Edit tour

Linux Analysis Report
ss.elf

Overview

General Information

Sample name:	ss.elf
Analysis ID:	1588930
MD5:	616c5deb08b8fe0317ff0a65e8c502aa
SHA1:	edf16507d06c99eb9bb2913dedee41b74b241f7c
SHA256:	d2f17797175d0ee304e7ae765ddb929dc0d715e8719db773ba49b6f81bc6e7a6
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai, Gafgyt

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Contains symbols with names commonly found in malware

Machine Learning detection for sample

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Sample contains strings that are user agent strings indicative of HTTP manipulation

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1588930
Start date and time:	2025-01-11 07:18:00 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	ss.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@0/0

Warnings

VT rate limit hit for: 89.33.192.138:65447

Runtime Messages

Command:	/tmp/ss.elf
PID:	6236
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

ss.elf (PID: 6236, Parent: 6160, MD5: 616c5deb08b8fe0317ff0a65e8c502aa) Arguments: /tmp/ss.elf

ss.elf New Fork (PID: 6237, Parent: 6236)

ss.elf New Fork (PID: 6238, Parent: 6237)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
ss.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
ss.elf	Linux_Trojan_Gafgyt_c573932b	unknown	unknown	0x7eb:$a: 83 7D 18 00 74 22 8B 45 1C 83 E0 02 85 C0 74 18 83 EC 08 6A 2D FF
ss.elf	Linux_Trojan_Gafgyt_6122acdf	unknown	unknown	0x570:$a: E8 B0 00 FC 8B 7D E8 F2 AE 89 C8 F7 D0 48 48 89 45 F8 EB 03 FF
ss.elf	Linux_Trojan_Gafgyt_7167d08f	unknown	unknown	0x888:$a: 0C 8A 00 3C 2D 75 13 FF 45 0C C7 45 E4 01 00 00 00 EB 07 FF
ss.elf	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0x64e0:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83

Memory Dumps

Source	Rule	Description	Author	Strings
6236.1.0000000008048000.0000000008055000.r-x.sdmp	Linux_Trojan_Gafgyt_c573932b	unknown	unknown	0x7eb:$a: 83 7D 18 00 74 22 8B 45 1C 83 E0 02 85 C0 74 18 83 EC 08 6A 2D FF
6236.1.0000000008048000.0000000008055000.r-x.sdmp	Linux_Trojan_Gafgyt_6122acdf	unknown	unknown	0x570:$a: E8 B0 00 FC 8B 7D E8 F2 AE 89 C8 F7 D0 48 48 89 45 F8 EB 03 FF
6236.1.0000000008048000.0000000008055000.r-x.sdmp	Linux_Trojan_Gafgyt_7167d08f	unknown	unknown	0x888:$a: 0C 8A 00 3C 2D 75 13 FF 45 0C C7 45 E4 01 00 00 00 EB 07 FF
6236.1.0000000008048000.0000000008055000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0x64e0:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6237.1.0000000008048000.0000000008055000.r-x.sdmp	Linux_Trojan_Gafgyt_c573932b	unknown	unknown	0x7eb:$a: 83 7D 18 00 74 22 8B 45 1C 83 E0 02 85 C0 74 18 83 EC 08 6A 2D FF
6237.1.0000000008048000.0000000008055000.r-x.sdmp	Linux_Trojan_Gafgyt_6122acdf	unknown	unknown	0x570:$a: E8 B0 00 FC 8B 7D E8 F2 AE 89 C8 F7 D0 48 48 89 45 F8 EB 03 FF
6237.1.0000000008048000.0000000008055000.r-x.sdmp	Linux_Trojan_Gafgyt_7167d08f	unknown	unknown	0x888:$a: 0C 8A 00 3C 2D 75 13 FF 45 0C C7 45 E4 01 00 00 00 EB 07 FF
6237.1.0000000008048000.0000000008055000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0x64e0:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
Click to see the 3 entries

Suricata Signatures

ETPRO MALWARE ELF/Mirai Variant CnC Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-11T07:18:47.954264+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47634	89.33.192.138	65447	TCP
2025-01-11T07:18:49.386049+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47636	89.33.192.138	65447	TCP
2025-01-11T07:18:50.840911+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47638	89.33.192.138	65447	TCP
2025-01-11T07:18:52.312832+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47640	89.33.192.138	65447	TCP
2025-01-11T07:18:53.764779+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47642	89.33.192.138	65447	TCP
2025-01-11T07:18:55.217369+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47644	89.33.192.138	65447	TCP
2025-01-11T07:18:56.653499+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47646	89.33.192.138	65447	TCP
2025-01-11T07:18:58.091344+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47648	89.33.192.138	65447	TCP
2025-01-11T07:18:59.563010+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47650	89.33.192.138	65447	TCP
2025-01-11T07:19:01.014268+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47652	89.33.192.138	65447	TCP
2025-01-11T07:19:02.476376+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47654	89.33.192.138	65447	TCP
2025-01-11T07:19:03.938099+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47656	89.33.192.138	65447	TCP
2025-01-11T07:19:05.389599+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47658	89.33.192.138	65447	TCP
2025-01-11T07:19:06.844488+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47660	89.33.192.138	65447	TCP
2025-01-11T07:19:08.295641+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47662	89.33.192.138	65447	TCP
2025-01-11T07:19:09.750954+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47664	89.33.192.138	65447	TCP
2025-01-11T07:19:11.231747+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47666	89.33.192.138	65447	TCP
2025-01-11T07:19:12.668973+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47668	89.33.192.138	65447	TCP
2025-01-11T07:19:14.106753+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47670	89.33.192.138	65447	TCP
2025-01-11T07:19:15.563832+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47672	89.33.192.138	65447	TCP
2025-01-11T07:19:17.013488+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47674	89.33.192.138	65447	TCP
2025-01-11T07:19:18.450471+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47676	89.33.192.138	65447	TCP
2025-01-11T07:19:19.903763+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47678	89.33.192.138	65447	TCP
2025-01-11T07:19:21.360679+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47680	89.33.192.138	65447	TCP
2025-01-11T07:19:22.794387+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47682	89.33.192.138	65447	TCP
2025-01-11T07:19:24.253913+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47684	89.33.192.138	65447	TCP
2025-01-11T07:19:25.703887+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47686	89.33.192.138	65447	TCP
2025-01-11T07:19:27.157638+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47688	89.33.192.138	65447	TCP
2025-01-11T07:19:28.610630+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47690	89.33.192.138	65447	TCP
2025-01-11T07:19:30.061100+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47692	89.33.192.138	65447	TCP
2025-01-11T07:19:31.497365+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47694	89.33.192.138	65447	TCP
2025-01-11T07:19:32.957502+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47696	89.33.192.138	65447	TCP
2025-01-11T07:19:34.404205+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47698	89.33.192.138	65447	TCP
2025-01-11T07:19:35.877482+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47700	89.33.192.138	65447	TCP
2025-01-11T07:19:37.345971+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47702	89.33.192.138	65447	TCP
2025-01-11T07:19:39.117352+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47704	89.33.192.138	65447	TCP
2025-01-11T07:19:40.579708+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47706	89.33.192.138	65447	TCP
2025-01-11T07:19:42.061225+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47708	89.33.192.138	65447	TCP
2025-01-11T07:19:43.497049+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47710	89.33.192.138	65447	TCP
2025-01-11T07:19:44.951058+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47712	89.33.192.138	65447	TCP
2025-01-11T07:19:46.389063+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47714	89.33.192.138	65447	TCP
2025-01-11T07:19:47.843559+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47716	89.33.192.138	65447	TCP
2025-01-11T07:19:49.300566+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47718	89.33.192.138	65447	TCP
2025-01-11T07:19:50.769386+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47720	89.33.192.138	65447	TCP
2025-01-11T07:19:52.216617+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47722	89.33.192.138	65447	TCP
2025-01-11T07:19:53.674157+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47724	89.33.192.138	65447	TCP
2025-01-11T07:19:55.388391+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47726	89.33.192.138	65447	TCP
2025-01-11T07:19:56.826689+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47728	89.33.192.138	65447	TCP
2025-01-11T07:19:58.263873+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47730	89.33.192.138	65447	TCP
2025-01-11T07:19:59.701749+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47732	89.33.192.138	65447	TCP
2025-01-11T07:20:01.157960+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47734	89.33.192.138	65447	TCP
2025-01-11T07:20:02.628777+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47736	89.33.192.138	65447	TCP
2025-01-11T07:20:04.076471+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47738	89.33.192.138	65447	TCP
2025-01-11T07:20:05.514073+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47740	89.33.192.138	65447	TCP
2025-01-11T07:20:06.970999+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47742	89.33.192.138	65447	TCP
2025-01-11T07:20:08.440848+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47744	89.33.192.138	65447	TCP
2025-01-11T07:20:09.893347+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47746	89.33.192.138	65447	TCP
2025-01-11T07:20:11.342254+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47748	89.33.192.138	65447	TCP
2025-01-11T07:20:12.797743+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47750	89.33.192.138	65447	TCP
2025-01-11T07:20:14.250211+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47752	89.33.192.138	65447	TCP
2025-01-11T07:20:15.704787+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47754	89.33.192.138	65447	TCP
2025-01-11T07:20:17.155118+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47756	89.33.192.138	65447	TCP
2025-01-11T07:20:18.592818+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47758	89.33.192.138	65447	TCP
2025-01-11T07:20:20.047160+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47760	89.33.192.138	65447	TCP
2025-01-11T07:20:21.502459+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47762	89.33.192.138	65447	TCP
2025-01-11T07:20:22.971325+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47764	89.33.192.138	65447	TCP
2025-01-11T07:20:24.424418+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47766	89.33.192.138	65447	TCP
2025-01-11T07:20:25.877040+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47768	89.33.192.138	65447	TCP
2025-01-11T07:20:27.331297+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47770	89.33.192.138	65447	TCP
2025-01-11T07:20:28.779797+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47772	89.33.192.138	65447	TCP
2025-01-11T07:20:30.217592+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47774	89.33.192.138	65447	TCP
2025-01-11T07:20:31.672721+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47776	89.33.192.138	65447	TCP
2025-01-11T07:20:33.128212+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47778	89.33.192.138	65447	TCP
2025-01-11T07:20:34.578607+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47780	89.33.192.138	65447	TCP
2025-01-11T07:20:36.014055+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47782	89.33.192.138	65447	TCP
2025-01-11T07:20:37.469560+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47784	89.33.192.138	65447	TCP
2025-01-11T07:20:38.926644+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47786	89.33.192.138	65447	TCP
2025-01-11T07:20:40.377214+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47788	89.33.192.138	65447	TCP
2025-01-11T07:20:41.841716+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47790	89.33.192.138	65447	TCP
2025-01-11T07:20:43.283338+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47792	89.33.192.138	65447	TCP
2025-01-11T07:20:44.735308+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47794	89.33.192.138	65447	TCP
2025-01-11T07:20:46.170867+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47796	89.33.192.138	65447	TCP
2025-01-11T07:20:47.609900+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47798	89.33.192.138	65447	TCP
2025-01-11T07:20:49.045764+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47800	89.33.192.138	65447	TCP
2025-01-11T07:20:50.501194+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47802	89.33.192.138	65447	TCP
2025-01-11T07:20:51.936235+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47804	89.33.192.138	65447	TCP
2025-01-11T07:20:53.417559+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47806	89.33.192.138	65447	TCP
2025-01-11T07:20:54.861142+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47808	89.33.192.138	65447	TCP
2025-01-11T07:20:56.316686+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47810	89.33.192.138	65447	TCP
2025-01-11T07:20:57.764889+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47812	89.33.192.138	65447	TCP
2025-01-11T07:20:59.220041+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47814	89.33.192.138	65447	TCP
2025-01-11T07:21:00.677563+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47816	89.33.192.138	65447	TCP
2025-01-11T07:21:02.145901+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47818	89.33.192.138	65447	TCP
2025-01-11T07:21:03.643857+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47820	89.33.192.138	65447	TCP
2025-01-11T07:21:05.094829+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47822	89.33.192.138	65447	TCP
2025-01-11T07:21:06.530937+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47824	89.33.192.138	65447	TCP
2025-01-11T07:21:07.985927+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47826	89.33.192.138	65447	TCP
2025-01-11T07:21:09.421423+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47828	89.33.192.138	65447	TCP
2025-01-11T07:21:10.878979+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47830	89.33.192.138	65447	TCP
2025-01-11T07:21:12.348342+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47832	89.33.192.138	65447	TCP
2025-01-11T07:21:13.800221+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47834	89.33.192.138	65447	TCP
2025-01-11T07:21:15.250762+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47836	89.33.192.138	65447	TCP
2025-01-11T07:21:16.705950+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47838	89.33.192.138	65447	TCP
2025-01-11T07:21:18.160659+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47840	89.33.192.138	65447	TCP
2025-01-11T07:21:19.613277+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47842	89.33.192.138	65447	TCP
2025-01-11T07:21:21.069274+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47844	89.33.192.138	65447	TCP
2025-01-11T07:21:22.514913+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47846	89.33.192.138	65447	TCP
2025-01-11T07:21:23.989537+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47848	89.33.192.138	65447	TCP
2025-01-11T07:21:25.437325+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47850	89.33.192.138	65447	TCP
2025-01-11T07:21:26.921989+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47852	89.33.192.138	65447	TCP
2025-01-11T07:21:28.359674+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47854	89.33.192.138	65447	TCP
2025-01-11T07:21:29.816449+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47856	89.33.192.138	65447	TCP
2025-01-11T07:21:31.299684+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47858	89.33.192.138	65447	TCP
2025-01-11T07:21:32.766379+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47860	89.33.192.138	65447	TCP
2025-01-11T07:21:34.221582+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47862	89.33.192.138	65447	TCP
2025-01-11T07:21:35.672493+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47864	89.33.192.138	65447	TCP
2025-01-11T07:21:37.131947+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47866	89.33.192.138	65447	TCP
2025-01-11T07:21:38.785830+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47868	89.33.192.138	65447	TCP
2025-01-11T07:21:40.255630+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47870	89.33.192.138	65447	TCP
2025-01-11T07:21:41.704881+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47872	89.33.192.138	65447	TCP
2025-01-11T07:21:43.160463+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47874	89.33.192.138	65447	TCP
2025-01-11T07:21:44.592963+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47876	89.33.192.138	65447	TCP
2025-01-11T07:21:46.029806+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47878	89.33.192.138	65447	TCP
2025-01-11T07:21:47.469310+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47880	89.33.192.138	65447	TCP
2025-01-11T07:21:48.922078+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47882	89.33.192.138	65447	TCP
2025-01-11T07:21:50.359965+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47884	89.33.192.138	65447	TCP
2025-01-11T07:21:51.818704+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47886	89.33.192.138	65447	TCP
2025-01-11T07:21:53.268087+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47888	89.33.192.138	65447	TCP
2025-01-11T07:21:54.704030+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47890	89.33.192.138	65447	TCP
2025-01-11T07:21:56.140614+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47892	89.33.192.138	65447	TCP
2025-01-11T07:21:57.615569+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47894	89.33.192.138	65447	TCP
2025-01-11T07:21:59.084080+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47896	89.33.192.138	65447	TCP
2025-01-11T07:22:00.535099+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47898	89.33.192.138	65447	TCP
2025-01-11T07:22:01.985746+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47900	89.33.192.138	65447	TCP
2025-01-11T07:22:03.440751+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47902	89.33.192.138	65447	TCP
2025-01-11T07:22:04.875582+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47904	89.33.192.138	65447	TCP
2025-01-11T07:22:06.330691+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47906	89.33.192.138	65447	TCP
2025-01-11T07:22:07.785543+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47908	89.33.192.138	65447	TCP
2025-01-11T07:22:09.256555+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47910	89.33.192.138	65447	TCP
2025-01-11T07:22:10.738424+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47912	89.33.192.138	65447	TCP
2025-01-11T07:22:12.191617+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47914	89.33.192.138	65447	TCP
2025-01-11T07:22:13.645090+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47916	89.33.192.138	65447	TCP
2025-01-11T07:22:15.118906+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47918	89.33.192.138	65447	TCP
2025-01-11T07:22:16.564977+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47920	89.33.192.138	65447	TCP
2025-01-11T07:22:18.002148+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47922	89.33.192.138	65447	TCP
2025-01-11T07:22:19.458563+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47924	89.33.192.138	65447	TCP
2025-01-11T07:22:20.908184+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47926	89.33.192.138	65447	TCP
2025-01-11T07:22:22.343360+0100	2841335	1	Malware Command and Control Activity Detected	192.168.2.23	47928	89.33.192.138	65447	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: ss.elf

Avira: detected

Found malware configuration

Source: ss.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "89.33.192.138:65447"}

Multi AV Scanner detection for submitted file

Source: ss.elf	Virustotal: Detection: 57%			Perma Link
Source: ss.elf	ReversingLabs: Detection: 57%

Machine Learning detection for sample

Source: ss.elf

Joe Sandbox ML: detected

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/ss.elf (PID: 6236)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47638 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47634 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47666 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47680 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47674 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47672 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47658 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47684 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47706 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47728 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47712 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47720 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47724 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47722 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47738 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47708 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47746 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47770 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47810 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47798 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47794 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47832 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47646 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47836 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47776 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47860 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47750 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47804 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47882 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47642 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47812 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47880 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47748 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47700 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47872 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47900 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47754 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47892 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47686 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47652 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47768 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47822 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47676 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47662 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47774 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47876 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47816 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47660 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47760 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47668 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47862 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47650 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47690 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47764 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47820 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47918 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47644 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47912 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47696 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47852 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47920 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47740 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47840 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47904 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47734 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47818 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47914 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47874 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47778 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47640 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47678 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47654 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47702 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47704 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47784 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47786 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47716 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47870 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47688 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47866 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47682 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47886 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47802 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47856 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47928 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47824 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47888 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47828 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47846 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47772 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47710 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47730 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47890 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47758 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47894 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47664 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47924 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47902 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47850 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47694 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47910 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47896 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47834 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47670 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47796 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47726 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47926 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47906 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47742 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47878 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47788 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47648 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47884 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47732 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47736 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47858 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47844 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47744 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47698 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47814 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47868 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47864 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47752 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47898 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47714 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47782 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47790 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47806 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47800 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47808 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47636 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47718 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47766 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47692 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47762 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47792 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47842 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47908 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47916 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47826 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47830 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47922 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47656 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47756 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47780 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47838 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47848 -> 89.33.192.138:65447
Source: Network traffic	Suricata IDS: 2841335 - Severity 1 - ETPRO MALWARE ELF/Mirai Variant CnC Checkin : 192.168.2.23:47854 -> 89.33.192.138:65447

Source: global traffic

TCP traffic: 192.168.2.23:47634 -> 89.33.192.138:65447

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138
Source: unknown	TCP traffic detected without corresponding DNS query: 89.33.192.138

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: ss.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_c573932b Author: unknown
Source: ss.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_6122acdf Author: unknown
Source: ss.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_7167d08f Author: unknown
Source: ss.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6236.1.0000000008048000.0000000008055000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_c573932b Author: unknown
Source: 6236.1.0000000008048000.0000000008055000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6122acdf Author: unknown
Source: 6236.1.0000000008048000.0000000008055000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_7167d08f Author: unknown
Source: 6236.1.0000000008048000.0000000008055000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6237.1.0000000008048000.0000000008055000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_c573932b Author: unknown
Source: 6237.1.0000000008048000.0000000008055000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6122acdf Author: unknown
Source: 6237.1.0000000008048000.0000000008055000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_7167d08f Author: unknown
Source: 6237.1.0000000008048000.0000000008055000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample

Name: vseattack

Source: ss.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_c573932b reference_sample = 4c6aeaa6f6a0c40a3f4116a2e19e669188a8b1678a8930350889da1bab531c68, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 18a3025ebb8af46605970ee8d7d18214854b86200001d576553e102cb71df266, id = c573932b-9b3f-4ab7-a6b6-32dcc7473790, last_modified = 2021-09-16
Source: ss.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_6122acdf os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 283275705c729be23d7dc75056388ecae00390bd25ee7b66b0cfc9b85feee212, id = 6122acdf-1eef-45ea-83ea-699d21c2dc20, last_modified = 2021-09-16
Source: ss.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_7167d08f reference_sample = 4c6aeaa6f6a0c40a3f4116a2e19e669188a8b1678a8930350889da1bab531c68, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = b9df4ab322a2a329168f684b07b7b05ee3d03165c5b9050a4710eae7aeca6cd9, id = 7167d08f-bfeb-4d78-9783-3a1df2ef0ed3, last_modified = 2021-09-16
Source: ss.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6236.1.0000000008048000.0000000008055000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_c573932b reference_sample = 4c6aeaa6f6a0c40a3f4116a2e19e669188a8b1678a8930350889da1bab531c68, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 18a3025ebb8af46605970ee8d7d18214854b86200001d576553e102cb71df266, id = c573932b-9b3f-4ab7-a6b6-32dcc7473790, last_modified = 2021-09-16
Source: 6236.1.0000000008048000.0000000008055000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6122acdf os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 283275705c729be23d7dc75056388ecae00390bd25ee7b66b0cfc9b85feee212, id = 6122acdf-1eef-45ea-83ea-699d21c2dc20, last_modified = 2021-09-16
Source: 6236.1.0000000008048000.0000000008055000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_7167d08f reference_sample = 4c6aeaa6f6a0c40a3f4116a2e19e669188a8b1678a8930350889da1bab531c68, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = b9df4ab322a2a329168f684b07b7b05ee3d03165c5b9050a4710eae7aeca6cd9, id = 7167d08f-bfeb-4d78-9783-3a1df2ef0ed3, last_modified = 2021-09-16
Source: 6236.1.0000000008048000.0000000008055000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6237.1.0000000008048000.0000000008055000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_c573932b reference_sample = 4c6aeaa6f6a0c40a3f4116a2e19e669188a8b1678a8930350889da1bab531c68, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 18a3025ebb8af46605970ee8d7d18214854b86200001d576553e102cb71df266, id = c573932b-9b3f-4ab7-a6b6-32dcc7473790, last_modified = 2021-09-16
Source: 6237.1.0000000008048000.0000000008055000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6122acdf os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 283275705c729be23d7dc75056388ecae00390bd25ee7b66b0cfc9b85feee212, id = 6122acdf-1eef-45ea-83ea-699d21c2dc20, last_modified = 2021-09-16
Source: 6237.1.0000000008048000.0000000008055000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_7167d08f reference_sample = 4c6aeaa6f6a0c40a3f4116a2e19e669188a8b1678a8930350889da1bab531c68, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = b9df4ab322a2a329168f684b07b7b05ee3d03165c5b9050a4710eae7aeca6cd9, id = 7167d08f-bfeb-4d78-9783-3a1df2ef0ed3, last_modified = 2021-09-16
Source: 6237.1.0000000008048000.0000000008055000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@0/0

Source: ss.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/i386/crt1.S
Source: ss.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/i386/crti.S
Source: ss.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/i386/crtn.S
Source: ss.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/i386/mmap.S

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: ss.elf, type: SAMPLE

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Remote Access Functionality

Detected Mirai

Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin
Source: Traffic	Suricata IDS: ETPRO MALWARE ELF/Mirai Variant CnC Checkin

Yara detected Gafgyt

Source: Yara match

File source: ss.elf, type: SAMPLE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	1 Remote System Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "89.33.192.138:65447"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
ss.elf	58%	Virustotal		Browse
ss.elf	58%	ReversingLabs	Linux.Backdoor.Gafgyt
ss.elf	100%	Avira	EXP/ELF.Mirai.Z
ss.elf	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
89.33.192.138:65447	true		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
89.33.192.138	unknown	Romania	9009	M247GB	true
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
89.33.192.138	sse.elf	Get hash	malicious	Gafgyt	Browse
	ssp.elf	Get hash	malicious	Gafgyt	Browse
	ssl.elf	Get hash	malicious	Gafgyt	Browse
	ssb.elf	Get hash	malicious	Gafgyt	Browse
	ss.elf	Get hash	malicious	Gafgyt	Browse
	ssd.elf	Get hash	malicious	Gafgyt	Browse
	ssg.elf	Get hash	malicious	Gafgyt	Browse
	ssy.elf	Get hash	malicious	Gafgyt	Browse
	ssh.elf	Get hash	malicious	Gafgyt	Browse
	ssc.elf	Get hash	malicious	Gafgyt	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	SPARC.elf	Get hash	malicious	Unknown	Browse
	.i.elf	Get hash	malicious	Unknown	Browse
	ARMV4L.elf	Get hash	malicious	Unknown	Browse
	MIPSEL.elf	Get hash	malicious	Unknown	Browse
	3.elf	Get hash	malicious	Unknown	Browse
	2.elf	Get hash	malicious	Unknown	Browse
	arm6.elf	Get hash	malicious	Unknown	Browse
	mpsl.elf	Get hash	malicious	Unknown	Browse
	spc.elf	Get hash	malicious	Unknown	Browse
	sse.elf	Get hash	malicious	Gafgyt	Browse
91.189.91.42	SPARC.elf	Get hash	malicious	Unknown	Browse
	.i.elf	Get hash	malicious	Unknown	Browse
	ARMV4L.elf	Get hash	malicious	Unknown	Browse
	MIPSEL.elf	Get hash	malicious	Unknown	Browse
	3.elf	Get hash	malicious	Unknown	Browse
	2.elf	Get hash	malicious	Unknown	Browse
	arm6.elf	Get hash	malicious	Unknown	Browse
	mpsl.elf	Get hash	malicious	Unknown	Browse
	spc.elf	Get hash	malicious	Unknown	Browse
	sse.elf	Get hash	malicious	Gafgyt	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	SPARC.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	.i.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	ARMV4L.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	MIPSEL.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	3.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	2.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	arm6.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	mpsl.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	mips.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	spc.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
M247GB	sse.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssp.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssl.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssb.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ss.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssd.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssg.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssy.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssh.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
	ssc.elf	Get hash	malicious	Gafgyt	Browse	89.33.192.138
INIT7CH	SPARC.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	.i.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	ARMV4L.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	MIPSEL.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	3.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	2.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	arm6.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	mpsl.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	spc.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	sse.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	6.428422344942257
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	ss.elf
File size:	73'500 bytes
MD5:	616c5deb08b8fe0317ff0a65e8c502aa
SHA1:	edf16507d06c99eb9bb2913dedee41b74b241f7c
SHA256:	d2f17797175d0ee304e7ae765ddb929dc0d715e8719db773ba49b6f81bc6e7a6
SHA512:	d780ae22e3a84f3166d1ef8e2b471db5cde9b3bba9cacd07a69dd42a31e1c0609af57422b3d5fd4ad545a26e0ccc50b4f5cf8434e4fe95a4bd3d5543d0335a64
SSDEEP:	1536:fQ/CnToULUWynmqPoh3a8QsESNIp5vtnyChVVql4TgkDjqmbdZ89UxTumLI2VOCF:fQoUULUWbU5vJ5hKKTv5w9OumU2VOCbp
TLSH:	FD733A02AB81CBB3D08316B606A79B210232F97A5E5B9F15F35D7CF49B150C87267B68
File Content Preview:	.ELF....................d...4...........4. ...(..............................................S...S.......i..........Q.td............................U..S............h....C...[]...$.............U......=.V...t..5.....S......S......u........t....h.C..........

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8048164
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	53736
Section Header Size:	40
Number of Section Headers:	16
Header String Table Index:	13

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x8048094	0x94	0x1c	0x0	0x6	AX	0	0	1
.text	PROGBITS	0x80480b0	0xb0	0xa068	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x8052118	0xa118	0x17	0x0	0x6	AX	0	0	1
.rodata	PROGBITS	0x8052140	0xa140	0x2240	0x0	0x2	A	0	0	32
.eh_frame	PROGBITS	0x8054380	0xc380	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x8055384	0xc384	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x805538c	0xc38c	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x8055394	0xc394	0x4	0x0	0x3	WA	0	0	4
.got.plt	PROGBITS	0x8055398	0xc398	0xc	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x80553c0	0xc3c0	0x2c0	0x0	0x3	WA	0	0	32
.bss	NOBITS	0x8055680	0xc680	0x66e4	0x0	0x3	WA	0	0	32
.comment	PROGBITS	0x0	0xc680	0xaf8	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0xd178	0x6f	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0xd468	0x2a70	0x10	0x0		15	249	4
.strtab	STRTAB	0x0	0xfed8	0x2044	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8048000	0x8048000	0xc384	0xc384	6.6122	0x5	R E	0x1000	.init .text .fini .rodata .eh_frame
LOAD	0xc384	0x8055384	0x8055384	0x2fc	0x69e0	3.4638	0x6	RW	0x1000	.ctors .dtors .jcr .got.plt .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x8048094	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80480b0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x8052118	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x8052140	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x8054380	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x8055384	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x805538c	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x8055394	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x8055398	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x80553c0	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x8055680	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
C.111.5152	.symtab	0x8052600	96	OBJECT	<unknown>	DEFAULT	4
Q	.symtab	0x80556c0	16384	OBJECT	<unknown>	DEFAULT	11
SendHTTPHex	.symtab	0x804a1f1	351	FUNC	<unknown>	DEFAULT	2
SendSTDHEX	.symtab	0x8049a9b	292	FUNC	<unknown>	DEFAULT	2
SendUDP	.symtab	0x8049221	815	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x8055398	0	OBJECT	<unknown>	HIDDEN	9
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x8055388	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x8055384	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x80553f8	4	OBJECT	<unknown>	DEFAULT	10
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x8052a40	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x8055678	4	OBJECT	<unknown>	DEFAULT	10
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x8054080	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x8055400	4	OBJECT	<unknown>	DEFAULT	10
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x8052d40	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x8055390	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x805538c	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x8054380	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x8054380	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x80553f8	4	OBJECT	<unknown>	HIDDEN	10
__GI___C_ctype_b_data	.symtab	0x8052a40	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower	.symtab	0x8055678	4	OBJECT	<unknown>	HIDDEN	10
__GI___C_ctype_tolower_data	.symtab	0x8054080	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper	.symtab	0x8055400	4	OBJECT	<unknown>	HIDDEN	10
__GI___C_ctype_toupper_data	.symtab	0x8052d40	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b	.symtab	0x80553fc	4	OBJECT	<unknown>	HIDDEN	10
__GI___ctype_tolower	.symtab	0x805567c	4	OBJECT	<unknown>	HIDDEN	10
__GI___ctype_toupper	.symtab	0x8055404	4	OBJECT	<unknown>	HIDDEN	10
__GI___errno_location	.symtab	0x804bda4	6	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x8051d58	220	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x804cdc4	29	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x804f184	6	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x804b9d0	87	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl64	.symtab	0x804ba28	63	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x804bbe8	75	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x804eb10	63	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x804eb87	64	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x804cde4	183	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x804ba68	40	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x804e1c4	273	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x804e65c	20	FUNC	<unknown>	HIDDEN	2
__GI_atol	.symtab	0x804e65c	20	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x8050808	54	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x804bac4	46	FUNC	<unknown>	HIDDEN	2
__GI_clock_getres	.symtab	0x804eef4	50	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x804baf4	46	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x804d378	43	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x805b900	4	OBJECT	<unknown>	HIDDEN	11
__GI_exit	.symtab	0x804e7a4	103	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x8050890	265	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x804b9d0	87	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64	.symtab	0x804ba28	63	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x8050f08	321	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x8051d58	220	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x8050dc0	98	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x805104c	105	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x805099c	24	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x804bb24	38	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x804cba8	51	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x80509b4	27	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x80509d0	227	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x804cbdc	116	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x8051d58	220	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x804ef28	37	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x804ef50	38	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x804ef78	38	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x804efa0	38	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x804d014	48	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x804d044	818	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x804efc8	19	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x804bb4c	38	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x804efdc	50	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x804d3a4	43	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x804f010	38	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x805b904	4	OBJECT	<unknown>	HIDDEN	11
__GI_inet_addr	.symtab	0x804cfec	37	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x804fd84	148	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x804cfd7	21	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x804cf88	79	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x8051530	462	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x805125e	458	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x804e5ae	171	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x804bb74	63	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x804ced0	29	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x804bbb4	50	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x8051cd8	95	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x804fbb8	35	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x804cc50	39	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x804fbdc	39	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x804fc2c	33	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x804fc50	176	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x804cc78	21	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x804ee68	27	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x804f038	50	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x804f06c	50	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x804bbe8	75	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x8050858	54	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x80507dc	24	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x804e2e0	72	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x804e4b9	95	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x8051108	99	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x804bc4c	54	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x804d40c	51	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x804f0a0	78	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x804bc84	63	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x804d440	51	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x804d474	67	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x804bcc4	38	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x804d4b8	59	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x804e420	153	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x804ed8f	217	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x804d520	175	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x804f0f0	85	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x804e80c	393	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x804d4f4	43	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x804bdac	31	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x804e518	150	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x8051e34	54	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x804cc90	30	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x80510b8	29	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x80510b8	29	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x804ccb0	27	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x80511a0	54	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x804cccc	19	FUNC	<unknown>	HIDDEN	2
__GI_strncat	.symtab	0x80510d8	46	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x804fc04	38	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x804cce0	25	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x804fd5c	39	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x805116c	50	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x804ccfc	198	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x804ceb4	25	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x804fd00	89	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x804e670	26	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x804e998	325	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x804cef0	112	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x804bcec	46	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x8051d38	29	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x804bd84	29	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x804bdcc	178	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x804f148	59	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x804bd1c	26	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x804f18c	68	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x804f1f0	134	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x804f1d0	30	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x804bd38	54	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x8055394	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x8055394	0	OBJECT	<unknown>	DEFAULT	8
__app_fini	.symtab	0x805b8f4	4	OBJECT	<unknown>	HIDDEN	11
__atexit_lock	.symtab	0x8055640	24	OBJECT	<unknown>	DEFAULT	10
__bsd_signal	.symtab	0x804d520	175	FUNC	<unknown>	HIDDEN	2
__bss_start	.symtab	0x8055680	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x804eb53	52	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x80553fc	4	OBJECT	<unknown>	DEFAULT	10
__ctype_tolower	.symtab	0x805567c	4	OBJECT	<unknown>	DEFAULT	10
__ctype_toupper	.symtab	0x8055404	4	OBJECT	<unknown>	DEFAULT	10
__curbrk	.symtab	0x805b924	4	OBJECT	<unknown>	HIDDEN	11
__data_start	.symtab	0x80553c8	0	NOTYPE	<unknown>	DEFAULT	10
__decode_answer	.symtab	0x80518d4	249	FUNC	<unknown>	HIDDEN	2
__decode_dotted	.symtab	0x8051efc	215	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x80517b4	171	FUNC	<unknown>	HIDDEN	2
__deregister_frame_info_bases	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup	.symtab	0x804fe18	1876	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x80520f0	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x80480c0	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x80553c0	0	OBJECT	<unknown>	HIDDEN	10
__encode_dotted	.symtab	0x8051e6c	144	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x8051700	177	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x8051860	83	FUNC	<unknown>	HIDDEN	2
__environ	.symtab	0x805b8ec	4	OBJECT	<unknown>	DEFAULT	11
__errno_location	.symtab	0x804bda4	6	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x805b8e4	4	OBJECT	<unknown>	HIDDEN	11
__fgetc_unlocked	.symtab	0x8051d58	220	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x8055384	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x8055384	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__get_hosts_byname_r	.symtab	0x80507b0	44	FUNC	<unknown>	HIDDEN	2
__get_pc_thunk_bx	.symtab	0x80480b0	0	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x804efc8	19	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x804cdc4	29	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x804f184	6	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__init_array_end	.symtab	0x8055384	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x8055384	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__length_dotted	.symtab	0x8051fd4	65	FUNC	<unknown>	HIDDEN	2
__length_question	.symtab	0x80518b4	30	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x804baf4	46	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x804d378	43	FUNC	<unknown>	DEFAULT	2
__libc_creat	.symtab	0x804bc33	25	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0x804b9d0	87	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64	.symtab	0x804ba28	63	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x804bb24	38	FUNC	<unknown>	DEFAULT	2
__libc_getpid	.symtab	0x804bb4c	38	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x8051cd8	95	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x804f06c	50	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x804bbe8	75	FUNC	<unknown>	DEFAULT	2
__libc_poll	.symtab	0x8050858	54	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x804bc4c	54	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x804d40c	51	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x804bc84	63	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x804d440	51	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x804d474	67	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x804ed8f	217	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x805b8e8	4	OBJECT	<unknown>	DEFAULT	11
__libc_waitpid	.symtab	0x804bd1c	26	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x804bd38	54	FUNC	<unknown>	DEFAULT	2
__malloc_consolidate	.symtab	0x804de5d	424	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x804d634	38	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x8055550	24	OBJECT	<unknown>	DEFAULT	10
__malloc_state	.symtab	0x805b9c0	888	OBJECT	<unknown>	DEFAULT	11
__malloc_trim	.symtab	0x804ddd0	141	FUNC	<unknown>	DEFAULT	2
__nameserver	.symtab	0x805bd48	12	OBJECT	<unknown>	HIDDEN	11
__nameservers	.symtab	0x805bd54	4	OBJECT	<unknown>	HIDDEN	11
__open_etc_hosts	.symtab	0x80519d0	49	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x805056c	579	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x805b8f0	4	OBJECT	<unknown>	DEFAULT	11
__preinit_array_end	.symtab	0x8055384	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x8055384	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x804eb4f	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x804eb4f	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x804eb4f	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x804eb4f	3	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x804eb4f	3	FUNC	<unknown>	DEFAULT	2
__pthread_return_void	.symtab	0x804eb52	1	FUNC	<unknown>	DEFAULT	2
__raise	.symtab	0x80507dc	24	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r	.symtab	0x8051a01	724	FUNC	<unknown>	HIDDEN	2
__register_frame_info_bases	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x8055660	24	OBJECT	<unknown>	DEFAULT	10
__restore	.symtab	0x804ed87	0	NOTYPE	<unknown>	DEFAULT	2
__restore_rt	.symtab	0x804ed80	0	NOTYPE	<unknown>	DEFAULT	2
__rtld_fini	.symtab	0x805b8f8	4	OBJECT	<unknown>	HIDDEN	11
__searchdomain	.symtab	0x805bd38	16	OBJECT	<unknown>	HIDDEN	11
__searchdomains	.symtab	0x805bd58	4	OBJECT	<unknown>	HIDDEN	11
__sigaddset	.symtab	0x804d5f4	32	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x804d614	32	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x804d5d0	36	FUNC	<unknown>	DEFAULT	2
__socketcall	.symtab	0x804ee84	50	FUNC	<unknown>	HIDDEN	2
__socketcall.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__stdin	.symtab	0x8055414	4	OBJECT	<unknown>	DEFAULT	10
__stdio_READ	.symtab	0x8052018	68	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x804f278	126	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x8050ab4	168	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x804f2f8	240	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x804bee1	23	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.3991	.symtab	0x8053040	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x805205c	40	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x8050d8c	51	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x8052084	101	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x804f3e8	158	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x804bf80	43	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x8055418	4	OBJECT	<unknown>	DEFAULT	10
__syscall_error	.symtab	0x8050840	21	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x804eeb8	59	FUNC	<unknown>	HIDDEN	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x804eb10	63	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x804eb87	64	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x804ebc7	441	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x8055658	4	OBJECT	<unknown>	HIDDEN	10
__xpg_strerror_r	.symtab	0x804cde4	183	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x804bfac	54	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x80507f4	18	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x805bd5c	4	OBJECT	<unknown>	DEFAULT	11
_dl_phnum	.symtab	0x805bd60	4	OBJECT	<unknown>	DEFAULT	11
_edata	.symtab	0x8055680	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x805bd64	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x805b900	4	OBJECT	<unknown>	DEFAULT	11
_exit	.symtab	0x804ba68	40	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x8052118	3	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x80596e0	8192	OBJECT	<unknown>	DEFAULT	11
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x804bfe2	106	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x804f5f4	1476	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x805b904	4	OBJECT	<unknown>	DEFAULT	11
_init	.symtab	0x8048094	3	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x804f488	86	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x804c5f4	111	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x804c7e1	966	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x804c664	66	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x804c6a8	271	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x804c7b8	41	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x804eb52	1	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x804eb52	1	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x805b940	128	OBJECT	<unknown>	HIDDEN	11
_start	.symtab	0x8048164	34	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x8050b5c	559	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x804be80	97	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x805541c	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_add_lock	.symtab	0x8055420	24	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_dec_use	.symtab	0x8050e24	228	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count	.symtab	0x80596c4	4	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_del_lock	.symtab	0x8055438	24	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_use_count	.symtab	0x80596c0	4	OBJECT	<unknown>	DEFAULT	11
_stdio_streams	.symtab	0x8055460	240	OBJECT	<unknown>	DEFAULT	10
_stdio_term	.symtab	0x804bef8	136	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x8055450	4	OBJECT	<unknown>	DEFAULT	10
_stdlib_strto_l	.symtab	0x804e68c	277	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x804f4e0	61	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x8053120	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x804f520	209	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x804c04c	1448	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x804e1c4	273	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access	.symtab	0x804ba90	50	FUNC	<unknown>	DEFAULT	2
access.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atoi	.symtab	0x804e65c	20	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x804e65c	20	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bcopy	.symtab	0x804ce9c	21	FUNC	<unknown>	DEFAULT	2
bcopy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x805b8e0	1	OBJECT	<unknown>	DEFAULT	11
been_there_done_that.2832	.symtab	0x805b8fc	1	OBJECT	<unknown>	DEFAULT	11
bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x8050808	54	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x804d520	175	FUNC	<unknown>	DEFAULT	2
buf.2658	.symtab	0x805b6e4	16	OBJECT	<unknown>	DEFAULT	11
buf.4993	.symtab	0x805b700	460	OBJECT	<unknown>	DEFAULT	11
c	.symtab	0x80553f0	4	OBJECT	<unknown>	DEFAULT	10
chdir	.symtab	0x804bac4	46	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
clock_getres	.symtab	0x804eef4	50	FUNC	<unknown>	DEFAULT	2
clock_getres.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x804baf4	46	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x80553cc	4	OBJECT	<unknown>	DEFAULT	10
completed.2429	.symtab	0x8055680	1	OBJECT	<unknown>	DEFAULT	11
connect	.symtab	0x804d378	43	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x8048d6c	456	FUNC	<unknown>	DEFAULT	2
creat	.symtab	0x804bc33	25	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x8049040	168	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x80553ec	4	OBJECT	<unknown>	DEFAULT	10
data_start	.symtab	0x80553c8	0	NOTYPE	<unknown>	DEFAULT	10
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x805b8ec	4	OBJECT	<unknown>	DEFAULT	11
errno	.symtab	0x805b900	4	OBJECT	<unknown>	DEFAULT	11
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x804e7a4	103	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x8053f40	156	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x8050890	265	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x804b9d0	87	FUNC	<unknown>	DEFAULT	2
fcntl64	.symtab	0x804ba28	63	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x80482e7	104	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x8050f08	321	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x8051d58	220	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x8050dc0	98	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x805104c	105	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x8053f1c	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x805099c	24	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x804bb24	38	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x804cba8	51	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x8048110	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x804e005	412	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x80509b4	27	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x80509b4	27	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x80509d0	227	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ftcp	.symtab	0x8049550	1355	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked	.symtab	0x804cbdc	116	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0x804a4af	10	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x8048b3e	59	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x804834f	521	FUNC	<unknown>	DEFAULT	2
getPortz	.symtab	0x804a4b9	146	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x80482b7	48	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked	.symtab	0x8051d58	220	FUNC	<unknown>	DEFAULT	2
getdtablesize	.symtab	0x804ef28	37	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x804ef50	38	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x804ef78	38	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x804efa0	38	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x804d014	48	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x804d044	818	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x804efc8	19	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x804bb4c	38	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x804efdc	50	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x804d3a4	43	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x804d3d0	59	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x804f010	38	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x80556a4	4	OBJECT	<unknown>	DEFAULT	11
h.4992	.symtab	0x805b8cc	20	OBJECT	<unknown>	DEFAULT	11
h_errno	.symtab	0x805b904	4	OBJECT	<unknown>	DEFAULT	11
htonl	.symtab	0x804cf6c	7	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x804cf60	12	FUNC	<unknown>	DEFAULT	2
i.4243	.symtab	0x80553f4	4	OBJECT	<unknown>	DEFAULT	10
index	.symtab	0x804cc90	30	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x804cfec	37	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x804fd84	148	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x804cfd7	21	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x804cf88	79	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x8051530	462	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x8051428	264	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x805125e	458	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x80511d8	134	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0x804b2b5	309	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x8048188	111	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x804e385	87	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x804e5ae	171	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x804bb74	63	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x804ced0	29	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x804bd70	17	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x804bbb4	50	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/i386/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/i386/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/i386/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/i386/mmap.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x8048f34	268	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x8051cd8	95	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x80556b0	6	OBJECT	<unknown>	DEFAULT	11
main	.symtab	0x804b3ea	1509	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x80556a0	4	OBJECT	<unknown>	DEFAULT	11
makeIPPacket	.symtab	0x80491a3	126	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x8048b79	103	FUNC	<unknown>	DEFAULT	2
makevsepacket	.symtab	0x8049ca0	141	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x804d65a	1908	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x804e1a1	34	FUNC	<unknown>	DEFAULT	2
memchr	.symtab	0x804fbb8	35	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x804cc50	39	FUNC	<unknown>	DEFAULT	2
memcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memmove	.symtab	0x804fbdc	39	FUNC	<unknown>	DEFAULT	2
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x804fc2c	33	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x804fc50	176	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x804cc78	21	FUNC	<unknown>	DEFAULT	2
memset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mmap	.symtab	0x804ee68	27	FUNC	<unknown>	DEFAULT	2
munmap	.symtab	0x804f038	50	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x8055568	24	OBJECT	<unknown>	DEFAULT	10
mylock	.symtab	0x8055580	24	OBJECT	<unknown>	DEFAULT	10
mylock	.symtab	0x805b908	24	OBJECT	<unknown>	DEFAULT	11
nanosleep	.symtab	0x804f06c	50	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1109	.symtab	0x805b6e0	4	OBJECT	<unknown>	DEFAULT	11
ntohl	.symtab	0x804cf7f	7	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x804cf73	12	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x80556a8	8	OBJECT	<unknown>	DEFAULT	11
object.2482	.symtab	0x8055684	24	OBJECT	<unknown>	DEFAULT	11
open	.symtab	0x804bbe8	75	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x805b928	4	OBJECT	<unknown>	DEFAULT	11
p.2427	.symtab	0x80553c4	0	OBJECT	<unknown>	DEFAULT	10
pids	.symtab	0x805b92c	4	OBJECT	<unknown>	DEFAULT	11
poll	.symtab	0x8050858	54	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4202	.symtab	0x8053065	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x804883d	584	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x8048607	58	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x8048718	293	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x8048641	215	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0x804a54b	3434	FUNC	<unknown>	DEFAULT	2
qual_chars.4208	.symtab	0x8053078	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x80507dc	24	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x804e2d8	5	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x80481f7	192	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x804e2e0	72	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x8053c80	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x804e4b9	95	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x80555c0	128	OBJECT	<unknown>	DEFAULT	10
rawmemchr	.symtab	0x8051108	99	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x804bc4c	54	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x804d40c	51	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x8048be0	396	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x804f0a0	78	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x804bc84	63	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x804d440	51	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendHTTPtwo	.symtab	0x804a350	351	FUNC	<unknown>	DEFAULT	2
sendto	.symtab	0x804d474	67	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x804bcc4	38	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x804d4b8	59	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x804e328	93	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x804e420	153	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x804ed8f	217	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x804d520	175	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x804f0f0	85	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x804e80c	393	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x804d4f4	43	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x8049bbf	225	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x8048a85	185	FUNC	<unknown>	DEFAULT	2
spec_and_mask.4207	.symtab	0x805308c	16	OBJECT	<unknown>	DEFAULT	4
spec_base.4201	.symtab	0x8053071	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.4204	.symtab	0x80530b5	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.4203	.symtab	0x80530ca	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4206	.symtab	0x805309c	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4205	.symtab	0x80530ac	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x804bdac	31	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x804e3dc	67	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x804e3dc	67	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x804e518	150	FUNC	<unknown>	DEFAULT	2
static_id	.symtab	0x805565c	2	OBJECT	<unknown>	DEFAULT	10
static_ns	.symtab	0x805b920	4	OBJECT	<unknown>	DEFAULT	11
stderr	.symtab	0x8055410	4	OBJECT	<unknown>	DEFAULT	10
stdin	.symtab	0x8055408	4	OBJECT	<unknown>	DEFAULT	10
stdout	.symtab	0x805540c	4	OBJECT	<unknown>	DEFAULT	10
strcasecmp	.symtab	0x8051e34	54	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x804cc90	30	FUNC	<unknown>	DEFAULT	2
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x80510b8	29	FUNC	<unknown>	DEFAULT	2
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x80510b8	29	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0x804ccb0	27	FUNC	<unknown>	DEFAULT	2
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup	.symtab	0x80511a0	54	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x804cde4	183	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x804cccc	19	FUNC	<unknown>	DEFAULT	2
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncat	.symtab	0x80510d8	46	FUNC	<unknown>	DEFAULT	2
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x804fc04	38	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x804cce0	25	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x804fd5c	39	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x805116c	50	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x804ccfc	198	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x804ceb4	25	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x804fd00	89	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x804e670	26	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sysconf	.symtab	0x804e998	325	FUNC	<unknown>	DEFAULT	2
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x804cef0	112	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x80490e8	187	FUNC	<unknown>	DEFAULT	2
time	.symtab	0x804bcec	46	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tolower	.symtab	0x8051d38	29	FUNC	<unknown>	DEFAULT	2
tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x804bd84	29	FUNC	<unknown>	DEFAULT	2
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x8048558	175	FUNC	<unknown>	DEFAULT	2
type_codes	.symtab	0x80530d2	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x80530ea	12	OBJECT	<unknown>	DEFAULT	4
unknown.1161	.symtab	0x80530f6	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state	.symtab	0x8055598	28	OBJECT	<unknown>	DEFAULT	10
useragents	.symtab	0x80553d0	28	OBJECT	<unknown>	DEFAULT	10
usleep	.symtab	0x804eae0	48	FUNC	<unknown>	DEFAULT	2
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vseattack	.symtab	0x8049d2d	1220	FUNC	<unknown>	DEFAULT	2
vsnprintf	.symtab	0x804bdcc	178	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wait4	.symtab	0x804f148	59	FUNC	<unknown>	DEFAULT	2
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x804bd1c	26	FUNC	<unknown>	DEFAULT	2
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb	.symtab	0x804f18c	68	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x804f1f0	134	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x804f1d0	30	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0x804bd38	54	FUNC	<unknown>	DEFAULT	2
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
xdigits.3116	.symtab	0x8054034	17	OBJECT	<unknown>	DEFAULT	4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-11T07:18:47.954264+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47634	89.33.192.138	65447	TCP
2025-01-11T07:18:49.386049+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47636	89.33.192.138	65447	TCP
2025-01-11T07:18:50.840911+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47638	89.33.192.138	65447	TCP
2025-01-11T07:18:52.312832+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47640	89.33.192.138	65447	TCP
2025-01-11T07:18:53.764779+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47642	89.33.192.138	65447	TCP
2025-01-11T07:18:55.217369+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47644	89.33.192.138	65447	TCP
2025-01-11T07:18:56.653499+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47646	89.33.192.138	65447	TCP
2025-01-11T07:18:58.091344+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47648	89.33.192.138	65447	TCP
2025-01-11T07:18:59.563010+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47650	89.33.192.138	65447	TCP
2025-01-11T07:19:01.014268+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47652	89.33.192.138	65447	TCP
2025-01-11T07:19:02.476376+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47654	89.33.192.138	65447	TCP
2025-01-11T07:19:03.938099+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47656	89.33.192.138	65447	TCP
2025-01-11T07:19:05.389599+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47658	89.33.192.138	65447	TCP
2025-01-11T07:19:06.844488+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47660	89.33.192.138	65447	TCP
2025-01-11T07:19:08.295641+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47662	89.33.192.138	65447	TCP
2025-01-11T07:19:09.750954+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47664	89.33.192.138	65447	TCP
2025-01-11T07:19:11.231747+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47666	89.33.192.138	65447	TCP
2025-01-11T07:19:12.668973+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47668	89.33.192.138	65447	TCP
2025-01-11T07:19:14.106753+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47670	89.33.192.138	65447	TCP
2025-01-11T07:19:15.563832+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47672	89.33.192.138	65447	TCP
2025-01-11T07:19:17.013488+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47674	89.33.192.138	65447	TCP
2025-01-11T07:19:18.450471+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47676	89.33.192.138	65447	TCP
2025-01-11T07:19:19.903763+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47678	89.33.192.138	65447	TCP
2025-01-11T07:19:21.360679+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47680	89.33.192.138	65447	TCP
2025-01-11T07:19:22.794387+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47682	89.33.192.138	65447	TCP
2025-01-11T07:19:24.253913+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47684	89.33.192.138	65447	TCP
2025-01-11T07:19:25.703887+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47686	89.33.192.138	65447	TCP
2025-01-11T07:19:27.157638+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47688	89.33.192.138	65447	TCP
2025-01-11T07:19:28.610630+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47690	89.33.192.138	65447	TCP
2025-01-11T07:19:30.061100+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47692	89.33.192.138	65447	TCP
2025-01-11T07:19:31.497365+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47694	89.33.192.138	65447	TCP
2025-01-11T07:19:32.957502+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47696	89.33.192.138	65447	TCP
2025-01-11T07:19:34.404205+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47698	89.33.192.138	65447	TCP
2025-01-11T07:19:35.877482+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47700	89.33.192.138	65447	TCP
2025-01-11T07:19:37.345971+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47702	89.33.192.138	65447	TCP
2025-01-11T07:19:39.117352+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47704	89.33.192.138	65447	TCP
2025-01-11T07:19:40.579708+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47706	89.33.192.138	65447	TCP
2025-01-11T07:19:42.061225+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47708	89.33.192.138	65447	TCP
2025-01-11T07:19:43.497049+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47710	89.33.192.138	65447	TCP
2025-01-11T07:19:44.951058+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47712	89.33.192.138	65447	TCP
2025-01-11T07:19:46.389063+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47714	89.33.192.138	65447	TCP
2025-01-11T07:19:47.843559+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47716	89.33.192.138	65447	TCP
2025-01-11T07:19:49.300566+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47718	89.33.192.138	65447	TCP
2025-01-11T07:19:50.769386+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47720	89.33.192.138	65447	TCP
2025-01-11T07:19:52.216617+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47722	89.33.192.138	65447	TCP
2025-01-11T07:19:53.674157+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47724	89.33.192.138	65447	TCP
2025-01-11T07:19:55.388391+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47726	89.33.192.138	65447	TCP
2025-01-11T07:19:56.826689+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47728	89.33.192.138	65447	TCP
2025-01-11T07:19:58.263873+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47730	89.33.192.138	65447	TCP
2025-01-11T07:19:59.701749+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47732	89.33.192.138	65447	TCP
2025-01-11T07:20:01.157960+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47734	89.33.192.138	65447	TCP
2025-01-11T07:20:02.628777+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47736	89.33.192.138	65447	TCP
2025-01-11T07:20:04.076471+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47738	89.33.192.138	65447	TCP
2025-01-11T07:20:05.514073+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47740	89.33.192.138	65447	TCP
2025-01-11T07:20:06.970999+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47742	89.33.192.138	65447	TCP
2025-01-11T07:20:08.440848+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47744	89.33.192.138	65447	TCP
2025-01-11T07:20:09.893347+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47746	89.33.192.138	65447	TCP
2025-01-11T07:20:11.342254+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47748	89.33.192.138	65447	TCP
2025-01-11T07:20:12.797743+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47750	89.33.192.138	65447	TCP
2025-01-11T07:20:14.250211+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47752	89.33.192.138	65447	TCP
2025-01-11T07:20:15.704787+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47754	89.33.192.138	65447	TCP
2025-01-11T07:20:17.155118+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47756	89.33.192.138	65447	TCP
2025-01-11T07:20:18.592818+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47758	89.33.192.138	65447	TCP
2025-01-11T07:20:20.047160+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47760	89.33.192.138	65447	TCP
2025-01-11T07:20:21.502459+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47762	89.33.192.138	65447	TCP
2025-01-11T07:20:22.971325+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47764	89.33.192.138	65447	TCP
2025-01-11T07:20:24.424418+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47766	89.33.192.138	65447	TCP
2025-01-11T07:20:25.877040+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47768	89.33.192.138	65447	TCP
2025-01-11T07:20:27.331297+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47770	89.33.192.138	65447	TCP
2025-01-11T07:20:28.779797+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47772	89.33.192.138	65447	TCP
2025-01-11T07:20:30.217592+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47774	89.33.192.138	65447	TCP
2025-01-11T07:20:31.672721+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47776	89.33.192.138	65447	TCP
2025-01-11T07:20:33.128212+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47778	89.33.192.138	65447	TCP
2025-01-11T07:20:34.578607+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47780	89.33.192.138	65447	TCP
2025-01-11T07:20:36.014055+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47782	89.33.192.138	65447	TCP
2025-01-11T07:20:37.469560+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47784	89.33.192.138	65447	TCP
2025-01-11T07:20:38.926644+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47786	89.33.192.138	65447	TCP
2025-01-11T07:20:40.377214+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47788	89.33.192.138	65447	TCP
2025-01-11T07:20:41.841716+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47790	89.33.192.138	65447	TCP
2025-01-11T07:20:43.283338+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47792	89.33.192.138	65447	TCP
2025-01-11T07:20:44.735308+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47794	89.33.192.138	65447	TCP
2025-01-11T07:20:46.170867+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47796	89.33.192.138	65447	TCP
2025-01-11T07:20:47.609900+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47798	89.33.192.138	65447	TCP
2025-01-11T07:20:49.045764+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47800	89.33.192.138	65447	TCP
2025-01-11T07:20:50.501194+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47802	89.33.192.138	65447	TCP
2025-01-11T07:20:51.936235+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47804	89.33.192.138	65447	TCP
2025-01-11T07:20:53.417559+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47806	89.33.192.138	65447	TCP
2025-01-11T07:20:54.861142+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47808	89.33.192.138	65447	TCP
2025-01-11T07:20:56.316686+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47810	89.33.192.138	65447	TCP
2025-01-11T07:20:57.764889+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47812	89.33.192.138	65447	TCP
2025-01-11T07:20:59.220041+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47814	89.33.192.138	65447	TCP
2025-01-11T07:21:00.677563+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47816	89.33.192.138	65447	TCP
2025-01-11T07:21:02.145901+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47818	89.33.192.138	65447	TCP
2025-01-11T07:21:03.643857+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47820	89.33.192.138	65447	TCP
2025-01-11T07:21:05.094829+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47822	89.33.192.138	65447	TCP
2025-01-11T07:21:06.530937+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47824	89.33.192.138	65447	TCP
2025-01-11T07:21:07.985927+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47826	89.33.192.138	65447	TCP
2025-01-11T07:21:09.421423+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47828	89.33.192.138	65447	TCP
2025-01-11T07:21:10.878979+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47830	89.33.192.138	65447	TCP
2025-01-11T07:21:12.348342+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47832	89.33.192.138	65447	TCP
2025-01-11T07:21:13.800221+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47834	89.33.192.138	65447	TCP
2025-01-11T07:21:15.250762+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47836	89.33.192.138	65447	TCP
2025-01-11T07:21:16.705950+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47838	89.33.192.138	65447	TCP
2025-01-11T07:21:18.160659+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47840	89.33.192.138	65447	TCP
2025-01-11T07:21:19.613277+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47842	89.33.192.138	65447	TCP
2025-01-11T07:21:21.069274+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47844	89.33.192.138	65447	TCP
2025-01-11T07:21:22.514913+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47846	89.33.192.138	65447	TCP
2025-01-11T07:21:23.989537+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47848	89.33.192.138	65447	TCP
2025-01-11T07:21:25.437325+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47850	89.33.192.138	65447	TCP
2025-01-11T07:21:26.921989+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47852	89.33.192.138	65447	TCP
2025-01-11T07:21:28.359674+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47854	89.33.192.138	65447	TCP
2025-01-11T07:21:29.816449+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47856	89.33.192.138	65447	TCP
2025-01-11T07:21:31.299684+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47858	89.33.192.138	65447	TCP
2025-01-11T07:21:32.766379+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47860	89.33.192.138	65447	TCP
2025-01-11T07:21:34.221582+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47862	89.33.192.138	65447	TCP
2025-01-11T07:21:35.672493+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47864	89.33.192.138	65447	TCP
2025-01-11T07:21:37.131947+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47866	89.33.192.138	65447	TCP
2025-01-11T07:21:38.785830+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47868	89.33.192.138	65447	TCP
2025-01-11T07:21:40.255630+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47870	89.33.192.138	65447	TCP
2025-01-11T07:21:41.704881+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47872	89.33.192.138	65447	TCP
2025-01-11T07:21:43.160463+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47874	89.33.192.138	65447	TCP
2025-01-11T07:21:44.592963+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47876	89.33.192.138	65447	TCP
2025-01-11T07:21:46.029806+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47878	89.33.192.138	65447	TCP
2025-01-11T07:21:47.469310+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47880	89.33.192.138	65447	TCP
2025-01-11T07:21:48.922078+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47882	89.33.192.138	65447	TCP
2025-01-11T07:21:50.359965+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47884	89.33.192.138	65447	TCP
2025-01-11T07:21:51.818704+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47886	89.33.192.138	65447	TCP
2025-01-11T07:21:53.268087+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47888	89.33.192.138	65447	TCP
2025-01-11T07:21:54.704030+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47890	89.33.192.138	65447	TCP
2025-01-11T07:21:56.140614+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47892	89.33.192.138	65447	TCP
2025-01-11T07:21:57.615569+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47894	89.33.192.138	65447	TCP
2025-01-11T07:21:59.084080+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47896	89.33.192.138	65447	TCP
2025-01-11T07:22:00.535099+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47898	89.33.192.138	65447	TCP
2025-01-11T07:22:01.985746+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47900	89.33.192.138	65447	TCP
2025-01-11T07:22:03.440751+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47902	89.33.192.138	65447	TCP
2025-01-11T07:22:04.875582+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47904	89.33.192.138	65447	TCP
2025-01-11T07:22:06.330691+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47906	89.33.192.138	65447	TCP
2025-01-11T07:22:07.785543+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47908	89.33.192.138	65447	TCP
2025-01-11T07:22:09.256555+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47910	89.33.192.138	65447	TCP
2025-01-11T07:22:10.738424+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47912	89.33.192.138	65447	TCP
2025-01-11T07:22:12.191617+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47914	89.33.192.138	65447	TCP
2025-01-11T07:22:13.645090+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47916	89.33.192.138	65447	TCP
2025-01-11T07:22:15.118906+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47918	89.33.192.138	65447	TCP
2025-01-11T07:22:16.564977+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47920	89.33.192.138	65447	TCP
2025-01-11T07:22:18.002148+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47922	89.33.192.138	65447	TCP
2025-01-11T07:22:19.458563+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47924	89.33.192.138	65447	TCP
2025-01-11T07:22:20.908184+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47926	89.33.192.138	65447	TCP
2025-01-11T07:22:22.343360+0100	2841335	ETPRO MALWARE ELF/Mirai Variant CnC Checkin	1	192.168.2.23	47928	89.33.192.138	65447	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 11, 2025 07:18:47.949225903 CET	47634	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:47.954096079 CET	65447	47634	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:47.954161882 CET	47634	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:47.954263926 CET	47634	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:47.959057093 CET	65447	47634	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:48.076685905 CET	43928	443	192.168.2.23	91.189.91.42
Jan 11, 2025 07:18:49.380870104 CET	65447	47634	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:49.381164074 CET	47636	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:49.381167889 CET	47634	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:49.385940075 CET	65447	47634	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:49.385951996 CET	65447	47636	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:49.386030912 CET	47636	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:49.386049032 CET	47636	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:49.390873909 CET	65447	47636	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:50.833756924 CET	65447	47636	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:50.834120035 CET	47636	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:50.834151983 CET	47638	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:50.840666056 CET	65447	47636	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:50.840675116 CET	65447	47638	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:50.840780020 CET	47638	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:50.840910912 CET	47638	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:50.847897053 CET	65447	47638	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:52.307590961 CET	65447	47638	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:52.307832003 CET	47638	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:52.307874918 CET	47640	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:52.312691927 CET	65447	47638	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:52.312711000 CET	65447	47640	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:52.312832117 CET	47640	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:52.312832117 CET	47640	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:52.317634106 CET	65447	47640	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:53.707905054 CET	42836	443	192.168.2.23	91.189.91.43
Jan 11, 2025 07:18:53.757559061 CET	65447	47640	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:53.757730961 CET	47640	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:53.757775068 CET	47642	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:53.764638901 CET	65447	47640	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:53.764650106 CET	65447	47642	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:53.764755011 CET	47642	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:53.764779091 CET	47642	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:53.773473024 CET	65447	47642	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:54.475893974 CET	42516	80	192.168.2.23	109.202.202.202
Jan 11, 2025 07:18:55.212066889 CET	65447	47642	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:55.212230921 CET	47642	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:55.212438107 CET	47644	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:55.217022896 CET	65447	47642	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:55.217283010 CET	65447	47644	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:55.217346907 CET	47644	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:55.217369080 CET	47644	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:55.222398996 CET	65447	47644	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:56.648161888 CET	65447	47644	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:56.648468971 CET	47644	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:56.648550987 CET	47646	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:56.653340101 CET	65447	47644	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:56.653352022 CET	65447	47646	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:56.653455019 CET	47646	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:56.653498888 CET	47646	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:56.658277988 CET	65447	47646	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:58.085963964 CET	65447	47646	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:58.086193085 CET	47646	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:58.086272001 CET	47648	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:58.091098070 CET	65447	47646	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:58.091109037 CET	65447	47648	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:58.091344118 CET	47648	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:58.091344118 CET	47648	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:58.096141100 CET	65447	47648	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:59.557662964 CET	65447	47648	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:59.557940960 CET	47648	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:59.557980061 CET	47650	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:59.562844038 CET	65447	47648	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:59.562855959 CET	65447	47650	89.33.192.138	192.168.2.23
Jan 11, 2025 07:18:59.562944889 CET	47650	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:59.563009977 CET	47650	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:18:59.567771912 CET	65447	47650	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:01.009116888 CET	65447	47650	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:01.009303093 CET	47652	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:01.009319067 CET	47650	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:01.014146090 CET	65447	47652	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:01.014153004 CET	65447	47650	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:01.014215946 CET	47652	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:01.014267921 CET	47652	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:01.019068003 CET	65447	47652	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:02.470932007 CET	65447	47652	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:02.471086979 CET	47652	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:02.471164942 CET	47654	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:02.475914955 CET	65447	47652	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:02.475944042 CET	65447	47654	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:02.476025105 CET	47654	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:02.476376057 CET	47654	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:02.481204987 CET	65447	47654	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:03.933042049 CET	65447	47654	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:03.933192015 CET	47654	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:03.933218956 CET	47656	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:03.937999010 CET	65447	47654	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:03.938013077 CET	65447	47656	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:03.938060045 CET	47656	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:03.938098907 CET	47656	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:03.942854881 CET	65447	47656	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:05.384154081 CET	65447	47656	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:05.384462118 CET	47656	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:05.384517908 CET	47658	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:05.389370918 CET	65447	47656	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:05.389374971 CET	65447	47658	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:05.389528036 CET	47658	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:05.389599085 CET	47658	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:05.394531012 CET	65447	47658	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:06.839276075 CET	65447	47658	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:06.839425087 CET	47658	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:06.839443922 CET	47660	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:06.844324112 CET	65447	47658	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:06.844331026 CET	65447	47660	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:06.844434023 CET	47660	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:06.844487906 CET	47660	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:06.849210024 CET	65447	47660	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:08.290147066 CET	65447	47660	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:08.290462971 CET	47660	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:08.290560961 CET	47662	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:08.295411110 CET	65447	47660	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:08.295428991 CET	65447	47662	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:08.295548916 CET	47662	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:08.295640945 CET	47662	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:08.297879934 CET	43928	443	192.168.2.23	91.189.91.42
Jan 11, 2025 07:19:08.300461054 CET	65447	47662	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:09.745768070 CET	65447	47662	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:09.745907068 CET	47662	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:09.745934963 CET	47664	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:09.750765085 CET	65447	47662	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:09.750778913 CET	65447	47664	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:09.750927925 CET	47664	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:09.750953913 CET	47664	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:09.755825996 CET	65447	47664	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:11.226190090 CET	65447	47664	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:11.226692915 CET	47664	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:11.226803064 CET	47666	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:11.231579065 CET	65447	47664	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:11.231590986 CET	65447	47666	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:11.231698990 CET	47666	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:11.231746912 CET	47666	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:11.236519098 CET	65447	47666	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:12.663758039 CET	65447	47666	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:12.663973093 CET	47666	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:12.663989067 CET	47668	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:12.668809891 CET	65447	47666	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:12.668826103 CET	65447	47668	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:12.668940067 CET	47668	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:12.668972969 CET	47668	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:12.673794985 CET	65447	47668	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:14.101267099 CET	65447	47668	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:14.101758957 CET	47668	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:14.101830006 CET	47670	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:14.106502056 CET	65447	47668	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:14.106580019 CET	65447	47670	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:14.106725931 CET	47670	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:14.106753111 CET	47670	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:14.111558914 CET	65447	47670	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:15.558160067 CET	65447	47670	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:15.558759928 CET	47672	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:15.558784008 CET	47670	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:15.563654900 CET	65447	47672	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:15.563671112 CET	65447	47670	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:15.563762903 CET	47672	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:15.563832045 CET	47672	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:15.568584919 CET	65447	47672	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:17.008137941 CET	65447	47672	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:17.008449078 CET	47672	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:17.008449078 CET	47674	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:17.013335943 CET	65447	47672	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:17.013348103 CET	65447	47674	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:17.013416052 CET	47674	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:17.013488054 CET	47674	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:17.018235922 CET	65447	47674	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:18.445175886 CET	65447	47674	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:18.445441008 CET	47674	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:18.445492029 CET	47676	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:18.450304985 CET	65447	47674	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:18.450318098 CET	65447	47676	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:18.450388908 CET	47676	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:18.450470924 CET	47676	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:18.455216885 CET	65447	47676	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:19.898273945 CET	65447	47676	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:19.898663044 CET	47676	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:19.898734093 CET	47678	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:19.903526068 CET	65447	47676	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:19.903594017 CET	65447	47678	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:19.903681993 CET	47678	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:19.903763056 CET	47678	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:19.908587933 CET	65447	47678	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:20.584229946 CET	42836	443	192.168.2.23	91.189.91.43
Jan 11, 2025 07:19:21.355338097 CET	65447	47678	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:21.355611086 CET	47678	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:21.355676889 CET	47680	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:21.360464096 CET	65447	47678	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:21.360501051 CET	65447	47680	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:21.360585928 CET	47680	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:21.360678911 CET	47680	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:21.365495920 CET	65447	47680	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:22.789041042 CET	65447	47680	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:22.789262056 CET	47680	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:22.789350033 CET	47682	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:22.794205904 CET	65447	47680	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:22.794229031 CET	65447	47682	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:22.794303894 CET	47682	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:22.794387102 CET	47682	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:22.799160957 CET	65447	47682	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:24.248440981 CET	65447	47682	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:24.248630047 CET	47682	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:24.248680115 CET	47684	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:24.253499985 CET	65447	47682	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:24.253793955 CET	65447	47684	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:24.253855944 CET	47684	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:24.253912926 CET	47684	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:24.258800030 CET	65447	47684	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:24.679692984 CET	42516	80	192.168.2.23	109.202.202.202
Jan 11, 2025 07:19:25.698292017 CET	65447	47684	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:25.698477983 CET	47684	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:25.698532104 CET	47686	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:25.703761101 CET	65447	47684	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:25.703783035 CET	65447	47686	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:25.703845978 CET	47686	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:25.703886986 CET	47686	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:25.708750010 CET	65447	47686	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:27.152272940 CET	65447	47686	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:27.152698994 CET	47688	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:27.152712107 CET	47686	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:27.157530069 CET	65447	47688	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:27.157541990 CET	65447	47686	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:27.157592058 CET	47688	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:27.157638073 CET	47688	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:27.162416935 CET	65447	47688	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:28.605392933 CET	65447	47688	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:28.605535984 CET	47688	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:28.605561018 CET	47690	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:28.610450983 CET	65447	47688	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:28.610482931 CET	65447	47690	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:28.610577106 CET	47690	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:28.610630035 CET	47690	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:28.615462065 CET	65447	47690	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:30.055737019 CET	65447	47690	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:30.055910110 CET	47690	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:30.055922031 CET	47692	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:30.060892105 CET	65447	47690	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:30.060937881 CET	65447	47692	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:30.061045885 CET	47692	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:30.061100006 CET	47692	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:30.065908909 CET	65447	47692	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:31.491775036 CET	65447	47692	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:31.492178917 CET	47692	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:31.492244959 CET	47694	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:31.497159958 CET	65447	47692	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:31.497196913 CET	65447	47694	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:31.497276068 CET	47694	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:31.497364998 CET	47694	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:31.502192974 CET	65447	47694	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:32.951803923 CET	65447	47694	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:32.951961040 CET	47694	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:32.952429056 CET	47696	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:32.957104921 CET	65447	47694	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:32.957349062 CET	65447	47696	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:32.957501888 CET	47696	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:32.957501888 CET	47696	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:32.962507963 CET	65447	47696	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:34.398684978 CET	65447	47696	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:34.399118900 CET	47696	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:34.399187088 CET	47698	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:34.404000044 CET	65447	47696	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:34.404036045 CET	65447	47698	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:34.404139996 CET	47698	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:34.404205084 CET	47698	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:34.408997059 CET	65447	47698	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:35.872247934 CET	65447	47698	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:35.872438908 CET	47698	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:35.872488022 CET	47700	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:35.877315044 CET	65447	47698	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:35.877330065 CET	65447	47700	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:35.877403975 CET	47700	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:35.877481937 CET	47700	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:35.882203102 CET	65447	47700	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:37.340605974 CET	65447	47700	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:37.340836048 CET	47700	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:37.340928078 CET	47702	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:37.345801115 CET	65447	47700	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:37.345818996 CET	65447	47702	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:37.345892906 CET	47702	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:37.345971107 CET	47702	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:37.350704908 CET	65447	47702	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:39.112076044 CET	65447	47702	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:39.112104893 CET	65447	47702	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:39.112221003 CET	47702	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:39.112267971 CET	47702	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:39.112323999 CET	47704	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:39.117213964 CET	65447	47702	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:39.117248058 CET	65447	47704	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:39.117311954 CET	47704	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:39.117352009 CET	47704	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:39.122167110 CET	65447	47704	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:40.574291945 CET	65447	47704	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:40.574645042 CET	47704	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:40.574727058 CET	47706	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:40.579543114 CET	65447	47704	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:40.579562902 CET	65447	47706	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:40.579677105 CET	47706	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:40.579708099 CET	47706	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:40.584500074 CET	65447	47706	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:42.055892944 CET	65447	47706	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:42.056160927 CET	47706	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:42.056221008 CET	47708	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:42.061075926 CET	65447	47706	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:42.061096907 CET	65447	47708	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:42.061203003 CET	47708	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:42.061224937 CET	47708	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:42.066015959 CET	65447	47708	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:43.491760969 CET	65447	47708	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:43.492017031 CET	47710	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:43.492017031 CET	47708	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:43.496929884 CET	65447	47710	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:43.496963024 CET	65447	47708	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:43.497013092 CET	47710	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:43.497049093 CET	47710	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:43.501888037 CET	65447	47710	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:44.945884943 CET	65447	47710	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:44.946127892 CET	47710	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:44.946141005 CET	47712	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:44.950951099 CET	65447	47710	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:44.950972080 CET	65447	47712	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:44.951030970 CET	47712	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:44.951057911 CET	47712	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:44.955840111 CET	65447	47712	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:46.383779049 CET	65447	47712	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:46.383964062 CET	47712	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:46.383991957 CET	47714	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:46.388901949 CET	65447	47712	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:46.388926029 CET	65447	47714	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:46.389014006 CET	47714	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:46.389062881 CET	47714	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:46.393814087 CET	65447	47714	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:47.838140011 CET	65447	47714	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:47.838481903 CET	47714	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:47.838578939 CET	47716	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:47.843399048 CET	65447	47714	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:47.843427896 CET	65447	47716	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:47.843504906 CET	47716	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:47.843559027 CET	47716	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:47.848346949 CET	65447	47716	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:49.252271891 CET	43928	443	192.168.2.23	91.189.91.42
Jan 11, 2025 07:19:49.295044899 CET	65447	47716	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:49.295335054 CET	47716	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:49.295373917 CET	47718	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:49.300399065 CET	65447	47716	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:49.300446987 CET	65447	47718	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:49.300513983 CET	47718	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:49.300565958 CET	47718	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:49.305470943 CET	65447	47718	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:50.763968945 CET	65447	47718	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:50.764261007 CET	47718	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:50.764271975 CET	47720	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:50.769249916 CET	65447	47718	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:50.769285917 CET	65447	47720	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:50.769360065 CET	47720	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:50.769386053 CET	47720	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:50.774261951 CET	65447	47720	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:52.211338043 CET	65447	47720	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:52.211579084 CET	47720	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:52.211579084 CET	47722	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:52.216521025 CET	65447	47720	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:52.216532946 CET	65447	47722	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:52.216586113 CET	47722	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:52.216617107 CET	47722	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:52.221436024 CET	65447	47722	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:53.668838024 CET	65447	47722	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:53.669078112 CET	47722	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:53.669133902 CET	47724	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:53.673896074 CET	65447	47722	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:53.673989058 CET	65447	47724	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:53.674156904 CET	47724	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:53.674156904 CET	47724	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:53.678946972 CET	65447	47724	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:55.383033991 CET	65447	47724	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:55.383177996 CET	65447	47724	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:55.383193970 CET	47724	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:55.383218050 CET	47724	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:55.383245945 CET	47726	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:55.388274908 CET	65447	47724	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:55.388315916 CET	65447	47726	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:55.388365030 CET	47726	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:55.388391018 CET	47726	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:55.393229961 CET	65447	47726	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:56.821573019 CET	65447	47726	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:56.821711063 CET	47726	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:56.821732044 CET	47728	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:56.826565027 CET	65447	47726	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:56.826579094 CET	65447	47728	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:56.826662064 CET	47728	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:56.826689005 CET	47728	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:56.831485033 CET	65447	47728	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:58.258544922 CET	65447	47728	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:58.258745909 CET	47728	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:58.258785009 CET	47730	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:58.263655901 CET	65447	47728	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:58.263670921 CET	65447	47730	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:58.263873100 CET	47730	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:58.263873100 CET	47730	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:58.268938065 CET	65447	47730	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:59.696505070 CET	65447	47730	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:59.696681023 CET	47730	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:59.696743011 CET	47732	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:59.701595068 CET	65447	47730	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:59.701636076 CET	65447	47732	89.33.192.138	192.168.2.23
Jan 11, 2025 07:19:59.701733112 CET	47732	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:59.701749086 CET	47732	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:19:59.706609964 CET	65447	47732	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:01.152708054 CET	65447	47732	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:01.152929068 CET	47732	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:01.152929068 CET	47734	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:01.157766104 CET	65447	47732	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:01.157779932 CET	65447	47734	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:01.157883883 CET	47734	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:01.157959938 CET	47734	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:01.162703991 CET	65447	47734	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:02.623377085 CET	65447	47734	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:02.623732090 CET	47734	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:02.623825073 CET	47736	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:02.628535032 CET	65447	47734	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:02.628597021 CET	65447	47736	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:02.628690958 CET	47736	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:02.628777027 CET	47736	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:02.633557081 CET	65447	47736	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:04.071152925 CET	65447	47736	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:04.071419001 CET	47736	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:04.071419001 CET	47738	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:04.076339960 CET	65447	47736	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:04.076359034 CET	65447	47738	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:04.076471090 CET	47738	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:04.076471090 CET	47738	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:04.081214905 CET	65447	47738	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:05.508518934 CET	65447	47738	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:05.509027958 CET	47738	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:05.509049892 CET	47740	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:05.513906956 CET	65447	47738	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:05.513920069 CET	65447	47740	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:05.514040947 CET	47740	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:05.514072895 CET	47740	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:05.518802881 CET	65447	47740	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:06.965640068 CET	65447	47740	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:06.965940952 CET	47740	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:06.965940952 CET	47742	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:06.970834970 CET	65447	47740	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:06.970845938 CET	65447	47742	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:06.970949888 CET	47742	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:06.970999002 CET	47742	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:06.975831032 CET	65447	47742	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:08.435297966 CET	65447	47742	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:08.435810089 CET	47742	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:08.435833931 CET	47744	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:08.440613031 CET	65447	47742	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:08.440653086 CET	65447	47744	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:08.440721989 CET	47744	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:08.440848112 CET	47744	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:08.445595026 CET	65447	47744	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:09.887949944 CET	65447	47744	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:09.888310909 CET	47744	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:09.888420105 CET	47746	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:09.893172979 CET	65447	47744	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:09.893189907 CET	65447	47746	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:09.893261909 CET	47746	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:09.893347025 CET	47746	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:09.898116112 CET	65447	47746	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:11.336926937 CET	65447	47746	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:11.337171078 CET	47746	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:11.337203979 CET	47746	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:11.337308884 CET	47748	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:11.342024088 CET	65447	47746	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:11.342080116 CET	65447	47748	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:11.342155933 CET	47748	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:11.342253923 CET	47748	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:11.346992016 CET	65447	47748	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:12.792282104 CET	65447	47748	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:12.792658091 CET	47748	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:12.792746067 CET	47750	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:12.797574043 CET	65447	47748	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:12.797586918 CET	65447	47750	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:12.797667980 CET	47750	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:12.797743082 CET	47750	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:12.802524090 CET	65447	47750	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:14.244885921 CET	65447	47750	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:14.245120049 CET	47750	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:14.245299101 CET	47752	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:14.249893904 CET	65447	47750	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:14.250092030 CET	65447	47752	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:14.250211000 CET	47752	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:14.250211000 CET	47752	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:14.255065918 CET	65447	47752	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:15.698955059 CET	65447	47752	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:15.699456930 CET	47752	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:15.699456930 CET	47754	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:15.704344034 CET	65447	47752	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:15.704360008 CET	65447	47754	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:15.704483986 CET	47754	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:15.704787016 CET	47754	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:15.709606886 CET	65447	47754	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:17.149626017 CET	65447	47754	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:17.149981976 CET	47754	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:17.150197983 CET	47756	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:17.154880047 CET	65447	47754	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:17.154963017 CET	65447	47756	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:17.155050993 CET	47756	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:17.155117989 CET	47756	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:17.159903049 CET	65447	47756	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:18.587516069 CET	65447	47756	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:18.587805033 CET	47756	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:18.587876081 CET	47758	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:18.592600107 CET	65447	47756	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:18.592663050 CET	65447	47758	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:18.592756987 CET	47758	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:18.592818022 CET	47758	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:18.597621918 CET	65447	47758	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:20.041852951 CET	65447	47758	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:20.042186022 CET	47758	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:20.042248964 CET	47760	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:20.046968937 CET	65447	47758	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:20.047003031 CET	65447	47760	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:20.047107935 CET	47760	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:20.047159910 CET	47760	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:20.051901102 CET	65447	47760	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:21.497019053 CET	65447	47760	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:21.497437954 CET	47760	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:21.497531891 CET	47762	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:21.502211094 CET	65447	47760	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:21.502311945 CET	65447	47762	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:21.502383947 CET	47762	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:21.502459049 CET	47762	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:21.507253885 CET	65447	47762	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:22.966042995 CET	65447	47762	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:22.966317892 CET	47762	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:22.966397047 CET	47764	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:22.971168995 CET	65447	47762	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:22.971204042 CET	65447	47764	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:22.971265078 CET	47764	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:22.971324921 CET	47764	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:22.976177931 CET	65447	47764	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:24.419017076 CET	65447	47764	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:24.419256926 CET	47764	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:24.419334888 CET	47766	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:24.424232006 CET	65447	47764	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:24.424248934 CET	65447	47766	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:24.424381018 CET	47766	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:24.424417973 CET	47766	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:24.429251909 CET	65447	47766	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:25.871728897 CET	65447	47766	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:25.871948004 CET	47766	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:25.872059107 CET	47768	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:25.876858950 CET	65447	47766	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:25.876876116 CET	65447	47768	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:25.876945972 CET	47768	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:25.877039909 CET	47768	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:25.881872892 CET	65447	47768	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:27.325978041 CET	65447	47768	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:27.326188087 CET	47768	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:27.326188087 CET	47770	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:27.331170082 CET	65447	47768	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:27.331202030 CET	65447	47770	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:27.331296921 CET	47770	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:27.331296921 CET	47770	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:27.336216927 CET	65447	47770	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:28.774648905 CET	65447	47770	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:28.774827003 CET	47770	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:28.774847031 CET	47772	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:28.779701948 CET	65447	47770	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:28.779717922 CET	65447	47772	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:28.779762983 CET	47772	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:28.779797077 CET	47772	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:28.784562111 CET	65447	47772	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:30.212162018 CET	65447	47772	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:30.212464094 CET	47772	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:30.212522030 CET	47774	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:30.217398882 CET	65447	47772	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:30.217412949 CET	65447	47774	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:30.217529058 CET	47774	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:30.217592001 CET	47774	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:30.222302914 CET	65447	47774	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:31.667445898 CET	65447	47774	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:31.667661905 CET	47774	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:31.667682886 CET	47776	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:31.672570944 CET	65447	47774	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:31.672585964 CET	65447	47776	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:31.672687054 CET	47776	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:31.672720909 CET	47776	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:31.677576065 CET	65447	47776	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:33.122432947 CET	65447	47776	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:33.123091936 CET	47776	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:33.123172998 CET	47778	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:33.128021002 CET	65447	47776	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:33.128031969 CET	65447	47778	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:33.128128052 CET	47778	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:33.128211975 CET	47778	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:33.132931948 CET	65447	47778	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:34.573374033 CET	65447	47778	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:34.573590994 CET	47778	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:34.573611975 CET	47780	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:34.578501940 CET	65447	47778	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:34.578526020 CET	65447	47780	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:34.578571081 CET	47780	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:34.578607082 CET	47780	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:34.583431005 CET	65447	47780	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:36.008850098 CET	65447	47780	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:36.009004116 CET	47780	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:36.009042978 CET	47782	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:36.013930082 CET	65447	47780	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:36.013964891 CET	65447	47782	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:36.014039993 CET	47782	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:36.014055014 CET	47782	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:36.018877029 CET	65447	47782	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:37.464212894 CET	65447	47782	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:37.464448929 CET	47784	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:37.464541912 CET	47782	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:37.469376087 CET	65447	47784	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:37.469464064 CET	65447	47782	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:37.469500065 CET	47784	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:37.469559908 CET	47784	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:37.474325895 CET	65447	47784	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:38.921154022 CET	65447	47784	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:38.921555042 CET	47784	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:38.921605110 CET	47786	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:38.926435947 CET	65447	47784	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:38.926464081 CET	65447	47786	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:38.926565886 CET	47786	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:38.926644087 CET	47786	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:38.931427002 CET	65447	47786	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:40.371948004 CET	65447	47786	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:40.372096062 CET	47786	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:40.372142076 CET	47788	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:40.377103090 CET	65447	47786	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:40.377139091 CET	65447	47788	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:40.377183914 CET	47788	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:40.377213955 CET	47788	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:40.382039070 CET	65447	47788	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:41.836321115 CET	65447	47788	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:41.836586952 CET	47788	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:41.836620092 CET	47790	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:41.841552019 CET	65447	47788	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:41.841598988 CET	65447	47790	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:41.841669083 CET	47790	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:41.841716051 CET	47790	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:41.846658945 CET	65447	47790	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:43.274384975 CET	65447	47790	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:43.274610996 CET	47790	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:43.277936935 CET	47792	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:43.279411077 CET	65447	47790	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:43.282769918 CET	65447	47792	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:43.283338070 CET	47792	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:43.283338070 CET	47792	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:43.288105011 CET	65447	47792	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:44.728085995 CET	65447	47792	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:44.728949070 CET	47792	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:44.728949070 CET	47794	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:44.733793020 CET	65447	47792	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:44.733807087 CET	65447	47794	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:44.735307932 CET	47794	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:44.735307932 CET	47794	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:44.740094900 CET	65447	47794	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:46.165468931 CET	65447	47794	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:46.165925980 CET	47796	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:46.168292999 CET	47794	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:46.170748949 CET	65447	47796	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:46.170845985 CET	47796	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:46.170866966 CET	47796	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:46.173072100 CET	65447	47794	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:46.175746918 CET	65447	47796	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:47.602997065 CET	65447	47796	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:47.603209972 CET	47796	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:47.603254080 CET	47798	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:47.609774113 CET	65447	47796	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:47.609808922 CET	65447	47798	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:47.609885931 CET	47798	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:47.609899998 CET	47798	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:47.614741087 CET	65447	47798	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:49.040586948 CET	65447	47798	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:49.040745020 CET	47798	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:49.040764093 CET	47800	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:49.045639992 CET	65447	47798	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:49.045661926 CET	65447	47800	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:49.045738935 CET	47800	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:49.045763969 CET	47800	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:49.050635099 CET	65447	47800	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:50.495728970 CET	65447	47800	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:50.496139050 CET	47800	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:50.496208906 CET	47802	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:50.501044989 CET	65447	47800	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:50.501058102 CET	65447	47802	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:50.501120090 CET	47802	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:50.501194000 CET	47802	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:50.505932093 CET	65447	47802	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:51.930802107 CET	65447	47802	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:51.931174994 CET	47802	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:51.931252956 CET	47804	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:51.936064005 CET	65447	47802	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:51.936075926 CET	65447	47804	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:51.936183929 CET	47804	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:51.936234951 CET	47804	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:51.940989017 CET	65447	47804	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:53.412170887 CET	65447	47804	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:53.412581921 CET	47804	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:53.412581921 CET	47806	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:53.417429924 CET	65447	47804	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:53.417442083 CET	65447	47806	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:53.417524099 CET	47806	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:53.417558908 CET	47806	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:53.422333002 CET	65447	47806	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:54.855628014 CET	65447	47806	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:54.855958939 CET	47806	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:54.855976105 CET	47808	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:54.860903025 CET	65447	47806	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:54.860918999 CET	65447	47808	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:54.861141920 CET	47808	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:54.861141920 CET	47808	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:54.867129087 CET	65447	47808	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:56.311340094 CET	65447	47808	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:56.311647892 CET	47810	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:56.311707020 CET	47808	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:56.316584110 CET	65447	47810	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:56.316601038 CET	65447	47808	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:56.316652060 CET	47810	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:56.316685915 CET	47810	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:56.321456909 CET	65447	47810	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:57.759453058 CET	65447	47810	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:57.759771109 CET	47810	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:57.759851933 CET	47812	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:57.764636040 CET	65447	47810	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:57.764729977 CET	65447	47812	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:57.764799118 CET	47812	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:57.764889002 CET	47812	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:57.769630909 CET	65447	47812	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:59.214557886 CET	65447	47812	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:59.214930058 CET	47812	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:59.215018988 CET	47814	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:59.219717979 CET	65447	47812	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:59.219903946 CET	65447	47814	89.33.192.138	192.168.2.23
Jan 11, 2025 07:20:59.219973087 CET	47814	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:59.220041037 CET	47814	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:20:59.224834919 CET	65447	47814	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:00.668992043 CET	65447	47814	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:00.669280052 CET	47814	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:00.672316074 CET	47816	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:00.674259901 CET	65447	47814	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:00.677217960 CET	65447	47816	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:00.677562952 CET	47816	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:00.677562952 CET	47816	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:00.682636976 CET	65447	47816	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:02.140430927 CET	65447	47816	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:02.140738964 CET	47816	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:02.140779972 CET	47818	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:02.145729065 CET	65447	47816	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:02.145744085 CET	65447	47818	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:02.145823002 CET	47818	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:02.145900965 CET	47818	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:02.150727034 CET	65447	47818	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:03.638547897 CET	65447	47818	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:03.638761997 CET	47818	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:03.638802052 CET	47820	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:03.643696070 CET	65447	47818	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:03.643714905 CET	65447	47820	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:03.643789053 CET	47820	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:03.643857002 CET	47820	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:03.648799896 CET	65447	47820	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:05.089421988 CET	65447	47820	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:05.089719057 CET	47820	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:05.089756966 CET	47820	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:05.089818954 CET	47822	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:05.094626904 CET	65447	47820	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:05.094640017 CET	65447	47822	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:05.094743967 CET	47822	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:05.094829082 CET	47822	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:05.099648952 CET	65447	47822	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:06.525377989 CET	65447	47822	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:06.525772095 CET	47822	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:06.525778055 CET	47824	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:06.530694008 CET	65447	47822	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:06.530709982 CET	65447	47824	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:06.530888081 CET	47824	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:06.530936956 CET	47824	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:06.535696030 CET	65447	47824	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:07.980285883 CET	65447	47824	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:07.980802059 CET	47824	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:07.980906010 CET	47826	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:07.985656023 CET	65447	47824	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:07.985744953 CET	65447	47826	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:07.985841990 CET	47826	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:07.985927105 CET	47826	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:07.990677118 CET	65447	47826	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:09.416145086 CET	65447	47826	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:09.416419983 CET	47826	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:09.416454077 CET	47828	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:09.421286106 CET	65447	47826	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:09.421299934 CET	65447	47828	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:09.421370983 CET	47828	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:09.421422958 CET	47828	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:09.426194906 CET	65447	47828	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:10.873549938 CET	65447	47828	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:10.873925924 CET	47828	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:10.873956919 CET	47830	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:10.878770113 CET	65447	47828	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:10.878782988 CET	65447	47830	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:10.878905058 CET	47830	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:10.878978968 CET	47830	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:10.883697987 CET	65447	47830	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:12.342653036 CET	65447	47830	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:12.343225002 CET	47830	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:12.343292952 CET	47832	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:12.348109007 CET	65447	47830	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:12.348195076 CET	65447	47832	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:12.348290920 CET	47832	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:12.348341942 CET	47832	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:12.353137016 CET	65447	47832	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:13.794853926 CET	65447	47832	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:13.795186043 CET	47832	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:13.795258045 CET	47834	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:13.800065994 CET	65447	47832	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:13.800080061 CET	65447	47834	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:13.800195932 CET	47834	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:13.800220966 CET	47834	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:13.805028915 CET	65447	47834	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:15.245014906 CET	65447	47834	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:15.245604038 CET	47834	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:15.245605946 CET	47836	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:15.250613928 CET	65447	47834	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:15.250627995 CET	65447	47836	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:15.250734091 CET	47836	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:15.250761986 CET	47836	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:15.255559921 CET	65447	47836	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:16.700654030 CET	65447	47836	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:16.700901985 CET	47836	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:16.700963974 CET	47838	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:16.705802917 CET	65447	47836	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:16.705816984 CET	65447	47838	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:16.705887079 CET	47838	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:16.705950022 CET	47838	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:16.710731983 CET	65447	47838	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:18.155040979 CET	65447	47838	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:18.155455112 CET	47838	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:18.155534029 CET	47840	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:18.160373926 CET	65447	47838	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:18.160456896 CET	65447	47840	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:18.160558939 CET	47840	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:18.160659075 CET	47840	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:18.165636063 CET	65447	47840	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:19.607671022 CET	65447	47840	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:19.608084917 CET	47840	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:19.608166933 CET	47842	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:19.613091946 CET	65447	47840	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:19.613107920 CET	65447	47842	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:19.613209963 CET	47842	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:19.613276958 CET	47842	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:19.618061066 CET	65447	47842	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:21.063893080 CET	65447	47842	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:21.064248085 CET	47842	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:21.064340115 CET	47844	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:21.069088936 CET	65447	47842	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:21.069133997 CET	65447	47844	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:21.069210052 CET	47844	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:21.069273949 CET	47844	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:21.073997021 CET	65447	47844	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:22.509393930 CET	65447	47844	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:22.509660959 CET	47844	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:22.509661913 CET	47846	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:22.514772892 CET	65447	47844	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:22.514820099 CET	65447	47846	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:22.514911890 CET	47846	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:22.514913082 CET	47846	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:22.519821882 CET	65447	47846	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:23.984077930 CET	65447	47846	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:23.984438896 CET	47846	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:23.984520912 CET	47848	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:23.989324093 CET	65447	47846	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:23.989348888 CET	65447	47848	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:23.989447117 CET	47848	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:23.989537001 CET	47848	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:23.994343042 CET	65447	47848	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:25.431875944 CET	65447	47848	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:25.432143927 CET	47848	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:25.432173014 CET	47850	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:25.437114954 CET	65447	47848	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:25.437151909 CET	65447	47850	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:25.437241077 CET	47850	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:25.437325001 CET	47850	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:25.442142963 CET	65447	47850	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:26.916428089 CET	65447	47850	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:26.916769981 CET	47850	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:26.916780949 CET	47852	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:26.921757936 CET	65447	47850	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:26.921793938 CET	65447	47852	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:26.921879053 CET	47852	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:26.921988964 CET	47852	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:26.926745892 CET	65447	47852	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:28.354223013 CET	65447	47852	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:28.354526043 CET	47852	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:28.354562044 CET	47852	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:28.354619980 CET	47854	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:28.359445095 CET	65447	47852	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:28.359462023 CET	65447	47854	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:28.359605074 CET	47854	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:28.359673977 CET	47854	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:28.364466906 CET	65447	47854	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:29.810842991 CET	65447	47854	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:29.811242104 CET	47854	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:29.811348915 CET	47856	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:29.816159964 CET	65447	47854	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:29.816272974 CET	65447	47856	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:29.816381931 CET	47856	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:29.816448927 CET	47856	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:29.821264029 CET	65447	47856	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:31.294250011 CET	65447	47856	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:31.294605017 CET	47856	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:31.294682026 CET	47858	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:31.299493074 CET	65447	47856	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:31.299505949 CET	65447	47858	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:31.299612999 CET	47858	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:31.299684048 CET	47858	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:31.304506063 CET	65447	47858	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:32.760226011 CET	65447	47858	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:32.760335922 CET	47858	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:32.760407925 CET	47860	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:32.766239882 CET	65447	47858	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:32.766252995 CET	65447	47860	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:32.766328096 CET	47860	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:32.766379118 CET	47860	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:32.772092104 CET	65447	47860	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:34.213505983 CET	65447	47860	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:34.216533899 CET	47860	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:34.216533899 CET	47862	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:34.221405029 CET	65447	47860	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:34.221419096 CET	65447	47862	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:34.221581936 CET	47862	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:34.221581936 CET	47862	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:34.226470947 CET	65447	47862	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:35.666763067 CET	65447	47862	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:35.667181969 CET	47864	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:35.667196989 CET	47862	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:35.672162056 CET	65447	47864	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:35.672180891 CET	65447	47862	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:35.672492981 CET	47864	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:35.672492981 CET	47864	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:35.677303076 CET	65447	47864	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:37.124511957 CET	65447	47864	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:37.126915932 CET	47864	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:37.126915932 CET	47866	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:37.131697893 CET	65447	47864	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:37.131782055 CET	65447	47866	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:37.131947041 CET	47866	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:37.131947041 CET	47866	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:37.136735916 CET	65447	47866	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:38.780653000 CET	65447	47866	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:38.780872107 CET	47866	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:38.780908108 CET	47868	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:38.780936003 CET	65447	47866	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:38.781024933 CET	47866	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:38.785732031 CET	65447	47866	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:38.785743952 CET	65447	47868	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:38.785794973 CET	47868	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:38.785830021 CET	47868	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:38.790693045 CET	65447	47868	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:40.250479937 CET	65447	47868	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:40.250663042 CET	47868	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:40.250704050 CET	47870	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:40.255511045 CET	65447	47868	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:40.255523920 CET	65447	47870	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:40.255585909 CET	47870	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:40.255630016 CET	47870	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:40.260349035 CET	65447	47870	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:41.699681997 CET	65447	47870	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:41.699943066 CET	47870	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:41.700038910 CET	47872	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:41.704720020 CET	65447	47870	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:41.704791069 CET	65447	47872	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:41.704850912 CET	47872	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:41.704880953 CET	47872	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:41.709677935 CET	65447	47872	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:43.155210972 CET	65447	47872	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:43.155582905 CET	47872	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:43.155654907 CET	47874	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:43.160366058 CET	65447	47872	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:43.160387039 CET	65447	47874	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:43.160423040 CET	47874	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:43.160463095 CET	47874	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:43.166207075 CET	65447	47874	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:44.587894917 CET	65447	47874	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:44.588080883 CET	47874	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:44.588092089 CET	47876	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:44.592864990 CET	65447	47874	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:44.592876911 CET	65447	47876	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:44.592936993 CET	47876	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:44.592962980 CET	47876	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:44.597661972 CET	65447	47876	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:46.024699926 CET	65447	47876	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:46.024862051 CET	47876	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:46.024902105 CET	47878	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:46.029689074 CET	65447	47876	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:46.029700994 CET	65447	47878	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:46.029757977 CET	47878	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:46.029805899 CET	47878	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:46.034543991 CET	65447	47878	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:47.463912010 CET	65447	47878	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:47.464143991 CET	47878	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:47.464170933 CET	47880	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:47.469144106 CET	65447	47878	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:47.469160080 CET	65447	47880	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:47.469258070 CET	47880	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:47.469310045 CET	47880	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:47.474083900 CET	65447	47880	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:48.916774035 CET	65447	47880	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:48.917001963 CET	47880	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:48.917041063 CET	47882	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:48.921896935 CET	65447	47880	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:48.921910048 CET	65447	47882	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:48.922077894 CET	47882	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:48.922077894 CET	47882	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:48.926924944 CET	65447	47882	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:50.354554892 CET	65447	47882	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:50.354847908 CET	47882	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:50.354850054 CET	47884	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:50.359834909 CET	65447	47882	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:50.359848022 CET	65447	47884	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:50.359920025 CET	47884	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:50.359965086 CET	47884	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:50.364665985 CET	65447	47884	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:51.813235044 CET	65447	47884	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:51.813556910 CET	47884	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:51.813637018 CET	47886	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:51.818461895 CET	65447	47884	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:51.818473101 CET	65447	47886	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:51.818604946 CET	47886	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:51.818703890 CET	47886	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:51.823524952 CET	65447	47886	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:53.262692928 CET	65447	47886	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:53.262916088 CET	47886	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:53.262923956 CET	47888	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:53.267841101 CET	65447	47886	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:53.267853975 CET	65447	47888	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:53.268086910 CET	47888	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:53.268086910 CET	47888	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:53.274671078 CET	65447	47888	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:54.698410034 CET	65447	47888	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:54.698934078 CET	47888	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:54.698934078 CET	47888	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:54.698934078 CET	47890	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:54.703861952 CET	65447	47888	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:54.703881979 CET	65447	47890	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:54.703999996 CET	47890	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:54.704030037 CET	47890	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:54.708915949 CET	65447	47890	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:56.135160923 CET	65447	47890	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:56.135404110 CET	47890	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:56.135482073 CET	47892	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:56.140394926 CET	65447	47890	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:56.140413046 CET	65447	47892	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:56.140538931 CET	47892	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:56.140614033 CET	47892	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:56.145400047 CET	65447	47892	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:57.609921932 CET	65447	47892	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:57.610480070 CET	47894	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:57.610480070 CET	47892	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:57.615420103 CET	65447	47894	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:57.615447044 CET	65447	47892	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:57.615540028 CET	47894	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:57.615569115 CET	47894	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:57.620369911 CET	65447	47894	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:59.078790903 CET	65447	47894	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:59.079027891 CET	47894	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:59.079052925 CET	47896	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:59.083944082 CET	65447	47894	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:59.083957911 CET	65447	47896	89.33.192.138	192.168.2.23
Jan 11, 2025 07:21:59.084062099 CET	47896	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:59.084079981 CET	47896	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:21:59.088901043 CET	65447	47896	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:00.529360056 CET	65447	47896	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:00.529830933 CET	47896	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:00.529831886 CET	47898	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:00.534883022 CET	65447	47896	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:00.534919977 CET	65447	47898	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:00.535038948 CET	47898	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:00.535099030 CET	47898	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:00.539915085 CET	65447	47898	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:01.980370998 CET	65447	47898	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:01.980715036 CET	47898	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:01.980725050 CET	47900	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:01.985588074 CET	65447	47898	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:01.985600948 CET	65447	47900	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:01.985721111 CET	47900	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:01.985745907 CET	47900	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:01.990581989 CET	65447	47900	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:03.435062885 CET	65447	47900	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:03.435551882 CET	47900	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:03.435551882 CET	47902	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:03.440556049 CET	65447	47900	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:03.440572023 CET	65447	47902	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:03.440711021 CET	47902	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:03.440751076 CET	47902	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:03.445566893 CET	65447	47902	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:04.869738102 CET	65447	47902	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:04.870294094 CET	47904	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:04.870295048 CET	47902	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:04.875356913 CET	65447	47902	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:04.875391960 CET	65447	47904	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:04.875493050 CET	47904	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:04.875581980 CET	47904	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:04.880465984 CET	65447	47904	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:06.325176954 CET	65447	47904	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:06.325552940 CET	47904	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:06.325644970 CET	47906	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:06.330501080 CET	65447	47904	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:06.330526114 CET	65447	47906	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:06.330604076 CET	47906	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:06.330691099 CET	47906	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:06.335486889 CET	65447	47906	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:07.780288935 CET	65447	47906	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:07.780525923 CET	47906	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:07.780584097 CET	47908	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:07.785408974 CET	65447	47906	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:07.785423040 CET	65447	47908	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:07.785480022 CET	47908	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:07.785542965 CET	47908	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:07.790299892 CET	65447	47908	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:09.251147985 CET	65447	47908	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:09.251406908 CET	47908	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:09.251490116 CET	47910	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:09.256364107 CET	65447	47908	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:09.256380081 CET	65447	47910	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:09.256477118 CET	47910	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:09.256555080 CET	47910	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:09.261322975 CET	65447	47910	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:10.732155085 CET	65447	47910	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:10.732433081 CET	47910	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:10.733376026 CET	47912	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:10.737246990 CET	65447	47910	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:10.738218069 CET	65447	47912	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:10.738424063 CET	47912	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:10.738424063 CET	47912	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:10.743242979 CET	65447	47912	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:12.186511993 CET	65447	47912	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:12.186697960 CET	47912	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:12.186697960 CET	47914	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:12.191498995 CET	65447	47912	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:12.191555023 CET	65447	47914	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:12.191617012 CET	47914	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:12.191617012 CET	47914	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:12.196430922 CET	65447	47914	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:13.639898062 CET	65447	47914	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:13.640105009 CET	47914	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:13.640156984 CET	47916	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:13.644989014 CET	65447	47914	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:13.645000935 CET	65447	47916	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:13.645042896 CET	47916	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:13.645090103 CET	47916	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:13.649876118 CET	65447	47916	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:15.110052109 CET	65447	47916	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:15.110435009 CET	47916	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:15.110496044 CET	47918	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:15.118705988 CET	65447	47916	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:15.118720055 CET	65447	47918	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:15.118828058 CET	47918	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:15.118906021 CET	47918	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:15.127011061 CET	65447	47918	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:16.559844017 CET	65447	47918	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:16.560017109 CET	47918	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:16.560045004 CET	47920	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:16.564861059 CET	65447	47918	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:16.564874887 CET	65447	47920	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:16.564941883 CET	47920	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:16.564976931 CET	47920	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:16.569734097 CET	65447	47920	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:17.996532917 CET	65447	47920	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:17.996766090 CET	47920	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:17.996826887 CET	47922	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:18.002022028 CET	65447	47920	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:18.002033949 CET	65447	47922	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:18.002111912 CET	47922	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:18.002147913 CET	47922	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:18.006907940 CET	65447	47922	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:19.453344107 CET	65447	47922	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:19.453562021 CET	47922	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:19.453655005 CET	47924	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:19.458421946 CET	65447	47922	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:19.458435059 CET	65447	47924	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:19.458504915 CET	47924	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:19.458563089 CET	47924	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:19.463340044 CET	65447	47924	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:20.902626038 CET	65447	47924	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:20.903018951 CET	47924	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:20.903081894 CET	47926	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:20.908005953 CET	65447	47924	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:20.908041954 CET	65447	47926	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:20.908101082 CET	47926	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:20.908184052 CET	47926	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:20.913054943 CET	65447	47926	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:22.337949991 CET	65447	47926	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:22.338325024 CET	47926	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:22.338359118 CET	47928	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:22.343230963 CET	65447	47926	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:22.343242884 CET	65447	47928	89.33.192.138	192.168.2.23
Jan 11, 2025 07:22:22.343350887 CET	47928	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:22.343359947 CET	47928	65447	192.168.2.23	89.33.192.138
Jan 11, 2025 07:22:22.348119974 CET	65447	47928	89.33.192.138	192.168.2.23

System Behavior

Analysis Process: ss.elf PID: 6236, Parent PID: 6160

General

Start time (UTC):	06:18:47
Start date (UTC):	11/01/2025
Path:	/tmp/ss.elf
Arguments:	/tmp/ss.elf
File size:	73500 bytes
MD5 hash:	616c5deb08b8fe0317ff0a65e8c502aa

Chronological Activities

Analysis Process: ss.elf PID: 6237, Parent PID: 6236

General

Start time (UTC):	06:18:47
Start date (UTC):	11/01/2025
Path:	/tmp/ss.elf
Arguments:	-
File size:	73500 bytes
MD5 hash:	616c5deb08b8fe0317ff0a65e8c502aa

Chronological Activities

Analysis Process: ss.elf PID: 6238, Parent PID: 6237

General

Start time (UTC):	06:18:47
Start date (UTC):	11/01/2025
Path:	/tmp/ss.elf
Arguments:	-
File size:	73500 bytes
MD5 hash:	616c5deb08b8fe0317ff0a65e8c502aa

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report ss.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: ss.elf PID: 6236, Parent PID: 6160

General

Chronological Activities

Analysis Process: ss.elf PID: 6237, Parent PID: 6236

General

Chronological Activities

Analysis Process: ss.elf PID: 6238, Parent PID: 6237

General

Linux Analysis Report
ss.elf