FUNC	<unknown>	DEFAULT	2
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x80482d5	161	FUNC	<unknown>	DEFAULT	2
type_codes	.symtab	0x8056634	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x805664c	12	OBJECT	<unknown>	DEFAULT	4
unknown.1474	.symtab	0x8056678	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state	.symtab	0x8058a04	20	OBJECT	<unknown>	DEFAULT	11
uppercase	.symtab	0x8048e20	51	FUNC	<unknown>	DEFAULT	2
usernames	.symtab	0x805884c	24	OBJECT	<unknown>	DEFAULT	11
vfork	.symtab	0x8051b50	56	FUNC	<unknown>	DEFAULT	2
vfprintf	.symtab	0x804ec80	153	FUNC	<unknown>	DEFAULT	2
vfprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vsnprintf	.symtab	0x8053494	172	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x8052180	91	FUNC	<unknown>	DEFAULT	2
wcrtomb	.symtab	0x8053180	63	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x80531dc	128	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x80531c0	27	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wildString	.symtab	0x8048caf	310	FUNC	<unknown>	DEFAULT	2
write	.symtab	0x80520c0	91	FUNC	<unknown>	DEFAULT	2
xdigits.4985	.symtab	0x80571e8	17	OBJECT	<unknown>	DEFAULT	4
xstatconv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
zprintf	.symtab	0x80487ee	34	FUNC	<unknown>	DEFAULT	2

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-07T22:23:11.604188+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54316	45.128.233.186	23	TCP
2025-01-07T22:23:13.345070+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54318	45.128.233.186	23	TCP
2025-01-07T22:23:15.124987+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54320	45.128.233.186	23	TCP
2025-01-07T22:23:16.893210+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54322	45.128.233.186	23	TCP
2025-01-07T22:23:18.688845+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54324	45.128.233.186	23	TCP
2025-01-07T22:23:20.484939+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54326	45.128.233.186	23	TCP
2025-01-07T22:23:22.214736+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54328	45.128.233.186	23	TCP
2025-01-07T22:23:24.001460+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54330	45.128.233.186	23	TCP
2025-01-07T22:23:25.747239+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54332	45.128.233.186	23	TCP
2025-01-07T22:23:27.517240+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54334	45.128.233.186	23	TCP
2025-01-07T22:23:29.317876+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54336	45.128.233.186	23	TCP
2025-01-07T22:23:31.061597+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54338	45.128.233.186	23	TCP
2025-01-07T22:23:32.831988+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54340	45.128.233.186	23	TCP
2025-01-07T22:23:34.633206+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54342	45.128.233.186	23	TCP
2025-01-07T22:23:36.371485+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54344	45.128.233.186	23	TCP
2025-01-07T22:23:38.126554+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54346	45.128.233.186	23	TCP
2025-01-07T22:23:39.940854+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54348	45.128.233.186	23	TCP
2025-01-07T22:23:41.706020+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54350	45.128.233.186	23	TCP
2025-01-07T22:23:43.496715+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54352	45.128.233.186	23	TCP
2025-01-07T22:23:45.268624+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54354	45.128.233.186	23	TCP
2025-01-07T22:23:47.020184+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54356	45.128.233.186	23	TCP
2025-01-07T22:23:48.761161+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54358	45.128.233.186	23	TCP
2025-01-07T22:23:50.526508+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54360	45.128.233.186	23	TCP
2025-01-07T22:23:52.294053+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54362	45.128.233.186	23	TCP
2025-01-07T22:23:54.051988+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54364	45.128.233.186	23	TCP
2025-01-07T22:23:55.924063+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54366	45.128.233.186	23	TCP
2025-01-07T22:23:57.673493+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54368	45.128.233.186	23	TCP
2025-01-07T22:23:59.444248+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54370	45.128.233.186	23	TCP
2025-01-07T22:24:01.192587+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54372	45.128.233.186	23	TCP
2025-01-07T22:24:02.940930+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54374	45.128.233.186	23	TCP
2025-01-07T22:24:04.748177+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54376	45.128.233.186	23	TCP
2025-01-07T22:24:06.478700+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54378	45.128.233.186	23	TCP
2025-01-07T22:24:08.220534+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54380	45.128.233.186	23	TCP
2025-01-07T22:24:09.968369+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54382	45.128.233.186	23	TCP
2025-01-07T22:24:11.744785+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54384	45.128.233.186	23	TCP
2025-01-07T22:24:13.498349+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54386	45.128.233.186	23	TCP
2025-01-07T22:24:15.232084+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54388	45.128.233.186	23	TCP
2025-01-07T22:24:17.004683+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54390	45.128.233.186	23	TCP
2025-01-07T22:24:17.212386+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54390	45.128.233.186	23	TCP
2025-01-07T22:24:18.782485+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54392	45.128.233.186	23	TCP
2025-01-07T22:24:20.515352+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54394	45.128.233.186	23	TCP
2025-01-07T22:24:22.253003+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54396	45.128.233.186	23	TCP
2025-01-07T22:24:24.233825+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54398	45.128.233.186	23	TCP
2025-01-07T22:24:26.050462+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54400	45.128.233.186	23	TCP
2025-01-07T22:24:27.829358+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54402	45.128.233.186	23	TCP
2025-01-07T22:24:29.581874+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54404	45.128.233.186	23	TCP
2025-01-07T22:24:31.373462+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54406	45.128.233.186	23	TCP
2025-01-07T22:24:33.154792+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54408	45.128.233.186	23	TCP
2025-01-07T22:24:35.209634+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54410	45.128.233.186	23	TCP
2025-01-07T22:24:36.983385+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54412	45.128.233.186	23	TCP
2025-01-07T22:24:38.780192+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54414	45.128.233.186	23	TCP
2025-01-07T22:24:40.516709+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54416	45.128.233.186	23	TCP
2025-01-07T22:24:42.309629+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54418	45.128.233.186	23	TCP
2025-01-07T22:24:44.088230+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54420	45.128.233.186	23	TCP
2025-01-07T22:24:45.890582+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54422	45.128.233.186	23	TCP
2025-01-07T22:24:47.661690+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54424	45.128.233.186	23	TCP
2025-01-07T22:24:49.408267+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54426	45.128.233.186	23	TCP
2025-01-07T22:24:51.178721+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54428	45.128.233.186	23	TCP
2025-01-07T22:24:52.961271+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54430	45.128.233.186	23	TCP
2025-01-07T22:24:54.776920+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54432	45.128.233.186	23	TCP
2025-01-07T22:24:56.589003+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54434	45.128.233.186	23	TCP
2025-01-07T22:24:58.326655+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54436	45.128.233.186	23	TCP
2025-01-07T22:25:00.101713+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54438	45.128.233.186	23	TCP
2025-01-07T22:25:01.886992+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54440	45.128.233.186	23	TCP
2025-01-07T22:25:03.622540+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54442	45.128.233.186	23	TCP
2025-01-07T22:25:05.417891+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54444	45.128.233.186	23	TCP
2025-01-07T22:25:07.197933+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54446	45.128.233.186	23	TCP
2025-01-07T22:25:08.995171+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54448	45.128.233.186	23	TCP
2025-01-07T22:25:10.772030+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54450	45.128.233.186	23	TCP
2025-01-07T22:25:12.500409+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54452	45.128.233.186	23	TCP
2025-01-07T22:25:14.302478+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54454	45.128.233.186	23	TCP
2025-01-07T22:25:16.049905+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54456	45.128.233.186	23	TCP
2025-01-07T22:25:17.783010+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54458	45.128.233.186	23	TCP
2025-01-07T22:25:19.580541+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54460	45.128.233.186	23	TCP
2025-01-07T22:25:21.556748+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54462	45.128.233.186	23	TCP
2025-01-07T22:25:23.871986+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54464	45.128.233.186	23	TCP
2025-01-07T22:25:26.074094+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54466	45.128.233.186	23	TCP
2025-01-07T22:25:28.228138+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54468	45.128.233.186	23	TCP
2025-01-07T22:25:30.121994+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54470	45.128.233.186	23	TCP
2025-01-07T22:25:31.879425+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54472	45.128.233.186	23	TCP
2025-01-07T22:25:33.674446+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54474	45.128.233.186	23	TCP
2025-01-07T22:25:35.446548+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54476	45.128.233.186	23	TCP
2025-01-07T22:25:37.222051+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54478	45.128.233.186	23	TCP
2025-01-07T22:25:39.027568+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54480	45.128.233.186	23	TCP
2025-01-07T22:25:40.799110+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54482	45.128.233.186	23	TCP
2025-01-07T22:25:42.602992+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54484	45.128.233.186	23	TCP
2025-01-07T22:25:44.327283+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54486	45.128.233.186	23	TCP
2025-01-07T22:25:46.135508+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54488	45.128.233.186	23	TCP
2025-01-07T22:25:47.920534+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54490	45.128.233.186	23	TCP
2025-01-07T22:25:49.712270+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54492	45.128.233.186	23	TCP
2025-01-07T22:25:51.455452+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54494	45.128.233.186	23	TCP
2025-01-07T22:25:53.231342+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54496	45.128.233.186	23	TCP
2025-01-07T22:25:54.989129+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54498	45.128.233.186	23	TCP
2025-01-07T22:25:56.798600+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54500	45.128.233.186	23	TCP
2025-01-07T22:25:58.550767+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54502	45.128.233.186	23	TCP
2025-01-07T22:26:00.273230+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54504	45.128.233.186	23	TCP
2025-01-07T22:26:02.098432+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54506	45.128.233.186	23	TCP
2025-01-07T22:26:03.906130+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54508	45.128.233.186	23	TCP
2025-01-07T22:26:05.653483+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54510	45.128.233.186	23	TCP
2025-01-07T22:26:07.421075+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54512	45.128.233.186	23	TCP
2025-01-07T22:26:09.170806+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54514	45.128.233.186	23	TCP
2025-01-07T22:26:10.961423+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54516	45.128.233.186	23	TCP
2025-01-07T22:26:12.699686+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54518	45.128.233.186	23	TCP
2025-01-07T22:26:14.467543+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54520	45.128.233.186	23	TCP
2025-01-07T22:26:16.220748+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54522	45.128.233.186	23	TCP
2025-01-07T22:26:17.999745+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54524	45.128.233.186	23	TCP
2025-01-07T22:26:19.830918+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54526	45.128.233.186	23	TCP
2025-01-07T22:26:21.658106+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54528	45.128.233.186	23	TCP
2025-01-07T22:26:23.421617+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54530	45.128.233.186	23	TCP
2025-01-07T22:26:25.194222+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54532	45.128.233.186	23	TCP
2025-01-07T22:26:26.977827+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54534	45.128.233.186	23	TCP
2025-01-07T22:26:28.739108+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54536	45.128.233.186	23	TCP
2025-01-07T22:26:30.586327+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54538	45.128.233.186	23	TCP
2025-01-07T22:26:32.376285+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54540	45.128.233.186	23	TCP
2025-01-07T22:26:34.177217+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54542	45.128.233.186	23	TCP
2025-01-07T22:26:35.975039+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54544	45.128.233.186	23	TCP
2025-01-07T22:26:37.701826+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54546	45.128.233.186	23	TCP
2025-01-07T22:26:39.458105+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54548	45.128.233.186	23	TCP
2025-01-07T22:26:41.185700+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54550	45.128.233.186	23	TCP
2025-01-07T22:26:42.936550+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54552	45.128.233.186	23	TCP
2025-01-07T22:26:44.686646+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.23	54554	45.128.233.186	23	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 7, 2025 22:23:11.421411991 CET	54316	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:11.583990097 CET	23	54316	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:11.584326029 CET	54316	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:11.604187965 CET	54316	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:11.608980894 CET	23	54316	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:13.323112011 CET	23	54316	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:13.323302984 CET	54316	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:13.323302984 CET	54318	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:13.328161955 CET	23	54316	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:13.328192949 CET	23	54318	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:13.328258991 CET	54318	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:13.345069885 CET	54318	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:13.349905968 CET	23	54318	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:13.377211094 CET	43928	443	192.168.2.23	91.189.91.42
Jan 7, 2025 22:23:15.102123022 CET	23	54318	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:15.102292061 CET	54318	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:15.102328062 CET	54320	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:15.107181072 CET	23	54318	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:15.107192993 CET	23	54320	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:15.107239008 CET	54320	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:15.124986887 CET	54320	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:15.129740000 CET	23	54320	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:16.869540930 CET	23	54320	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:16.869796991 CET	54320	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:16.869824886 CET	54322	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:16.874661922 CET	23	54320	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:16.874691963 CET	23	54322	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:16.874742985 CET	54322	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:16.893209934 CET	54322	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:16.898060083 CET	23	54322	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:18.665090084 CET	23	54322	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:18.665404081 CET	54322	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:18.665410042 CET	54324	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:18.670360088 CET	23	54322	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:18.670378923 CET	23	54324	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:18.670437098 CET	54324	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:18.688844919 CET	54324	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:18.693737984 CET	23	54324	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:19.008477926 CET	42836	443	192.168.2.23	91.189.91.43
Jan 7, 2025 22:23:20.458231926 CET	23	54324	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:20.458460093 CET	54324	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:20.458527088 CET	54326	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:20.463211060 CET	23	54324	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:20.463316917 CET	23	54326	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:20.463387966 CET	54326	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:20.484939098 CET	54326	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:20.489731073 CET	23	54326	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:20.544222116 CET	42516	80	192.168.2.23	109.202.202.202
Jan 7, 2025 22:23:22.190969944 CET	23	54326	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:22.191099882 CET	54326	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:22.191119909 CET	54328	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:22.195962906 CET	23	54326	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:22.195974112 CET	23	54328	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:22.196017027 CET	54328	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:22.214735985 CET	54328	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:22.219516993 CET	23	54328	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:23.978547096 CET	23	54328	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:23.978709936 CET	54328	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:23.978789091 CET	54330	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:23.983612061 CET	23	54328	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:23.983624935 CET	23	54330	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:23.983684063 CET	54330	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:24.001460075 CET	54330	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:24.006289959 CET	23	54330	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:25.724267960 CET	23	54330	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:25.724391937 CET	54330	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:25.724406958 CET	54332	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:25.729257107 CET	23	54330	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:25.729270935 CET	23	54332	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:25.729324102 CET	54332	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:25.747239113 CET	54332	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:25.752126932 CET	23	54332	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:27.496938944 CET	23	54332	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:27.497200966 CET	54332	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:27.497235060 CET	54334	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:27.502079010 CET	23	54332	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:27.502095938 CET	23	54334	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:27.502168894 CET	54334	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:27.517240047 CET	54334	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:27.522047997 CET	23	54334	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:29.297722101 CET	23	54334	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:29.297851086 CET	54334	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:29.297875881 CET	54336	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:29.302783966 CET	23	54334	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:29.302794933 CET	23	54336	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:29.302846909 CET	54336	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:29.317876101 CET	54336	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:29.322654963 CET	23	54336	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:31.038485050 CET	23	54336	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:31.038934946 CET	54336	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:31.038983107 CET	54338	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:31.046169043 CET	23	54336	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:31.046180010 CET	23	54338	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:31.046228886 CET	54338	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:31.061597109 CET	54338	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:31.067061901 CET	23	54338	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:32.807693005 CET	23	54338	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:32.807826996 CET	54338	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:32.807833910 CET	54340	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:32.812659025 CET	23	54338	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:32.812669992 CET	23	54340	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:32.812716007 CET	54340	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:32.831988096 CET	54340	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:32.836853027 CET	23	54340	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:34.610984087 CET	23	54340	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:34.611277103 CET	54342	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:34.611277103 CET	54340	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:34.616132021 CET	23	54342	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:34.616142035 CET	23	54340	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:34.616203070 CET	54342	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:34.633205891 CET	54342	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:34.637953043 CET	23	54342	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:34.878467083 CET	43928	443	192.168.2.23	91.189.91.42
Jan 7, 2025 22:23:36.347548962 CET	23	54342	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:36.347623110 CET	54342	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:36.347644091 CET	54344	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:36.352521896 CET	23	54342	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:36.352533102 CET	23	54344	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:36.352566957 CET	54344	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:36.371484995 CET	54344	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:36.376496077 CET	23	54344	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:38.102444887 CET	23	54344	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:38.102875948 CET	54344	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:38.102992058 CET	54346	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:38.107661963 CET	23	54344	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:38.107779026 CET	23	54346	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:38.107816935 CET	54346	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:38.126554012 CET	54346	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:38.131331921 CET	23	54346	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:39.914148092 CET	23	54346	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:39.914376020 CET	54346	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:39.914469957 CET	54348	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:39.919265032 CET	23	54346	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:39.919279099 CET	23	54348	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:39.919354916 CET	54348	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:39.940854073 CET	54348	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:39.945656061 CET	23	54348	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:41.685117960 CET	23	54348	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:41.685436964 CET	54348	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:41.685436964 CET	54350	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:41.690278053 CET	23	54348	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:41.690289021 CET	23	54350	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:41.690346956 CET	54350	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:41.706020117 CET	54350	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:41.710916996 CET	23	54350	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:43.475277901 CET	23	54350	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:43.475406885 CET	54350	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:43.475454092 CET	54352	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:43.480169058 CET	23	54350	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:43.480292082 CET	23	54352	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:43.480400085 CET	54352	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:43.496715069 CET	54352	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:43.501501083 CET	23	54352	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:45.116992950 CET	42836	443	192.168.2.23	91.189.91.43
Jan 7, 2025 22:23:45.248147011 CET	23	54352	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:45.248274088 CET	54352	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:45.248315096 CET	54354	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:45.253454924 CET	23	54352	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:45.253463984 CET	23	54354	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:45.253519058 CET	54354	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:45.268624067 CET	54354	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:45.273457050 CET	23	54354	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:46.998044014 CET	23	54354	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:46.998183012 CET	54354	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:46.998234987 CET	54356	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:47.003556967 CET	23	54354	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:47.003577948 CET	23	54356	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:47.003633976 CET	54356	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:47.020184040 CET	54356	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:47.024995089 CET	23	54356	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:48.740266085 CET	23	54356	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:48.740566969 CET	54356	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:48.740601063 CET	54358	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:48.745373011 CET	23	54356	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:48.745384932 CET	23	54358	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:48.745465040 CET	54358	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:48.761161089 CET	54358	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:48.765919924 CET	23	54358	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:50.506556988 CET	23	54358	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:50.506720066 CET	54358	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:50.506742954 CET	54360	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:50.511499882 CET	23	54358	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:50.511509895 CET	23	54360	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:50.511589050 CET	54360	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:50.526508093 CET	54360	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:50.531308889 CET	23	54360	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:51.260021925 CET	42516	80	192.168.2.23	109.202.202.202
Jan 7, 2025 22:23:52.272186041 CET	23	54360	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:52.272490025 CET	54360	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:52.272490025 CET	54362	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:52.277268887 CET	23	54360	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:52.277280092 CET	23	54362	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:52.277358055 CET	54362	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:52.294053078 CET	54362	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:52.298928022 CET	23	54362	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:54.026273012 CET	23	54362	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:54.026530027 CET	54362	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:54.026576996 CET	54364	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:54.031343937 CET	23	54362	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:54.031354904 CET	23	54364	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:54.031415939 CET	54364	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:54.051987886 CET	54364	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:54.056883097 CET	23	54364	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:55.899015903 CET	23	54364	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:55.899260998 CET	54364	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:55.899418116 CET	54366	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:55.904050112 CET	23	54364	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:55.904185057 CET	23	54366	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:55.904248953 CET	54366	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:55.924062967 CET	54366	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:55.928873062 CET	23	54366	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:57.648822069 CET	23	54366	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:57.649055958 CET	54366	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:57.649194002 CET	54368	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:57.653929949 CET	23	54366	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:57.654059887 CET	23	54368	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:57.654145002 CET	54368	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:57.673492908 CET	54368	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:57.678260088 CET	23	54368	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:59.423718929 CET	23	54368	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:59.423975945 CET	54368	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:59.424067020 CET	54370	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:59.428781033 CET	23	54368	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:59.428834915 CET	23	54370	45.128.233.186	192.168.2.23
Jan 7, 2025 22:23:59.428896904 CET	54370	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:59.444247961 CET	54370	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:23:59.449724913 CET	23	54370	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:01.165499926 CET	23	54370	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:01.165891886 CET	54370	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:01.165990114 CET	54372	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:01.170759916 CET	23	54370	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:01.170854092 CET	23	54372	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:01.170926094 CET	54372	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:01.192586899 CET	54372	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:01.197417974 CET	23	54372	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:02.913562059 CET	23	54372	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:02.913805008 CET	54372	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:02.913858891 CET	54374	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:02.918658972 CET	23	54372	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:02.918670893 CET	23	54374	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:02.918787956 CET	54374	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:02.940929890 CET	54374	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:02.945739985 CET	23	54374	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:04.724803925 CET	23	54374	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:04.724982977 CET	54374	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:04.725008011 CET	54376	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:04.729866028 CET	23	54374	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:04.729881048 CET	23	54376	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:04.729923010 CET	54376	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:04.748177052 CET	54376	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:04.752917051 CET	23	54376	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:06.457413912 CET	23	54376	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:06.457571030 CET	54376	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:06.457607985 CET	54378	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:06.462462902 CET	23	54376	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:06.462474108 CET	23	54378	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:06.462521076 CET	54378	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:06.478699923 CET	54378	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:06.483483076 CET	23	54378	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:08.192888975 CET	23	54378	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:08.193196058 CET	54378	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:08.193222046 CET	54380	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:08.198074102 CET	23	54378	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:08.198085070 CET	23	54380	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:08.198203087 CET	54380	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:08.220534086 CET	54380	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:08.225285053 CET	23	54380	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:09.947438955 CET	23	54380	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:09.947580099 CET	54380	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:09.947621107 CET	54382	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:09.952372074 CET	23	54380	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:09.952435017 CET	23	54382	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:09.952480078 CET	54382	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:09.968369007 CET	54382	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:09.973114967 CET	23	54382	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:11.723279953 CET	23	54382	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:11.723546028 CET	54382	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:11.723548889 CET	54384	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:11.728352070 CET	23	54382	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:11.728375912 CET	23	54384	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:11.728473902 CET	54384	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:11.744785070 CET	54384	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:11.749526978 CET	23	54384	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:13.477552891 CET	23	54384	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:13.477677107 CET	54384	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:13.477709055 CET	54386	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:13.482417107 CET	23	54384	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:13.482471943 CET	23	54386	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:13.482526064 CET	54386	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:13.498348951 CET	54386	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:13.503144026 CET	23	54386	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:15.210050106 CET	23	54386	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:15.210238934 CET	54386	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:15.210293055 CET	54388	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:15.215004921 CET	23	54386	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:15.215050936 CET	23	54388	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:15.215141058 CET	54388	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:15.232084036 CET	54388	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:15.236804962 CET	23	54388	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:15.832586050 CET	43928	443	192.168.2.23	91.189.91.42
Jan 7, 2025 22:24:16.980709076 CET	23	54388	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:16.980911016 CET	54388	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:16.980950117 CET	54390	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:16.985729933 CET	23	54388	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:16.985739946 CET	23	54390	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:16.985858917 CET	54390	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:17.004683018 CET	54390	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:17.212385893 CET	54390	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:17.280401945 CET	23	54390	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:17.280416012 CET	23	54390	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:18.760106087 CET	23	54390	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:18.760525942 CET	54390	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:18.760536909 CET	54392	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:18.765368938 CET	23	54390	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:18.765381098 CET	23	54392	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:18.765535116 CET	54392	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:18.782485008 CET	54392	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:18.787234068 CET	23	54392	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:20.490247965 CET	23	54392	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:20.490654945 CET	54392	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:20.490742922 CET	54394	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:20.495460987 CET	23	54392	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:20.495485067 CET	23	54394	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:20.495592117 CET	54394	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:20.515352011 CET	54394	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:20.520159960 CET	23	54394	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:22.225476027 CET	23	54394	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:22.225805044 CET	54394	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:22.225903034 CET	54396	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:22.230700016 CET	23	54394	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:22.230779886 CET	23	54396	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:22.230843067 CET	54396	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:22.253002882 CET	54396	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:22.257803917 CET	23	54396	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:24.211416006 CET	23	54396	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:24.211767912 CET	54396	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:24.211767912 CET	54398	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:24.216605902 CET	23	54396	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:24.216617107 CET	23	54398	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:24.216718912 CET	54398	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:24.233824968 CET	54398	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:24.238883972 CET	23	54398	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:26.023099899 CET	23	54398	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:26.023255110 CET	54398	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:26.023339987 CET	54400	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:26.028054953 CET	23	54398	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:26.028146982 CET	23	54400	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:26.028203011 CET	54400	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:26.050462008 CET	54400	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:26.055351019 CET	23	54400	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:27.800832033 CET	23	54400	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:27.801265001 CET	54400	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:27.801314116 CET	54402	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:27.806138039 CET	23	54400	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:27.806150913 CET	23	54402	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:27.806235075 CET	54402	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:27.829358101 CET	54402	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:27.834151983 CET	23	54402	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:29.553869009 CET	23	54402	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:29.554239988 CET	54402	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:29.554378986 CET	54404	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:29.559582949 CET	23	54402	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:29.559737921 CET	23	54404	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:29.559799910 CET	54404	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:29.581873894 CET	54404	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:29.587198019 CET	23	54404	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:31.346246004 CET	23	54404	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:31.346621037 CET	54404	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:31.346621037 CET	54404	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:31.346621037 CET	54406	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:31.351490021 CET	23	54404	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:31.351501942 CET	23	54406	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:31.351627111 CET	54406	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:31.373461962 CET	54406	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:31.378190041 CET	23	54406	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:33.130316019 CET	23	54406	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:33.130563021 CET	54406	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:33.130664110 CET	54408	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:33.135376930 CET	23	54406	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:33.135545015 CET	23	54408	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:33.135602951 CET	54408	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:33.154792070 CET	54408	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:33.159571886 CET	23	54408	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:35.185976028 CET	23	54408	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:35.186110020 CET	23	54408	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:35.186213017 CET	54410	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:35.186213017 CET	54408	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:35.186213017 CET	54408	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:35.191710949 CET	23	54410	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:35.191720963 CET	23	54408	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:35.191787958 CET	54410	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:35.209634066 CET	54410	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:35.214421034 CET	23	54410	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:36.956619978 CET	23	54410	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:36.956909895 CET	54410	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:36.956926107 CET	54412	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:36.961745977 CET	23	54410	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:36.961760998 CET	23	54412	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:36.961868048 CET	54412	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:36.983385086 CET	54412	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:36.988142967 CET	23	54412	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:38.751782894 CET	23	54412	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:38.752342939 CET	54412	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:38.752471924 CET	54414	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:38.757174015 CET	23	54412	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:38.757270098 CET	23	54414	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:38.757325888 CET	54414	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:38.780191898 CET	54414	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:38.785027027 CET	23	54414	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:40.492979050 CET	23	54414	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:40.493163109 CET	54414	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:40.493201971 CET	54414	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:40.493264914 CET	54416	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:40.498078108 CET	23	54414	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:40.498090982 CET	23	54416	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:40.498142004 CET	54416	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:40.516709089 CET	54416	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:40.521888018 CET	23	54416	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:42.287676096 CET	23	54416	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:42.287894964 CET	54416	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:42.288000107 CET	54418	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:42.292661905 CET	23	54416	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:42.292788029 CET	23	54418	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:42.292855978 CET	54418	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:42.309628963 CET	54418	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:42.314465046 CET	23	54418	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:44.065350056 CET	23	54418	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:44.065721035 CET	54418	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:44.065826893 CET	54420	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:44.070537090 CET	23	54418	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:44.070604086 CET	23	54420	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:44.070671082 CET	54420	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:44.088229895 CET	54420	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:44.093012094 CET	23	54420	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:45.866415024 CET	23	54420	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:45.866906881 CET	54420	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:45.866908073 CET	54422	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:45.871823072 CET	23	54420	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:45.871834993 CET	23	54422	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:45.871953964 CET	54422	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:45.890582085 CET	54422	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:45.895422935 CET	23	54422	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:47.643377066 CET	23	54422	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:47.643615961 CET	54422	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:47.643620968 CET	54424	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:47.648473978 CET	23	54424	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:47.648484945 CET	23	54422	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:47.648525953 CET	54424	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:47.661689997 CET	54424	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:47.666452885 CET	23	54424	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:49.385204077 CET	23	54424	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:49.385528088 CET	54426	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:49.385528088 CET	54424	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:49.390420914 CET	23	54426	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:49.390438080 CET	23	54424	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:49.390492916 CET	54426	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:49.408267021 CET	54426	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:49.413453102 CET	23	54426	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:51.154370070 CET	23	54426	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:51.154597044 CET	54426	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:51.154758930 CET	54428	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:51.159373045 CET	23	54426	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:51.159558058 CET	23	54428	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:51.159624100 CET	54428	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:51.178720951 CET	54428	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:51.183470011 CET	23	54428	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:52.940284967 CET	23	54428	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:52.940475941 CET	54428	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:52.940536976 CET	54430	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:52.945235968 CET	23	54428	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:52.945337057 CET	23	54430	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:52.945406914 CET	54430	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:52.961271048 CET	54430	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:52.966042995 CET	23	54430	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:54.753475904 CET	23	54430	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:54.753660917 CET	54430	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:54.753730059 CET	54432	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:54.758516073 CET	23	54430	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:54.758526087 CET	23	54432	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:54.758599997 CET	54432	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:54.776920080 CET	54432	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:54.781769991 CET	23	54432	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:56.568515062 CET	23	54432	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:56.568897963 CET	54432	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:56.568897963 CET	54434	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:56.573693037 CET	23	54432	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:56.573766947 CET	23	54434	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:56.573894024 CET	54434	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:56.589003086 CET	54434	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:56.593802929 CET	23	54434	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:58.307279110 CET	23	54434	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:58.307656050 CET	54434	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:58.307660103 CET	54436	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:58.312500954 CET	23	54434	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:58.312509060 CET	23	54436	45.128.233.186	192.168.2.23
Jan 7, 2025 22:24:58.312669992 CET	54436	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:58.326654911 CET	54436	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:24:58.331460953 CET	23	54436	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:00.078619003 CET	23	54436	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:00.079082012 CET	54436	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:00.079082012 CET	54438	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:00.083944082 CET	23	54436	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:00.083949089 CET	23	54438	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:00.084036112 CET	54438	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:00.101712942 CET	54438	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:00.106482029 CET	23	54438	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:01.864346981 CET	23	54438	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:01.864546061 CET	54438	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:01.864744902 CET	54440	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:01.869364023 CET	23	54438	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:01.869520903 CET	23	54440	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:01.869575977 CET	54440	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:01.886991978 CET	54440	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:01.891799927 CET	23	54440	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:03.599570036 CET	23	54440	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:03.600060940 CET	54440	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:03.600079060 CET	54442	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:03.604917049 CET	23	54440	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:03.604928970 CET	23	54442	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:03.605017900 CET	54442	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:03.622539997 CET	54442	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:03.627288103 CET	23	54442	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:05.395253897 CET	23	54442	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:05.395736933 CET	54442	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:05.395740986 CET	54444	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:05.400620937 CET	23	54442	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:05.400633097 CET	23	54444	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:05.400718927 CET	54444	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:05.417891026 CET	54444	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:05.422679901 CET	23	54444	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:07.178169966 CET	23	54444	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:07.178354025 CET	54444	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:07.178395987 CET	54446	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:07.183212042 CET	23	54444	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:07.183218956 CET	23	54446	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:07.183293104 CET	54446	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:07.197932959 CET	54446	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:07.202729940 CET	23	54446	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:08.973324060 CET	23	54446	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:08.973613977 CET	54446	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:08.973629951 CET	54448	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:08.978477001 CET	23	54446	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:08.978488922 CET	23	54448	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:08.978594065 CET	54448	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:08.995171070 CET	54448	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:08.999974012 CET	23	54448	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:10.749205112 CET	23	54448	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:10.749393940 CET	54448	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:10.749449015 CET	54450	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:10.754143000 CET	23	54448	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:10.754235983 CET	23	54450	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:10.754301071 CET	54450	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:10.772030115 CET	54450	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:10.777870893 CET	23	54450	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:12.475222111 CET	23	54450	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:12.475763083 CET	54452	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:12.475761890 CET	54450	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:12.480591059 CET	23	54450	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:12.480602026 CET	23	54452	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:12.480752945 CET	54452	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:12.500408888 CET	54452	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:12.505630016 CET	23	54452	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:14.274996996 CET	23	54452	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:14.275368929 CET	54452	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:14.275398016 CET	54454	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:14.280688047 CET	23	54452	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:14.280708075 CET	23	54454	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:14.280810118 CET	54454	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:14.302478075 CET	54454	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:14.307336092 CET	23	54454	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:16.025206089 CET	23	54454	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:16.025695086 CET	54456	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:16.025707006 CET	54454	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:16.030535936 CET	23	54454	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:16.030545950 CET	23	54456	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:16.030616999 CET	54456	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:16.049905062 CET	54456	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:16.054733992 CET	23	54456	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:17.757199049 CET	23	54456	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:17.757453918 CET	54456	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:17.757520914 CET	54458	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:17.762619019 CET	23	54456	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:17.762773991 CET	23	54458	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:17.762834072 CET	54458	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:17.783010006 CET	54458	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:17.788244009 CET	23	54458	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:19.555197001 CET	23	54458	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:19.555423021 CET	54458	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:19.555506945 CET	54460	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:19.560189009 CET	23	54458	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:19.560318947 CET	23	54460	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:19.560375929 CET	54460	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:19.580540895 CET	54460	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:19.585341930 CET	23	54460	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:21.531913996 CET	23	54460	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:21.532303095 CET	54460	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:21.532346010 CET	54462	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:21.537059069 CET	23	54460	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:21.537106037 CET	23	54462	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:21.537170887 CET	54462	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:21.556747913 CET	54462	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:21.561506033 CET	23	54462	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:23.846497059 CET	23	54462	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:23.846900940 CET	54462	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:23.847022057 CET	54464	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:23.851701975 CET	23	54462	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:23.851829052 CET	23	54464	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:23.851897955 CET	54464	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:23.871985912 CET	54464	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:23.876802921 CET	23	54464	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:26.044018030 CET	23	54464	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:26.044303894 CET	54464	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:26.044377089 CET	54466	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:26.049110889 CET	23	54464	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:26.049165964 CET	23	54466	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:26.049225092 CET	54466	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:26.074094057 CET	54466	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:26.078890085 CET	23	54466	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:28.196307898 CET	23	54466	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:28.196576118 CET	54466	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:28.196644068 CET	54468	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:28.201366901 CET	23	54466	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:28.201455116 CET	23	54468	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:28.201550007 CET	54468	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:28.228137970 CET	54468	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:28.233397007 CET	23	54468	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:30.093055964 CET	23	54468	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:30.093328953 CET	54468	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:30.093422890 CET	54470	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:30.098305941 CET	23	54468	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:30.098318100 CET	23	54470	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:30.098381996 CET	54470	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:30.121994019 CET	54470	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:30.126822948 CET	23	54470	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:31.854742050 CET	23	54470	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:31.855123043 CET	54470	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:31.855144024 CET	54472	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:31.860054016 CET	23	54470	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:31.860069036 CET	23	54472	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:31.860138893 CET	54472	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:31.879425049 CET	54472	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:31.884203911 CET	23	54472	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:33.649487019 CET	23	54472	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:33.649646044 CET	54472	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:33.649678946 CET	54474	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:33.658628941 CET	23	54472	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:33.658639908 CET	23	54474	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:33.658714056 CET	54474	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:33.674446106 CET	54474	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:33.682952881 CET	23	54474	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:35.425890923 CET	23	54474	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:35.426035881 CET	54474	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:35.426079035 CET	54476	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:35.430912971 CET	23	54474	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:35.430922985 CET	23	54476	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:35.430986881 CET	54476	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:35.446547985 CET	54476	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:35.451328993 CET	23	54476	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:37.201693058 CET	23	54476	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:37.201852083 CET	54476	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:37.201881886 CET	54478	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:37.206666946 CET	23	54476	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:37.206676960 CET	23	54478	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:37.206764936 CET	54478	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:37.222050905 CET	54478	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:37.226804972 CET	23	54478	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:39.003726959 CET	23	54478	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:39.004064083 CET	54478	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:39.004066944 CET	54480	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:39.008966923 CET	23	54478	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:39.008980989 CET	23	54480	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:39.009083986 CET	54480	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:39.027568102 CET	54480	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:39.032398939 CET	23	54480	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:40.778248072 CET	23	54480	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:40.778443098 CET	54480	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:40.778480053 CET	54482	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:40.783288956 CET	23	54480	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:40.783301115 CET	23	54482	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:40.783363104 CET	54482	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:40.799109936 CET	54482	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:40.803919077 CET	23	54482	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:42.572000027 CET	23	54482	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:42.572406054 CET	54482	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:42.572417021 CET	54484	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:42.577342987 CET	23	54482	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:42.577351093 CET	23	54484	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:42.577506065 CET	54484	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:42.602992058 CET	54484	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:42.607877016 CET	23	54484	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:44.302791119 CET	23	54484	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:44.303283930 CET	54484	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:44.303333044 CET	54486	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:44.308145046 CET	23	54484	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:44.308156013 CET	23	54486	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:44.308224916 CET	54486	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:44.327282906 CET	54486	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:44.332098007 CET	23	54486	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:46.112896919 CET	23	54486	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:46.113146067 CET	54486	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:46.113207102 CET	54488	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:46.118052959 CET	23	54486	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:46.118074894 CET	23	54488	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:46.118139982 CET	54488	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:46.135508060 CET	54488	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:46.140294075 CET	23	54488	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:47.899615049 CET	23	54488	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:47.899791956 CET	54488	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:47.899842024 CET	54490	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:47.905251026 CET	23	54488	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:47.905261040 CET	23	54490	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:47.905335903 CET	54490	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:47.920533895 CET	54490	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:47.925293922 CET	23	54490	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:49.692625046 CET	23	54490	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:49.692749977 CET	54490	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:49.692791939 CET	54492	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:49.697628975 CET	23	54490	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:49.697648048 CET	23	54492	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:49.697694063 CET	54492	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:49.712270021 CET	54492	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:49.717080116 CET	23	54492	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:51.431304932 CET	23	54492	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:51.431474924 CET	54492	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:51.431515932 CET	54494	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:51.436256886 CET	23	54492	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:51.436362028 CET	23	54494	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:51.436420918 CET	54494	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:51.455451965 CET	54494	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:51.460263968 CET	23	54494	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:53.203836918 CET	23	54494	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:53.204224110 CET	54494	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:53.204262972 CET	54496	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:53.209079981 CET	23	54494	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:53.209090948 CET	23	54496	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:53.209207058 CET	54496	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:53.231342077 CET	54496	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:53.236073017 CET	23	54496	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:54.968818903 CET	23	54496	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:54.968955994 CET	54496	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:54.969002008 CET	54498	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:54.974097967 CET	23	54496	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:54.974114895 CET	23	54498	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:54.974169016 CET	54498	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:54.989129066 CET	54498	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:54.993877888 CET	23	54498	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:56.777774096 CET	23	54498	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:56.778036118 CET	54498	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:56.778064966 CET	54500	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:56.782883883 CET	23	54498	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:56.782905102 CET	23	54500	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:56.783018112 CET	54500	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:56.798599958 CET	54500	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:56.803354979 CET	23	54500	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:58.527570963 CET	23	54500	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:58.527698994 CET	54502	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:58.527698994 CET	54500	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:58.534245014 CET	23	54502	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:58.534256935 CET	23	54500	45.128.233.186	192.168.2.23
Jan 7, 2025 22:25:58.534316063 CET	54502	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:58.550766945 CET	54502	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:25:58.556202888 CET	23	54502	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:00.256160975 CET	23	54502	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:00.256396055 CET	54502	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:00.256480932 CET	54504	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:00.261190891 CET	23	54502	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:00.261203051 CET	23	54504	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:00.261279106 CET	54504	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:00.273230076 CET	54504	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:00.278068066 CET	23	54504	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:02.081063032 CET	23	54504	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:02.081170082 CET	54504	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:02.081207037 CET	54506	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:02.085983038 CET	23	54504	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:02.085997105 CET	23	54506	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:02.086044073 CET	54506	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:02.098432064 CET	54506	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:02.103224039 CET	23	54506	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:03.888355017 CET	23	54506	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:03.888607979 CET	54506	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:03.888642073 CET	54508	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:03.893501997 CET	23	54506	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:03.893512964 CET	23	54508	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:03.893635988 CET	54508	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:03.906130075 CET	54508	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:03.913475037 CET	23	54508	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:05.636441946 CET	23	54508	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:05.636585951 CET	54508	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:05.636611938 CET	54510	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:05.641402960 CET	23	54508	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:05.641413927 CET	23	54510	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:05.641477108 CET	54510	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:05.653482914 CET	54510	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:05.658211946 CET	23	54510	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:07.404328108 CET	23	54510	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:07.404674053 CET	54512	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:07.404678106 CET	54510	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:07.409560919 CET	23	54512	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:07.409570932 CET	23	54510	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:07.409614086 CET	54512	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:07.421075106 CET	54512	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:07.426707029 CET	23	54512	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:09.152213097 CET	23	54512	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:09.152486086 CET	54514	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:09.152529955 CET	54512	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:09.157358885 CET	23	54514	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:09.157371044 CET	23	54512	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:09.157418966 CET	54514	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:09.170805931 CET	54514	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:09.175733089 CET	23	54514	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:10.941128969 CET	23	54514	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:10.941390038 CET	54514	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:10.941451073 CET	54516	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:10.946279049 CET	23	54514	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:10.946319103 CET	23	54516	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:10.946357965 CET	54516	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:10.961422920 CET	54516	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:10.966203928 CET	23	54516	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:12.681157112 CET	23	54516	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:12.681449890 CET	54516	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:12.681449890 CET	54518	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:12.686321974 CET	23	54516	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:12.686332941 CET	23	54518	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:12.686410904 CET	54518	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:12.699686050 CET	54518	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:12.704428911 CET	23	54518	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:14.444912910 CET	23	54518	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:14.445246935 CET	54518	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:14.445327997 CET	54520	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:14.450095892 CET	23	54518	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:14.450153112 CET	23	54520	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:14.450220108 CET	54520	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:14.467542887 CET	54520	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:14.472407103 CET	23	54520	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:16.200491905 CET	23	54520	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:16.200741053 CET	54520	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:16.200874090 CET	54522	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:16.205554008 CET	23	54520	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:16.205632925 CET	23	54522	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:16.205709934 CET	54522	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:16.220747948 CET	54522	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:16.225522995 CET	23	54522	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:17.978307009 CET	23	54522	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:17.978642941 CET	54522	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:17.978655100 CET	54524	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:17.983546972 CET	23	54522	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:17.983558893 CET	23	54524	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:17.983661890 CET	54524	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:17.999744892 CET	54524	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:18.004511118 CET	23	54524	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:19.808317900 CET	23	54524	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:19.808551073 CET	54524	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:19.808640957 CET	54526	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:19.813354969 CET	23	54524	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:19.813465118 CET	23	54526	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:19.813534021 CET	54526	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:19.830918074 CET	54526	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:19.835676908 CET	23	54526	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:21.634602070 CET	23	54526	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:21.634836912 CET	54526	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:21.634941101 CET	54528	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:21.639724016 CET	23	54526	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:21.639753103 CET	23	54528	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:21.639878988 CET	54528	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:21.658106089 CET	54528	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:21.662939072 CET	23	54528	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:23.399971008 CET	23	54528	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:23.400506020 CET	54528	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:23.400576115 CET	54530	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:23.407788992 CET	23	54528	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:23.407949924 CET	23	54530	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:23.408046007 CET	54530	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:23.421617031 CET	54530	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:23.428983927 CET	23	54530	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:25.176919937 CET	23	54530	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:25.177231073 CET	54530	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:25.177304983 CET	54532	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:25.182069063 CET	23	54530	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:25.182193041 CET	23	54532	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:25.182293892 CET	54532	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:25.194221973 CET	54532	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:25.199095964 CET	23	54532	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:26.960733891 CET	23	54532	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:26.960977077 CET	54532	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:26.961016893 CET	54534	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:26.965761900 CET	23	54532	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:26.965770960 CET	23	54534	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:26.965886116 CET	54534	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:26.977827072 CET	54534	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:26.982639074 CET	23	54534	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:28.718000889 CET	23	54534	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:28.718487024 CET	54534	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:28.718487024 CET	54536	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:28.723349094 CET	23	54534	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:28.723361015 CET	23	54536	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:28.723474026 CET	54536	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:28.739108086 CET	54536	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:28.743911982 CET	23	54536	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:30.580315113 CET	23	54536	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:30.580492020 CET	54536	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:30.580539942 CET	54538	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:30.585325003 CET	23	54536	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:30.585339069 CET	23	54538	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:30.585438967 CET	54538	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:30.586327076 CET	54538	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:30.591099977 CET	23	54538	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:32.371115923 CET	23	54538	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:32.371288061 CET	54538	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:32.371330023 CET	54540	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:32.376092911 CET	23	54538	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:32.376168966 CET	23	54540	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:32.376224995 CET	54540	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:32.376285076 CET	54540	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:32.381016970 CET	23	54540	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:34.171905994 CET	23	54540	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:34.172144890 CET	54540	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:34.172256947 CET	54542	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:34.177097082 CET	23	54540	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:34.177108049 CET	23	54542	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:34.177184105 CET	54542	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:34.177217007 CET	54542	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:34.181957960 CET	23	54542	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:35.969603062 CET	23	54542	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:35.969976902 CET	54542	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:35.970058918 CET	54544	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:35.974831104 CET	23	54542	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:35.974843025 CET	23	54544	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:35.974924088 CET	54544	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:35.975039005 CET	54544	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:35.979793072 CET	23	54544	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:37.696789980 CET	23	54544	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:37.696913958 CET	54544	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:37.696943045 CET	54546	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:37.701742887 CET	23	54544	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:37.701756001 CET	23	54546	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:37.701797962 CET	54546	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:37.701826096 CET	54546	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:37.706918955 CET	23	54546	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:39.452831984 CET	23	54546	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:39.453012943 CET	54546	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:39.453030109 CET	54548	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:39.457921982 CET	23	54546	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:39.457936049 CET	23	54548	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:39.458046913 CET	54548	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:39.458105087 CET	54548	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:39.462822914 CET	23	54548	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:41.180521965 CET	23	54548	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:41.180681944 CET	54548	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:41.180738926 CET	54550	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:41.185594082 CET	23	54548	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:41.185609102 CET	23	54550	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:41.185669899 CET	54550	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:41.185699940 CET	54550	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:41.190630913 CET	23	54550	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:42.931188107 CET	23	54550	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:42.931458950 CET	54550	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:42.931495905 CET	54552	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:42.936322927 CET	23	54550	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:42.936333895 CET	23	54552	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:42.936418056 CET	54552	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:42.936549902 CET	54552	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:42.941318989 CET	23	54552	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:44.681272984 CET	23	54552	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:44.681600094 CET	54552	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:44.681600094 CET	54554	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:44.686497927 CET	23	54552	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:44.686508894 CET	23	54554	45.128.233.186	192.168.2.23
Jan 7, 2025 22:26:44.686604977 CET	54554	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:44.686645985 CET	54554	23	192.168.2.23	45.128.233.186
Jan 7, 2025 22:26:44.691448927 CET	23	54554	45.128.233.186	192.168.2.23

System Behavior

Analysis Process: gigops.i586.elf PID: 6223, Parent PID: 6138

General

Start time (UTC):	21:23:10
Start date (UTC):	07/01/2025
Path:	/tmp/gigops.i586.elf
Arguments:	/tmp/gigops.i586.elf
File size:	95446 bytes
MD5 hash:	ef14cc6be56c5ee13d4813fd249a0d08

Chronological Activities

Analysis Process: gigops.i586.elf PID: 6224, Parent PID: 6223

General

Start time (UTC):	21:23:10
Start date (UTC):	07/01/2025
Path:	/tmp/gigops.i586.elf
Arguments:	-
File size:	95446 bytes
MD5 hash:	ef14cc6be56c5ee13d4813fd249a0d08

Chronological Activities

Analysis Process: gigops.i586.elf PID: 6225, Parent PID: 6224

General

Start time (UTC):	21:23:10
Start date (UTC):	07/01/2025
Path:	/tmp/gigops.i586.elf
Arguments:	-
File size:	95446 bytes
MD5 hash:	ef14cc6be56c5ee13d4813fd249a0d08

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report gigops.i586.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: gigops.i586.elf PID: 6223, Parent PID: 6138

General

Chronological Activities

Analysis Process: gigops.i586.elf PID: 6224, Parent PID: 6223

General

Chronological Activities

Analysis Process: gigops.i586.elf PID: 6225, Parent PID: 6224

General

Linux Analysis Report
gigops.i586.elf