Edit tour

Linux Analysis Report
camp.mpsl.elf

Overview

General Information

Sample name:	camp.mpsl.elf
Analysis ID:	1590317
MD5:	f6cbac4b6428c01a0e2df85f198a2c85
SHA1:	ee4bffe3d9cb63e7ff1f20101c5d9b8ccf275ae2
SHA256:	29ed081ca6cc35e1c5b875da687eedcbde9a58249d0e75e973388f85c5691520
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	76
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Mirai

Sample is packed with UPX

Detected TCP or UDP traffic on non-standard ports

ELF contains segments with high entropy indicating compressed/encrypted content

Enumerates processes within the "proc" file system

Sample contains only a LOAD segment without any section mappings

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1590317
Start date and time:	2025-01-13 23:21:18 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	camp.mpsl.elf
Detection:	MAL
Classification:	mal76.troj.evad.linELF@0/0@0/0

Runtime Messages

Command:	/tmp/camp.mpsl.elf
PID:	5496
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	lzrd cock fest"/proc/"/exe
Standard Error:

Process Tree

system is lnxubuntu20

camp.mpsl.elf (PID: 5496, Parent: 5414, MD5: 0d6f61f82cf2f781c6eb0661071d42d9) Arguments: /tmp/camp.mpsl.elf

camp.mpsl.elf New Fork (PID: 5498, Parent: 5496)

camp.mpsl.elf New Fork (PID: 5500, Parent: 5498)

camp.mpsl.elf New Fork (PID: 5501, Parent: 5498)

camp.mpsl.elf New Fork (PID: 5511, Parent: 5496)

camp.mpsl.elf New Fork (PID: 5512, Parent: 5496)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Memory Dumps

Source	Rule	Description	Author	Strings
5511.1.00007fcb7c400000.00007fcb7c418000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5511.1.00007fcb7c400000.00007fcb7c418000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x14bdc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14bf0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ca4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14cb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ccc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ce0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14cf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5496.1.00007fcb7c400000.00007fcb7c418000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5496.1.00007fcb7c400000.00007fcb7c418000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x14bdc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14bf0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ca4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14cb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ccc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ce0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14cf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5498.1.00007fcb7c400000.00007fcb7c418000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5498.1.00007fcb7c400000.00007fcb7c418000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x14bdc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14bf0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ca4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14cb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ccc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ce0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14cf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5500.1.00007fcb7c400000.00007fcb7c418000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5500.1.00007fcb7c400000.00007fcb7c418000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x14bdc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14bf0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ca4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14cb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ccc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ce0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14cf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: camp.mpsl.elf PID: 5496	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: camp.mpsl.elf PID: 5496	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xa925:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa939:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa94d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa961:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa975:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa989:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa99d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa9b1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa9c5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa9d9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa9ed:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaa01:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaa15:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaa29:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaa3d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaa51:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaa65:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaa79:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaa8d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaaa1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaab5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: camp.mpsl.elf PID: 5498	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x6f28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6fa0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6fb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6fc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6fdc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6ff0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7004:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7018:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x702c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7040:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7054:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7068:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x707c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7090:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x70a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x70b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: camp.mpsl.elf PID: 5500	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x7219:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x722d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7241:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7255:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7269:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x727d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7291:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x72a5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x72b9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x72cd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x72e1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x72f5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7309:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x731d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7331:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7345:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7359:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x736d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7381:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7395:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x73a9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: camp.mpsl.elf PID: 5511	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: camp.mpsl.elf PID: 5511	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x11a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1204:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1218:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x122c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1240:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1254:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1268:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x127c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1290:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1308:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x131c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1330:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 9 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: camp.mpsl.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: camp.mpsl.elf	Virustotal: Detection: 39%			Perma Link
Source: camp.mpsl.elf	ReversingLabs: Detection: 50%

Source: global traffic

TCP traffic: 192.168.2.14:39336 -> 154.213.187.11:3778

Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11
Source: unknown	TCP traffic detected without corresponding DNS query: 154.213.187.11

Source: camp.mpsl.elf

String found in binary or memory: http://upx.sf.net

System Summary

Malicious sample detected (through community Yara rule)

Source: 5511.1.00007fcb7c400000.00007fcb7c418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5496.1.00007fcb7c400000.00007fcb7c418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5498.1.00007fcb7c400000.00007fcb7c418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5500.1.00007fcb7c400000.00007fcb7c418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: camp.mpsl.elf PID: 5496, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: camp.mpsl.elf PID: 5498, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: camp.mpsl.elf PID: 5500, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: camp.mpsl.elf PID: 5511, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Source: LOAD without section mappings

Program segment: 0x100000

Source: 5511.1.00007fcb7c400000.00007fcb7c418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5496.1.00007fcb7c400000.00007fcb7c418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5498.1.00007fcb7c400000.00007fcb7c418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5500.1.00007fcb7c400000.00007fcb7c418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: camp.mpsl.elf PID: 5496, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: camp.mpsl.elf PID: 5498, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: camp.mpsl.elf PID: 5500, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: camp.mpsl.elf PID: 5511, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal76.troj.evad.linELF@0/0@0/0

Data Obfuscation

Sample is packed with UPX

Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Id: UPX 3.94 Copyright (C) 1996-2017 the UPX Team. All Rights Reserved. $

Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/3760/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/1583/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/2672/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/110/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/3759/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/111/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/112/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/113/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/234/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/1577/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/114/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/235/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/115/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/116/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/117/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/118/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/119/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/3757/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/10/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/917/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/3758/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/11/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/12/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/13/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/14/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/15/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/16/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/17/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/18/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/19/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/1593/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/240/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/120/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/3094/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/121/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/242/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/3406/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/1/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/122/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/243/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/2/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/123/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/244/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/1589/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/3/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/124/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/245/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/1588/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/125/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/4/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/246/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/3402/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/126/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/5/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/247/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/127/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/6/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/248/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/128/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/7/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/249/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/8/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/129/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/800/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/9/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/801/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/803/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/20/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/806/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/21/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/807/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/928/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/22/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/23/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/24/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/25/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/26/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/27/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/28/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/29/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/3420/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/490/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/250/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/130/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/251/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/131/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/252/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/132/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/253/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/254/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/255/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/135/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/256/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/1599/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/257/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/378/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/258/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/3412/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/259/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/30/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/35/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/1371/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/260/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/261/status	Jump to behavior
Source: /tmp/camp.mpsl.elf (PID: 5496)	File opened: /proc/262/status	Jump to behavior

Source: camp.mpsl.elf

Submission file: segment LOAD with 7.9324 entropy (max. 8.0)

Source: /tmp/camp.mpsl.elf (PID: 5496)

Queries kernel information via 'uname':

Jump to behavior

Source: camp.mpsl.elf, 5496.1.000055ecbfd5e000.000055ecbfe05000.rw-.sdmp, camp.mpsl.elf, 5498.1.000055ecbfd5e000.000055ecbfe05000.rw-.sdmp, camp.mpsl.elf, 5500.1.000055ecbfd5e000.000055ecbfe05000.rw-.sdmp, camp.mpsl.elf, 5511.1.000055ecbfd5e000.000055ecbfe05000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mipsel
Source: camp.mpsl.elf, 5496.1.00007ffc68472000.00007ffc68493000.rw-.sdmp, camp.mpsl.elf, 5498.1.00007ffc68472000.00007ffc68493000.rw-.sdmp, camp.mpsl.elf, 5500.1.00007ffc68472000.00007ffc68493000.rw-.sdmp, camp.mpsl.elf, 5511.1.00007ffc68472000.00007ffc68493000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-mipsel/tmp/camp.mpsl.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/camp.mpsl.elf
Source: camp.mpsl.elf, 5496.1.000055ecbfd5e000.000055ecbfe05000.rw-.sdmp, camp.mpsl.elf, 5498.1.000055ecbfd5e000.000055ecbfe05000.rw-.sdmp, camp.mpsl.elf, 5500.1.000055ecbfd5e000.000055ecbfe05000.rw-.sdmp, camp.mpsl.elf, 5511.1.000055ecbfd5e000.000055ecbfe05000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/mipsel
Source: camp.mpsl.elf, 5496.1.00007ffc68472000.00007ffc68493000.rw-.sdmp, camp.mpsl.elf, 5498.1.00007ffc68472000.00007ffc68493000.rw-.sdmp, camp.mpsl.elf, 5500.1.00007ffc68472000.00007ffc68493000.rw-.sdmp, camp.mpsl.elf, 5511.1.00007ffc68472000.00007ffc68493000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mipsel

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: 5511.1.00007fcb7c400000.00007fcb7c418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5496.1.00007fcb7c400000.00007fcb7c418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5498.1.00007fcb7c400000.00007fcb7c418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5500.1.00007fcb7c400000.00007fcb7c418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: camp.mpsl.elf PID: 5496, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: camp.mpsl.elf PID: 5511, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: 5511.1.00007fcb7c400000.00007fcb7c418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5496.1.00007fcb7c400000.00007fcb7c418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5498.1.00007fcb7c400000.00007fcb7c418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5500.1.00007fcb7c400000.00007fcb7c418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: camp.mpsl.elf PID: 5496, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: camp.mpsl.elf PID: 5511, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	11 Obfuscated Files or Information	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
camp.mpsl.elf	40%	Virustotal		Browse
camp.mpsl.elf	50%	ReversingLabs	Linux.Trojan.Mirai
camp.mpsl.elf	100%	Avira	EXP/ELF.Agent.M.28

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://upx.sf.net	camp.mpsl.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
154.213.187.11	unknown	Seychelles		22769	DDOSING-BGP-NETWORKUS	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
154.213.187.11	camp.arm7.elf	Get hash	malicious	Mirai	Browse
	camp.x86_64.elf	Get hash	malicious	Mirai	Browse
	camp.i686.elf	Get hash	malicious	Mirai	Browse
	camp.sh4.elf	Get hash	malicious	Mirai	Browse
	camp.spc.elf	Get hash	malicious	Mirai	Browse
	camp.x86.elf	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
DDOSING-BGP-NETWORKUS	camp.arm7.elf	Get hash	malicious	Mirai	Browse	154.213.187.11
	camp.x86_64.elf	Get hash	malicious	Mirai	Browse	154.213.187.11
	camp.i686.elf	Get hash	malicious	Mirai	Browse	154.213.187.11
	hikarm4.elf	Get hash	malicious	Unknown	Browse	154.213.187.125
	hikarm7.elf	Get hash	malicious	Mirai	Browse	154.213.187.125
	hikarm5.elf	Get hash	malicious	Unknown	Browse	154.213.187.125
	gx86.elf	Get hash	malicious	Unknown	Browse	154.213.187.125
	camp.sh4.elf	Get hash	malicious	Mirai	Browse	154.213.187.11
	camp.spc.elf	Get hash	malicious	Mirai	Browse	154.213.187.11
	camp.x86.elf	Get hash	malicious	Mirai	Browse	154.213.187.11

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, no section header
Entropy (8bit):	7.929694221900008
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	camp.mpsl.elf
File size:	38'640 bytes
MD5:	f6cbac4b6428c01a0e2df85f198a2c85
SHA1:	ee4bffe3d9cb63e7ff1f20101c5d9b8ccf275ae2
SHA256:	29ed081ca6cc35e1c5b875da687eedcbde9a58249d0e75e973388f85c5691520
SHA512:	8f158e91cd5c6797da5d1c2d8e5cb408983c135eb4f6a31e54716799ded43ddfe048a9d31f37625e3cd9036c2e9b4d4c7869a2532066d4f3a3a4bf2b2229053b
SSDEEP:	768:CF4o5gt3IEG6Ks1mqDUKf+8hr89kxcEDV/SLXQlov0zBZLvad4mwu0eci7zzW/:El5JnsrXvrKy9QjyBZLvDmR0GPS
TLSH:	0303E146A451B05ACD1E1C3E634A12BA1D90E1E6710A7B7BA329CCC9FF37D2B948D4E1
File Content Preview:	.ELF........................4...........4. ...(.........................................`...`.E.`.E...................z,UPX!d.......D...D.......U..........?.E.h;....#......b.L#37&u..sO..v....... .....4.}..-.....h!..aV..*...7.B'1V..a..u..Lw...}............

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x108280
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	2
Section Header Offset:	0
Section Header Size:	40
Number of Section Headers:	0
Header String Table Index:	0

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Prog Interpreter	Section Mappings
LOAD	0x0	0x100000	0x100000	0x95bd	0x95bd	7.9324	0x5	R E	0x10000
LOAD	0xaf60	0x45af60	0x45af60	0x0	0x0	0.0000	0x6	RW	0x10000

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 13, 2025 23:22:11.585963011 CET	39336	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:11.590923071 CET	3778	39336	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:11.590993881 CET	39336	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:11.625447989 CET	39336	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:11.630371094 CET	3778	39336	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:11.630419970 CET	39336	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:11.635205984 CET	3778	39336	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:13.208041906 CET	3778	39336	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:13.208527088 CET	39336	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:13.213527918 CET	3778	39336	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:14.210669994 CET	39338	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:14.215615034 CET	3778	39338	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:14.215704918 CET	39338	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:14.216429949 CET	39338	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:14.221257925 CET	3778	39338	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:14.221316099 CET	39338	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:14.226089954 CET	3778	39338	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:15.829467058 CET	3778	39338	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:15.829700947 CET	39338	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:15.834697962 CET	3778	39338	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:16.831341982 CET	39340	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:16.836400986 CET	3778	39340	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:16.836486101 CET	39340	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:16.837124109 CET	39340	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:16.841974020 CET	3778	39340	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:16.842034101 CET	39340	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:16.846841097 CET	3778	39340	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:17.563559055 CET	39342	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:17.568887949 CET	3778	39342	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:17.568959951 CET	39342	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:17.587855101 CET	39342	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:17.592830896 CET	3778	39342	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:17.592892885 CET	39342	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:17.597762108 CET	3778	39342	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:18.458138943 CET	3778	39340	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:18.458395004 CET	39340	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:18.463298082 CET	3778	39340	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:19.193474054 CET	3778	39342	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:19.193845987 CET	39342	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:19.193922997 CET	39342	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:19.198805094 CET	3778	39342	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:19.469007969 CET	39344	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:19.567040920 CET	3778	39344	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:19.567303896 CET	39344	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:19.577017069 CET	39344	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:19.581823111 CET	3778	39344	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:19.581871986 CET	39344	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:19.586673021 CET	3778	39344	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:20.201814890 CET	39346	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:20.206902027 CET	3778	39346	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:20.206962109 CET	39346	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:20.207740068 CET	39346	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:20.212665081 CET	3778	39346	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:20.212712049 CET	39346	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:20.217639923 CET	3778	39346	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:21.173098087 CET	3778	39344	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:21.173614979 CET	39344	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:21.178716898 CET	3778	39344	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:21.849958897 CET	3778	39346	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:21.850629091 CET	39346	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:21.855896950 CET	3778	39346	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:22.175693035 CET	39348	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:22.181191921 CET	3778	39348	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:22.181282043 CET	39348	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:22.182007074 CET	39348	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:22.186882973 CET	3778	39348	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:22.186944962 CET	39348	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:22.191857100 CET	3778	39348	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:22.854078054 CET	39350	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:22.859349966 CET	3778	39350	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:22.859615088 CET	39350	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:22.860471010 CET	39350	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:22.865446091 CET	3778	39350	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:22.865585089 CET	39350	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:22.870845079 CET	3778	39350	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:23.821646929 CET	3778	39348	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:23.822036028 CET	39348	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:23.827502012 CET	3778	39348	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:24.488895893 CET	3778	39350	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:24.489178896 CET	39350	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:24.494569063 CET	3778	39350	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:24.823512077 CET	39352	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:24.828928947 CET	3778	39352	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:24.829014063 CET	39352	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:24.829648018 CET	39352	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:24.834763050 CET	3778	39352	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:24.834832907 CET	39352	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:24.839972973 CET	3778	39352	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:25.490799904 CET	39354	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:25.496082067 CET	3778	39354	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:25.496159077 CET	39354	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:25.496944904 CET	39354	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:25.501827955 CET	3778	39354	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:25.501887083 CET	39354	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:25.506793022 CET	3778	39354	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:26.461307049 CET	3778	39352	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:26.461622000 CET	39352	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:26.461622953 CET	39352	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:26.466864109 CET	3778	39352	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:27.126662016 CET	3778	39354	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:27.127058029 CET	39354	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:27.132484913 CET	3778	39354	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:27.465503931 CET	39356	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:27.470788956 CET	3778	39356	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:27.470896959 CET	39356	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:27.472357035 CET	39356	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:27.477252007 CET	3778	39356	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:27.477322102 CET	39356	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:27.482161999 CET	3778	39356	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:28.129652023 CET	39358	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:28.135032892 CET	3778	39358	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:28.135224104 CET	39358	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:28.135946989 CET	39358	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:28.141100883 CET	3778	39358	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:28.141278982 CET	39358	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:28.146717072 CET	3778	39358	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:29.103399038 CET	3778	39356	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:29.103840113 CET	39356	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:29.109098911 CET	3778	39356	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:29.755426884 CET	3778	39358	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:29.755860090 CET	39358	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:29.760982990 CET	3778	39358	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:30.108040094 CET	39360	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:30.113323927 CET	3778	39360	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:30.113488913 CET	39360	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:30.115502119 CET	39360	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:30.120349884 CET	3778	39360	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:30.120421886 CET	39360	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:30.125787020 CET	3778	39360	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:30.761068106 CET	39362	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:30.766607046 CET	3778	39362	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:30.766773939 CET	39362	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:30.768264055 CET	39362	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:30.773245096 CET	3778	39362	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:30.773334980 CET	39362	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:30.778625011 CET	3778	39362	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:31.775002956 CET	3778	39360	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:31.775933027 CET	39360	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:31.781207085 CET	3778	39360	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:32.396310091 CET	3778	39362	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:32.397346020 CET	39362	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:32.402837992 CET	3778	39362	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:32.781657934 CET	39364	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:32.787489891 CET	3778	39364	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:32.787960052 CET	39364	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:32.790285110 CET	39364	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:32.795764923 CET	3778	39364	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:32.796120882 CET	39364	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:32.801367044 CET	3778	39364	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:33.403350115 CET	39366	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:33.409214973 CET	3778	39366	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:33.409764051 CET	39366	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:33.411984921 CET	39366	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:33.417258978 CET	3778	39366	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:33.417716026 CET	39366	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:33.423239946 CET	3778	39366	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:34.436096907 CET	3778	39364	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:34.436528921 CET	39364	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:34.441581011 CET	3778	39364	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:35.036895037 CET	3778	39366	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:35.037669897 CET	39366	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:35.043044090 CET	3778	39366	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:35.441740036 CET	39368	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:35.447485924 CET	3778	39368	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:35.448024035 CET	39368	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:35.450784922 CET	39368	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:35.456407070 CET	3778	39368	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:35.456764936 CET	39368	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:35.462382078 CET	3778	39368	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:36.043332100 CET	39370	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:36.049187899 CET	3778	39370	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:36.049736977 CET	39370	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:36.052531004 CET	39370	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:36.058049917 CET	3778	39370	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:36.058542013 CET	39370	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:36.063963890 CET	3778	39370	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:37.129189968 CET	3778	39368	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:37.130227089 CET	39368	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:37.135963917 CET	3778	39368	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:37.642606020 CET	3778	39370	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:37.643619061 CET	39370	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:37.649255991 CET	3778	39370	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:38.138771057 CET	39372	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:38.144536018 CET	3778	39372	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:38.144896984 CET	39372	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:38.147710085 CET	39372	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:38.153378010 CET	3778	39372	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:38.153549910 CET	39372	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:38.159435987 CET	3778	39372	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:38.652359962 CET	39374	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:38.779347897 CET	3778	39374	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:38.780183077 CET	39374	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:38.784934044 CET	39374	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:38.790644884 CET	3778	39374	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:38.790831089 CET	39374	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:38.796420097 CET	3778	39374	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:39.770903111 CET	3778	39372	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:39.771790028 CET	39372	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:39.778064966 CET	3778	39372	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:40.393703938 CET	3778	39374	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:40.394476891 CET	39374	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:40.400054932 CET	3778	39374	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:40.780076027 CET	39376	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:40.785986900 CET	3778	39376	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:40.786386013 CET	39376	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:40.788827896 CET	39376	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:40.794162989 CET	3778	39376	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:40.794433117 CET	39376	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:40.800183058 CET	3778	39376	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:41.403206110 CET	39378	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:41.409146070 CET	3778	39378	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:41.409714937 CET	39378	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:41.412616968 CET	39378	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:41.418128967 CET	3778	39378	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:41.418643951 CET	39378	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:41.423990011 CET	3778	39378	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:42.377037048 CET	3778	39376	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:42.377736092 CET	39376	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:42.383179903 CET	3778	39376	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:43.003089905 CET	3778	39378	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:43.003799915 CET	39378	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:43.009490013 CET	3778	39378	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:43.384509087 CET	39380	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:43.390127897 CET	3778	39380	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:43.390569925 CET	39380	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:43.393356085 CET	39380	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:43.398817062 CET	3778	39380	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:43.399262905 CET	39380	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:43.404647112 CET	3778	39380	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:44.010869980 CET	39382	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:44.017297029 CET	3778	39382	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:44.017640114 CET	39382	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:44.019901037 CET	39382	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:44.025264978 CET	3778	39382	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:44.025665998 CET	39382	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:44.031106949 CET	3778	39382	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:45.054224968 CET	3778	39380	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:45.054536104 CET	39380	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:45.060215950 CET	3778	39380	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:45.642479897 CET	3778	39382	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:45.643156052 CET	39382	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:45.648230076 CET	3778	39382	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:46.057698965 CET	39384	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:46.062609911 CET	3778	39384	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:46.062685013 CET	39384	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:46.064054012 CET	39384	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:46.068809986 CET	3778	39384	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:46.068856955 CET	39384	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:46.073642015 CET	3778	39384	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:46.647923946 CET	39386	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:46.652968884 CET	3778	39386	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:46.653137922 CET	39386	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:46.654968977 CET	39386	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:46.659864902 CET	3778	39386	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:46.659941912 CET	39386	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:46.664740086 CET	3778	39386	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:47.658369064 CET	3778	39384	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:47.658962965 CET	39384	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:47.664551020 CET	3778	39384	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:48.273821115 CET	3778	39386	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:48.274418116 CET	39386	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:48.280052900 CET	3778	39386	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:48.665620089 CET	39388	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:48.831089973 CET	3778	39388	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:48.831727982 CET	39388	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:48.835052967 CET	39388	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:48.840761900 CET	3778	39388	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:48.841248989 CET	39388	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:48.846914053 CET	3778	39388	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:49.281109095 CET	39390	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:49.286906958 CET	3778	39390	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:49.287113905 CET	39390	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:49.290007114 CET	39390	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:49.295463085 CET	3778	39390	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:49.296047926 CET	39390	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:49.301635027 CET	3778	39390	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:50.462593079 CET	3778	39388	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:50.463017941 CET	39388	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:50.468805075 CET	3778	39388	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:50.915962934 CET	3778	39390	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:50.916584015 CET	39390	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:50.922261953 CET	3778	39390	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:51.468343019 CET	39392	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:51.593116045 CET	3778	39392	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:51.593471050 CET	39392	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:51.596560001 CET	39392	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:51.601690054 CET	3778	39392	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:51.601931095 CET	39392	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:51.606848955 CET	3778	39392	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:51.921164036 CET	39394	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:51.926610947 CET	3778	39394	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:51.927089930 CET	39394	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:51.928761005 CET	39394	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:51.934406996 CET	3778	39394	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:51.934905052 CET	39394	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:51.940313101 CET	3778	39394	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:53.189834118 CET	3778	39392	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:53.190921068 CET	39392	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:53.196400881 CET	3778	39392	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:53.536670923 CET	3778	39394	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:53.537369013 CET	39394	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:53.542978048 CET	3778	39394	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:54.196315050 CET	39396	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:54.201843977 CET	3778	39396	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:54.202116966 CET	39396	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:54.203859091 CET	39396	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:54.209310055 CET	3778	39396	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:54.209537983 CET	39396	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:54.215040922 CET	3778	39396	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:54.542908907 CET	39398	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:54.548592091 CET	3778	39398	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:54.549223900 CET	39398	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:54.551176071 CET	39398	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:54.556628942 CET	3778	39398	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:54.557414055 CET	39398	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:54.563097000 CET	3778	39398	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:55.802098036 CET	3778	39396	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:55.802831888 CET	39396	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:55.808427095 CET	3778	39396	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:56.189429998 CET	3778	39398	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:56.190324068 CET	39398	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:56.196005106 CET	3778	39398	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:56.810326099 CET	39400	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:56.816149950 CET	3778	39400	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:56.816391945 CET	39400	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:56.818473101 CET	39400	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:56.823626995 CET	3778	39400	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:56.823992968 CET	39400	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:56.829749107 CET	3778	39400	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:57.196255922 CET	39402	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:57.202076912 CET	3778	39402	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:57.202344894 CET	39402	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:57.204758883 CET	39402	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:57.210078955 CET	3778	39402	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:57.210313082 CET	39402	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:57.215671062 CET	3778	39402	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:58.459292889 CET	3778	39400	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:58.460375071 CET	39400	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:58.466289997 CET	3778	39400	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:58.818972111 CET	3778	39402	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:58.819770098 CET	39402	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:58.825448036 CET	3778	39402	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:59.468930006 CET	39404	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:59.474432945 CET	3778	39404	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:59.474560022 CET	39404	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:59.476826906 CET	39404	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:59.482546091 CET	3778	39404	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:59.482737064 CET	39404	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:59.488431931 CET	3778	39404	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:59.828211069 CET	39406	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:59.833998919 CET	3778	39406	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:59.834367037 CET	39406	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:59.837798119 CET	39406	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:59.843472004 CET	3778	39406	154.213.187.11	192.168.2.14
Jan 13, 2025 23:22:59.843782902 CET	39406	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:22:59.849580050 CET	3778	39406	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:01.146996975 CET	3778	39404	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:01.147815943 CET	39404	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:01.153309107 CET	3778	39404	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:01.459214926 CET	3778	39406	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:01.460088015 CET	39406	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:01.465588093 CET	3778	39406	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:02.155145884 CET	39408	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:02.161135912 CET	3778	39408	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:02.161288977 CET	39408	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:02.164038897 CET	39408	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:02.169867039 CET	3778	39408	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:02.170371056 CET	39408	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:02.176071882 CET	3778	39408	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:02.468377113 CET	39410	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:02.474100113 CET	3778	39410	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:02.474523067 CET	39410	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:02.477611065 CET	39410	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:02.482851982 CET	3778	39410	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:02.483211040 CET	39410	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:02.488933086 CET	3778	39410	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:03.802959919 CET	3778	39408	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:03.803642988 CET	39408	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:03.809509039 CET	3778	39408	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:04.152631998 CET	3778	39410	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:04.153532982 CET	39410	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:04.159349918 CET	3778	39410	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:04.812235117 CET	39412	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:04.817974091 CET	3778	39412	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:04.818471909 CET	39412	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:04.821500063 CET	39412	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:04.826788902 CET	3778	39412	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:04.827346087 CET	39412	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:04.832519054 CET	3778	39412	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:05.161216974 CET	39414	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:05.166899920 CET	3778	39414	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:05.167390108 CET	39414	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:05.169631004 CET	39414	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:05.174707890 CET	3778	39414	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:05.175180912 CET	39414	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:05.180572033 CET	3778	39414	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:06.445564032 CET	3778	39412	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:06.446341038 CET	39412	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:06.451844931 CET	3778	39412	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:06.806559086 CET	3778	39414	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:06.807115078 CET	39414	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:06.812690973 CET	3778	39414	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:07.452630043 CET	39416	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:07.457993984 CET	3778	39416	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:07.458127022 CET	39416	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:07.460676908 CET	39416	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:07.465828896 CET	3778	39416	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:07.466214895 CET	39416	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:07.471672058 CET	3778	39416	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:07.814663887 CET	39418	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:07.820055962 CET	3778	39418	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:07.820379019 CET	39418	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:07.823492050 CET	39418	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:07.828716993 CET	3778	39418	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:07.829123974 CET	39418	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:07.834548950 CET	3778	39418	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:09.068167925 CET	3778	39416	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:09.068850994 CET	39416	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:09.073781013 CET	3778	39416	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:09.448457003 CET	3778	39418	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:09.449127913 CET	39418	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:09.454561949 CET	3778	39418	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:10.076385975 CET	39420	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:10.082043886 CET	3778	39420	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:10.082220078 CET	39420	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:10.085093021 CET	39420	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:10.090334892 CET	3778	39420	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:10.090579987 CET	39420	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:10.096194983 CET	3778	39420	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:10.457643986 CET	39422	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:10.463303089 CET	3778	39422	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:10.463516951 CET	39422	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:10.467367887 CET	39422	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:10.473001957 CET	3778	39422	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:10.473273993 CET	39422	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:10.478761911 CET	3778	39422	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:11.713191032 CET	3778	39420	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:11.714025021 CET	39420	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:11.719779968 CET	3778	39420	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:12.084362984 CET	3778	39422	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:12.085011005 CET	39422	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:12.090331078 CET	3778	39422	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:12.721327066 CET	39424	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:12.726933956 CET	3778	39424	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:12.727978945 CET	39424	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:12.730505943 CET	39424	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:12.735914946 CET	3778	39424	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:12.736284018 CET	39424	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:12.741703033 CET	3778	39424	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:13.093218088 CET	39426	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:13.098926067 CET	3778	39426	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:13.099359989 CET	39426	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:13.102922916 CET	39426	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:13.108161926 CET	3778	39426	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:13.108608007 CET	39426	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:13.114097118 CET	3778	39426	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:14.352251053 CET	3778	39424	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:14.352966070 CET	39424	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:14.358181953 CET	3778	39424	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:14.757009029 CET	3778	39426	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:14.757798910 CET	39426	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:14.763514042 CET	3778	39426	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:15.360912085 CET	39428	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:15.366492033 CET	3778	39428	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:15.366652012 CET	39428	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:15.369748116 CET	39428	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:15.375272989 CET	3778	39428	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:15.375415087 CET	39428	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:15.380666971 CET	3778	39428	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:15.765841007 CET	39430	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:15.771447897 CET	3778	39430	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:15.772092104 CET	39430	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:15.775357008 CET	39430	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:15.780723095 CET	3778	39430	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:15.781135082 CET	39430	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:15.786992073 CET	3778	39430	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:16.971280098 CET	3778	39428	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:16.971818924 CET	39428	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:16.977281094 CET	3778	39428	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:17.396980047 CET	3778	39430	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:17.397512913 CET	39430	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:17.402774096 CET	3778	39430	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:17.979839087 CET	39432	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:17.985080957 CET	3778	39432	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:17.985495090 CET	39432	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:17.989051104 CET	39432	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:17.994024992 CET	3778	39432	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:17.994261026 CET	39432	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:17.999154091 CET	3778	39432	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:18.405024052 CET	39434	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:18.410598040 CET	3778	39434	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:18.410876036 CET	39434	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:18.413098097 CET	39434	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:18.418422937 CET	3778	39434	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:18.418710947 CET	39434	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:18.423650026 CET	3778	39434	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:19.596723080 CET	3778	39432	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:19.597599030 CET	39432	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:19.602721930 CET	3778	39432	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:20.021846056 CET	3778	39434	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:20.022522926 CET	39434	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:20.028044939 CET	3778	39434	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:20.604204893 CET	39436	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:20.609534979 CET	3778	39436	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:20.609952927 CET	39436	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:20.612757921 CET	39436	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:20.617763996 CET	3778	39436	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:20.618022919 CET	39436	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:20.623025894 CET	3778	39436	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:21.029129982 CET	39438	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:21.034526110 CET	3778	39438	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:21.034749031 CET	39438	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:21.037025928 CET	39438	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:21.042233944 CET	3778	39438	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:21.042448997 CET	39438	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:21.048031092 CET	3778	39438	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:22.207953930 CET	3778	39436	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:22.208709955 CET	39436	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:22.213695049 CET	3778	39436	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:22.646958113 CET	3778	39438	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:22.647701979 CET	39438	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:22.652880907 CET	3778	39438	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:23.215189934 CET	39440	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:23.220895052 CET	3778	39440	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:23.221263885 CET	39440	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:23.224040985 CET	39440	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:23.229304075 CET	3778	39440	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:23.229702950 CET	39440	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:23.235136986 CET	3778	39440	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:23.652312994 CET	39442	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:23.684683084 CET	3778	39442	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:23.685008049 CET	39442	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:23.687344074 CET	39442	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:23.692398071 CET	3778	39442	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:23.692656994 CET	39442	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:23.698034048 CET	3778	39442	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:24.835371017 CET	3778	39440	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:24.835840940 CET	39440	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:24.840893030 CET	3778	39440	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:25.318917036 CET	3778	39442	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:25.319972038 CET	39442	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:25.325848103 CET	3778	39442	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:25.842366934 CET	39444	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:25.848040104 CET	3778	39444	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:25.848563910 CET	39444	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:25.851361990 CET	39444	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:25.857053995 CET	3778	39444	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:25.857595921 CET	39444	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:25.863421917 CET	3778	39444	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:26.327672005 CET	39446	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:26.333134890 CET	3778	39446	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:26.333412886 CET	39446	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:26.336209059 CET	39446	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:26.341707945 CET	3778	39446	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:26.342010975 CET	39446	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:26.347567081 CET	3778	39446	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:27.480967045 CET	3778	39444	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:27.481723070 CET	39444	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:27.487185955 CET	3778	39444	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:27.944289923 CET	3778	39446	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:27.945070028 CET	39446	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:27.950719118 CET	3778	39446	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:28.488698006 CET	39448	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:28.494529963 CET	3778	39448	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:28.494712114 CET	39448	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:28.496545076 CET	39448	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:28.501980066 CET	3778	39448	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:28.502211094 CET	39448	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:28.508040905 CET	3778	39448	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:28.949857950 CET	39450	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:28.955363989 CET	3778	39450	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:28.955672026 CET	39450	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:28.958327055 CET	39450	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:28.963706970 CET	3778	39450	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:28.964020967 CET	39450	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:28.969790936 CET	3778	39450	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:30.130815029 CET	3778	39448	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:30.131613016 CET	39448	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:30.136890888 CET	3778	39448	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:30.584907055 CET	3778	39450	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:30.585165024 CET	39450	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:30.590893030 CET	3778	39450	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:31.137871981 CET	39452	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:31.143685102 CET	3778	39452	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:31.144115925 CET	39452	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:31.146058083 CET	39452	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:31.151566982 CET	3778	39452	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:31.151875973 CET	39452	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:31.157521009 CET	3778	39452	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:31.589843988 CET	39454	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:31.595470905 CET	3778	39454	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:31.595766068 CET	39454	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:31.598640919 CET	39454	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:31.604095936 CET	3778	39454	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:31.604480982 CET	39454	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:31.609982967 CET	3778	39454	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:32.757765055 CET	3778	39452	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:32.758311987 CET	39452	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:32.763745070 CET	3778	39452	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:33.208518028 CET	3778	39454	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:33.209197044 CET	39454	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:33.214669943 CET	3778	39454	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:33.763370991 CET	39456	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:33.768667936 CET	3778	39456	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:33.768906116 CET	39456	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:33.771337032 CET	39456	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:33.776171923 CET	3778	39456	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:33.776246071 CET	39456	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:33.781064987 CET	3778	39456	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:34.214107990 CET	39458	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:34.219022989 CET	3778	39458	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:34.219108105 CET	39458	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:34.221189976 CET	39458	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:34.226026058 CET	3778	39458	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:34.226097107 CET	39458	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:34.231096029 CET	3778	39458	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:35.362576962 CET	3778	39456	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:35.363164902 CET	39456	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:35.368263006 CET	3778	39456	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:35.853332996 CET	3778	39458	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:35.853638887 CET	39458	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:35.858757019 CET	3778	39458	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:36.368681908 CET	39460	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:36.374453068 CET	3778	39460	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:36.374700069 CET	39460	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:36.377099037 CET	39460	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:36.382483006 CET	3778	39460	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:36.382797003 CET	39460	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:36.388417959 CET	3778	39460	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:36.860444069 CET	39462	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:37.605989933 CET	3778	39462	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:37.606508017 CET	39462	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:37.609474897 CET	39462	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:37.614523888 CET	3778	39462	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:37.614749908 CET	39462	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:37.619972944 CET	3778	39462	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:37.993283033 CET	3778	39460	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:37.993866920 CET	39460	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:37.999489069 CET	3778	39460	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:38.999212027 CET	39464	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:39.004760027 CET	3778	39464	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:39.005037069 CET	39464	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:39.007088900 CET	39464	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:39.012250900 CET	3778	39464	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:39.012429953 CET	39464	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:39.017891884 CET	3778	39464	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:39.244801044 CET	3778	39462	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:39.245500088 CET	39462	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:39.250933886 CET	3778	39462	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:40.253315926 CET	39466	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:40.258738995 CET	3778	39466	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:40.259222031 CET	39466	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:40.261775017 CET	39466	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:40.267245054 CET	3778	39466	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:40.267627001 CET	39466	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:40.273106098 CET	3778	39466	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:40.636356115 CET	3778	39464	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:40.636976004 CET	39464	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:40.642311096 CET	3778	39464	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:41.642561913 CET	39468	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:41.648242950 CET	3778	39468	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:41.648423910 CET	39468	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:41.650763035 CET	39468	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:41.657675982 CET	3778	39468	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:41.657779932 CET	39468	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:41.664772987 CET	3778	39468	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:41.959641933 CET	3778	39466	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:41.960304976 CET	39466	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:41.966036081 CET	3778	39466	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:42.968446970 CET	39470	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:42.974055052 CET	3778	39470	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:42.974226952 CET	39470	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:42.976861954 CET	39470	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:42.981877089 CET	3778	39470	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:42.982106924 CET	39470	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:42.987473965 CET	3778	39470	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:43.273787022 CET	3778	39468	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:43.274519920 CET	39468	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:43.280261993 CET	3778	39468	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:44.281254053 CET	39472	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:44.286856890 CET	3778	39472	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:44.287009001 CET	39472	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:44.289208889 CET	39472	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:44.294229031 CET	3778	39472	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:44.294478893 CET	39472	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:44.300108910 CET	3778	39472	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:45.934447050 CET	3778	39472	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:45.934940100 CET	39472	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:45.940917969 CET	3778	39472	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:46.940591097 CET	39474	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:46.945960999 CET	3778	39474	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:46.946063995 CET	39474	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:46.948096991 CET	39474	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:46.953063011 CET	3778	39474	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:46.953125000 CET	39474	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:46.958475113 CET	3778	39474	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:47.022378922 CET	3778	39470	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:47.022877932 CET	39470	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:47.027997971 CET	3778	39470	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:48.028492928 CET	39476	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:48.033920050 CET	3778	39476	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:48.034133911 CET	39476	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:48.036478996 CET	39476	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:48.041491985 CET	3778	39476	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:48.041583061 CET	39476	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:48.046461105 CET	3778	39476	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:48.586565971 CET	3778	39474	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:48.586992025 CET	39474	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:48.591888905 CET	3778	39474	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:49.591326952 CET	39478	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:49.596769094 CET	3778	39478	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:49.597007990 CET	39478	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:49.599271059 CET	39478	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:49.604269028 CET	3778	39478	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:49.604473114 CET	39478	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:49.609498978 CET	3778	39478	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:51.228674889 CET	3778	39478	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:51.229662895 CET	39478	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:51.235476017 CET	3778	39478	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:52.236470938 CET	39480	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:52.241810083 CET	3778	39480	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:52.242084026 CET	39480	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:52.244525909 CET	39480	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:52.249735117 CET	3778	39480	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:52.250133991 CET	39480	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:52.255729914 CET	3778	39480	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:53.866117001 CET	3778	39480	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:53.866698027 CET	39480	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:53.871638060 CET	3778	39480	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:54.872829914 CET	39482	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:54.878108025 CET	3778	39482	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:54.878211021 CET	39482	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:54.880764961 CET	39482	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:54.886298895 CET	3778	39482	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:54.886589050 CET	39482	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:54.892070055 CET	3778	39482	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:56.491622925 CET	3778	39482	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:56.492144108 CET	39482	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:56.497160912 CET	3778	39482	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:57.499248981 CET	39484	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:57.504571915 CET	3778	39484	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:57.504820108 CET	39484	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:57.507674932 CET	39484	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:57.512773037 CET	3778	39484	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:57.513125896 CET	39484	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:57.518203020 CET	3778	39484	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:58.046823025 CET	39476	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:58.052643061 CET	3778	39476	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:59.126034021 CET	3778	39484	154.213.187.11	192.168.2.14
Jan 13, 2025 23:23:59.126925945 CET	39484	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:23:59.132565975 CET	3778	39484	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:00.132996082 CET	39486	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:00.138823032 CET	3778	39486	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:00.139246941 CET	39486	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:00.142209053 CET	39486	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:00.147629023 CET	3778	39486	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:00.148106098 CET	39486	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:00.153520107 CET	3778	39486	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:01.582602024 CET	3778	39476	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:01.583506107 CET	39476	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:01.588798046 CET	3778	39476	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:01.774813890 CET	3778	39486	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:01.775532961 CET	39486	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:01.781455994 CET	3778	39486	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:02.589862108 CET	39488	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:02.595629930 CET	3778	39488	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:02.596081972 CET	39488	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:02.598673105 CET	39488	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:02.604084015 CET	3778	39488	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:02.604315042 CET	39488	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:02.610162020 CET	3778	39488	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:02.782905102 CET	39490	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:02.788561106 CET	3778	39490	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:02.789019108 CET	39490	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:02.791769981 CET	39490	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:02.797281027 CET	3778	39490	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:02.797807932 CET	39490	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:02.803355932 CET	3778	39490	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:04.191214085 CET	3778	39488	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:04.192050934 CET	39488	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:04.197741032 CET	3778	39488	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:04.413520098 CET	3778	39490	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:04.414242029 CET	39490	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:04.419646025 CET	3778	39490	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:05.198775053 CET	39492	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:05.205522060 CET	3778	39492	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:05.205770016 CET	39492	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:05.208600998 CET	39492	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:05.213768005 CET	3778	39492	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:05.214092016 CET	39492	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:05.219630957 CET	3778	39492	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:05.419990063 CET	39494	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:05.426141977 CET	3778	39494	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:05.426521063 CET	39494	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:05.428641081 CET	39494	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:05.434719086 CET	3778	39494	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:05.434947014 CET	39494	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:05.440212965 CET	3778	39494	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:06.828851938 CET	3778	39492	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:06.829643011 CET	39492	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:06.835346937 CET	3778	39492	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:07.040312052 CET	3778	39494	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:07.041142941 CET	39494	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:07.046827078 CET	3778	39494	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:07.838190079 CET	39496	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:07.843832016 CET	3778	39496	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:07.844000101 CET	39496	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:07.847421885 CET	39496	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:07.852524996 CET	3778	39496	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:07.852694988 CET	39496	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:07.858597994 CET	3778	39496	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:08.047883034 CET	39498	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:08.053762913 CET	3778	39498	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:08.054064035 CET	39498	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:08.056662083 CET	39498	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:08.062129021 CET	3778	39498	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:08.062607050 CET	39498	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:08.068202019 CET	3778	39498	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:09.492523909 CET	3778	39496	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:09.493241072 CET	39496	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:09.498933077 CET	3778	39496	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:09.708363056 CET	3778	39498	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:09.709287882 CET	39498	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:09.714893103 CET	3778	39498	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:10.500252008 CET	39500	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:10.506259918 CET	3778	39500	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:10.506695986 CET	39500	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:10.509552002 CET	39500	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:10.514533997 CET	3778	39500	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:10.515173912 CET	39500	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:10.520828009 CET	3778	39500	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:10.718067884 CET	39502	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:10.723376989 CET	3778	39502	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:10.723855972 CET	39502	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:10.726510048 CET	39502	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:10.731892109 CET	3778	39502	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:10.732223988 CET	39502	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:10.737850904 CET	3778	39502	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:12.126641035 CET	3778	39500	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:12.127593040 CET	39500	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:12.133470058 CET	3778	39500	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:12.356323004 CET	3778	39502	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:12.357096910 CET	39502	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:12.370062113 CET	3778	39502	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:13.134849072 CET	39504	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:13.364712954 CET	39506	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:13.764105082 CET	3778	39504	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:13.764163971 CET	3778	39506	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:13.764411926 CET	39504	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:13.764413118 CET	39506	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:13.769074917 CET	39504	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:13.769313097 CET	39506	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:13.774250031 CET	3778	39504	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:13.774321079 CET	39504	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:13.774429083 CET	3778	39506	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:13.774488926 CET	39506	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:13.779392004 CET	3778	39504	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:13.779536009 CET	3778	39506	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:15.398730993 CET	3778	39504	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:15.399279118 CET	39504	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:15.401927948 CET	3778	39506	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:15.402115107 CET	39506	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:15.405059099 CET	3778	39504	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:15.409888029 CET	3778	39506	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:16.404484987 CET	39508	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:16.405376911 CET	39510	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:16.409656048 CET	3778	39508	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:16.409744978 CET	39508	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:16.410495996 CET	3778	39510	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:16.410614967 CET	39510	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:16.412883997 CET	39508	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:16.413824081 CET	39510	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:16.417865992 CET	3778	39508	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:16.418173075 CET	39508	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:16.418781042 CET	3778	39510	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:16.419131994 CET	39510	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:16.423223972 CET	3778	39508	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:16.424348116 CET	3778	39510	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:18.041495085 CET	3778	39508	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:18.042067051 CET	39508	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:18.042217016 CET	3778	39510	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:18.042386055 CET	39510	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:18.047101974 CET	3778	39508	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:18.047394037 CET	3778	39510	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:19.050638914 CET	39512	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:19.051038980 CET	39514	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:19.055771112 CET	3778	39512	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:19.055979967 CET	3778	39514	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:19.056010962 CET	39512	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:19.056204081 CET	39514	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:19.061309099 CET	39512	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:19.061645985 CET	39514	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:19.066617966 CET	3778	39512	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:19.067012072 CET	39512	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:19.067435980 CET	3778	39514	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:19.067729950 CET	39514	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:19.072556019 CET	3778	39512	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:19.073321104 CET	3778	39514	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:20.680913925 CET	3778	39512	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:20.681468010 CET	39512	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:20.686439991 CET	3778	39512	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:20.700284958 CET	3778	39514	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:20.700577974 CET	39514	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:20.705893993 CET	3778	39514	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:21.688179970 CET	39516	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:21.693124056 CET	3778	39516	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:21.693378925 CET	39516	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:21.696033955 CET	39516	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:21.700984955 CET	3778	39516	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:21.701345921 CET	39516	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:21.705868959 CET	39518	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:21.706403971 CET	3778	39516	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:21.711020947 CET	3778	39518	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:21.711303949 CET	39518	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:21.714207888 CET	39518	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:21.720046043 CET	3778	39518	154.213.187.11	192.168.2.14
Jan 13, 2025 23:24:21.720319986 CET	39518	3778	192.168.2.14	154.213.187.11
Jan 13, 2025 23:24:21.726032972 CET	3778	39518	154.213.187.11	192.168.2.14

System Behavior

Analysis Process: camp.mpsl.elf PID: 5496, Parent PID: 5414

General

Start time (UTC):	22:22:10
Start date (UTC):	13/01/2025
Path:	/tmp/camp.mpsl.elf
Arguments:	/tmp/camp.mpsl.elf
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Chronological Activities

Analysis Process: camp.mpsl.elf PID: 5498, Parent PID: 5496

General

Start time (UTC):	22:22:10
Start date (UTC):	13/01/2025
Path:	/tmp/camp.mpsl.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Chronological Activities

Analysis Process: camp.mpsl.elf PID: 5500, Parent PID: 5498

General

Start time (UTC):	22:22:10
Start date (UTC):	13/01/2025
Path:	/tmp/camp.mpsl.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Chronological Activities

Analysis Process: camp.mpsl.elf PID: 5501, Parent PID: 5498

General

Start time (UTC):	22:22:10
Start date (UTC):	13/01/2025
Path:	/tmp/camp.mpsl.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Chronological Activities

Analysis Process: camp.mpsl.elf PID: 5511, Parent PID: 5496

General

Start time (UTC):	22:22:16
Start date (UTC):	13/01/2025
Path:	/tmp/camp.mpsl.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Chronological Activities

Analysis Process: camp.mpsl.elf PID: 5512, Parent PID: 5496

General

Start time (UTC):	22:22:16
Start date (UTC):	13/01/2025
Path:	/tmp/camp.mpsl.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report camp.mpsl.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: camp.mpsl.elf PID: 5496, Parent PID: 5414

General

Chronological Activities

Analysis Process: camp.mpsl.elf PID: 5498, Parent PID: 5496

General

Chronological Activities

Analysis Process: camp.mpsl.elf PID: 5500, Parent PID: 5498

General

Chronological Activities

Analysis Process: camp.mpsl.elf PID: 5501, Parent PID: 5498

General

Chronological Activities

Analysis Process: camp.mpsl.elf PID: 5511, Parent PID: 5496

General

Chronological Activities

Analysis Process: camp.mpsl.elf PID: 5512, Parent PID: 5496

General

Chronological Activities

Linux Analysis Report
camp.mpsl.elf