Edit tour

Linux Analysis Report
gigops.mpsl.elf

Overview

General Information

Sample name:	gigops.mpsl.elf
Analysis ID:	1585612
MD5:	3281da183a6fc886ee6d60bef79bbaed
SHA1:	1775cc8448031dece4b9bae98624c20fdc9d5b2f
SHA256:	d120f54adeb9047722a48c3510bbe77e6525db5e378194a0b274478ac77c9a54
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt

Score:	92
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Opens /proc/net/* files useful for finding connected devices and routers

Sample and/or dropped files contains symbols with suspicious names

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1585612
Start date and time:	2025-01-07 22:22:34 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	gigops.mpsl.elf
Detection:	MAL
Classification:	mal92.spre.troj.linELF@0/0@2/0

Warnings

VT rate limit hit for: gigops.mpsl.elf

Runtime Messages

Command:	/tmp/gigops.mpsl.elf
PID:	5430
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	BUILD DONGS buf: BUILD DONGS BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS
Standard Error:

Process Tree

system is lnxubuntu20

gigops.mpsl.elf (PID: 5430, Parent: 5355, MD5: 0d6f61f82cf2f781c6eb0661071d42d9) Arguments: /tmp/gigops.mpsl.elf

gigops.mpsl.elf New Fork (PID: 5432, Parent: 5430)

gigops.mpsl.elf New Fork (PID: 5434, Parent: 5432)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
gigops.mpsl.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
gigops.mpsl.elf	Linux_Trojan_Gafgyt_fb14e81f	unknown	unknown	0x1ae9c:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00

Memory Dumps

Source	Rule	Description	Author	Strings
5432.1.00007f5b1c400000.00007f5b1c41d000.r-x.sdmp	Linux_Trojan_Gafgyt_fb14e81f	unknown	unknown	0x1ae9c:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00
5430.1.00007f5b1c400000.00007f5b1c41d000.r-x.sdmp	Linux_Trojan_Gafgyt_fb14e81f	unknown	unknown	0x1ae9c:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-07T22:23:12.808304+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51572	45.128.233.186	23	TCP
2025-01-07T22:23:14.504394+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51574	45.128.233.186	23	TCP
2025-01-07T22:23:16.245063+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51576	45.128.233.186	23	TCP
2025-01-07T22:23:18.019029+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51578	45.128.233.186	23	TCP
2025-01-07T22:23:19.802774+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51580	45.128.233.186	23	TCP
2025-01-07T22:23:21.565473+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51582	45.128.233.186	23	TCP
2025-01-07T22:23:23.310905+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51584	45.128.233.186	23	TCP
2025-01-07T22:23:25.067143+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51586	45.128.233.186	23	TCP
2025-01-07T22:23:26.813967+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51588	45.128.233.186	23	TCP
2025-01-07T22:23:28.618606+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51590	45.128.233.186	23	TCP
2025-01-07T22:23:30.398174+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51592	45.128.233.186	23	TCP
2025-01-07T22:23:32.192339+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51594	45.128.233.186	23	TCP
2025-01-07T22:23:33.961812+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51596	45.128.233.186	23	TCP
2025-01-07T22:23:35.740563+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51598	45.128.233.186	23	TCP
2025-01-07T22:23:37.551885+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51600	45.128.233.186	23	TCP
2025-01-07T22:23:39.310207+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51602	45.128.233.186	23	TCP
2025-01-07T22:23:41.068591+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51604	45.128.233.186	23	TCP
2025-01-07T22:23:42.855057+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51606	45.128.233.186	23	TCP
2025-01-07T22:23:44.683408+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51608	45.128.233.186	23	TCP
2025-01-07T22:23:46.460986+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51610	45.128.233.186	23	TCP
2025-01-07T22:23:48.244430+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51612	45.128.233.186	23	TCP
2025-01-07T22:23:49.999678+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51614	45.128.233.186	23	TCP
2025-01-07T22:23:51.807677+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51616	45.128.233.186	23	TCP
2025-01-07T22:23:53.541603+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51618	45.128.233.186	23	TCP
2025-01-07T22:23:55.448455+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51620	45.128.233.186	23	TCP
2025-01-07T22:23:57.235870+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51622	45.128.233.186	23	TCP
2025-01-07T22:23:59.043288+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51624	45.128.233.186	23	TCP
2025-01-07T22:24:00.773005+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51626	45.128.233.186	23	TCP
2025-01-07T22:24:02.549083+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51628	45.128.233.186	23	TCP
2025-01-07T22:24:04.274870+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51630	45.128.233.186	23	TCP
2025-01-07T22:24:06.058277+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51632	45.128.233.186	23	TCP
2025-01-07T22:24:07.838303+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51634	45.128.233.186	23	TCP
2025-01-07T22:24:09.571466+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51636	45.128.233.186	23	TCP
2025-01-07T22:24:11.600581+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51638	45.128.233.186	23	TCP
2025-01-07T22:24:13.397160+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51640	45.128.233.186	23	TCP
2025-01-07T22:24:15.139685+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51642	45.128.233.186	23	TCP
2025-01-07T22:24:16.911706+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51644	45.128.233.186	23	TCP
2025-01-07T22:24:18.664180+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51646	45.128.233.186	23	TCP
2025-01-07T22:24:20.448162+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51648	45.128.233.186	23	TCP
2025-01-07T22:24:22.250317+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51650	45.128.233.186	23	TCP
2025-01-07T22:24:24.231443+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51652	45.128.233.186	23	TCP
2025-01-07T22:24:26.021682+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51654	45.128.233.186	23	TCP
2025-01-07T22:24:27.783728+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51656	45.128.233.186	23	TCP
2025-01-07T22:24:29.581461+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51658	45.128.233.186	23	TCP
2025-01-07T22:24:31.325436+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51660	45.128.233.186	23	TCP
2025-01-07T22:24:33.082079+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51662	45.128.233.186	23	TCP
2025-01-07T22:24:35.211399+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51664	45.128.233.186	23	TCP
2025-01-07T22:24:36.976006+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51666	45.128.233.186	23	TCP
2025-01-07T22:24:38.713551+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51668	45.128.233.186	23	TCP
2025-01-07T22:24:40.447492+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51670	45.128.233.186	23	TCP
2025-01-07T22:24:42.243972+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51672	45.128.233.186	23	TCP
2025-01-07T22:24:43.979628+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51674	45.128.233.186	23	TCP
2025-01-07T22:24:45.817421+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51676	45.128.233.186	23	TCP
2025-01-07T22:24:47.644216+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51678	45.128.233.186	23	TCP
2025-01-07T22:24:49.457203+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51680	45.128.233.186	23	TCP
2025-01-07T22:24:51.222159+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51682	45.128.233.186	23	TCP
2025-01-07T22:24:52.944988+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51684	45.128.233.186	23	TCP
2025-01-07T22:24:54.718112+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51686	45.128.233.186	23	TCP
2025-01-07T22:24:56.548567+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51688	45.128.233.186	23	TCP
2025-01-07T22:24:58.294519+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51690	45.128.233.186	23	TCP
2025-01-07T22:25:00.060921+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51692	45.128.233.186	23	TCP
2025-01-07T22:25:01.808737+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51694	45.128.233.186	23	TCP
2025-01-07T22:25:03.586522+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51696	45.128.233.186	23	TCP
2025-01-07T22:25:05.324684+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51698	45.128.233.186	23	TCP
2025-01-07T22:25:07.167217+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51700	45.128.233.186	23	TCP
2025-01-07T22:25:08.916986+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51702	45.128.233.186	23	TCP
2025-01-07T22:25:10.707134+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51704	45.128.233.186	23	TCP
2025-01-07T22:25:12.491422+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51706	45.128.233.186	23	TCP
2025-01-07T22:25:14.285243+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51708	45.128.233.186	23	TCP
2025-01-07T22:25:16.028049+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51710	45.128.233.186	23	TCP
2025-01-07T22:25:17.800633+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51712	45.128.233.186	23	TCP
2025-01-07T22:25:19.600266+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51714	45.128.233.186	23	TCP
2025-01-07T22:25:21.609259+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51716	45.128.233.186	23	TCP
2025-01-07T22:25:23.870318+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51718	45.128.233.186	23	TCP
2025-01-07T22:25:26.020773+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51720	45.128.233.186	23	TCP
2025-01-07T22:25:28.130303+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51722	45.128.233.186	23	TCP
2025-01-07T22:25:30.025396+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51724	45.128.233.186	23	TCP
2025-01-07T22:25:31.796498+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51726	45.128.233.186	23	TCP
2025-01-07T22:25:33.544071+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51728	45.128.233.186	23	TCP
2025-01-07T22:25:35.314355+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51730	45.128.233.186	23	TCP
2025-01-07T22:25:37.095686+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51732	45.128.233.186	23	TCP
2025-01-07T22:25:38.885139+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51734	45.128.233.186	23	TCP
2025-01-07T22:25:40.695943+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51736	45.128.233.186	23	TCP
2025-01-07T22:25:42.430821+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51738	45.128.233.186	23	TCP
2025-01-07T22:25:44.227645+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51740	45.128.233.186	23	TCP
2025-01-07T22:25:46.130748+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51742	45.128.233.186	23	TCP
2025-01-07T22:25:47.869525+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51744	45.128.233.186	23	TCP
2025-01-07T22:25:49.643810+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51746	45.128.233.186	23	TCP
2025-01-07T22:25:51.402758+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51748	45.128.233.186	23	TCP
2025-01-07T22:25:53.155633+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51750	45.128.233.186	23	TCP
2025-01-07T22:25:54.944060+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51752	45.128.233.186	23	TCP
2025-01-07T22:25:56.737918+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51754	45.128.233.186	23	TCP
2025-01-07T22:25:58.545486+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51756	45.128.233.186	23	TCP
2025-01-07T22:26:00.320986+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51758	45.128.233.186	23	TCP
2025-01-07T22:26:02.126842+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51760	45.128.233.186	23	TCP
2025-01-07T22:26:03.946893+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51762	45.128.233.186	23	TCP
2025-01-07T22:26:05.734251+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51764	45.128.233.186	23	TCP
2025-01-07T22:26:07.490792+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51766	45.128.233.186	23	TCP
2025-01-07T22:26:09.230666+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51768	45.128.233.186	23	TCP
2025-01-07T22:26:11.020183+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51770	45.128.233.186	23	TCP
2025-01-07T22:26:12.779940+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51772	45.128.233.186	23	TCP
2025-01-07T22:26:14.594206+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51774	45.128.233.186	23	TCP
2025-01-07T22:26:16.397304+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51776	45.128.233.186	23	TCP
2025-01-07T22:26:18.151893+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51778	45.128.233.186	23	TCP
2025-01-07T22:26:19.975998+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51780	45.128.233.186	23	TCP
2025-01-07T22:26:21.749711+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51782	45.128.233.186	23	TCP
2025-01-07T22:26:23.498138+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51784	45.128.233.186	23	TCP
2025-01-07T22:26:25.286260+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51786	45.128.233.186	23	TCP
2025-01-07T22:26:27.042301+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51788	45.128.233.186	23	TCP
2025-01-07T22:26:28.795016+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51790	45.128.233.186	23	TCP
2025-01-07T22:26:30.677336+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51792	45.128.233.186	23	TCP
2025-01-07T22:26:32.404685+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51794	45.128.233.186	23	TCP
2025-01-07T22:26:34.217835+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51796	45.128.233.186	23	TCP
2025-01-07T22:26:35.978449+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51798	45.128.233.186	23	TCP
2025-01-07T22:26:37.783490+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51800	45.128.233.186	23	TCP
2025-01-07T22:26:39.514896+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51802	45.128.233.186	23	TCP
2025-01-07T22:26:41.278627+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51804	45.128.233.186	23	TCP
2025-01-07T22:26:43.061440+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51806	45.128.233.186	23	TCP
2025-01-07T22:26:44.836850+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51808	45.128.233.186	23	TCP
2025-01-07T22:26:46.618006+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51810	45.128.233.186	23	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: gigops.mpsl.elf

Avira: detected

Found malware configuration

Source: gigops.mpsl.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "45.128.233.186:23"}

Multi AV Scanner detection for submitted file

Source: gigops.mpsl.elf

ReversingLabs: Detection: 71%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/gigops.mpsl.elf (PID: 5430)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51572 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51596 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51580 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51610 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51620 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51576 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51608 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51606 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51582 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51628 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51656 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51652 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51666 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51600 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51618 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51624 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51612 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51634 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51670 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51638 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51704 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51678 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51632 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51676 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51584 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51630 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51598 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51736 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51712 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51726 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51674 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51660 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51654 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51728 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51720 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51730 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51716 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51754 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51764 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51776 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51680 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51696 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51782 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51588 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51772 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51646 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51734 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51616 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51636 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51758 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51590 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51664 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51642 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51798 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51788 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51738 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51774 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51604 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51746 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51698 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51622 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51640 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51574 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51586 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51784 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51724 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51700 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51752 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51708 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51748 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51684 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51750 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51662 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51578 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51742 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51692 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51686 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51744 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51766 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51710 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51648 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51602 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51714 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51780 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51702 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51626 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51690 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51792 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51722 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51594 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51706 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51592 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51740 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51688 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51694 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51658 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51800 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51650 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51762 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51644 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51808 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51786 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51672 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51770 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51718 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51756 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51760 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51778 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51810 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51732 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51790 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51768 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51806 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51614 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51794 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51796 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51668 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51802 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51804 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51682 -> 45.128.233.186:23

Source: global traffic

TCP traffic: 192.168.2.13:48202 -> 185.125.190.26:443

Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 185.125.190.26
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: gigops.mpsl.elf

String found in binary or memory: http://5.206.225.136/bins.sh;

Source: unknown

Network traffic detected: HTTP traffic on port 48202 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: gigops.mpsl.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
Source: 5432.1.00007f5b1c400000.00007f5b1c41d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
Source: 5430.1.00007f5b1c400000.00007f5b1c41d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown

Source: gigops.mpsl.elf	ELF static info symbol of initial sample: passwords
Source: gigops.mpsl.elf	ELF static info symbol of initial sample: usernames

Source: gigops.mpsl.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
Source: 5432.1.00007f5b1c400000.00007f5b1c41d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
Source: 5430.1.00007f5b1c400000.00007f5b1c41d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26

Source: classification engine

Classification label: mal92.spre.troj.linELF@0/0@2/0

Source: /tmp/gigops.mpsl.elf (PID: 5430)

Queries kernel information via 'uname':

Jump to behavior

Source: gigops.mpsl.elf, 5430.1.0000560dba571000.0000560dba5f8000.rw-.sdmp, gigops.mpsl.elf, 5432.1.0000560dba571000.0000560dba5f8000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mipsel
Source: gigops.mpsl.elf, 5430.1.0000560dba571000.0000560dba5f8000.rw-.sdmp, gigops.mpsl.elf, 5432.1.0000560dba571000.0000560dba5f8000.rw-.sdmp	Binary or memory string: V!/etc/qemu-binfmt/mipsel
Source: gigops.mpsl.elf, 5430.1.00007ffd4b6ad000.00007ffd4b6ce000.rw-.sdmp, gigops.mpsl.elf, 5432.1.00007ffd4b6ad000.00007ffd4b6ce000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-mipsel/tmp/gigops.mpsl.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/gigops.mpsl.elf
Source: gigops.mpsl.elf, 5430.1.00007ffd4b6ad000.00007ffd4b6ce000.rw-.sdmp, gigops.mpsl.elf, 5432.1.00007ffd4b6ad000.00007ffd4b6ce000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mipsel

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: gigops.mpsl.elf, type: SAMPLE

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: gigops.mpsl.elf, type: SAMPLE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact

Malware Configuration

Threatname: Gafgyt

{"C2 url": "45.128.233.186:23"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
gigops.mpsl.elf	71%	ReversingLabs	Linux.Trojan.Gafgyt
gigops.mpsl.elf	100%	Avira	LINUX/Gafgyt.opnc

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.25	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
45.128.233.186:23	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://5.206.225.136/bins.sh;	gigops.mpsl.elf	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
45.128.233.186	unknown	United Kingdom		208861	RACKTECHRU	true
185.125.190.26	unknown	United Kingdom		41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
45.128.233.186	gigops.x86.elf	Get hash	malicious	Gafgyt	Browse
	gigops.arm6.elf	Get hash	malicious	Gafgyt	Browse
	gigops.mips.elf	Get hash	malicious	Gafgyt	Browse
185.125.190.26	94.156.227.153-sora.arm5-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse
	94.156.227.153-sora.m68k-2025-01-07T16_09_14.elf	Get hash	malicious	Mirai	Browse
	la.bot.powerpc.elf	Get hash	malicious	Mirai	Browse
	arm.elf	Get hash	malicious	Mirai	Browse
	arm7.elf	Get hash	malicious	Mirai	Browse
	arm6.elf	Get hash	malicious	Mirai	Browse
	mips.elf	Get hash	malicious	Unknown	Browse
	arm7.elf	Get hash	malicious	Mirai	Browse
	m68k.elf	Get hash	malicious	Unknown	Browse
	wev86.elf	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	gigops.mips.elf	Get hash	malicious	Gafgyt	Browse	162.213.35.25
	miori.arc.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	botnet.mips.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	botnet.arm7.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	botnet.arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	sora.ppc.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	sora.sh4.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	sora.arm7.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	sora.mips.elf	Get hash	malicious	Mirai	Browse	162.213.35.25

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
RACKTECHRU	gigops.x86.elf	Get hash	malicious	Gafgyt	Browse	45.128.233.186
	gigops.arm6.elf	Get hash	malicious	Gafgyt	Browse	45.128.233.186
	gigops.mips.elf	Get hash	malicious	Gafgyt	Browse	45.128.233.186
	lEwK4xROgV.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	86.110.194.28
	zZ1Y43bxxV.exe	Get hash	malicious	DCRat	Browse	86.110.194.28
	updIMdPUj8.exe	Get hash	malicious	DCRat	Browse	86.110.194.28
	jew.sh4.elf	Get hash	malicious	Unknown	Browse	91.223.144.119
	la.bot.mipsel.elf	Get hash	malicious	Unknown	Browse	193.38.236.134
	oyCvLcfl3R.exe	Get hash	malicious	XenoRAT	Browse	194.113.106.81
	qsKo.ps1	Get hash	malicious	RHADAMANTHYS	Browse	194.113.106.180
CANONICAL-ASGB	gigops.arm6.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	miori.arm6.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	botnet.arm6.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	.i.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	94.156.227.153-sora.arm6-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	94.156.227.153-sora.arm-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	94.156.227.153-sora.arm5-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	94.156.227.153-sora.m68k-2025-01-07T16_09_14.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	main_m68k.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	main_m68k.elf	Get hash	malicious	Mirai	Browse	91.189.91.42

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	5.146352398930781
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	gigops.mpsl.elf
File size:	155'252 bytes
MD5:	3281da183a6fc886ee6d60bef79bbaed
SHA1:	1775cc8448031dece4b9bae98624c20fdc9d5b2f
SHA256:	d120f54adeb9047722a48c3510bbe77e6525db5e378194a0b274478ac77c9a54
SHA512:	4bd4f52755876564b0521e274577ea492927f5c8d5f5071bd040aa769b895a359d837dcf9770b6d822df27b0b2ddf37efc196a3a400e5c026606f2dfff95b3c0
SSDEEP:	1536:O9RhLejuNqi25DB9NdP6Ou1TQhvbNkbZbrogd:O92h5v6VTQBbN6Vd
TLSH:	35E3C50A67A19EB7D81ECE3702D6422110CDDD5913DDAB6F72B4EA1CE7AB88E45C3D04
File Content Preview:	.ELF......................@.4...........4. ...(........p......@...@...........................@...@.h...h.....................B...B.X...Hx..............D...D.B.D.B.................Q.td................................................PSC....<dR.'!......'...

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x4002d0
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	5
Section Header Offset:	132236
Section Header Size:	40
Number of Section Headers:	22
Header String Table Index:	19

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.reginfo	MIPS_REGINFO	0x4000d4	0xd4	0x18	0x18	0x2	A	0	0	4
.init	PROGBITS	0x4000ec	0xec	0x8c	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x400180	0x180	0x1a490	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x41a610	0x1a610	0x5c	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x41a670	0x1a670	0x21f8	0x0	0x2	A	0	0	16
.eh_frame	PROGBITS	0x42d000	0x1d000	0x44	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x42d044	0x1d044	0x8	0x0	0x403	WAT	0	0	4
.ctors	PROGBITS	0x42d044	0x1d044	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x42d04c	0x1d04c	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x42d054	0x1d054	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x42d060	0x1d060	0x300	0x0	0x3	WA	0	0	16
.got	PROGBITS	0x42d360	0x1d360	0x4f4	0x4	0x10000003	WAp	0	0	16
.sdata	PROGBITS	0x42d854	0x1d854	0x4	0x0	0x10000003	WAp	0	0	4
.sbss	NOBITS	0x42d858	0x1d858	0x3c	0x0	0x10000003	WAp	0	0	4
.bss	NOBITS	0x42d8a0	0x1d858	0x6fa8	0x0	0x3	WA	0	0	16
.comment	PROGBITS	0x0	0x1d858	0xaf8	0x0	0x0		0	0	1
.mdebug.abi32	PROGBITS	0xaf8	0x1e350	0x0	0x0	0x0		0	0	1
.pdr	PROGBITS	0x0	0x1e350	0x20a0	0x0	0x0		0	0	4
.shstrtab	STRTAB	0x0	0x203f0	0x9a	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x207fc	0x31c0	0x10	0x0		21	310	4
.strtab	STRTAB	0x0	0x239bc	0x24b8	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
<unknown>	0xd4	0x4000d4	0x4000d4	0x18	0x18	0.9834	0x4	R	0x4	.reginfo
LOAD	0x0	0x400000	0x400000	0x1c868	0x1c868	5.1078	0x5	R E	0x10000	.reginfo .init .text .fini .rodata
LOAD	0x1d000	0x42d000	0x42d000	0x858	0x7848	4.6065	0x6	RW	0x10000	.eh_frame .tbss .ctors .dtors .jcr .data .got .sdata .sbss .bss
TLS	0x1d044	0x42d044	0x42d044	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x4000d4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x4000ec	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x400180	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x41a610	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x41a670	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x42d000	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x42d044	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x42d044	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x42d04c	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x42d054	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x42d060	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x42d360	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x42d854	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x42d858	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x42d8a0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0xaf8	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
C.1.5091	.symtab	0x41c780	24	OBJECT	<unknown>	DEFAULT	5
C.3.5380	.symtab	0x41c74c	12	OBJECT	<unknown>	DEFAULT	5
C.3.6092	.symtab	0x41c7a0	12	OBJECT	<unknown>	DEFAULT	5
C.3.6114	.symtab	0x41b5e8	12	OBJECT	<unknown>	DEFAULT	5
C.3.6172	.symtab	0x41c7b0	12	OBJECT	<unknown>	DEFAULT	5
C.381.6889	.symtab	0x41adf4	8	OBJECT	<unknown>	DEFAULT	5
C.4.6115	.symtab	0x41b5dc	12	OBJECT	<unknown>	DEFAULT	5
C.5.6123	.symtab	0x41b5d0	12	OBJECT	<unknown>	DEFAULT	5
C.6.5518	.symtab	0x41c740	12	OBJECT	<unknown>	DEFAULT	5
FRAMESZ	.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
FRAMESZ	.symtab	0x18	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
GPOFF	.symtab	0x18	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
GPOFF	.symtab	0x14	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
LOCALSZ	.symtab	0x3	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
LOCALSZ	.symtab	0x1	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
Q	.symtab	0x42d8d8	16384	OBJECT	<unknown>	DEFAULT	15
RAOFF	.symtab	0x1c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
StartTheLelz	.symtab	0x404658	8640	FUNC	<unknown>	DEFAULT	3
V0OFF	.symtab	0x14	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_Exit	.symtab	0x40ce60	76	FUNC	<unknown>	DEFAULT	3
_GLOBAL_OFFSET_TABLE_	.symtab	0x42d360	0	OBJECT	<unknown>	DEFAULT	12
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x42d048	0	OBJECT	<unknown>	DEFAULT	8
__CTOR_LIST__	.symtab	0x42d044	0	OBJECT	<unknown>	DEFAULT	8
__C_ctype_b	.symtab	0x42d0f0	4	OBJECT	<unknown>	DEFAULT	11
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x41afb0	768	OBJECT	<unknown>	DEFAULT	5
__C_ctype_toupper	.symtab	0x42d100	4	OBJECT	<unknown>	DEFAULT	11
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x41b2b0	768	OBJECT	<unknown>	DEFAULT	5
__DTOR_END__	.symtab	0x42d050	0	OBJECT	<unknown>	DEFAULT	9
__DTOR_LIST__	.symtab	0x42d04c	0	OBJECT	<unknown>	DEFAULT	9
__EH_FRAME_BEGIN__	.symtab	0x42d000	0	OBJECT	<unknown>	DEFAULT	6
__FRAME_END__	.symtab	0x42d040	0	OBJECT	<unknown>	DEFAULT	6
__GI___C_ctype_b	.symtab	0x42d0f0	4	OBJECT	<unknown>	HIDDEN	11
__GI___C_ctype_toupper	.symtab	0x42d100	4	OBJECT	<unknown>	HIDDEN	11
__GI___close	.symtab	0x413e7c	176	FUNC	<unknown>	HIDDEN	3
__GI___close_nocancel	.symtab	0x413e54	40	FUNC	<unknown>	HIDDEN	3
__GI___ctype_b	.symtab	0x42d0f4	4	OBJECT	<unknown>	HIDDEN	11
__GI___ctype_toupper	.symtab	0x42d104	4	OBJECT	<unknown>	HIDDEN	11
__GI___errno_location	.symtab	0x40d440	28	FUNC	<unknown>	HIDDEN	3
__GI___fcntl_nocancel	.symtab	0x40cce0	108	FUNC	<unknown>	HIDDEN	3
__GI___fgetc_unlocked	.symtab	0x418500	388	FUNC	<unknown>	HIDDEN	3
__GI___glibc_strerror_r	.symtab	0x40fac0	68	FUNC	<unknown>	HIDDEN	3
__GI___libc_close	.symtab	0x413e7c	176	FUNC	<unknown>	HIDDEN	3
__GI___libc_fcntl	.symtab	0x40cd4c	268	FUNC	<unknown>	HIDDEN	3
__GI___libc_open	.symtab	0x413f6c	192	FUNC	<unknown>	HIDDEN	3
__GI___libc_read	.symtab	0x41416c	192	FUNC	<unknown>	HIDDEN	3
__GI___libc_waitpid	.symtab	0x41426c	192	FUNC	<unknown>	HIDDEN	3
__GI___libc_write	.symtab	0x41406c	192	FUNC	<unknown>	HIDDEN	3
__GI___open	.symtab	0x413f6c	192	FUNC	<unknown>	HIDDEN	3
__GI___open_nocancel	.symtab	0x413f44	40	FUNC	<unknown>	HIDDEN	3
__GI___read	.symtab	0x41416c	192	FUNC	<unknown>	HIDDEN	3
__GI___read_nocancel	.symtab	0x414144	40	FUNC	<unknown>	HIDDEN	3
__GI___register_atfork	.symtab	0x4138e0	452	FUNC	<unknown>	HIDDEN	3
__GI___sigaddset	.symtab	0x410ff8	44	FUNC	<unknown>	HIDDEN	3
__GI___sigdelset	.symtab	0x411024	48	FUNC	<unknown>	HIDDEN	3
__GI___sigismember	.symtab	0x410fd0	40	FUNC	<unknown>	HIDDEN	3
__GI___uClibc_fini	.symtab	0x4144e0	204	FUNC	<unknown>	HIDDEN	3
__GI___uClibc_init	.symtab	0x414634	120	FUNC	<unknown>	HIDDEN	3
__GI___waitpid	.symtab	0x41426c	192	FUNC	<unknown>	HIDDEN	3
__GI___write	.symtab	0x41406c	192	FUNC	<unknown>	HIDDEN	3
__GI___write_nocancel	.symtab	0x414044	40	FUNC	<unknown>	HIDDEN	3
__GI___xpg_strerror_r	.symtab	0x40fb10	380	FUNC	<unknown>	HIDDEN	3
__GI__exit	.symtab	0x40ce60	76	FUNC	<unknown>	HIDDEN	3
__GI_abort	.symtab	0x4121e0	408	FUNC	<unknown>	HIDDEN	3
__GI_atoi	.symtab	0x412b00	28	FUNC	<unknown>	HIDDEN	3
__GI_brk	.symtab	0x419900	80	FUNC	<unknown>	HIDDEN	3
__GI_chdir	.symtab	0x40ceb0	56	FUNC	<unknown>	HIDDEN	3
__GI_close	.symtab	0x413e7c	176	FUNC	<unknown>	HIDDEN	3
__GI_closedir	.symtab	0x4156e0	292	FUNC	<unknown>	HIDDEN	3
__GI_config_close	.symtab	0x4160d4	132	FUNC	<unknown>	HIDDEN	3
__GI_config_open	.symtab	0x416158	116	FUNC	<unknown>	HIDDEN	3
__GI_config_read	.symtab	0x415c10	1220	FUNC	<unknown>	HIDDEN	3
__GI_connect	.symtab	0x41084c	220	FUNC	<unknown>	HIDDEN	3
__GI_dup2	.symtab	0x40cef0	60	FUNC	<unknown>	HIDDEN	3
__GI_execl	.symtab	0x412e20	196	FUNC	<unknown>	HIDDEN	3
__GI_execve	.symtab	0x415430	60	FUNC	<unknown>	HIDDEN	3
__GI_exit	.symtab	0x412d30	240	FUNC	<unknown>	HIDDEN	3
__GI_fclose	.symtab	0x416340	804	FUNC	<unknown>	HIDDEN	3
__GI_fcntl	.symtab	0x40cd4c	268	FUNC	<unknown>	HIDDEN	3
__GI_fdopen	.symtab	0x416670	128	FUNC	<unknown>	HIDDEN	3
__GI_fflush_unlocked	.symtab	0x418148	940	FUNC	<unknown>	HIDDEN	3
__GI_fgetc	.symtab	0x417c00	372	FUNC	<unknown>	HIDDEN	3
__GI_fgetc_unlocked	.symtab	0x418500	388	FUNC	<unknown>	HIDDEN	3
__GI_fgets	.symtab	0x417d80	320	FUNC	<unknown>	HIDDEN	3
__GI_fgets_unlocked	.symtab	0x418690	276	FUNC	<unknown>	HIDDEN	3
__GI_fopen	.symtab	0x4166f0	28	FUNC	<unknown>	HIDDEN	3
__GI_fork	.symtab	0x4134b0	988	FUNC	<unknown>	HIDDEN	3
__GI_fprintf	.symtab	0x40d520	72	FUNC	<unknown>	HIDDEN	3
__GI_fputs_unlocked	.symtab	0x40f240	124	FUNC	<unknown>	HIDDEN	3
__GI_fseek	.symtab	0x419e60	68	FUNC	<unknown>	HIDDEN	3
__GI_fseeko64	.symtab	0x419eb0	500	FUNC	<unknown>	HIDDEN	3
__GI_fstat	.symtab	0x4199d0	136	FUNC	<unknown>	HIDDEN	3
__GI_fwrite_unlocked	.symtab	0x40f2c0	268	FUNC	<unknown>	HIDDEN	3
__GI_getc_unlocked	.symtab	0x418500	388	FUNC	<unknown>	HIDDEN	3
__GI_getdtablesize	.symtab	0x40cf30	72	FUNC	<unknown>	HIDDEN	3
__GI_getegid	.symtab	0x415470	16	FUNC	<unknown>	HIDDEN	3
__GI_geteuid	.symtab	0x415480	16	FUNC	<unknown>	HIDDEN	3
__GI_getgid	.symtab	0x415490	16	FUNC	<unknown>	HIDDEN	3
__GI_getpagesize	.symtab	0x4154a0	48	FUNC	<unknown>	HIDDEN	3
__GI_getpid	.symtab	0x413ab0	84	FUNC	<unknown>	HIDDEN	3
__GI_getrlimit	.symtab	0x40cf80	60	FUNC	<unknown>	HIDDEN	3
__GI_getsockname	.symtab	0x410930	60	FUNC	<unknown>	HIDDEN	3
__GI_getuid	.symtab	0x4154d0	16	FUNC	<unknown>	HIDDEN	3
__GI_htonl	.symtab	0x40fdb8	40	FUNC	<unknown>	HIDDEN	3
__GI_htons	.symtab	0x40fda0	24	FUNC	<unknown>	HIDDEN	3
__GI_inet_addr	.symtab	0x4107c0	72	FUNC	<unknown>	HIDDEN	3
__GI_inet_aton	.symtab	0x418db0	284	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntoa	.symtab	0x41079c	32	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntoa_r	.symtab	0x4106d0	204	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntop	.symtab	0x41037c	852	FUNC	<unknown>	HIDDEN	3
__GI_inet_pton	.symtab	0x40ff08	696	FUNC	<unknown>	HIDDEN	3
__GI_initstate_r	.symtab	0x4128bc	300	FUNC	<unknown>	HIDDEN	3
__GI_ioctl	.symtab	0x40cfc0	248	FUNC	<unknown>	HIDDEN	3
__GI_isatty	.symtab	0x40fcb0	60	FUNC	<unknown>	HIDDEN	3
__GI_isspace	.symtab	0x40d3d0	44	FUNC	<unknown>	HIDDEN	3
__GI_kill	.symtab	0x40d0c0	56	FUNC	<unknown>	HIDDEN	3
__GI_lseek64	.symtab	0x41a510	136	FUNC	<unknown>	HIDDEN	3
__GI_memchr	.symtab	0x4187b0	260	FUNC	<unknown>	HIDDEN	3
__GI_memcpy	.symtab	0x40f3d0	308	FUNC	<unknown>	HIDDEN	3
__GI_mempcpy	.symtab	0x4188c0	76	FUNC	<unknown>	HIDDEN	3
__GI_memrchr	.symtab	0x418910	260	FUNC	<unknown>	HIDDEN	3
__GI_memset	.symtab	0x40f510	144	FUNC	<unknown>	HIDDEN	3
__GI_mmap	.symtab	0x415310	112	FUNC	<unknown>	HIDDEN	3
__GI_mremap	.symtab	0x419a60	96	FUNC	<unknown>	HIDDEN	3
__GI_munmap	.symtab	0x4154e0	60	FUNC	<unknown>	HIDDEN	3
__GI_nanosleep	.symtab	0x41555c	200	FUNC	<unknown>	HIDDEN	3
__GI_ntohl	.symtab	0x40fdf8	40	FUNC	<unknown>	HIDDEN	3
__GI_ntohs	.symtab	0x40fde0	24	FUNC	<unknown>	HIDDEN	3
__GI_open	.symtab	0x413f6c	192	FUNC	<unknown>	HIDDEN	3
__GI_opendir	.symtab	0x415924	240	FUNC	<unknown>	HIDDEN	3
__GI_perror	.symtab	0x40d460	92	FUNC	<unknown>	HIDDEN	3
__GI_pipe	.symtab	0x40cc40	64	FUNC	<unknown>	HIDDEN	3
__GI_printf	.symtab	0x40d4c0	92	FUNC	<unknown>	HIDDEN	3
__GI_raise	.symtab	0x413b10	264	FUNC	<unknown>	HIDDEN	3
__GI_random	.symtab	0x4123a0	164	FUNC	<unknown>	HIDDEN	3
__GI_random_r	.symtab	0x412680	172	FUNC	<unknown>	HIDDEN	3
__GI_rawmemchr	.symtab	0x41a3f0	192	FUNC	<unknown>	HIDDEN	3
__GI_read	.symtab	0x41416c	192	FUNC	<unknown>	HIDDEN	3
__GI_readdir64	.symtab	0x415b00	272	FUNC	<unknown>	HIDDEN	3
__GI_recv	.symtab	0x410a0c	240	FUNC	<unknown>	HIDDEN	3
__GI_sbrk	.symtab	0x415630	164	FUNC	<unknown>	HIDDEN	3
__GI_select	.symtab	0x40d1c0	260	FUNC	<unknown>	HIDDEN	3
__GI_send	.symtab	0x410b3c	240	FUNC	<unknown>	HIDDEN	3
__GI_sendto	.symtab	0x410ca0	280	FUNC	<unknown>	HIDDEN	3
__GI_setsid	.symtab	0x40d2d0	60	FUNC	<unknown>	HIDDEN	3
__GI_setsockopt	.symtab	0x410dc0	96	FUNC	<unknown>	HIDDEN	3
__GI_setstate_r	.symtab	0x4129e8	272	FUNC	<unknown>	HIDDEN	3
__GI_sigaction	.symtab	0x415380	28	FUNC	<unknown>	HIDDEN	3
__GI_sigaddset	.symtab	0x410e60	76	FUNC	<unknown>	HIDDEN	3
__GI_sigemptyset	.symtab	0x410eb0	36	FUNC	<unknown>	HIDDEN	3
__GI_signal	.symtab	0x410ee0	228	FUNC	<unknown>	HIDDEN	3
__GI_sigprocmask	.symtab	0x40d310	176	FUNC	<unknown>	HIDDEN	3
__GI_sleep	.symtab	0x413c20	404	FUNC	<unknown>	HIDDEN	3
__GI_socket	.symtab	0x410e20	60	FUNC	<unknown>	HIDDEN	3
__GI_sprintf	.symtab	0x416710	80	FUNC	<unknown>	HIDDEN	3
__GI_srandom_r	.symtab	0x41272c	400	FUNC	<unknown>	HIDDEN	3
__GI_strcat	.symtab	0x40f5a0	52	FUNC	<unknown>	HIDDEN	3
__GI_strchr	.symtab	0x40f5e0	248	FUNC	<unknown>	HIDDEN	3
__GI_strchrnul	.symtab	0x418a20	248	FUNC	<unknown>	HIDDEN	3
__GI_strcmp	.symtab	0x40f6e0	44	FUNC	<unknown>	HIDDEN	3
__GI_strcoll	.symtab	0x40f6e0	44	FUNC	<unknown>	HIDDEN	3
__GI_strcpy	.symtab	0x40f710	36	FUNC	<unknown>	HIDDEN	3
__GI_strcspn	.symtab	0x418b20	144	FUNC	<unknown>	HIDDEN	3
__GI_strlen	.symtab	0x40f740	184	FUNC	<unknown>	HIDDEN	3
__GI_strncpy	.symtab	0x40f800	188	FUNC	<unknown>	HIDDEN	3
__GI_strnlen	.symtab	0x40f8c0	248	FUNC	<unknown>	HIDDEN	3
__GI_strpbrk	.symtab	0x418d70	64	FUNC	<unknown>	HIDDEN	3
__GI_strrchr	.symtab	0x418bb0	160	FUNC	<unknown>	HIDDEN	3
__GI_strspn	.symtab	0x418c50	72	FUNC	<unknown>	HIDDEN	3
__GI_strstr	.symtab	0x40f9c0	256	FUNC	<unknown>	HIDDEN	3
__GI_strtok	.symtab	0x40fc90	32	FUNC	<unknown>	HIDDEN	3
__GI_strtok_r	.symtab	0x418ca0	208	FUNC	<unknown>	HIDDEN	3
__GI_strtol	.symtab	0x412b20	28	FUNC	<unknown>	HIDDEN	3
__GI_sysconf	.symtab	0x4130ec	792	FUNC	<unknown>	HIDDEN	3
__GI_tcgetattr	.symtab	0x40fcf0	176	FUNC	<unknown>	HIDDEN	3
__GI_time	.symtab	0x40d3c0	16	FUNC	<unknown>	HIDDEN	3
__GI_toupper	.symtab	0x40d400	60	FUNC	<unknown>	HIDDEN	3
__GI_vfork	.symtab	0x413410	152	FUNC	<unknown>	HIDDEN	3
__GI_vfprintf	.symtab	0x40dc00	372	FUNC	<unknown>	HIDDEN	3
__GI_vsnprintf	.symtab	0x416760	248	FUNC	<unknown>	HIDDEN	3
__GI_waitpid	.symtab	0x41426c	192	FUNC	<unknown>	HIDDEN	3
__GI_wcrtomb	.symtab	0x4161d0	108	FUNC	<unknown>	HIDDEN	3
__GI_wcsnrtombs	.symtab	0x416280	192	FUNC	<unknown>	HIDDEN	3
__GI_wcsrtombs	.symtab	0x416240	64	FUNC	<unknown>	HIDDEN	3
__GI_write	.symtab	0x41406c	192	FUNC	<unknown>	HIDDEN	3
__JCR_END__	.symtab	0x42d054	0	OBJECT	<unknown>	DEFAULT	10
__JCR_LIST__	.symtab	0x42d054	0	OBJECT	<unknown>	DEFAULT	10
__app_fini	.symtab	0x433ecc	4	OBJECT	<unknown>	HIDDEN	15
__atexit_lock	.symtab	0x42d320	24	OBJECT	<unknown>	DEFAULT	11
__bss_start	.symtab	0x42d858	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x4145ac	136	FUNC	<unknown>	DEFAULT	3
__close	.symtab	0x413e7c	176	FUNC	<unknown>	DEFAULT	3
__close_nocancel	.symtab	0x413e54	40	FUNC	<unknown>	DEFAULT	3
__ctype_b	.symtab	0x42d0f4	4	OBJECT	<unknown>	DEFAULT	11
__ctype_toupper	.symtab	0x42d104	4	OBJECT	<unknown>	DEFAULT	11
__curbrk	.symtab	0x434460	4	OBJECT	<unknown>	HIDDEN	15
__data_start	.symtab	0x42d070	0	OBJECT	<unknown>	DEFAULT	11
__deregister_frame_info	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__do_global_ctors_aux	.symtab	0x41a5a0	0	FUNC	<unknown>	DEFAULT	3
__do_global_dtors_aux	.symtab	0x400180	0	FUNC	<unknown>	DEFAULT	3
__dso_handle	.symtab	0x42d854	0	OBJECT	<unknown>	HIDDEN	13
__environ	.symtab	0x433ec4	4	OBJECT	<unknown>	DEFAULT	15
__errno_location	.symtab	0x40d440	28	FUNC	<unknown>	DEFAULT	3
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x433960	4	OBJECT	<unknown>	HIDDEN	15
__fcntl_nocancel	.symtab	0x40cce0	108	FUNC	<unknown>	DEFAULT	3
__fgetc_unlocked	.symtab	0x418500	388	FUNC	<unknown>	DEFAULT	3
__fini_array_end	.symtab	0x42d044	0	NOTYPE	<unknown>	HIDDEN	7
__fini_array_start	.symtab	0x42d044	0	NOTYPE	<unknown>	HIDDEN	7
__fork	.symtab	0x4134b0	988	FUNC	<unknown>	DEFAULT	3
__fork_generation_pointer	.symtab	0x42d864	4	OBJECT	<unknown>	HIDDEN	14
__fork_handlers	.symtab	0x42d868	4	OBJECT	<unknown>	HIDDEN	14
__fork_lock	.symtab	0x433970	4	OBJECT	<unknown>	HIDDEN	15
__getdents64	.symtab	0x419ca0	436	FUNC	<unknown>	HIDDEN	3
__getpagesize	.symtab	0x4154a0	48	FUNC	<unknown>	DEFAULT	3
__getpid	.symtab	0x413ab0	84	FUNC	<unknown>	DEFAULT	3
__glibc_strerror_r	.symtab	0x40fac0	68	FUNC	<unknown>	DEFAULT	3
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x42d044	0	NOTYPE	<unknown>	HIDDEN	7
__init_array_start	.symtab	0x42d044	0	NOTYPE	<unknown>	HIDDEN	7
__libc_close	.symtab	0x413e7c	176	FUNC	<unknown>	DEFAULT	3
__libc_connect	.symtab	0x41084c	220	FUNC	<unknown>	DEFAULT	3
__libc_disable_asynccancel	.symtab	0x414330	136	FUNC	<unknown>	HIDDEN	3
__libc_enable_asynccancel	.symtab	0x4143b8	220	FUNC	<unknown>	HIDDEN	3
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	7
__libc_fcntl	.symtab	0x40cd4c	268	FUNC	<unknown>	DEFAULT	3
__libc_fork	.symtab	0x4134b0	988	FUNC	<unknown>	DEFAULT	3
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	7
__libc_nanosleep	.symtab	0x41555c	200	FUNC	<unknown>	DEFAULT	3
__libc_open	.symtab	0x413f6c	192	FUNC	<unknown>	DEFAULT	3
__libc_read	.symtab	0x41416c	192	FUNC	<unknown>	DEFAULT	3
__libc_recv	.symtab	0x410a0c	240	FUNC	<unknown>	DEFAULT	3
__libc_select	.symtab	0x40d1c0	260	FUNC	<unknown>	DEFAULT	3
__libc_send	.symtab	0x410b3c	240	FUNC	<unknown>	DEFAULT	3
__libc_sendto	.symtab	0x410ca0	280	FUNC	<unknown>	DEFAULT	3
__libc_setup_tls	.symtab	0x419588	660	FUNC	<unknown>	DEFAULT	3
__libc_sigaction	.symtab	0x415380	28	FUNC	<unknown>	DEFAULT	3
__libc_stack_end	.symtab	0x433ec0	4	OBJECT	<unknown>	DEFAULT	15
__libc_system	.symtab	0x41522c	220	FUNC	<unknown>	DEFAULT	3
__libc_waitpid	.symtab	0x41426c	192	FUNC	<unknown>	DEFAULT	3
__libc_write	.symtab	0x41406c	192	FUNC	<unknown>	DEFAULT	3
__linkin_atfork	.symtab	0x413890	80	FUNC	<unknown>	HIDDEN	3
__lll_lock_wait_private	.symtab	0x413dc0	120	FUNC	<unknown>	HIDDEN	3
__malloc_consolidate	.symtab	0x411ce4	520	FUNC	<unknown>	HIDDEN	3
__malloc_largebin_index	.symtab	0x411060	140	FUNC	<unknown>	DEFAULT	3
__malloc_lock	.symtab	0x42d220	24	OBJECT	<unknown>	DEFAULT	11
__malloc_state	.symtab	0x4344d0	888	OBJECT	<unknown>	DEFAULT	15
__malloc_trim	.symtab	0x411bc0	292	FUNC	<unknown>	DEFAULT	3
__nptl_deallocate_tsd	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x413f6c	192	FUNC	<unknown>	DEFAULT	3
__open_nocancel	.symtab	0x413f44	40	FUNC	<unknown>	DEFAULT	3
__pagesize	.symtab	0x433ec8	4	OBJECT	<unknown>	DEFAULT	15
__preinit_array_end	.symtab	0x42d044	0	NOTYPE	<unknown>	HIDDEN	7
__preinit_array_start	.symtab	0x42d044	0	NOTYPE	<unknown>	HIDDEN	7
__progname	.symtab	0x42d344	4	OBJECT	<unknown>	DEFAULT	11
__progname_full	.symtab	0x42d348	4	OBJECT	<unknown>	DEFAULT	11
__pthread_initialize_minimal	.symtab	0x41981c	28	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_init	.symtab	0x4144a8	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_lock	.symtab	0x4144a0	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_trylock	.symtab	0x4144a0	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_unlock	.symtab	0x4144a0	8	FUNC	<unknown>	DEFAULT	3
__pthread_return_0	.symtab	0x4144a0	8	FUNC	<unknown>	DEFAULT	3
__pthread_unwind	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x41416c	192	FUNC	<unknown>	DEFAULT	3
__read_nocancel	.symtab	0x414144	40	FUNC	<unknown>	DEFAULT	3
__register_atfork	.symtab	0x4138e0	452	FUNC	<unknown>	DEFAULT	3
__register_frame_info	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__rtld_fini	.symtab	0x433ed0	4	OBJECT	<unknown>	HIDDEN	15
__sigaddset	.symtab	0x410ff8	44	FUNC	<unknown>	DEFAULT	3
__sigdelset	.symtab	0x411024	48	FUNC	<unknown>	DEFAULT	3
__sigismember	.symtab	0x410fd0	40	FUNC	<unknown>	DEFAULT	3
__sigjmp_save	.symtab	0x41a4b0	96	FUNC	<unknown>	HIDDEN	3
__sigsetjmp	.symtab	0x4153c0	36	FUNC	<unknown>	DEFAULT	3
__sigsetjmp_aux	.symtab	0x419950	128	FUNC	<unknown>	DEFAULT	3
__start	.symtab	0x4002d0	100	FUNC	<unknown>	DEFAULT	3
__stdin	.symtab	0x42d12c	4	OBJECT	<unknown>	DEFAULT	11
__stdio_READ	.symtab	0x41a0b0	144	FUNC	<unknown>	HIDDEN	3
__stdio_WRITE	.symtab	0x416860	344	FUNC	<unknown>	HIDDEN	3
__stdio_adjust_position	.symtab	0x41a140	256	FUNC	<unknown>	HIDDEN	3
__stdio_fwrite	.symtab	0x416e50	472	FUNC	<unknown>	HIDDEN	3
__stdio_rfill	.symtab	0x41a240	88	FUNC	<unknown>	HIDDEN	3
__stdio_seek	.symtab	0x41a380	112	FUNC	<unknown>	HIDDEN	3
__stdio_trans2r_o	.symtab	0x41a2a0	220	FUNC	<unknown>	HIDDEN	3
__stdio_trans2w_o	.symtab	0x417030	304	FUNC	<unknown>	HIDDEN	3
__stdio_wcommit	.symtab	0x40db90	100	FUNC	<unknown>	HIDDEN	3
__stdout	.symtab	0x42d130	4	OBJECT	<unknown>	DEFAULT	11
__sys_connect	.symtab	0x410810	60	FUNC	<unknown>	DEFAULT	3
__sys_recv	.symtab	0x4109d0	60	FUNC	<unknown>	DEFAULT	3
__sys_send	.symtab	0x410b00	60	FUNC	<unknown>	DEFAULT	3
__sys_sendto	.symtab	0x410c30	112	FUNC	<unknown>	DEFAULT	3
__syscall_error	.symtab	0x40cc80	92	FUNC	<unknown>	DEFAULT	3
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x415520	60	FUNC	<unknown>	DEFAULT	3
__syscall_rt_sigaction	.symtab	0x4153f0	60	FUNC	<unknown>	DEFAULT	3
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0x40d160	96	FUNC	<unknown>	DEFAULT	3
__tls_get_addr	.symtab	0x419568	32	FUNC	<unknown>	DEFAULT	3
__uClibc_fini	.symtab	0x4144e0	204	FUNC	<unknown>	DEFAULT	3
__uClibc_init	.symtab	0x414634	120	FUNC	<unknown>	DEFAULT	3
__uClibc_main	.symtab	0x4146ac	1132	FUNC	<unknown>	DEFAULT	3
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x42d340	4	OBJECT	<unknown>	HIDDEN	11
__vfork	.symtab	0x413410	152	FUNC	<unknown>	DEFAULT	3
__waitpid	.symtab	0x41426c	192	FUNC	<unknown>	DEFAULT	3
__waitpid_nocancel	.symtab	0x414244	40	FUNC	<unknown>	DEFAULT	3
__write	.symtab	0x41406c	192	FUNC	<unknown>	DEFAULT	3
__write_nocancel	.symtab	0x414044	40	FUNC	<unknown>	DEFAULT	3
__xpg_strerror_r	.symtab	0x40fb10	380	FUNC	<unknown>	DEFAULT	3
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x419bb8	220	FUNC	<unknown>	HIDDEN	3
__xstat64_conv	.symtab	0x419ac0	248	FUNC	<unknown>	HIDDEN	3
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x433920	10	OBJECT	<unknown>	DEFAULT	15
_charpad	.symtab	0x40dd80	156	FUNC	<unknown>	DEFAULT	3
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x434470	40	OBJECT	<unknown>	HIDDEN	15
_custom_printf_handler	.symtab	0x434498	40	OBJECT	<unknown>	HIDDEN	15
_custom_printf_spec	.symtab	0x42d210	4	OBJECT	<unknown>	HIDDEN	11
_dl_aux_init	.symtab	0x419840	40	FUNC	<unknown>	DEFAULT	3
_dl_init_static_tls	.symtab	0x42d350	4	OBJECT	<unknown>	DEFAULT	11
_dl_nothread_init_static_tls	.symtab	0x419868	148	FUNC	<unknown>	HIDDEN	3
_dl_phdr	.symtab	0x42d88c	4	OBJECT	<unknown>	DEFAULT	14
_dl_phnum	.symtab	0x42d890	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_gaps	.symtab	0x42d880	1	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_slotinfo_list	.symtab	0x42d87c	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_generation	.symtab	0x42d884	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_max_dtv_idx	.symtab	0x42d874	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_setup	.symtab	0x419504	100	FUNC	<unknown>	DEFAULT	3
_dl_tls_static_align	.symtab	0x42d870	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_nelem	.symtab	0x42d888	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_size	.symtab	0x42d878	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_used	.symtab	0x42d86c	4	OBJECT	<unknown>	DEFAULT	14
_edata	.symtab	0x42d858	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x434848	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0x40ce60	76	FUNC	<unknown>	DEFAULT	3
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fbss	.symtab	0x42d858	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_fdata	.symtab	0x42d060	0	NOTYPE	<unknown>	DEFAULT	11
_fini	.symtab	0x41a610	28	FUNC	<unknown>	DEFAULT	4
_fixed_buffers	.symtab	0x431920	8192	OBJECT	<unknown>	DEFAULT	15
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x40de1c	232	FUNC	<unknown>	DEFAULT	3
_fpmaxtostr	.symtab	0x417390	2156	FUNC	<unknown>	HIDDEN	3
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ftext	.symtab	0x400180	0	NOTYPE	<unknown>	DEFAULT	3
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_gp	.symtab	0x435350	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_gp_disp	.symtab	0x0	0	OBJECT	<unknown>	DEFAULT	SHN_UNDEF
_init	.symtab	0x4000ec	28	FUNC	<unknown>	DEFAULT	2
_load_inttype	.symtab	0x417160	136	FUNC	<unknown>	HIDDEN	3
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x40e7a0	248	FUNC	<unknown>	HIDDEN	3
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x40ebac	1684	FUNC	<unknown>	HIDDEN	3
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x40e8a0	100	FUNC	<unknown>	HIDDEN	3
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x40e910	548	FUNC	<unknown>	HIDDEN	3
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x40eb40	108	FUNC	<unknown>	DEFAULT	3
_pthread_cleanup_pop_restore	.symtab	0x4144bc	36	FUNC	<unknown>	DEFAULT	3
_pthread_cleanup_push_defer	.symtab	0x4144b0	12	FUNC	<unknown>	DEFAULT	3
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp	.symtab	0x4153a0	28	FUNC	<unknown>	DEFAULT	3
_sigintr	.symtab	0x4344c0	16	OBJECT	<unknown>	HIDDEN	15
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x4169c0	1168	FUNC	<unknown>	HIDDEN	3
_stdio_init	.symtab	0x40d930	184	FUNC	<unknown>	HIDDEN	3
_stdio_openlist	.symtab	0x42d134	4	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_add_lock	.symtab	0x431900	12	OBJECT	<unknown>	DEFAULT	15
_stdio_openlist_dec_use	.symtab	0x417ec0	648	FUNC	<unknown>	HIDDEN	3
_stdio_openlist_del_count	.symtab	0x43191c	4	OBJECT	<unknown>	DEFAULT	15
_stdio_openlist_del_lock	.symtab	0x43190c	12	OBJECT	<unknown>	DEFAULT	15
_stdio_openlist_use_count	.symtab	0x431918	4	OBJECT	<unknown>	DEFAULT	15
_stdio_streams	.symtab	0x42d138	204	OBJECT	<unknown>	DEFAULT	11
_stdio_term	.symtab	0x40d9e8	416	FUNC	<unknown>	HIDDEN	3
_stdio_user_locking	.symtab	0x42d110	4	OBJECT	<unknown>	DEFAULT	11
_stdlib_strto_l	.symtab	0x412b40	488	FUNC	<unknown>	HIDDEN	3
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x4171f0	68	FUNC	<unknown>	HIDDEN	3
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x41b750	2934	OBJECT	<unknown>	HIDDEN	5
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x417240	332	FUNC	<unknown>	HIDDEN	3
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x40df04	2204	FUNC	<unknown>	HIDDEN	3
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x4121e0	408	FUNC	<unknown>	DEFAULT	3
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
adaptiveHOLD	.symtab	0x4084d0	2800	FUNC	<unknown>	DEFAULT	3
atoi	.symtab	0x412b00	28	FUNC	<unknown>	DEFAULT	3
atol	.symtab	0x412b00	28	FUNC	<unknown>	DEFAULT	3
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x433950	4	OBJECT	<unknown>	DEFAULT	15
brk	.symtab	0x419900	80	FUNC	<unknown>	DEFAULT	3
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x410ee0	228	FUNC	<unknown>	DEFAULT	3
buf.4511	.symtab	0x433940	16	OBJECT	<unknown>	DEFAULT	15
c	.symtab	0x42d084	4	OBJECT	<unknown>	DEFAULT	11
calloc	.symtab	0x418ed0	344	FUNC	<unknown>	DEFAULT	3
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
cancel_handler	.symtab	0x414b20	368	FUNC	<unknown>	DEFAULT	3
chdir	.symtab	0x40ceb0	56	FUNC	<unknown>	DEFAULT	3
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x413e7c	176	FUNC	<unknown>	DEFAULT	3
closedir	.symtab	0x4156e0	292	FUNC	<unknown>	DEFAULT	3
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x42d094	4	OBJECT	<unknown>	DEFAULT	11
completed.4786	.symtab	0x42d8a0	1	OBJECT	<unknown>	DEFAULT	15
connect	.symtab	0x41084c	220	FUNC	<unknown>	DEFAULT	3
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x402b3c	828	FUNC	<unknown>	DEFAULT	3
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x404188	460	FUNC	<unknown>	DEFAULT	3
currentServer	.symtab	0x42d080	4	OBJECT	<unknown>	DEFAULT	11
data_start	.symtab	0x42d070	0	OBJECT	<unknown>	DEFAULT	11
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
do_system	.symtab	0x414c90	1436	FUNC	<unknown>	DEFAULT	3
dup2	.symtab	0x40cef0	60	FUNC	<unknown>	DEFAULT	3
dup2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x433ec4	4	OBJECT	<unknown>	DEFAULT	15
errno	.symtab	0x0	4	TLS	<unknown>	DEFAULT	7
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
estridx	.symtab	0x41b6c0	126	OBJECT	<unknown>	DEFAULT	5
execl	.symtab	0x412e20	196	FUNC	<unknown>	DEFAULT	3
execl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
execve	.symtab	0x415430	60	FUNC	<unknown>	DEFAULT	3
execve.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x412d30	240	FUNC	<unknown>	DEFAULT	3
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x41c7d8	72	OBJECT	<unknown>	DEFAULT	5
fclose	.symtab	0x416340	804	FUNC	<unknown>	DEFAULT	3
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x40cd4c	268	FUNC	<unknown>	DEFAULT	3
fd_to_DIR	.symtab	0x415810	276	FUNC	<unknown>	DEFAULT	3
fdgets	.symtab	0x401cac	292	FUNC	<unknown>	DEFAULT	3
fdopen	.symtab	0x416670	128	FUNC	<unknown>	DEFAULT	3
fdopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fdopen_pids	.symtab	0x4318d8	4	OBJECT	<unknown>	DEFAULT	15
fdopendir	.symtab	0x415a14	228	FUNC	<unknown>	DEFAULT	3
fdpclose	.symtab	0x401a30	636	FUNC	<unknown>	DEFAULT	3
fdpopen	.symtab	0x4015c4	1132	FUNC	<unknown>	DEFAULT	3
fflush_unlocked	.symtab	0x418148	940	FUNC	<unknown>	DEFAULT	3
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x417c00	372	FUNC	<unknown>	DEFAULT	3
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x418500	388	FUNC	<unknown>	DEFAULT	3
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x417d80	320	FUNC	<unknown>	DEFAULT	3
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x418690	276	FUNC	<unknown>	DEFAULT	3
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x41c7c0	20	OBJECT	<unknown>	DEFAULT	5
fopen	.symtab	0x4166f0	28	FUNC	<unknown>	DEFAULT	3
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x4134b0	988	FUNC	<unknown>	DEFAULT	3
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork_handler_pool	.symtab	0x433974	1348	OBJECT	<unknown>	DEFAULT	15
fprintf	.symtab	0x40d520	72	FUNC	<unknown>	DEFAULT	3
fprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x40f240	124	FUNC	<unknown>	DEFAULT	3
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x40023c	0	FUNC	<unknown>	DEFAULT	3
free	.symtab	0x411eec	660	FUNC	<unknown>	DEFAULT	3
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x419e60	68	FUNC	<unknown>	DEFAULT	3
fseeko	.symtab	0x419e60	68	FUNC	<unknown>	DEFAULT	3
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x419eb0	500	FUNC	<unknown>	DEFAULT	3
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x4199d0	136	FUNC	<unknown>	DEFAULT	3
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fuckit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0x40f2c0	268	FUNC	<unknown>	DEFAULT	3
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getBogos	.symtab	0x402254	768	FUNC	<unknown>	DEFAULT	3
getBuild	.symtab	0x40bce4	56	FUNC	<unknown>	DEFAULT	3
getCores	.symtab	0x402554	316	FUNC	<unknown>	DEFAULT	3
getHost	.symtab	0x402110	160	FUNC	<unknown>	DEFAULT	3
getOurIP	.symtab	0x40b964	896	FUNC	<unknown>	DEFAULT	3
getRandomIP	.symtab	0x4040dc	172	FUNC	<unknown>	DEFAULT	3
getRandomPublicIP	.symtab	0x4038c4	2072	FUNC	<unknown>	DEFAULT	3
getc	.symtab	0x417c00	372	FUNC	<unknown>	DEFAULT	3
getc_unlocked	.symtab	0x418500	388	FUNC	<unknown>	DEFAULT	3
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x40cf30	72	FUNC	<unknown>	DEFAULT	3
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x415470	16	FUNC	<unknown>	DEFAULT	3
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x415480	16	FUNC	<unknown>	DEFAULT	3
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x415490	16	FUNC	<unknown>	DEFAULT	3
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x4154a0	48	FUNC	<unknown>	DEFAULT	3
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x413ab0	84	FUNC	<unknown>	DEFAULT	3
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x40cf80	60	FUNC	<unknown>	DEFAULT	3
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x410930	60	FUNC	<unknown>	DEFAULT	3
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x410970	96	FUNC	<unknown>	DEFAULT	3
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x4154d0	16	FUNC	<unknown>	DEFAULT	3
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x42d8c4	4	OBJECT	<unknown>	DEFAULT	15
h_errno	.symtab	0x4	4	TLS	<unknown>	DEFAULT	7
hextable	.symtab	0x41a8b8	1024	OBJECT	<unknown>	DEFAULT	5
hlt	.symtab	0x40032c	0	NOTYPE	<unknown>	DEFAULT	3
htonl	.symtab	0x40fdb8	40	FUNC	<unknown>	DEFAULT	3
htons	.symtab	0x40fda0	24	FUNC	<unknown>	DEFAULT	3
i.4709	.symtab	0x42d088	4	OBJECT	<unknown>	DEFAULT	11
index	.symtab	0x40f5e0	248	FUNC	<unknown>	DEFAULT	3
inet_addr	.symtab	0x4107c0	72	FUNC	<unknown>	DEFAULT	3
inet_aton	.symtab	0x418db0	284	FUNC	<unknown>	DEFAULT	3
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x41079c	32	FUNC	<unknown>	DEFAULT	3
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x4106d0	204	FUNC	<unknown>	DEFAULT	3
inet_ntop	.symtab	0x41037c	852	FUNC	<unknown>	DEFAULT	3
inet_ntop4	.symtab	0x4101c0	444	FUNC	<unknown>	DEFAULT	3
inet_pton	.symtab	0x40ff08	696	FUNC	<unknown>	DEFAULT	3
inet_pton4	.symtab	0x40fe20	232	FUNC	<unknown>	DEFAULT	3
infectline	.symtab	0x42d090	4	OBJECT	<unknown>	DEFAULT	11
initConnection	.symtab	0x40b714	592	FUNC	<unknown>	DEFAULT	3
init_rand	.symtab	0x400340	300	FUNC	<unknown>	DEFAULT	3
init_static_tls	.symtab	0x4194b0	84	FUNC	<unknown>	DEFAULT	3
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x4124fc	208	FUNC	<unknown>	DEFAULT	3
initstate_r	.symtab	0x4128bc	300	FUNC	<unknown>	DEFAULT	3
intr	.symtab	0x433ee0	28	OBJECT	<unknown>	DEFAULT	15
ioctl	.symtab	0x40cfc0	248	FUNC	<unknown>	DEFAULT	3
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ipState	.symtab	0x4318dc	5	OBJECT	<unknown>	DEFAULT	15
isatty	.symtab	0x40fcb0	60	FUNC	<unknown>	DEFAULT	3
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x40d3d0	44	FUNC	<unknown>	DEFAULT	3
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x40d0c0	56	FUNC	<unknown>	DEFAULT	3
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-cancellation.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-lowlevellock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-tls.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x402e78	664	FUNC	<unknown>	DEFAULT	3
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lock	.symtab	0x433f1c	4	OBJECT	<unknown>	DEFAULT	15
lseek64	.symtab	0x41a510	136	FUNC	<unknown>	DEFAULT	3
macAddress	.symtab	0x42d8d0	6	OBJECT	<unknown>	DEFAULT	15
main	.symtab	0x40bd1c	3868	FUNC	<unknown>	DEFAULT	3
mainCommSock	.symtab	0x42d8c0	4	OBJECT	<unknown>	DEFAULT	15
makeIPPacket	.symtab	0x4044b0	296	FUNC	<unknown>	DEFAULT	3
makeRandomStr	.symtab	0x402690	268	FUNC	<unknown>	DEFAULT	3
malloc	.symtab	0x4110ec	2764	FUNC	<unknown>	DEFAULT	3
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x412180	84	FUNC	<unknown>	DEFAULT	3
matchPrompt	.symtab	0x403348	536	FUNC	<unknown>	DEFAULT	3
memchr	.symtab	0x4187b0	260	FUNC	<unknown>	DEFAULT	3
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x40f3d0	308	FUNC	<unknown>	DEFAULT	3
mempcpy	.symtab	0x4188c0	76	FUNC	<unknown>	DEFAULT	3
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x418910	260	FUNC	<unknown>	DEFAULT	3
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x40f510	144	FUNC	<unknown>	DEFAULT	3
mmap	.symtab	0x415310	112	FUNC	<unknown>	DEFAULT	3
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap	.symtab	0x419a60	96	FUNC	<unknown>	DEFAULT	3
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x4154e0	60	FUNC	<unknown>	DEFAULT	3
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x42d240	24	OBJECT	<unknown>	DEFAULT	11
mylock	.symtab	0x42d260	24	OBJECT	<unknown>	DEFAULT	11
nanosleep	.symtab	0x41555c	200	FUNC	<unknown>	DEFAULT	3
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
negotiate	.symtab	0x403110	568	FUNC	<unknown>	DEFAULT	3
next_start.1303	.symtab	0x433930	4	OBJECT	<unknown>	DEFAULT	15
nprocessors_onln	.symtab	0x412ef0	508	FUNC	<unknown>	DEFAULT	3
ntohl	.symtab	0x40fdf8	40	FUNC	<unknown>	DEFAULT	3
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x40fde0	24	FUNC	<unknown>	DEFAULT	3
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x42d8c8	8	OBJECT	<unknown>	DEFAULT	15
object.4798	.symtab	0x42d8a4	24	OBJECT	<unknown>	DEFAULT	15
open	.symtab	0x413f6c	192	FUNC	<unknown>	DEFAULT	3
opendir	.symtab	0x415924	240	FUNC	<unknown>	DEFAULT	3
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x42d858	4	OBJECT	<unknown>	DEFAULT	14
p.4784	.symtab	0x42d060	0	OBJECT	<unknown>	DEFAULT	11
parseHex	.symtab	0x401dd0	176	FUNC	<unknown>	DEFAULT	3
parse_config.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
passwords	.symtab	0x42d0b0	56	OBJECT	<unknown>	DEFAULT	11
pclose	.symtab	0x40d570	328	FUNC	<unknown>	DEFAULT	3
perror	.symtab	0x40d460	92	FUNC	<unknown>	DEFAULT	3
perror.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
pids	.symtab	0x42d860	4	OBJECT	<unknown>	DEFAULT	14
pipe	.symtab	0x40cc40	64	FUNC	<unknown>	DEFAULT	3
popen	.symtab	0x40d6b8	632	FUNC	<unknown>	DEFAULT	3
popen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
popen_list	.symtab	0x4318f0	4	OBJECT	<unknown>	DEFAULT	15
prctl	.symtab	0x40d100	96	FUNC	<unknown>	DEFAULT	3
prctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.6318	.symtab	0x41b610	12	OBJECT	<unknown>	DEFAULT	5
print	.symtab	0x400da0	1460	FUNC	<unknown>	DEFAULT	3
printchar	.symtab	0x400810	184	FUNC	<unknown>	DEFAULT	3
printf	.symtab	0x40d4c0	92	FUNC	<unknown>	DEFAULT	3
printf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
printi	.symtab	0x400b04	668	FUNC	<unknown>	DEFAULT	3
prints	.symtab	0x4008c8	572	FUNC	<unknown>	DEFAULT	3
processCmd	.symtab	0x409784	8080	FUNC	<unknown>	DEFAULT	3
program_invocation_name	.symtab	0x42d348	4	OBJECT	<unknown>	DEFAULT	11
program_invocation_short_name	.symtab	0x42d344	4	OBJECT	<unknown>	DEFAULT	11
qual_chars.6326	.symtab	0x41b630	20	OBJECT	<unknown>	DEFAULT	5
quit	.symtab	0x433efc	28	OBJECT	<unknown>	DEFAULT	15
raise	.symtab	0x413b10	264	FUNC	<unknown>	DEFAULT	3
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x412380	28	FUNC	<unknown>	DEFAULT	3
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x40046c	472	FUNC	<unknown>	DEFAULT	3
random	.symtab	0x4123a0	164	FUNC	<unknown>	DEFAULT	3
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x41c2f0	40	OBJECT	<unknown>	DEFAULT	5
random_r	.symtab	0x412680	172	FUNC	<unknown>	DEFAULT	3
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x42d278	128	OBJECT	<unknown>	DEFAULT	11
rawmemchr	.symtab	0x41a3f0	192	FUNC	<unknown>	DEFAULT	3
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x41416c	192	FUNC	<unknown>	DEFAULT	3
readUntil	.symtab	0x403560	868	FUNC	<unknown>	DEFAULT	3
readdir64	.symtab	0x415b00	272	FUNC	<unknown>	DEFAULT	3
readdir64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc	.symtab	0x419030	1152	FUNC	<unknown>	DEFAULT	3
realloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x410a0c	240	FUNC	<unknown>	DEFAULT	3
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x40279c	928	FUNC	<unknown>	DEFAULT	3
register-atfork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rindex	.symtab	0x418bb0	160	FUNC	<unknown>	DEFAULT	3
sa_refcntr	.symtab	0x433f18	4	OBJECT	<unknown>	DEFAULT	15
sbrk	.symtab	0x415630	164	FUNC	<unknown>	DEFAULT	3
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
scanPid	.symtab	0x42d85c	4	OBJECT	<unknown>	DEFAULT	14
sclose	.symtab	0x4045d8	128	FUNC	<unknown>	DEFAULT	3
select	.symtab	0x40d1c0	260	FUNC	<unknown>	DEFAULT	3
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x410b3c	240	FUNC	<unknown>	DEFAULT	3
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendCNC	.symtab	0x407138	372	FUNC	<unknown>	DEFAULT	3
sendHOLD	.symtab	0x408fc0	1988	FUNC	<unknown>	DEFAULT	3
sendHTTP	.symtab	0x4072ac	316	FUNC	<unknown>	DEFAULT	3
sendJUNK	.symtab	0x407d9c	1844	FUNC	<unknown>	DEFAULT	3
sendTCP	.symtab	0x4073e8	2484	FUNC	<unknown>	DEFAULT	3
sendUDP	.symtab	0x406818	2336	FUNC	<unknown>	DEFAULT	3
sendto	.symtab	0x410ca0	280	FUNC	<unknown>	DEFAULT	3
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setjmp_aux.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x40d2d0	60	FUNC	<unknown>	DEFAULT	3
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x410dc0	96	FUNC	<unknown>	DEFAULT	3
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x412444	184	FUNC	<unknown>	DEFAULT	3
setstate_r	.symtab	0x4129e8	272	FUNC	<unknown>	DEFAULT	3
sigaction	.symtab	0x415380	28	FUNC	<unknown>	DEFAULT	3
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigaddset	.symtab	0x410e60	76	FUNC	<unknown>	DEFAULT	3
sigaddset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigempty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigemptyset	.symtab	0x410eb0	36	FUNC	<unknown>	DEFAULT	3
sigjmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x410ee0	228	FUNC	<unknown>	DEFAULT	3
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x40d310	176	FUNC	<unknown>	DEFAULT	3
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x413c20	404	FUNC	<unknown>	DEFAULT	3
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x410e20	60	FUNC	<unknown>	DEFAULT	3
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sockprintf	.symtab	0x401444	384	FUNC	<unknown>	DEFAULT	3
spec_and_mask.6325	.symtab	0x41b644	16	OBJECT	<unknown>	DEFAULT	5
spec_base.6317	.symtab	0x41b61c	7	OBJECT	<unknown>	DEFAULT	5
spec_chars.6322	.symtab	0x41b6a0	21	OBJECT	<unknown>	DEFAULT	5
spec_flags.6321	.symtab	0x41b6b8	8	OBJECT	<unknown>	DEFAULT	5
spec_or_mask.6324	.symtab	0x41b654	16	OBJECT	<unknown>	DEFAULT	5
spec_ranges.6323	.symtab	0x41b664	9	OBJECT	<unknown>	DEFAULT	5
sprintf	.symtab	0x416710	80	FUNC	<unknown>	DEFAULT	3
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x4125cc	172	FUNC	<unknown>	DEFAULT	3
srandom	.symtab	0x4125cc	172	FUNC	<unknown>	DEFAULT	3
srandom_r	.symtab	0x41272c	400	FUNC	<unknown>	DEFAULT	3
static_dtv	.symtab	0x433f20	512	OBJECT	<unknown>	DEFAULT	15
static_map	.symtab	0x434428	52	OBJECT	<unknown>	DEFAULT	15
static_slotinfo	.symtab	0x434120	776	OBJECT	<unknown>	DEFAULT	15
stderr	.symtab	0x42d128	4	OBJECT	<unknown>	DEFAULT	11
stdin	.symtab	0x42d120	4	OBJECT	<unknown>	DEFAULT	11
stdout	.symtab	0x42d124	4	OBJECT	<unknown>	DEFAULT	11
strcat	.symtab	0x40f5a0	52	FUNC	<unknown>	DEFAULT	3
strcat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x40f5e0	248	FUNC	<unknown>	DEFAULT	3
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchrnul	.symtab	0x418a20	248	FUNC	<unknown>	DEFAULT	3
strchrnul.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x40f6e0	44	FUNC	<unknown>	DEFAULT	3
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x40f6e0	44	FUNC	<unknown>	DEFAULT	3
strcpy	.symtab	0x40f710	36	FUNC	<unknown>	DEFAULT	3
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcspn	.symtab	0x418b20	144	FUNC	<unknown>	DEFAULT	3
strcspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x40fb10	380	FUNC	<unknown>	DEFAULT	3
strlen	.symtab	0x40f740	184	FUNC	<unknown>	DEFAULT	3
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x40f800	188	FUNC	<unknown>	DEFAULT	3
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x40f8c0	248	FUNC	<unknown>	DEFAULT	3
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x418d70	64	FUNC	<unknown>	DEFAULT	3
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strrchr	.symtab	0x418bb0	160	FUNC	<unknown>	DEFAULT	3
strrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x418c50	72	FUNC	<unknown>	DEFAULT	3
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x40f9c0	256	FUNC	<unknown>	DEFAULT	3
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x40fc90	32	FUNC	<unknown>	DEFAULT	3
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x418ca0	208	FUNC	<unknown>	DEFAULT	3
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x412b20	28	FUNC	<unknown>	DEFAULT	3
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sysconf	.symtab	0x4130ec	792	FUNC	<unknown>	DEFAULT	3
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
system	.symtab	0x41522c	220	FUNC	<unknown>	DEFAULT	3
system.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
szprintf	.symtab	0x4013cc	120	FUNC	<unknown>	DEFAULT	3
tcgetattr	.symtab	0x40fcf0	176	FUNC	<unknown>	DEFAULT	3
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x404354	348	FUNC	<unknown>	DEFAULT	3
time	.symtab	0x40d3c0	16	FUNC	<unknown>	DEFAULT	3
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x40d400	60	FUNC	<unknown>	DEFAULT	3
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x400644	460	FUNC	<unknown>	DEFAULT	3
type_codes	.symtab	0x41b670	24	OBJECT	<unknown>	DEFAULT	5
type_sizes	.symtab	0x41b688	12	OBJECT	<unknown>	DEFAULT	5
unknown.1327	.symtab	0x41b740	14	OBJECT	<unknown>	DEFAULT	5
unsafe_state	.symtab	0x42d300	20	OBJECT	<unknown>	DEFAULT	11
uppercase	.symtab	0x4021b0	164	FUNC	<unknown>	DEFAULT	3
usernames	.symtab	0x42d098	24	OBJECT	<unknown>	DEFAULT	11
vfork	.symtab	0x413410	152	FUNC	<unknown>	DEFAULT	3
vfprintf	.symtab	0x40dc00	372	FUNC	<unknown>	DEFAULT	3
vfprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vsnprintf	.symtab	0x416760	248	FUNC	<unknown>	DEFAULT	3
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x41426c	192	FUNC	<unknown>	DEFAULT	3
wcrtomb	.symtab	0x4161d0	108	FUNC	<unknown>	DEFAULT	3
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x416280	192	FUNC	<unknown>	DEFAULT	3
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x416240	64	FUNC	<unknown>	DEFAULT	3
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wildString	.symtab	0x401e80	656	FUNC	<unknown>	DEFAULT	3
write	.symtab	0x41406c	192	FUNC	<unknown>	DEFAULT	3
xdigits.4935	.symtab	0x41c2d4	17	OBJECT	<unknown>	DEFAULT	5
xstatconv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
zprintf	.symtab	0x401354	120	FUNC	<unknown>	DEFAULT	3

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-07T22:23:12.808304+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51572	45.128.233.186	23	TCP
2025-01-07T22:23:14.504394+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51574	45.128.233.186	23	TCP
2025-01-07T22:23:16.245063+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51576	45.128.233.186	23	TCP
2025-01-07T22:23:18.019029+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51578	45.128.233.186	23	TCP
2025-01-07T22:23:19.802774+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51580	45.128.233.186	23	TCP
2025-01-07T22:23:21.565473+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51582	45.128.233.186	23	TCP
2025-01-07T22:23:23.310905+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51584	45.128.233.186	23	TCP
2025-01-07T22:23:25.067143+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51586	45.128.233.186	23	TCP
2025-01-07T22:23:26.813967+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51588	45.128.233.186	23	TCP
2025-01-07T22:23:28.618606+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51590	45.128.233.186	23	TCP
2025-01-07T22:23:30.398174+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51592	45.128.233.186	23	TCP
2025-01-07T22:23:32.192339+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51594	45.128.233.186	23	TCP
2025-01-07T22:23:33.961812+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51596	45.128.233.186	23	TCP
2025-01-07T22:23:35.740563+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51598	45.128.233.186	23	TCP
2025-01-07T22:23:37.551885+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51600	45.128.233.186	23	TCP
2025-01-07T22:23:39.310207+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51602	45.128.233.186	23	TCP
2025-01-07T22:23:41.068591+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51604	45.128.233.186	23	TCP
2025-01-07T22:23:42.855057+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51606	45.128.233.186	23	TCP
2025-01-07T22:23:44.683408+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51608	45.128.233.186	23	TCP
2025-01-07T22:23:46.460986+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51610	45.128.233.186	23	TCP
2025-01-07T22:23:48.244430+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51612	45.128.233.186	23	TCP
2025-01-07T22:23:49.999678+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51614	45.128.233.186	23	TCP
2025-01-07T22:23:51.807677+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51616	45.128.233.186	23	TCP
2025-01-07T22:23:53.541603+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51618	45.128.233.186	23	TCP
2025-01-07T22:23:55.448455+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51620	45.128.233.186	23	TCP
2025-01-07T22:23:57.235870+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51622	45.128.233.186	23	TCP
2025-01-07T22:23:59.043288+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51624	45.128.233.186	23	TCP
2025-01-07T22:24:00.773005+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51626	45.128.233.186	23	TCP
2025-01-07T22:24:02.549083+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51628	45.128.233.186	23	TCP
2025-01-07T22:24:04.274870+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51630	45.128.233.186	23	TCP
2025-01-07T22:24:06.058277+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51632	45.128.233.186	23	TCP
2025-01-07T22:24:07.838303+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51634	45.128.233.186	23	TCP
2025-01-07T22:24:09.571466+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51636	45.128.233.186	23	TCP
2025-01-07T22:24:11.600581+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51638	45.128.233.186	23	TCP
2025-01-07T22:24:13.397160+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51640	45.128.233.186	23	TCP
2025-01-07T22:24:15.139685+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51642	45.128.233.186	23	TCP
2025-01-07T22:24:16.911706+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51644	45.128.233.186	23	TCP
2025-01-07T22:24:18.664180+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51646	45.128.233.186	23	TCP
2025-01-07T22:24:20.448162+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51648	45.128.233.186	23	TCP
2025-01-07T22:24:22.250317+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51650	45.128.233.186	23	TCP
2025-01-07T22:24:24.231443+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51652	45.128.233.186	23	TCP
2025-01-07T22:24:26.021682+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51654	45.128.233.186	23	TCP
2025-01-07T22:24:27.783728+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51656	45.128.233.186	23	TCP
2025-01-07T22:24:29.581461+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51658	45.128.233.186	23	TCP
2025-01-07T22:24:31.325436+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51660	45.128.233.186	23	TCP
2025-01-07T22:24:33.082079+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51662	45.128.233.186	23	TCP
2025-01-07T22:24:35.211399+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51664	45.128.233.186	23	TCP
2025-01-07T22:24:36.976006+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51666	45.128.233.186	23	TCP
2025-01-07T22:24:38.713551+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51668	45.128.233.186	23	TCP
2025-01-07T22:24:40.447492+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51670	45.128.233.186	23	TCP
2025-01-07T22:24:42.243972+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51672	45.128.233.186	23	TCP
2025-01-07T22:24:43.979628+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51674	45.128.233.186	23	TCP
2025-01-07T22:24:45.817421+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51676	45.128.233.186	23	TCP
2025-01-07T22:24:47.644216+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51678	45.128.233.186	23	TCP
2025-01-07T22:24:49.457203+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51680	45.128.233.186	23	TCP
2025-01-07T22:24:51.222159+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51682	45.128.233.186	23	TCP
2025-01-07T22:24:52.944988+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51684	45.128.233.186	23	TCP
2025-01-07T22:24:54.718112+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51686	45.128.233.186	23	TCP
2025-01-07T22:24:56.548567+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51688	45.128.233.186	23	TCP
2025-01-07T22:24:58.294519+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51690	45.128.233.186	23	TCP
2025-01-07T22:25:00.060921+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51692	45.128.233.186	23	TCP
2025-01-07T22:25:01.808737+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51694	45.128.233.186	23	TCP
2025-01-07T22:25:03.586522+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51696	45.128.233.186	23	TCP
2025-01-07T22:25:05.324684+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51698	45.128.233.186	23	TCP
2025-01-07T22:25:07.167217+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51700	45.128.233.186	23	TCP
2025-01-07T22:25:08.916986+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51702	45.128.233.186	23	TCP
2025-01-07T22:25:10.707134+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51704	45.128.233.186	23	TCP
2025-01-07T22:25:12.491422+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51706	45.128.233.186	23	TCP
2025-01-07T22:25:14.285243+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51708	45.128.233.186	23	TCP
2025-01-07T22:25:16.028049+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51710	45.128.233.186	23	TCP
2025-01-07T22:25:17.800633+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51712	45.128.233.186	23	TCP
2025-01-07T22:25:19.600266+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51714	45.128.233.186	23	TCP
2025-01-07T22:25:21.609259+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51716	45.128.233.186	23	TCP
2025-01-07T22:25:23.870318+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51718	45.128.233.186	23	TCP
2025-01-07T22:25:26.020773+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51720	45.128.233.186	23	TCP
2025-01-07T22:25:28.130303+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51722	45.128.233.186	23	TCP
2025-01-07T22:25:30.025396+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51724	45.128.233.186	23	TCP
2025-01-07T22:25:31.796498+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51726	45.128.233.186	23	TCP
2025-01-07T22:25:33.544071+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51728	45.128.233.186	23	TCP
2025-01-07T22:25:35.314355+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51730	45.128.233.186	23	TCP
2025-01-07T22:25:37.095686+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51732	45.128.233.186	23	TCP
2025-01-07T22:25:38.885139+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51734	45.128.233.186	23	TCP
2025-01-07T22:25:40.695943+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51736	45.128.233.186	23	TCP
2025-01-07T22:25:42.430821+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51738	45.128.233.186	23	TCP
2025-01-07T22:25:44.227645+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51740	45.128.233.186	23	TCP
2025-01-07T22:25:46.130748+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51742	45.128.233.186	23	TCP
2025-01-07T22:25:47.869525+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51744	45.128.233.186	23	TCP
2025-01-07T22:25:49.643810+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51746	45.128.233.186	23	TCP
2025-01-07T22:25:51.402758+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51748	45.128.233.186	23	TCP
2025-01-07T22:25:53.155633+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51750	45.128.233.186	23	TCP
2025-01-07T22:25:54.944060+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51752	45.128.233.186	23	TCP
2025-01-07T22:25:56.737918+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51754	45.128.233.186	23	TCP
2025-01-07T22:25:58.545486+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51756	45.128.233.186	23	TCP
2025-01-07T22:26:00.320986+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51758	45.128.233.186	23	TCP
2025-01-07T22:26:02.126842+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51760	45.128.233.186	23	TCP
2025-01-07T22:26:03.946893+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51762	45.128.233.186	23	TCP
2025-01-07T22:26:05.734251+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51764	45.128.233.186	23	TCP
2025-01-07T22:26:07.490792+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51766	45.128.233.186	23	TCP
2025-01-07T22:26:09.230666+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51768	45.128.233.186	23	TCP
2025-01-07T22:26:11.020183+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51770	45.128.233.186	23	TCP
2025-01-07T22:26:12.779940+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51772	45.128.233.186	23	TCP
2025-01-07T22:26:14.594206+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51774	45.128.233.186	23	TCP
2025-01-07T22:26:16.397304+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51776	45.128.233.186	23	TCP
2025-01-07T22:26:18.151893+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51778	45.128.233.186	23	TCP
2025-01-07T22:26:19.975998+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51780	45.128.233.186	23	TCP
2025-01-07T22:26:21.749711+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51782	45.128.233.186	23	TCP
2025-01-07T22:26:23.498138+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51784	45.128.233.186	23	TCP
2025-01-07T22:26:25.286260+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51786	45.128.233.186	23	TCP
2025-01-07T22:26:27.042301+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51788	45.128.233.186	23	TCP
2025-01-07T22:26:28.795016+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51790	45.128.233.186	23	TCP
2025-01-07T22:26:30.677336+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51792	45.128.233.186	23	TCP
2025-01-07T22:26:32.404685+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51794	45.128.233.186	23	TCP
2025-01-07T22:26:34.217835+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51796	45.128.233.186	23	TCP
2025-01-07T22:26:35.978449+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51798	45.128.233.186	23	TCP
2025-01-07T22:26:37.783490+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51800	45.128.233.186	23	TCP
2025-01-07T22:26:39.514896+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51802	45.128.233.186	23	TCP
2025-01-07T22:26:41.278627+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51804	45.128.233.186	23	TCP
2025-01-07T22:26:43.061440+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51806	45.128.233.186	23	TCP
2025-01-07T22:26:44.836850+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51808	45.128.233.186	23	TCP
2025-01-07T22:26:46.618006+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51810	45.128.233.186	23	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 7, 2025 22:23:12.699933052 CET	51572	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:12.704754114 CET	23	51572	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:12.704803944 CET	51572	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:12.808304071 CET	51572	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:12.813137054 CET	23	51572	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:14.482300997 CET	23	51572	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:14.482728958 CET	51572	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:14.483175993 CET	51574	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:14.487550974 CET	23	51572	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:14.487957954 CET	23	51574	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:14.488006115 CET	51574	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:14.504394054 CET	51574	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:14.509243011 CET	23	51574	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:16.223306894 CET	23	51574	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:16.223468065 CET	51574	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:16.223892927 CET	51576	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:16.228291988 CET	23	51574	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:16.228642941 CET	23	51576	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:16.228677988 CET	51576	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:16.245063066 CET	51576	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:16.249867916 CET	23	51576	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:17.999572992 CET	23	51576	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:17.999751091 CET	51576	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:18.000180006 CET	51578	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:18.004571915 CET	23	51576	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:18.004982948 CET	23	51578	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:18.005027056 CET	51578	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:18.019028902 CET	51578	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:18.023818016 CET	23	51578	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:19.782151937 CET	23	51578	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:19.782352924 CET	51578	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:19.782860994 CET	51580	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:19.787163973 CET	23	51578	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:19.787715912 CET	23	51580	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:19.787763119 CET	51580	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:19.802773952 CET	51580	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:19.807581902 CET	23	51580	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:21.543998957 CET	23	51580	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:21.544291973 CET	51580	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:21.544766903 CET	51582	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:21.549089909 CET	23	51580	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:21.549649000 CET	23	51582	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:21.549694061 CET	51582	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:21.565473080 CET	51582	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:21.570269108 CET	23	51582	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:23.289014101 CET	23	51582	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:23.289218903 CET	51582	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:23.289809942 CET	51584	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:23.294028044 CET	23	51582	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:23.294648886 CET	23	51584	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:23.294717073 CET	51584	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:23.310904980 CET	51584	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:23.315669060 CET	23	51584	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:25.042897940 CET	23	51584	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:25.043062925 CET	51584	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:25.043586016 CET	51586	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:25.049043894 CET	23	51584	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:25.049056053 CET	23	51586	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:25.049137115 CET	51586	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:25.067142963 CET	51586	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:25.072110891 CET	23	51586	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:25.409967899 CET	48202	443	192.168.2.13	185.125.190.26
Jan 7, 2025 22:23:26.791846037 CET	23	51586	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:26.792157888 CET	51586	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:26.792634010 CET	51588	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:26.797076941 CET	23	51586	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:26.797606945 CET	23	51588	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:26.797667027 CET	51588	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:26.813966990 CET	51588	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:26.818773031 CET	23	51588	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:28.593966961 CET	23	51588	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:28.594238043 CET	51588	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:28.595163107 CET	51590	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:28.599066973 CET	23	51588	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:28.600033045 CET	23	51590	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:28.600106955 CET	51590	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:28.618606091 CET	51590	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:28.623352051 CET	23	51590	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:30.374619961 CET	23	51590	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:30.374814987 CET	51590	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:30.375368118 CET	51592	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:30.379656076 CET	23	51590	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:30.380276918 CET	23	51592	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:30.380348921 CET	51592	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:30.398174047 CET	51592	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:30.402924061 CET	23	51592	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:32.168839931 CET	23	51592	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:32.169331074 CET	51592	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:32.169949055 CET	51594	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:32.174196005 CET	23	51592	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:32.174734116 CET	23	51594	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:32.174792051 CET	51594	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:32.192338943 CET	51594	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:32.197134018 CET	23	51594	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:33.939651966 CET	23	51594	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:33.939882040 CET	51594	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:33.940510988 CET	51596	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:33.944665909 CET	23	51594	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:33.945395947 CET	23	51596	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:33.945457935 CET	51596	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:33.961812019 CET	51596	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:33.966731071 CET	23	51596	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:35.716415882 CET	23	51596	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:35.716811895 CET	51596	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:35.717515945 CET	51598	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:35.721595049 CET	23	51596	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:35.722330093 CET	23	51598	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:35.722424030 CET	51598	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:35.740562916 CET	51598	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:35.745315075 CET	23	51598	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:37.519670963 CET	23	51598	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:37.519906044 CET	51598	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:37.520770073 CET	51600	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:37.524743080 CET	23	51598	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:37.525527954 CET	23	51600	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:37.525593042 CET	51600	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:37.551884890 CET	51600	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:37.556679010 CET	23	51600	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:39.275537968 CET	23	51600	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:39.275990963 CET	51600	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:39.276783943 CET	51602	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:39.280802011 CET	23	51600	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:39.281554937 CET	23	51602	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:39.281631947 CET	51602	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:39.310206890 CET	51602	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:39.315089941 CET	23	51602	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:41.045099020 CET	23	51602	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:41.045248032 CET	51602	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:41.045614958 CET	51604	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:41.050074100 CET	23	51602	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:41.050421953 CET	23	51604	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:41.050472975 CET	51604	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:41.068591118 CET	51604	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:41.073379040 CET	23	51604	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:42.830964088 CET	23	51604	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:42.831118107 CET	51604	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:42.831671000 CET	51606	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:42.835933924 CET	23	51604	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:42.836446047 CET	23	51606	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:42.836499929 CET	51606	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:42.855057001 CET	51606	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:42.859843016 CET	23	51606	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:44.657418013 CET	23	51606	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:44.657615900 CET	51606	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:44.658363104 CET	51608	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:44.662357092 CET	23	51606	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:44.663134098 CET	23	51608	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:44.663184881 CET	51608	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:44.683408022 CET	51608	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:44.688301086 CET	23	51608	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:46.438139915 CET	23	51608	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:46.438348055 CET	51608	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:46.438795090 CET	51610	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:46.443109035 CET	23	51608	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:46.443564892 CET	23	51610	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:46.443623066 CET	51610	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:46.460985899 CET	51610	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:46.465814114 CET	23	51610	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:48.221234083 CET	23	51610	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:48.221498013 CET	51610	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:48.221965075 CET	51612	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:48.226310968 CET	23	51610	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:48.226792097 CET	23	51612	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:48.226847887 CET	51612	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:48.244430065 CET	51612	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:48.249310017 CET	23	51612	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:49.974313021 CET	23	51612	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:49.974466085 CET	51612	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:49.975064039 CET	51614	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:49.979242086 CET	23	51612	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:49.979823112 CET	23	51614	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:49.979882002 CET	51614	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:49.999677896 CET	51614	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:50.004837990 CET	23	51614	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:51.788227081 CET	23	51614	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:51.788393974 CET	51614	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:51.788902044 CET	51616	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:51.793189049 CET	23	51614	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:51.793654919 CET	23	51616	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:51.793718100 CET	51616	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:51.807677031 CET	51616	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:51.812460899 CET	23	51616	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:53.522304058 CET	23	51616	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:53.522509098 CET	51616	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:53.522944927 CET	51618	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:53.527265072 CET	23	51616	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:53.527714968 CET	23	51618	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:53.527767897 CET	51618	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:53.541603088 CET	51618	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:53.546355963 CET	23	51618	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:55.423403025 CET	23	51618	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:55.423686028 CET	51618	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:55.424107075 CET	51620	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:55.428533077 CET	23	51618	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:55.428877115 CET	23	51620	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:55.428968906 CET	51620	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:55.448455095 CET	51620	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:55.453280926 CET	23	51620	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:56.641962051 CET	48202	443	192.168.2.13	185.125.190.26
Jan 7, 2025 22:23:57.217641115 CET	23	51620	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:57.217797041 CET	51620	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:57.218270063 CET	51622	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:57.222620010 CET	23	51620	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:57.223057032 CET	23	51622	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:57.223114014 CET	51622	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:57.235869884 CET	51622	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:57.240870953 CET	23	51622	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:59.022488117 CET	23	51622	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:59.022622108 CET	51622	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:59.023227930 CET	51624	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:59.027636051 CET	23	51622	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:59.028251886 CET	23	51624	45.128.233.186	192.168.2.13
Jan 7, 2025 22:23:59.028305054 CET	51624	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:59.043287992 CET	51624	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:23:59.048069000 CET	23	51624	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:00.754137993 CET	23	51624	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:00.754280090 CET	51624	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:00.754770994 CET	51626	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:00.759080887 CET	23	51624	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:00.759545088 CET	23	51626	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:00.759620905 CET	51626	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:00.773005009 CET	51626	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:00.777781010 CET	23	51626	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:02.528873920 CET	23	51626	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:02.529105902 CET	51626	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:02.529548883 CET	51628	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:02.533931017 CET	23	51626	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:02.534368038 CET	23	51628	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:02.534420013 CET	51628	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:02.549082994 CET	51628	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:02.553951025 CET	23	51628	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:04.255143881 CET	23	51628	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:04.255265951 CET	51628	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:04.255625963 CET	51630	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:04.260056973 CET	23	51628	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:04.260430098 CET	23	51630	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:04.260536909 CET	51630	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:04.274869919 CET	51630	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:04.279645920 CET	23	51630	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:06.035404921 CET	23	51630	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:06.035799026 CET	51630	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:06.036515951 CET	51632	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:06.040628910 CET	23	51630	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:06.041369915 CET	23	51632	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:06.041459084 CET	51632	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:06.058276892 CET	51632	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:06.063194036 CET	23	51632	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:07.818799973 CET	23	51632	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:07.819009066 CET	51632	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:07.819478035 CET	51634	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:07.823807001 CET	23	51632	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:07.824306965 CET	23	51634	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:07.824358940 CET	51634	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:07.838303089 CET	51634	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:07.843066931 CET	23	51634	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:09.551378012 CET	23	51634	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:09.551558971 CET	51634	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:09.552011967 CET	51636	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:09.556368113 CET	23	51634	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:09.556787968 CET	23	51636	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:09.556864977 CET	51636	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:09.571465969 CET	51636	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:09.576200962 CET	23	51636	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:11.579526901 CET	23	51636	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:11.579706907 CET	51636	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:11.579782963 CET	23	51636	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:11.579823017 CET	51636	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:11.580169916 CET	51638	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:11.584537983 CET	23	51636	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:11.584928036 CET	23	51638	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:11.584980011 CET	51638	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:11.600580931 CET	51638	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:11.606460094 CET	23	51638	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:13.377239943 CET	23	51638	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:13.377382040 CET	51638	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:13.378019094 CET	51640	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:13.382500887 CET	23	51638	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:13.383291006 CET	23	51640	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:13.383347988 CET	51640	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:13.397160053 CET	51640	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:13.402060032 CET	23	51640	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:15.117630005 CET	23	51640	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:15.117902040 CET	51640	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:15.118329048 CET	51642	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:15.122663975 CET	23	51640	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:15.123053074 CET	23	51642	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:15.123156071 CET	51642	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:15.139684916 CET	51642	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:15.144493103 CET	23	51642	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:16.891324997 CET	23	51642	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:16.891618013 CET	51642	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:16.892090082 CET	51644	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:16.896394014 CET	23	51642	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:16.896954060 CET	23	51644	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:16.897005081 CET	51644	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:16.911705971 CET	51644	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:16.916445971 CET	23	51644	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:18.646331072 CET	23	51644	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:18.646482944 CET	51644	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:18.646840096 CET	51646	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:18.651297092 CET	23	51644	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:18.651633978 CET	23	51646	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:18.651725054 CET	51646	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:18.664180040 CET	51646	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:18.668956041 CET	23	51646	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:20.428592920 CET	23	51646	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:20.428812981 CET	51646	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:20.429342031 CET	51648	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:20.433572054 CET	23	51646	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:20.434149981 CET	23	51648	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:20.434252024 CET	51648	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:20.448162079 CET	51648	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:20.453001022 CET	23	51648	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:22.228018045 CET	23	51648	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:22.228190899 CET	51648	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:22.228672981 CET	51650	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:22.233086109 CET	23	51648	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:22.233486891 CET	23	51650	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:22.233550072 CET	51650	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:22.250317097 CET	51650	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:22.255109072 CET	23	51650	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:24.211451054 CET	23	51650	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:24.211584091 CET	51650	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:24.211949110 CET	51652	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:24.216432095 CET	23	51650	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:24.216737032 CET	23	51652	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:24.216814041 CET	51652	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:24.231442928 CET	51652	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:24.236680984 CET	23	51652	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:26.001844883 CET	23	51652	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:26.002137899 CET	51652	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:26.002943993 CET	51654	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:26.006946087 CET	23	51652	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:26.007771015 CET	23	51654	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:26.007817030 CET	51654	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:26.021682024 CET	51654	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:26.026447058 CET	23	51654	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:27.763350964 CET	23	51654	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:27.763617992 CET	51654	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:27.763991117 CET	51656	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:27.768440962 CET	23	51654	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:27.768819094 CET	23	51656	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:27.768867970 CET	51656	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:27.783727884 CET	51656	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:27.788496971 CET	23	51656	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:29.560060024 CET	23	51656	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:29.560225010 CET	51656	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:29.560759068 CET	51658	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:29.565495968 CET	23	51656	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:29.566138983 CET	23	51658	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:29.566270113 CET	51658	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:29.581460953 CET	51658	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:29.586867094 CET	23	51658	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:31.305771112 CET	23	51658	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:31.306175947 CET	51658	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:31.306603909 CET	51660	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:31.311079025 CET	23	51658	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:31.311376095 CET	23	51660	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:31.311423063 CET	51660	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:31.325436115 CET	51660	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:31.330198050 CET	23	51660	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:33.059866905 CET	23	51660	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:33.060302019 CET	51660	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:33.060872078 CET	51662	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:33.065088034 CET	23	51660	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:33.065651894 CET	23	51662	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:33.065732956 CET	51662	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:33.082078934 CET	51662	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:33.086864948 CET	23	51662	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:35.185945988 CET	23	51662	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:35.186101913 CET	23	51662	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:35.186227083 CET	51662	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:35.186276913 CET	51662	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:35.186986923 CET	51664	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:35.191320896 CET	23	51662	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:35.195874929 CET	23	51664	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:35.195940018 CET	51664	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:35.211399078 CET	51664	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:35.216173887 CET	23	51664	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:36.955636978 CET	23	51664	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:36.956046104 CET	51664	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:36.956756115 CET	51666	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:36.960855007 CET	23	51664	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:36.961498022 CET	23	51666	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:36.961545944 CET	51666	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:36.976006031 CET	51666	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:36.980803967 CET	23	51666	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:38.694329023 CET	23	51666	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:38.694572926 CET	51666	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:38.695219994 CET	51668	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:38.699372053 CET	23	51666	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:38.700056076 CET	23	51668	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:38.700118065 CET	51668	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:38.713551044 CET	51668	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:38.718307972 CET	23	51668	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:40.428817987 CET	23	51668	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:40.429124117 CET	51668	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:40.429513931 CET	51670	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:40.434016943 CET	23	51668	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:40.434309006 CET	23	51670	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:40.434353113 CET	51670	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:40.447491884 CET	51670	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:40.452315092 CET	23	51670	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:42.225421906 CET	23	51670	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:42.225606918 CET	51670	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:42.226061106 CET	51672	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:42.230391979 CET	23	51670	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:42.230839968 CET	23	51672	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:42.230882883 CET	51672	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:42.243972063 CET	51672	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:42.248786926 CET	23	51672	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:43.958786964 CET	23	51672	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:43.959139109 CET	51672	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:43.959794998 CET	51674	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:43.964159012 CET	23	51672	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:43.964580059 CET	23	51674	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:43.964652061 CET	51674	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:43.979628086 CET	51674	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:43.984441042 CET	23	51674	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:45.802006960 CET	23	51674	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:45.802210093 CET	51674	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:45.802586079 CET	51676	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:45.807064056 CET	23	51674	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:45.807387114 CET	23	51676	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:45.807429075 CET	51676	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:45.817420959 CET	51676	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:45.822552919 CET	23	51676	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:47.627888918 CET	23	51676	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:47.628159046 CET	51676	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:47.628511906 CET	51678	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:47.632911921 CET	23	51676	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:47.633326054 CET	23	51678	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:47.633405924 CET	51678	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:47.644216061 CET	51678	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:47.649061918 CET	23	51678	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:49.437835932 CET	23	51678	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:49.438100100 CET	51678	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:49.438457012 CET	51680	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:49.443804979 CET	23	51678	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:49.444116116 CET	23	51680	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:49.444171906 CET	51680	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:49.457202911 CET	51680	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:49.462460041 CET	23	51680	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:51.199739933 CET	23	51680	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:51.199976921 CET	51680	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:51.200357914 CET	51682	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:51.204828024 CET	23	51680	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:51.205148935 CET	23	51682	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:51.205198050 CET	51682	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:51.222158909 CET	51682	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:51.226983070 CET	23	51682	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:52.930099964 CET	23	51682	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:52.930234909 CET	51682	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:52.930624962 CET	51684	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:52.935077906 CET	23	51682	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:52.935462952 CET	23	51684	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:52.935519934 CET	51684	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:52.944988012 CET	51684	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:52.949821949 CET	23	51684	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:54.701328039 CET	23	51684	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:54.701782942 CET	51684	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:54.702193022 CET	51686	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:54.706540108 CET	23	51684	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:54.706998110 CET	23	51686	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:54.707046986 CET	51686	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:54.718111992 CET	51686	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:54.722846985 CET	23	51686	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:56.532455921 CET	23	51686	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:56.532871008 CET	51686	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:56.533391953 CET	51688	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:56.537694931 CET	23	51686	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:56.538203001 CET	23	51688	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:56.538248062 CET	51688	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:56.548567057 CET	51688	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:56.553406954 CET	23	51688	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:58.271375895 CET	23	51688	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:58.271739960 CET	51688	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:58.272377968 CET	51690	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:58.276978016 CET	23	51688	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:58.277730942 CET	23	51690	45.128.233.186	192.168.2.13
Jan 7, 2025 22:24:58.277867079 CET	51690	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:58.294518948 CET	51690	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:24:58.299380064 CET	23	51690	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:00.042210102 CET	23	51690	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:00.042573929 CET	51690	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:00.043212891 CET	51692	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:00.047410965 CET	23	51690	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:00.048032045 CET	23	51692	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:00.048085928 CET	51692	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:00.060920954 CET	51692	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:00.065726995 CET	23	51692	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:01.790445089 CET	23	51692	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:01.790771008 CET	51692	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:01.791189909 CET	51694	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:01.796773911 CET	23	51692	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:01.797296047 CET	23	51694	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:01.797379971 CET	51694	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:01.808737040 CET	51694	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:01.814085007 CET	23	51694	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:03.565475941 CET	23	51694	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:03.565759897 CET	51694	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:03.566462040 CET	51696	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:03.570617914 CET	23	51694	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:03.571237087 CET	23	51696	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:03.571293116 CET	51696	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:03.586522102 CET	51696	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:03.591392994 CET	23	51696	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:05.308386087 CET	23	51696	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:05.308602095 CET	51696	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:05.309122086 CET	51698	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:05.313422918 CET	23	51696	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:05.313879967 CET	23	51698	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:05.313925028 CET	51698	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:05.324683905 CET	51698	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:05.329444885 CET	23	51698	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:07.150408030 CET	23	51698	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:07.150576115 CET	51698	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:07.151062965 CET	51700	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:07.155348063 CET	23	51698	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:07.155951023 CET	23	51700	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:07.156037092 CET	51700	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:07.167217016 CET	51700	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:07.171974897 CET	23	51700	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:08.900646925 CET	23	51700	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:08.900821924 CET	51700	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:08.901319981 CET	51702	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:08.905633926 CET	23	51700	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:08.906116962 CET	23	51702	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:08.906172991 CET	51702	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:08.916985989 CET	51702	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:08.921739101 CET	23	51702	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:10.691137075 CET	23	51702	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:10.691298008 CET	51702	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:10.691693068 CET	51704	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:10.696091890 CET	23	51702	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:10.696511030 CET	23	51704	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:10.696562052 CET	51704	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:10.707134008 CET	51704	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:10.711900949 CET	23	51704	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:12.473987103 CET	23	51704	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:12.474143028 CET	51704	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:12.474550009 CET	51706	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:12.478990078 CET	23	51704	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:12.479321957 CET	23	51706	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:12.479430914 CET	51706	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:12.491421938 CET	51706	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:12.496262074 CET	23	51706	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:14.265917063 CET	23	51706	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:14.266149044 CET	51706	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:14.266609907 CET	51708	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:14.271604061 CET	23	51706	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:14.272206068 CET	23	51708	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:14.272258043 CET	51708	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:14.285243034 CET	51708	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:14.290014982 CET	23	51708	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:16.007239103 CET	23	51708	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:16.007745028 CET	51708	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:16.008450985 CET	51710	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:16.012533903 CET	23	51708	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:16.013252020 CET	23	51710	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:16.013375044 CET	51710	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:16.028048992 CET	51710	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:16.032823086 CET	23	51710	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:17.783533096 CET	23	51710	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:17.783873081 CET	51710	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:17.784357071 CET	51712	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:17.789123058 CET	23	51710	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:17.789536953 CET	23	51712	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:17.789594889 CET	51712	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:17.800632954 CET	51712	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:17.806044102 CET	23	51712	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:19.583123922 CET	23	51712	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:19.583410025 CET	51712	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:19.583873987 CET	51714	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:19.588196039 CET	23	51712	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:19.588668108 CET	23	51714	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:19.588721037 CET	51714	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:19.600265980 CET	51714	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:19.605027914 CET	23	51714	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:21.589670897 CET	23	51714	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:21.589870930 CET	51714	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:21.590358019 CET	51716	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:21.594733000 CET	23	51714	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:21.595110893 CET	23	51716	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:21.595191956 CET	51716	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:21.609258890 CET	51716	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:21.614082098 CET	23	51716	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:23.851660967 CET	23	51716	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:23.851993084 CET	51716	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:23.852519035 CET	51718	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:23.856792927 CET	23	51716	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:23.857270956 CET	23	51718	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:23.857325077 CET	51718	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:23.870317936 CET	51718	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:23.875053883 CET	23	51718	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:26.004913092 CET	23	51718	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:26.005069017 CET	51718	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:26.005563974 CET	51720	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:26.009881973 CET	23	51718	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:26.010380030 CET	23	51720	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:26.010432005 CET	51720	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:26.020772934 CET	51720	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:26.025592089 CET	23	51720	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:28.113349915 CET	23	51720	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:28.113585949 CET	51720	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:28.113948107 CET	51722	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:28.118335962 CET	23	51720	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:28.118740082 CET	23	51722	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:28.118835926 CET	51722	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:28.130302906 CET	51722	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:28.135150909 CET	23	51722	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:30.005431890 CET	23	51722	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:30.005872965 CET	51722	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:30.006639957 CET	51724	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:30.010643005 CET	23	51722	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:30.011542082 CET	23	51724	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:30.011636019 CET	51724	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:30.025396109 CET	51724	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:30.030253887 CET	23	51724	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:31.779932022 CET	23	51724	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:31.780138016 CET	51724	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:31.780659914 CET	51726	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:31.784919024 CET	23	51724	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:31.785512924 CET	23	51726	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:31.785586119 CET	51726	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:31.796498060 CET	51726	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:31.801290989 CET	23	51726	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:33.526623011 CET	23	51726	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:33.526793957 CET	51726	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:33.527252913 CET	51728	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:33.532530069 CET	23	51726	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:33.532979965 CET	23	51728	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:33.533051968 CET	51728	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:33.544070959 CET	51728	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:33.549864054 CET	23	51728	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:35.297673941 CET	23	51728	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:35.297924042 CET	51728	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:35.298314095 CET	51730	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:35.302707911 CET	23	51728	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:35.303119898 CET	23	51730	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:35.303172112 CET	51730	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:35.314354897 CET	51730	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:35.319173098 CET	23	51730	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:37.080693960 CET	23	51730	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:37.080840111 CET	51730	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:37.081217051 CET	51732	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:37.085663080 CET	23	51730	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:37.085995913 CET	23	51732	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:37.086107016 CET	51732	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:37.095685959 CET	51732	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:37.100783110 CET	23	51732	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:38.868758917 CET	23	51732	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:38.869103909 CET	51732	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:38.869539976 CET	51734	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:38.873882055 CET	23	51732	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:38.874330997 CET	23	51734	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:38.874377966 CET	51734	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:38.885138988 CET	51734	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:38.889944077 CET	23	51734	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:40.679651976 CET	23	51734	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:40.679825068 CET	51734	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:40.680285931 CET	51736	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:40.684636116 CET	23	51734	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:40.685087919 CET	23	51736	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:40.685133934 CET	51736	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:40.695943117 CET	51736	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:40.700834990 CET	23	51736	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:42.414127111 CET	23	51736	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:42.414391994 CET	51736	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:42.414800882 CET	51738	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:42.419198036 CET	23	51736	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:42.419626951 CET	23	51738	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:42.419749975 CET	51738	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:42.430820942 CET	51738	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:42.435622931 CET	23	51738	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:44.207624912 CET	23	51738	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:44.207856894 CET	51738	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:44.208533049 CET	51740	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:44.212743044 CET	23	51738	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:44.213362932 CET	23	51740	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:44.213429928 CET	51740	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:44.227644920 CET	51740	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:44.232436895 CET	23	51740	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:46.112795115 CET	23	51740	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:46.113104105 CET	51740	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:46.113862038 CET	51742	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:46.117935896 CET	23	51740	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:46.118611097 CET	23	51742	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:46.118695974 CET	51742	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:46.130748034 CET	51742	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:46.135617018 CET	23	51742	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:47.853229046 CET	23	51742	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:47.853419065 CET	51742	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:47.853863955 CET	51744	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:47.858216047 CET	23	51742	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:47.858623981 CET	23	51744	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:47.858680964 CET	51744	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:47.869524956 CET	51744	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:47.875370026 CET	23	51744	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:49.623533964 CET	23	51744	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:49.623719931 CET	51744	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:49.624136925 CET	51746	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:49.628500938 CET	23	51744	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:49.628880978 CET	23	51746	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:49.628935099 CET	51746	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:49.643810034 CET	51746	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:49.648562908 CET	23	51746	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:51.386461020 CET	23	51746	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:51.386607885 CET	51746	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:51.386984110 CET	51748	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:51.391429901 CET	23	51746	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:51.391777992 CET	23	51748	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:51.391891003 CET	51748	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:51.402757883 CET	51748	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:51.407597065 CET	23	51748	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:53.134354115 CET	23	51748	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:53.134648085 CET	51748	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:53.135329962 CET	51750	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:53.139477968 CET	23	51748	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:53.140104055 CET	23	51750	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:53.140175104 CET	51750	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:53.155632973 CET	51750	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:53.160407066 CET	23	51750	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:54.921725988 CET	23	51750	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:54.922003984 CET	51750	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:54.922625065 CET	51752	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:54.926826000 CET	23	51750	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:54.927426100 CET	23	51752	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:54.927489996 CET	51752	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:54.944060087 CET	51752	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:54.948846102 CET	23	51752	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:56.716392994 CET	23	51752	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:56.716753960 CET	51752	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:56.717314959 CET	51754	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:56.721836090 CET	23	51752	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:56.722081900 CET	23	51754	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:56.722162008 CET	51754	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:56.737917900 CET	51754	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:56.742762089 CET	23	51754	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:58.507153034 CET	23	51754	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:58.507272959 CET	51754	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:58.507945061 CET	51756	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:58.512054920 CET	23	51754	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:58.512793064 CET	23	51756	45.128.233.186	192.168.2.13
Jan 7, 2025 22:25:58.512846947 CET	51756	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:58.545485973 CET	51756	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:25:58.551737070 CET	23	51756	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:00.296602011 CET	23	51756	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:00.296798944 CET	51756	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:00.297193050 CET	51758	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:00.301556110 CET	23	51756	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:00.301938057 CET	23	51758	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:00.302038908 CET	51758	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:00.320986032 CET	51758	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:00.325743914 CET	23	51758	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:02.106981993 CET	23	51758	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:02.107292891 CET	51758	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:02.107800007 CET	51760	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:02.112116098 CET	23	51758	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:02.112593889 CET	23	51760	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:02.112654924 CET	51760	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:02.126842022 CET	51760	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:02.131649017 CET	23	51760	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:03.930180073 CET	23	51760	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:03.930299044 CET	51760	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:03.930737972 CET	51762	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:03.935213089 CET	23	51760	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:03.935555935 CET	23	51762	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:03.935605049 CET	51762	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:03.946892977 CET	51762	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:03.953520060 CET	23	51762	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:05.719412088 CET	23	51762	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:05.719557047 CET	51762	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:05.719923973 CET	51764	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:05.724345922 CET	23	51762	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:05.724776983 CET	23	51764	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:05.724853039 CET	51764	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:05.734251022 CET	51764	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:05.739038944 CET	23	51764	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:07.475209951 CET	23	51764	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:07.475418091 CET	51764	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:07.475864887 CET	51766	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:07.480166912 CET	23	51764	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:07.480631113 CET	23	51766	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:07.480696917 CET	51766	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:07.490792036 CET	51766	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:07.495620012 CET	23	51766	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:09.213399887 CET	23	51766	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:09.213571072 CET	51766	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:09.214165926 CET	51768	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:09.219346046 CET	23	51766	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:09.219888926 CET	23	51768	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:09.219939947 CET	51768	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:09.230665922 CET	51768	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:09.235438108 CET	23	51768	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:11.004745007 CET	23	51768	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:11.004910946 CET	51768	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:11.005306005 CET	51770	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:11.009673119 CET	23	51768	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:11.010049105 CET	23	51770	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:11.010111094 CET	51770	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:11.020183086 CET	51770	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:11.024950027 CET	23	51770	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:12.763403893 CET	23	51770	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:12.763679028 CET	51770	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:12.764066935 CET	51772	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:12.768469095 CET	23	51770	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:12.768882990 CET	23	51772	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:12.768944979 CET	51772	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:12.779939890 CET	51772	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:12.784746885 CET	23	51772	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:14.578223944 CET	23	51772	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:14.578388929 CET	51772	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:14.578811884 CET	51774	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:14.583170891 CET	23	51772	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:14.583591938 CET	23	51774	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:14.583705902 CET	51774	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:14.594206095 CET	51774	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:14.599010944 CET	23	51774	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:16.380673885 CET	23	51774	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:16.380922079 CET	51774	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:16.381377935 CET	51776	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:16.385716915 CET	23	51774	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:16.386210918 CET	23	51776	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:16.386295080 CET	51776	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:16.397304058 CET	51776	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:16.402050972 CET	23	51776	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:18.135951996 CET	23	51776	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:18.136245966 CET	51776	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:18.136730909 CET	51778	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:18.141036034 CET	23	51776	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:18.141475916 CET	23	51778	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:18.141522884 CET	51778	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:18.151892900 CET	51778	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:18.156614065 CET	23	51778	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:19.953691006 CET	23	51778	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:19.954063892 CET	51778	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:19.954652071 CET	51780	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:19.959745884 CET	23	51778	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:19.960474014 CET	23	51780	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:19.960585117 CET	51780	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:19.975997925 CET	51780	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:19.981698036 CET	23	51780	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:21.734783888 CET	23	51780	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:21.735054016 CET	51780	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:21.735441923 CET	51782	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:21.739897966 CET	23	51780	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:21.740200043 CET	23	51782	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:21.740245104 CET	51782	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:21.749711037 CET	51782	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:21.754472971 CET	23	51782	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:23.479617119 CET	23	51782	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:23.479792118 CET	51782	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:23.480242968 CET	51784	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:23.487210035 CET	23	51782	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:23.487226963 CET	23	51784	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:23.487267971 CET	51784	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:23.498137951 CET	51784	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:23.505736113 CET	23	51784	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:25.269785881 CET	23	51784	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:25.270075083 CET	51784	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:25.270075083 CET	51784	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:25.270488024 CET	51786	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:25.274892092 CET	23	51784	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:25.275257111 CET	23	51786	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:25.275346041 CET	51786	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:25.286259890 CET	51786	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:25.291035891 CET	23	51786	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:27.026583910 CET	23	51786	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:27.026773930 CET	51786	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:27.027200937 CET	51788	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:27.031583071 CET	23	51786	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:27.031971931 CET	23	51788	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:27.032016993 CET	51788	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:27.042300940 CET	51788	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:27.047075033 CET	23	51788	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:28.778223991 CET	23	51788	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:28.778382063 CET	51788	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:28.778806925 CET	51790	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:28.783114910 CET	23	51788	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:28.783566952 CET	23	51790	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:28.783652067 CET	51790	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:28.795016050 CET	51790	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:28.799807072 CET	23	51790	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:30.660921097 CET	23	51790	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:30.661252022 CET	51790	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:30.661732912 CET	51792	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:30.666065931 CET	23	51790	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:30.666500092 CET	23	51792	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:30.666563034 CET	51792	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:30.677335978 CET	51792	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:30.682121038 CET	23	51792	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:32.397357941 CET	23	51792	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:32.397892952 CET	51792	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:32.398694038 CET	51794	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:32.402759075 CET	23	51792	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:32.403479099 CET	23	51794	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:32.403561115 CET	51794	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:32.404685020 CET	51794	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:32.409436941 CET	23	51794	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:34.211894035 CET	23	51794	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:34.212126970 CET	51794	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:34.212865114 CET	51796	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:34.216985941 CET	23	51794	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:34.217721939 CET	23	51796	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:34.217796087 CET	51796	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:34.217834949 CET	51796	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:34.222743988 CET	23	51796	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:35.972593069 CET	23	51796	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:35.972763062 CET	51796	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:35.973273993 CET	51798	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:35.977628946 CET	23	51796	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:35.978087902 CET	23	51798	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:35.978297949 CET	51798	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:35.978449106 CET	51798	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:35.983268976 CET	23	51798	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:37.775542021 CET	23	51798	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:37.775895119 CET	51798	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:37.776498079 CET	51800	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:37.782900095 CET	23	51798	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:37.783399105 CET	23	51800	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:37.783452034 CET	51800	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:37.783489943 CET	51800	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:37.790663004 CET	23	51800	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:39.509243965 CET	23	51800	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:39.509531975 CET	51800	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:39.509962082 CET	51802	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:39.514306068 CET	23	51800	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:39.514748096 CET	23	51802	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:39.514882088 CET	51802	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:39.514895916 CET	51802	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:39.519634008 CET	23	51802	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:41.272572994 CET	23	51802	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:41.272888899 CET	51802	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:41.273622990 CET	51804	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:41.277746916 CET	23	51802	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:41.278404951 CET	23	51804	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:41.278495073 CET	51804	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:41.278626919 CET	51804	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:41.283416033 CET	23	51804	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:43.055810928 CET	23	51804	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:43.056021929 CET	51804	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:43.056529999 CET	51806	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:43.060914993 CET	23	51804	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:43.061310053 CET	23	51806	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:43.061382055 CET	51806	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:43.061439991 CET	51806	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:43.066258907 CET	23	51806	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:44.830858946 CET	23	51806	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:44.831243992 CET	51806	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:44.831836939 CET	51808	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:44.836009026 CET	23	51806	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:44.836648941 CET	23	51808	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:44.836713076 CET	51808	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:44.836849928 CET	51808	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:44.841569901 CET	23	51808	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:46.612366915 CET	23	51808	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:46.612584114 CET	51808	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:46.613027096 CET	51810	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:46.617441893 CET	23	51808	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:46.617800951 CET	23	51810	45.128.233.186	192.168.2.13
Jan 7, 2025 22:26:46.617861986 CET	51810	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:46.618005991 CET	51810	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:26:46.622802019 CET	23	51810	45.128.233.186	192.168.2.13

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 7, 2025 22:25:58.861196995 CET	45031	53	192.168.2.13	8.8.8.8
Jan 7, 2025 22:25:58.861248970 CET	51963	53	192.168.2.13	8.8.8.8
Jan 7, 2025 22:25:58.867337942 CET	53	51963	8.8.8.8	192.168.2.13
Jan 7, 2025 22:25:58.867961884 CET	53	45031	8.8.8.8	192.168.2.13

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 7, 2025 22:25:58.861196995 CET	192.168.2.13	8.8.8.8	0x49d3	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Jan 7, 2025 22:25:58.861248970 CET	192.168.2.13	8.8.8.8	0xb5c6	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 7, 2025 22:25:58.867961884 CET	8.8.8.8	192.168.2.13	0x49d3	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Jan 7, 2025 22:25:58.867961884 CET	8.8.8.8	192.168.2.13	0x49d3	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: gigops.mpsl.elf PID: 5430, Parent PID: 5355

General

Start time (UTC):	21:23:11
Start date (UTC):	07/01/2025
Path:	/tmp/gigops.mpsl.elf
Arguments:	/tmp/gigops.mpsl.elf
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Chronological Activities

Analysis Process: gigops.mpsl.elf PID: 5432, Parent PID: 5430

General

Start time (UTC):	21:23:11
Start date (UTC):	07/01/2025
Path:	/tmp/gigops.mpsl.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Chronological Activities

Analysis Process: gigops.mpsl.elf PID: 5434, Parent PID: 5432

General

Start time (UTC):	21:23:11
Start date (UTC):	07/01/2025
Path:	/tmp/gigops.mpsl.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report gigops.mpsl.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: gigops.mpsl.elf PID: 5430, Parent PID: 5355

General

Chronological Activities

Analysis Process: gigops.mpsl.elf PID: 5432, Parent PID: 5430

General

Chronological Activities

Analysis Process: gigops.mpsl.elf PID: 5434, Parent PID: 5432

General

Chronological Activities

Linux Analysis Report
gigops.mpsl.elf