Edit tour

Linux Analysis Report
harm4.elf

Overview

General Information

Sample name:	harm4.elf
Analysis ID:	1542848
MD5:	61fa288ebb5adabc46438ca11d566b01
SHA1:	0a2c6a37fff5a87f829f06ae932176e4bff00485
SHA256:	1c128cde9d50548863c32a737c7644d4568f257c69d93a42fb4f4e1f48652c79
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false

Signatures

Multi AV Scanner detection for submitted file

Connects to many ports of the same IP (likely port scanning)

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Sample has stripped symbol table

Sample listens on a socket

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1542848
Start date and time:	2024-10-26 19:01:54 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	harm4.elf
Detection:	MAL
Classification:	mal52.troj.linELF@0/0@41/0

Warnings

VT rate limit hit for: harm4.elf

Runtime Messages

Command:	/tmp/harm4.elf
PID:	5506
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	you are now apart of hail cock botnet
Standard Error:

Process Tree

system is lnxubuntu20

harm4.elf (PID: 5506, Parent: 5430, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/harm4.elf

harm4.elf New Fork (PID: 5508, Parent: 5506)

harm4.elf New Fork (PID: 5558, Parent: 5508)

harm4.elf New Fork (PID: 5559, Parent: 5508)

harm4.elf New Fork (PID: 5510, Parent: 5506)

harm4.elf New Fork (PID: 5520, Parent: 5506)

cleanup

Yara Signatures

⊘No yara matches

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: harm4.elf

ReversingLabs: Detection: 18%

Networking

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 185.82.200.181 ports 19163,1,3,6,6458,9
Source: global traffic	TCP traffic: 213.182.204.57 ports 21612,0,10349,6708,1,3,4,9
Source: global traffic	TCP traffic: 195.133.92.51 ports 9850,12171,1,2,3239,7
Source: global traffic	TCP traffic: 193.233.193.45 ports 3592,2,3,5,23273,9,13200,15038
Source: global traffic	TCP traffic: 81.29.149.178 ports 1,17839,6,8,9,19668
Source: global traffic	TCP traffic: 91.149.238.18 ports 7269,22698,11812,2,6,7,9

Source: global traffic	TCP traffic: 192.168.2.14:42736 -> 31.13.248.89:14240
Source: global traffic	TCP traffic: 192.168.2.14:42182 -> 185.82.200.181:19163
Source: global traffic	TCP traffic: 192.168.2.14:59246 -> 195.133.92.51:12171
Source: global traffic	TCP traffic: 192.168.2.14:36884 -> 86.107.100.80:5777
Source: global traffic	TCP traffic: 192.168.2.14:46438 -> 213.182.204.57:10349
Source: global traffic	TCP traffic: 192.168.2.14:42070 -> 193.233.193.45:3592
Source: global traffic	TCP traffic: 192.168.2.14:50966 -> 91.149.218.232:7668
Source: global traffic	TCP traffic: 192.168.2.14:42878 -> 81.29.149.178:19668
Source: global traffic	TCP traffic: 192.168.2.14:56060 -> 91.149.238.18:7269

Source: /tmp/harm4.elf (PID: 5506)

Socket: 127.0.0.1:1172

Jump to behavior

Source: unknown	UDP traffic detected without corresponding DNS query: 137.220.52.23
Source: unknown	UDP traffic detected without corresponding DNS query: 137.220.52.23
Source: unknown	UDP traffic detected without corresponding DNS query: 64.176.6.48
Source: unknown	UDP traffic detected without corresponding DNS query: 64.176.6.48
Source: unknown	UDP traffic detected without corresponding DNS query: 139.84.165.176
Source: unknown	UDP traffic detected without corresponding DNS query: 139.84.165.176
Source: unknown	UDP traffic detected without corresponding DNS query: 168.235.111.72
Source: unknown	UDP traffic detected without corresponding DNS query: 168.235.111.72
Source: unknown	UDP traffic detected without corresponding DNS query: 178.254.22.166
Source: unknown	UDP traffic detected without corresponding DNS query: 178.254.22.166
Source: unknown	UDP traffic detected without corresponding DNS query: 70.34.254.19
Source: unknown	UDP traffic detected without corresponding DNS query: 70.34.254.19
Source: unknown	UDP traffic detected without corresponding DNS query: 80.152.203.134
Source: unknown	UDP traffic detected without corresponding DNS query: 202.61.197.122
Source: unknown	UDP traffic detected without corresponding DNS query: 80.152.203.134
Source: unknown	UDP traffic detected without corresponding DNS query: 64.176.6.48
Source: unknown	UDP traffic detected without corresponding DNS query: 202.61.197.122
Source: unknown	UDP traffic detected without corresponding DNS query: 139.84.165.176
Source: unknown	UDP traffic detected without corresponding DNS query: 139.84.165.176
Source: unknown	UDP traffic detected without corresponding DNS query: 152.53.15.127
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 178.254.22.166
Source: unknown	UDP traffic detected without corresponding DNS query: 194.36.144.87
Source: unknown	UDP traffic detected without corresponding DNS query: 51.158.108.203
Source: unknown	UDP traffic detected without corresponding DNS query: 139.84.165.176
Source: unknown	UDP traffic detected without corresponding DNS query: 137.220.52.23
Source: unknown	UDP traffic detected without corresponding DNS query: 168.235.111.72
Source: unknown	UDP traffic detected without corresponding DNS query: 137.220.52.23
Source: unknown	UDP traffic detected without corresponding DNS query: 168.235.111.72
Source: unknown	UDP traffic detected without corresponding DNS query: 70.34.254.19
Source: unknown	UDP traffic detected without corresponding DNS query: 178.254.22.166
Source: unknown	UDP traffic detected without corresponding DNS query: 80.152.203.134
Source: unknown	UDP traffic detected without corresponding DNS query: 80.152.203.134
Source: unknown	UDP traffic detected without corresponding DNS query: 194.36.144.87
Source: unknown	UDP traffic detected without corresponding DNS query: 51.158.108.203
Source: unknown	UDP traffic detected without corresponding DNS query: 80.152.203.134
Source: unknown	UDP traffic detected without corresponding DNS query: 65.21.1.106
Source: unknown	UDP traffic detected without corresponding DNS query: 51.158.108.203
Source: unknown	UDP traffic detected without corresponding DNS query: 178.254.22.166
Source: unknown	UDP traffic detected without corresponding DNS query: 137.220.52.23
Source: unknown	UDP traffic detected without corresponding DNS query: 65.21.1.106
Source: unknown	UDP traffic detected without corresponding DNS query: 168.235.111.72
Source: unknown	UDP traffic detected without corresponding DNS query: 70.34.254.19
Source: unknown	UDP traffic detected without corresponding DNS query: 152.53.15.127
Source: unknown	UDP traffic detected without corresponding DNS query: 65.21.1.106
Source: unknown	UDP traffic detected without corresponding DNS query: 137.220.52.23
Source: unknown	UDP traffic detected without corresponding DNS query: 194.36.144.87
Source: unknown	UDP traffic detected without corresponding DNS query: 139.84.165.176
Source: unknown	UDP traffic detected without corresponding DNS query: 5.161.109.23

Source: global traffic	DNS traffic detected: DNS query: kingstonwikkerink.dyn
Source: global traffic	DNS traffic detected: DNS query: daisy.ubuntu.com

Source: ELF static info symbol of initial sample

.symtab present: no

Source: classification engine

Classification label: mal52.troj.linELF@0/0@41/0

Source: /tmp/harm4.elf (PID: 5510)	File opened: /proc/5654/status	Jump to behavior
Source: /tmp/harm4.elf (PID: 5510)	File opened: /proc/5655/status	Jump to behavior
Source: /tmp/harm4.elf (PID: 5510)	File opened: /proc/5656/status	Jump to behavior
Source: /tmp/harm4.elf (PID: 5510)	File opened: /proc/5558/status	Jump to behavior
Source: /tmp/harm4.elf (PID: 5510)	File opened: /proc/5657/status	Jump to behavior
Source: /tmp/harm4.elf (PID: 5510)	File opened: /proc/5559/status	Jump to behavior
Source: /tmp/harm4.elf (PID: 5510)	File opened: /proc/5658/status	Jump to behavior
Source: /tmp/harm4.elf (PID: 5510)	File opened: /proc/5659/status	Jump to behavior
Source: /tmp/harm4.elf (PID: 5510)	File opened: /proc/5570/status	Jump to behavior
Source: /tmp/harm4.elf (PID: 5510)	File opened: /proc/5571/status	Jump to behavior
Source: /tmp/harm4.elf (PID: 5510)	File opened: /proc/5572/status	Jump to behavior
Source: /tmp/harm4.elf (PID: 5510)	File opened: /proc/5650/status	Jump to behavior
Source: /tmp/harm4.elf (PID: 5510)	File opened: /proc/5651/status	Jump to behavior
Source: /tmp/harm4.elf (PID: 5510)	File opened: /proc/5652/status	Jump to behavior
Source: /tmp/harm4.elf (PID: 5510)	File opened: /proc/5653/status	Jump to behavior
Source: /tmp/harm4.elf (PID: 5510)	File opened: /proc/323/cmdline	Jump to behavior
Source: /tmp/harm4.elf (PID: 5510)	File opened: /proc/5643/status	Jump to behavior
Source: /tmp/harm4.elf (PID: 5510)	File opened: /proc/5644/status	Jump to behavior
Source: /tmp/harm4.elf (PID: 5510)	File opened: /proc/5645/status	Jump to behavior
Source: /tmp/harm4.elf (PID: 5510)	File opened: /proc/5646/status	Jump to behavior
Source: /tmp/harm4.elf (PID: 5510)	File opened: /proc/5349/cmdline	Jump to behavior
Source: /tmp/harm4.elf (PID: 5510)	File opened: /proc/5647/status	Jump to behavior
Source: /tmp/harm4.elf (PID: 5510)	File opened: /proc/5648/status	Jump to behavior
Source: /tmp/harm4.elf (PID: 5510)	File opened: /proc/5649/status	Jump to behavior

Source: /tmp/harm4.elf (PID: 5506)

Queries kernel information via 'uname':

Jump to behavior

Source: harm4.elf, 5506.1.00007fff4fafa000.00007fff4fb1b000.rw-.sdmp, harm4.elf, 5508.1.00007fff4fafa000.00007fff4fb1b000.rw-.sdmp, harm4.elf, 5558.1.00007fff4fafa000.00007fff4fb1b000.rw-.sdmp, harm4.elf, 5559.1.00007fff4fafa000.00007fff4fb1b000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/harm4.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/harm4.elf
Source: harm4.elf, 5506.1.000056121872a000.00005612188a7000.rw-.sdmp, harm4.elf, 5508.1.000056121872a000.00005612188a7000.rw-.sdmp, harm4.elf, 5558.1.000056121872a000.00005612188a7000.rw-.sdmp, harm4.elf, 5559.1.000056121872a000.00005612188a7000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: harm4.elf, 5506.1.00007fff4fafa000.00007fff4fb1b000.rw-.sdmp, harm4.elf, 5508.1.00007fff4fafa000.00007fff4fb1b000.rw-.sdmp, harm4.elf, 5558.1.00007fff4fafa000.00007fff4fb1b000.rw-.sdmp, harm4.elf, 5559.1.00007fff4fafa000.00007fff4fb1b000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: harm4.elf, 5506.1.000056121872a000.00005612188a7000.rw-.sdmp, harm4.elf, 5508.1.000056121872a000.00005612188a7000.rw-.sdmp, harm4.elf, 5558.1.000056121872a000.00005612188a7000.rw-.sdmp, harm4.elf, 5559.1.000056121872a000.00005612188a7000.rw-.sdmp	Binary or memory string: V!/etc/qemu-binfmt/arm
Source: harm4.elf, 5559.1.00007fff4fafa000.00007fff4fb1b000.rw-.sdmp	Binary or memory string: qemu: uncaught target signal 11 (Segmentation fault) - core dumped

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
harm4.elf	18%	ReversingLabs	Linux.Backdoor.Mirai

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.24	true	false		unknown
kingstonwikkerink.dyn	31.13.248.89	true	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.82.200.181	unknown	Netherlands	60117	HSAE	true
213.182.204.57	unknown	Latvia	9009	M247GB	true
195.133.92.51	unknown	Russian Federation	197695	AS-REGRU	true
193.233.193.45	unknown	Russian Federation	2895	FREE-NET-ASFREEnetEU	true
91.149.218.232	unknown	Poland	198401	GECKONET-ASPL	false
31.13.248.89	kingstonwikkerink.dyn	Bulgaria	34224	NETERRA-ASBG	false
86.107.100.80	unknown	Romania	38995	AMG-ASRO	false
81.29.149.178	unknown	Switzerland	39616	COMUNICA_IT_SERVICESCH	true
91.149.238.18	unknown	Poland	41952	MARTON-ASPL	true

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
185.82.200.181	mpsl.elf	Get hash	malicious	Unknown	Browse
	arm4.elf	Get hash	malicious	Unknown	Browse
	na.elf	Get hash	malicious	Unknown	Browse
213.182.204.57	hmips.elf	Get hash	malicious	Unknown	Browse
	arm7.elf	Get hash	malicious	Unknown	Browse
	mips.elf	Get hash	malicious	Unknown	Browse
	arm5.elf	Get hash	malicious	Unknown	Browse
	x86.elf	Get hash	malicious	Unknown	Browse
195.133.92.51	mips.elf	Get hash	malicious	Unknown	Browse
195.133.92.51	mips.elf	Get hash	malicious	Unknown	Browse
193.233.193.45	mips.elf	Get hash	malicious	Unknown	Browse
193.233.193.45	hmips.elf	Get hash	malicious	Unknown	Browse
91.149.218.232	ppc.elf	Get hash	malicious	Unknown	Browse
91.149.218.232	x86.elf	Get hash	malicious	Unknown	Browse
81.29.149.178	hmips.elf	Get hash	malicious	Unknown	Browse
	ppc.elf	Get hash	malicious	Unknown	Browse
	mips.elf	Get hash	malicious	Unknown	Browse
	arm5.elf	Get hash	malicious	Unknown	Browse
91.149.238.18	hmips.elf	Get hash	malicious	Unknown	Browse
	mips.elf	Get hash	malicious	Unknown	Browse
	arm5.elf	Get hash	malicious	Unknown	Browse
31.13.248.89	mpsl.elf	Get hash	malicious	Unknown	Browse
	mips.elf	Get hash	malicious	Unknown	Browse
	arm4.elf	Get hash	malicious	Unknown	Browse
86.107.100.80	mips.elf	Get hash	malicious	Unknown	Browse
	arm.elf	Get hash	malicious	Unknown	Browse
	hmips.elf	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	.i.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	arm.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	c0r0n4x.arm6.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	c0r0n4x.x86.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	c0r0n4x.ppc.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	c0r0n4x.arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	xi.arm6.elf	Get hash	malicious	Mirai, Moobot	Browse	162.213.35.24
	A0Cr6LQ52c.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	Y48ThN7tMs.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	nsLuqUOchO.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
kingstonwikkerink.dyn	arm.elf	Get hash	malicious	Unknown	Browse	213.182.204.57
	hmips.elf	Get hash	malicious	Unknown	Browse	194.87.198.29
	arm7.elf	Get hash	malicious	Unknown	Browse	185.82.200.181
	mpsl.elf	Get hash	malicious	Unknown	Browse	81.29.149.178
	ppc.elf	Get hash	malicious	Unknown	Browse	88.151.195.22
	mips.elf	Get hash	malicious	Unknown	Browse	88.151.195.22
	arm5.elf	Get hash	malicious	Unknown	Browse	88.151.195.22
	arm4.elf	Get hash	malicious	Unknown	Browse	88.151.195.22
	x86.elf	Get hash	malicious	Unknown	Browse	185.82.200.181
	na.elf	Get hash	malicious	Mirai	Browse	27.102.115.180

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
M247GB	T52Z708x2p.exe	Get hash	malicious	Phorpiex, Xmrig	Browse	91.202.233.141
	lJ4EzPSKMj.exe	Get hash	malicious	Phorpiex, Xmrig	Browse	91.202.233.141
	Us051y7j25.exe	Get hash	malicious	Phorpiex, Xmrig	Browse	91.202.233.141
	thcdVit1dX.exe	Get hash	malicious	Phorpiex	Browse	91.202.233.141
	botnet.spc.elf	Get hash	malicious	Mirai, Moobot	Browse	37.120.192.49
	la.bot.m68k.elf	Get hash	malicious	Unknown	Browse	77.36.125.19
	la.bot.sh4.elf	Get hash	malicious	Unknown	Browse	172.94.54.116
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	154.17.88.71
	hmips.elf	Get hash	malicious	Unknown	Browse	213.182.204.57
	arm7.elf	Get hash	malicious	Unknown	Browse	213.182.204.57
HSAE	mpsl.elf	Get hash	malicious	Unknown	Browse	185.82.200.181
	arm4.elf	Get hash	malicious	Unknown	Browse	185.82.200.181
	Copia r#U00e1pida del pago INV 00932024.exe	Get hash	malicious	AgentTesla	Browse	194.36.191.196
	SecuriteInfo.com.Heur.27949.8326.docx	Get hash	malicious	Unknown	Browse	185.82.202.150
	Proforma Invoice NOCAP PLASTIK AMBALA.exe	Get hash	malicious	AgentTesla	Browse	194.36.191.196
	ynwj.ps1	Get hash	malicious	Unknown	Browse	194.36.191.196
	na.elf	Get hash	malicious	Unknown	Browse	185.82.200.181
	RFQ SN00954666 for prosjekt CMC 40 fot container.exe	Get hash	malicious	AgentTesla	Browse	194.36.191.196
	i586.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.82.202.195
	i686.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.82.202.195
FREE-NET-ASFREEnetEU	mips.elf	Get hash	malicious	Unknown	Browse	193.233.193.45
	Rechnung_643839483.pdf.lnk	Get hash	malicious	Unknown	Browse	147.45.44.131
	hmips.elf	Get hash	malicious	Unknown	Browse	193.233.193.45
	5ffe9c7df144e58c04f8d77c33849dcf93dc0ada47717.exe	Get hash	malicious	Stealc, Vidar	Browse	147.45.44.221
	http://heks.egrowbrands.com/yuop/66e9b62daa62d_xin.exe	Get hash	malicious	Unknown	Browse	147.45.44.104
	http://hans.uniformeslaamistad.com/malesa/6705347f535f8_install.exe	Get hash	malicious	Unknown	Browse	147.45.44.104
	http://heks.egrowbrands.com/lopsa/67057a2256a25_SwiftKey.exe	Get hash	malicious	Unknown	Browse	147.45.44.104
	http://lide.omernisar.com/lopsa/66daf6d8ac980_PeakSports.exe	Get hash	malicious	Unknown	Browse	147.45.44.104
	01oTkKQVSW.exe	Get hash	malicious	Unknown	Browse	147.45.47.185
	01oTkKQVSW.exe	Get hash	malicious	Unknown	Browse	147.45.47.185
AS-REGRU	mips.elf	Get hash	malicious	Unknown	Browse	195.133.92.51
	PO 4800040256.exe	Get hash	malicious	FormBook	Browse	194.58.112.174
	la.bot.mips.elf	Get hash	malicious	Unknown	Browse	212.24.61.227
	New orde.exe	Get hash	malicious	FormBook	Browse	194.58.112.174
	FACTURA A-7507_H1758.exe	Get hash	malicious	GuLoader	Browse	194.58.112.174
	P1 BOL.exe	Get hash	malicious	Unknown	Browse	37.140.192.179
	mips.elf	Get hash	malicious	Unknown	Browse	195.133.92.51
	z10982283782.exe	Get hash	malicious	DBatLoader, FormBook	Browse	194.58.112.174
	Invoice.exe	Get hash	malicious	FormBook, PureLog Stealer	Browse	194.58.112.174
	zamowienie.exe	Get hash	malicious	GuLoader	Browse	194.58.112.174

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, stripped
Entropy (8bit):	6.034328485871902
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	harm4.elf
File size:	75'160 bytes
MD5:	61fa288ebb5adabc46438ca11d566b01
SHA1:	0a2c6a37fff5a87f829f06ae932176e4bff00485
SHA256:	1c128cde9d50548863c32a737c7644d4568f257c69d93a42fb4f4e1f48652c79
SHA512:	20969439202d191860c13b07edf7c338b60be126a836a9233e7f8cd247f32a52d7b80969896b999abbb889e6ab04fe6305688c4998301d31a79c8283cd8c2488
SSDEEP:	768:esKf9w7jS1dXvclEW06hpf2M1qSCnhNFNpd7jNzjCvFQMfdTqu9wwK2BVDodwuS2:3KCMVn6PfN1ANVtjNSXfFB5KCcaqdv+
TLSH:	A8732951BC815A13C6D112BBFB2E428D772613A8D3EF3203D9256F21778B92B0E77642
File Content Preview:	.ELF...a..........(.........4....#......4. ...(.....................`...`................ ... ... .......T..........Q.td..................................-...L."....@..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	ARM - ABI
ABI Version:	0
Entry Point Address:	0x8190
Flags:	0x202
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	74720
Section Header Size:	40
Number of Section Headers:	11
Header String Table Index:	10

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8094	0x94	0x18	0x0	0x6	AX	4
.text	PROGBITS	0x80b0	0xb0	0x103f4	0x0	0x6	AX	16
.fini	PROGBITS	0x184a4	0x104a4	0x14	0x0	0x6	AX	4
.rodata	PROGBITS	0x184b8	0x104b8	0x16a4	0x0	0x2	A	4
.eh_frame	PROGBITS	0x19b5c	0x11b5c	0x4	0x0	0x2	A	4
.ctors	PROGBITS	0x22000	0x12000	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x22008	0x12008	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x22014	0x12014	0x384	0x0	0x3	WA	4
.bss	NOBITS	0x22398	0x12398	0x5114	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0x12398	0x48	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8000	0x8000	0x11b60	0x11b60	6.1210	0x5	R E	0x8000	.init .text .fini .rodata .eh_frame
LOAD	0x12000	0x22000	0x22000	0x398	0x54ac	2.8820	0x6	RW	0x8000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 26, 2024 19:02:58.474131107 CEST	42736	14240	192.168.2.14	31.13.248.89
Oct 26, 2024 19:02:58.479532957 CEST	14240	42736	31.13.248.89	192.168.2.14
Oct 26, 2024 19:02:58.479577065 CEST	42736	14240	192.168.2.14	31.13.248.89
Oct 26, 2024 19:02:58.479736090 CEST	42736	14240	192.168.2.14	31.13.248.89
Oct 26, 2024 19:02:58.485264063 CEST	14240	42736	31.13.248.89	192.168.2.14
Oct 26, 2024 19:02:58.485505104 CEST	42736	14240	192.168.2.14	31.13.248.89
Oct 26, 2024 19:02:58.490909100 CEST	14240	42736	31.13.248.89	192.168.2.14
Oct 26, 2024 19:02:59.103480101 CEST	14240	42736	31.13.248.89	192.168.2.14
Oct 26, 2024 19:02:59.103734970 CEST	42736	14240	192.168.2.14	31.13.248.89
Oct 26, 2024 19:02:59.109162092 CEST	14240	42736	31.13.248.89	192.168.2.14
Oct 26, 2024 19:03:14.137816906 CEST	42182	19163	192.168.2.14	185.82.200.181
Oct 26, 2024 19:03:14.143340111 CEST	19163	42182	185.82.200.181	192.168.2.14
Oct 26, 2024 19:03:14.143455029 CEST	42182	19163	192.168.2.14	185.82.200.181
Oct 26, 2024 19:03:14.143486977 CEST	42182	19163	192.168.2.14	185.82.200.181
Oct 26, 2024 19:03:14.148910046 CEST	19163	42182	185.82.200.181	192.168.2.14
Oct 26, 2024 19:03:14.148967981 CEST	42182	19163	192.168.2.14	185.82.200.181
Oct 26, 2024 19:03:14.154391050 CEST	19163	42182	185.82.200.181	192.168.2.14
Oct 26, 2024 19:03:15.068747997 CEST	19163	42182	185.82.200.181	192.168.2.14
Oct 26, 2024 19:03:15.068933010 CEST	42182	19163	192.168.2.14	185.82.200.181
Oct 26, 2024 19:03:15.074378014 CEST	19163	42182	185.82.200.181	192.168.2.14
Oct 26, 2024 19:03:20.082304955 CEST	59246	12171	192.168.2.14	195.133.92.51
Oct 26, 2024 19:03:20.087722063 CEST	12171	59246	195.133.92.51	192.168.2.14
Oct 26, 2024 19:03:20.087800026 CEST	59246	12171	192.168.2.14	195.133.92.51
Oct 26, 2024 19:03:20.087838888 CEST	59246	12171	192.168.2.14	195.133.92.51
Oct 26, 2024 19:03:20.093220949 CEST	12171	59246	195.133.92.51	192.168.2.14
Oct 26, 2024 19:03:20.093379974 CEST	59246	12171	192.168.2.14	195.133.92.51
Oct 26, 2024 19:03:20.098836899 CEST	12171	59246	195.133.92.51	192.168.2.14
Oct 26, 2024 19:03:21.032540083 CEST	12171	59246	195.133.92.51	192.168.2.14
Oct 26, 2024 19:03:21.032699108 CEST	59246	12171	192.168.2.14	195.133.92.51
Oct 26, 2024 19:03:21.032784939 CEST	59246	12171	192.168.2.14	195.133.92.51
Oct 26, 2024 19:03:36.367590904 CEST	36884	5777	192.168.2.14	86.107.100.80
Oct 26, 2024 19:03:36.373120070 CEST	5777	36884	86.107.100.80	192.168.2.14
Oct 26, 2024 19:03:36.373218060 CEST	36884	5777	192.168.2.14	86.107.100.80
Oct 26, 2024 19:03:36.373218060 CEST	36884	5777	192.168.2.14	86.107.100.80
Oct 26, 2024 19:03:36.378797054 CEST	5777	36884	86.107.100.80	192.168.2.14
Oct 26, 2024 19:03:36.378945112 CEST	36884	5777	192.168.2.14	86.107.100.80
Oct 26, 2024 19:03:36.384321928 CEST	5777	36884	86.107.100.80	192.168.2.14
Oct 26, 2024 19:03:37.742938042 CEST	5777	36884	86.107.100.80	192.168.2.14
Oct 26, 2024 19:03:37.743223906 CEST	36884	5777	192.168.2.14	86.107.100.80
Oct 26, 2024 19:03:37.743223906 CEST	36884	5777	192.168.2.14	86.107.100.80
Oct 26, 2024 19:03:42.762260914 CEST	46438	10349	192.168.2.14	213.182.204.57
Oct 26, 2024 19:03:42.767692089 CEST	10349	46438	213.182.204.57	192.168.2.14
Oct 26, 2024 19:03:42.767779112 CEST	46438	10349	192.168.2.14	213.182.204.57
Oct 26, 2024 19:03:42.767838955 CEST	46438	10349	192.168.2.14	213.182.204.57
Oct 26, 2024 19:03:42.773186922 CEST	10349	46438	213.182.204.57	192.168.2.14
Oct 26, 2024 19:03:42.773320913 CEST	46438	10349	192.168.2.14	213.182.204.57
Oct 26, 2024 19:03:42.778755903 CEST	10349	46438	213.182.204.57	192.168.2.14
Oct 26, 2024 19:03:43.649384975 CEST	10349	46438	213.182.204.57	192.168.2.14
Oct 26, 2024 19:03:43.649574041 CEST	46438	10349	192.168.2.14	213.182.204.57
Oct 26, 2024 19:03:43.649617910 CEST	46438	10349	192.168.2.14	213.182.204.57
Oct 26, 2024 19:03:58.760909081 CEST	40258	3239	192.168.2.14	195.133.92.51
Oct 26, 2024 19:03:58.767537117 CEST	3239	40258	195.133.92.51	192.168.2.14
Oct 26, 2024 19:03:58.767632961 CEST	40258	3239	192.168.2.14	195.133.92.51
Oct 26, 2024 19:03:58.767689943 CEST	40258	3239	192.168.2.14	195.133.92.51
Oct 26, 2024 19:03:58.776221991 CEST	3239	40258	195.133.92.51	192.168.2.14
Oct 26, 2024 19:03:58.776321888 CEST	40258	3239	192.168.2.14	195.133.92.51
Oct 26, 2024 19:03:58.782880068 CEST	3239	40258	195.133.92.51	192.168.2.14
Oct 26, 2024 19:03:59.678411007 CEST	3239	40258	195.133.92.51	192.168.2.14
Oct 26, 2024 19:03:59.678683996 CEST	40258	3239	192.168.2.14	195.133.92.51
Oct 26, 2024 19:03:59.678683996 CEST	40258	3239	192.168.2.14	195.133.92.51
Oct 26, 2024 19:04:09.776331902 CEST	42070	3592	192.168.2.14	193.233.193.45
Oct 26, 2024 19:04:09.781863928 CEST	3592	42070	193.233.193.45	192.168.2.14
Oct 26, 2024 19:04:09.781940937 CEST	42070	3592	192.168.2.14	193.233.193.45
Oct 26, 2024 19:04:09.781999111 CEST	42070	3592	192.168.2.14	193.233.193.45
Oct 26, 2024 19:04:09.787275076 CEST	3592	42070	193.233.193.45	192.168.2.14
Oct 26, 2024 19:04:09.787343979 CEST	42070	3592	192.168.2.14	193.233.193.45
Oct 26, 2024 19:04:09.792804003 CEST	3592	42070	193.233.193.45	192.168.2.14
Oct 26, 2024 19:04:11.105597973 CEST	3592	42070	193.233.193.45	192.168.2.14
Oct 26, 2024 19:04:11.105745077 CEST	42070	3592	192.168.2.14	193.233.193.45
Oct 26, 2024 19:04:11.105745077 CEST	42070	3592	192.168.2.14	193.233.193.45
Oct 26, 2024 19:04:26.168323040 CEST	50966	7668	192.168.2.14	91.149.218.232
Oct 26, 2024 19:04:26.173785925 CEST	7668	50966	91.149.218.232	192.168.2.14
Oct 26, 2024 19:04:26.173883915 CEST	50966	7668	192.168.2.14	91.149.218.232
Oct 26, 2024 19:04:26.173968077 CEST	50966	7668	192.168.2.14	91.149.218.232
Oct 26, 2024 19:04:26.179296017 CEST	7668	50966	91.149.218.232	192.168.2.14
Oct 26, 2024 19:04:26.179368019 CEST	50966	7668	192.168.2.14	91.149.218.232
Oct 26, 2024 19:04:26.184700012 CEST	7668	50966	91.149.218.232	192.168.2.14
Oct 26, 2024 19:04:27.012289047 CEST	7668	50966	91.149.218.232	192.168.2.14
Oct 26, 2024 19:04:27.012475014 CEST	50966	7668	192.168.2.14	91.149.218.232
Oct 26, 2024 19:04:27.012530088 CEST	50966	7668	192.168.2.14	91.149.218.232
Oct 26, 2024 19:04:32.038228035 CEST	42878	19668	192.168.2.14	81.29.149.178
Oct 26, 2024 19:04:32.043713093 CEST	19668	42878	81.29.149.178	192.168.2.14
Oct 26, 2024 19:04:32.043802977 CEST	42878	19668	192.168.2.14	81.29.149.178
Oct 26, 2024 19:04:32.043863058 CEST	42878	19668	192.168.2.14	81.29.149.178
Oct 26, 2024 19:04:32.049246073 CEST	19668	42878	81.29.149.178	192.168.2.14
Oct 26, 2024 19:04:32.049293995 CEST	42878	19668	192.168.2.14	81.29.149.178
Oct 26, 2024 19:04:32.054903984 CEST	19668	42878	81.29.149.178	192.168.2.14
Oct 26, 2024 19:04:33.021723032 CEST	19668	42878	81.29.149.178	192.168.2.14
Oct 26, 2024 19:04:33.021863937 CEST	42878	19668	192.168.2.14	81.29.149.178
Oct 26, 2024 19:04:33.021907091 CEST	42878	19668	192.168.2.14	81.29.149.178
Oct 26, 2024 19:04:38.035161972 CEST	53952	23273	192.168.2.14	193.233.193.45
Oct 26, 2024 19:04:38.040703058 CEST	23273	53952	193.233.193.45	192.168.2.14
Oct 26, 2024 19:04:38.040777922 CEST	53952	23273	192.168.2.14	193.233.193.45
Oct 26, 2024 19:04:38.040810108 CEST	53952	23273	192.168.2.14	193.233.193.45
Oct 26, 2024 19:04:38.046375036 CEST	23273	53952	193.233.193.45	192.168.2.14
Oct 26, 2024 19:04:38.046427011 CEST	53952	23273	192.168.2.14	193.233.193.45
Oct 26, 2024 19:04:38.051703930 CEST	23273	53952	193.233.193.45	192.168.2.14
Oct 26, 2024 19:04:39.386761904 CEST	23273	53952	193.233.193.45	192.168.2.14
Oct 26, 2024 19:04:39.387130976 CEST	53952	23273	192.168.2.14	193.233.193.45
Oct 26, 2024 19:04:39.387223005 CEST	53952	23273	192.168.2.14	193.233.193.45
Oct 26, 2024 19:04:44.406860113 CEST	39206	6458	192.168.2.14	185.82.200.181
Oct 26, 2024 19:04:44.412331104 CEST	6458	39206	185.82.200.181	192.168.2.14
Oct 26, 2024 19:04:44.412385941 CEST	39206	6458	192.168.2.14	185.82.200.181
Oct 26, 2024 19:04:44.412411928 CEST	39206	6458	192.168.2.14	185.82.200.181
Oct 26, 2024 19:04:44.417788982 CEST	6458	39206	185.82.200.181	192.168.2.14
Oct 26, 2024 19:04:44.417843103 CEST	39206	6458	192.168.2.14	185.82.200.181
Oct 26, 2024 19:04:44.423146009 CEST	6458	39206	185.82.200.181	192.168.2.14
Oct 26, 2024 19:04:45.735073090 CEST	6458	39206	185.82.200.181	192.168.2.14
Oct 26, 2024 19:04:45.735563040 CEST	39206	6458	192.168.2.14	185.82.200.181
Oct 26, 2024 19:04:45.740994930 CEST	6458	39206	185.82.200.181	192.168.2.14
Oct 26, 2024 19:04:50.769666910 CEST	56060	7269	192.168.2.14	91.149.238.18
Oct 26, 2024 19:04:50.775127888 CEST	7269	56060	91.149.238.18	192.168.2.14
Oct 26, 2024 19:04:50.775249004 CEST	56060	7269	192.168.2.14	91.149.238.18
Oct 26, 2024 19:04:50.775298119 CEST	56060	7269	192.168.2.14	91.149.238.18
Oct 26, 2024 19:04:50.780705929 CEST	7269	56060	91.149.238.18	192.168.2.14
Oct 26, 2024 19:04:50.780788898 CEST	56060	7269	192.168.2.14	91.149.238.18
Oct 26, 2024 19:04:50.786214113 CEST	7269	56060	91.149.238.18	192.168.2.14
Oct 26, 2024 19:04:51.617449045 CEST	7269	56060	91.149.238.18	192.168.2.14
Oct 26, 2024 19:04:51.617615938 CEST	56060	7269	192.168.2.14	91.149.238.18
Oct 26, 2024 19:04:51.617786884 CEST	56060	7269	192.168.2.14	91.149.238.18
Oct 26, 2024 19:04:56.651129961 CEST	33954	15010	192.168.2.14	91.149.218.232
Oct 26, 2024 19:04:56.656723976 CEST	15010	33954	91.149.218.232	192.168.2.14
Oct 26, 2024 19:04:56.656837940 CEST	33954	15010	192.168.2.14	91.149.218.232
Oct 26, 2024 19:04:56.656888008 CEST	33954	15010	192.168.2.14	91.149.218.232
Oct 26, 2024 19:04:56.662683010 CEST	15010	33954	91.149.218.232	192.168.2.14
Oct 26, 2024 19:04:56.662857056 CEST	33954	15010	192.168.2.14	91.149.218.232
Oct 26, 2024 19:04:56.668400049 CEST	15010	33954	91.149.218.232	192.168.2.14
Oct 26, 2024 19:04:57.495026112 CEST	15010	33954	91.149.218.232	192.168.2.14
Oct 26, 2024 19:04:57.495080948 CEST	15010	33954	91.149.218.232	192.168.2.14
Oct 26, 2024 19:04:57.495260000 CEST	15010	33954	91.149.218.232	192.168.2.14
Oct 26, 2024 19:04:57.495392084 CEST	33954	15010	192.168.2.14	91.149.218.232
Oct 26, 2024 19:04:57.495392084 CEST	33954	15010	192.168.2.14	91.149.218.232
Oct 26, 2024 19:04:57.495392084 CEST	33954	15010	192.168.2.14	91.149.218.232
Oct 26, 2024 19:04:57.495486975 CEST	33954	15010	192.168.2.14	91.149.218.232
Oct 26, 2024 19:05:02.516644001 CEST	46072	17839	192.168.2.14	81.29.149.178
Oct 26, 2024 19:05:02.522181988 CEST	17839	46072	81.29.149.178	192.168.2.14
Oct 26, 2024 19:05:02.522284031 CEST	46072	17839	192.168.2.14	81.29.149.178
Oct 26, 2024 19:05:02.522330999 CEST	46072	17839	192.168.2.14	81.29.149.178
Oct 26, 2024 19:05:02.527825117 CEST	17839	46072	81.29.149.178	192.168.2.14
Oct 26, 2024 19:05:02.527909040 CEST	46072	17839	192.168.2.14	81.29.149.178
Oct 26, 2024 19:05:02.533529997 CEST	17839	46072	81.29.149.178	192.168.2.14
Oct 26, 2024 19:05:03.415183067 CEST	17839	46072	81.29.149.178	192.168.2.14
Oct 26, 2024 19:05:03.415357113 CEST	46072	17839	192.168.2.14	81.29.149.178
Oct 26, 2024 19:05:03.415460110 CEST	46072	17839	192.168.2.14	81.29.149.178
Oct 26, 2024 19:05:18.459675074 CEST	51768	21612	192.168.2.14	213.182.204.57
Oct 26, 2024 19:05:18.465189934 CEST	21612	51768	213.182.204.57	192.168.2.14
Oct 26, 2024 19:05:18.465265036 CEST	51768	21612	192.168.2.14	213.182.204.57
Oct 26, 2024 19:05:18.465306044 CEST	51768	21612	192.168.2.14	213.182.204.57
Oct 26, 2024 19:05:18.470678091 CEST	21612	51768	213.182.204.57	192.168.2.14
Oct 26, 2024 19:05:18.470747948 CEST	51768	21612	192.168.2.14	213.182.204.57
Oct 26, 2024 19:05:18.476495981 CEST	21612	51768	213.182.204.57	192.168.2.14
Oct 26, 2024 19:05:19.379396915 CEST	21612	51768	213.182.204.57	192.168.2.14
Oct 26, 2024 19:05:19.379431009 CEST	21612	51768	213.182.204.57	192.168.2.14
Oct 26, 2024 19:05:19.379767895 CEST	51768	21612	192.168.2.14	213.182.204.57
Oct 26, 2024 19:05:19.379769087 CEST	51768	21612	192.168.2.14	213.182.204.57
Oct 26, 2024 19:05:19.379769087 CEST	51768	21612	192.168.2.14	213.182.204.57
Oct 26, 2024 19:05:24.477667093 CEST	48052	13200	192.168.2.14	193.233.193.45
Oct 26, 2024 19:05:24.483114004 CEST	13200	48052	193.233.193.45	192.168.2.14
Oct 26, 2024 19:05:24.483227968 CEST	48052	13200	192.168.2.14	193.233.193.45
Oct 26, 2024 19:05:24.483270884 CEST	48052	13200	192.168.2.14	193.233.193.45
Oct 26, 2024 19:05:24.488724947 CEST	13200	48052	193.233.193.45	192.168.2.14
Oct 26, 2024 19:05:24.488805056 CEST	48052	13200	192.168.2.14	193.233.193.45
Oct 26, 2024 19:05:24.494266987 CEST	13200	48052	193.233.193.45	192.168.2.14
Oct 26, 2024 19:05:25.839999914 CEST	13200	48052	193.233.193.45	192.168.2.14
Oct 26, 2024 19:05:25.840423107 CEST	48052	13200	192.168.2.14	193.233.193.45
Oct 26, 2024 19:05:25.840423107 CEST	48052	13200	192.168.2.14	193.233.193.45
Oct 26, 2024 19:05:35.860526085 CEST	43804	9850	192.168.2.14	195.133.92.51
Oct 26, 2024 19:05:35.866015911 CEST	9850	43804	195.133.92.51	192.168.2.14
Oct 26, 2024 19:05:35.866108894 CEST	43804	9850	192.168.2.14	195.133.92.51
Oct 26, 2024 19:05:35.866161108 CEST	43804	9850	192.168.2.14	195.133.92.51
Oct 26, 2024 19:05:35.871545076 CEST	9850	43804	195.133.92.51	192.168.2.14
Oct 26, 2024 19:05:35.871619940 CEST	43804	9850	192.168.2.14	195.133.92.51
Oct 26, 2024 19:05:35.877078056 CEST	9850	43804	195.133.92.51	192.168.2.14
Oct 26, 2024 19:05:36.774672985 CEST	9850	43804	195.133.92.51	192.168.2.14
Oct 26, 2024 19:05:36.774879932 CEST	43804	9850	192.168.2.14	195.133.92.51
Oct 26, 2024 19:05:36.774976015 CEST	43804	9850	192.168.2.14	195.133.92.51
Oct 26, 2024 19:05:41.805896044 CEST	45738	22698	192.168.2.14	91.149.238.18
Oct 26, 2024 19:05:41.811407089 CEST	22698	45738	91.149.238.18	192.168.2.14
Oct 26, 2024 19:05:41.811501026 CEST	45738	22698	192.168.2.14	91.149.238.18
Oct 26, 2024 19:05:41.811534882 CEST	45738	22698	192.168.2.14	91.149.238.18
Oct 26, 2024 19:05:41.816848040 CEST	22698	45738	91.149.238.18	192.168.2.14
Oct 26, 2024 19:05:41.816924095 CEST	45738	22698	192.168.2.14	91.149.238.18
Oct 26, 2024 19:05:41.822364092 CEST	22698	45738	91.149.238.18	192.168.2.14
Oct 26, 2024 19:05:42.657767057 CEST	22698	45738	91.149.238.18	192.168.2.14
Oct 26, 2024 19:05:42.657919884 CEST	45738	22698	192.168.2.14	91.149.238.18
Oct 26, 2024 19:05:42.657954931 CEST	45738	22698	192.168.2.14	91.149.238.18
Oct 26, 2024 19:05:52.679260969 CEST	47392	11812	192.168.2.14	91.149.238.18
Oct 26, 2024 19:05:52.684776068 CEST	11812	47392	91.149.238.18	192.168.2.14
Oct 26, 2024 19:05:52.684967041 CEST	47392	11812	192.168.2.14	91.149.238.18
Oct 26, 2024 19:05:52.684967041 CEST	47392	11812	192.168.2.14	91.149.238.18
Oct 26, 2024 19:05:52.690459013 CEST	11812	47392	91.149.238.18	192.168.2.14
Oct 26, 2024 19:05:52.690537930 CEST	47392	11812	192.168.2.14	91.149.238.18
Oct 26, 2024 19:05:52.696033001 CEST	11812	47392	91.149.238.18	192.168.2.14
Oct 26, 2024 19:05:53.523432016 CEST	11812	47392	91.149.238.18	192.168.2.14
Oct 26, 2024 19:05:53.523652077 CEST	47392	11812	192.168.2.14	91.149.238.18
Oct 26, 2024 19:05:53.523772001 CEST	47392	11812	192.168.2.14	91.149.238.18
Oct 26, 2024 19:06:08.572377920 CEST	51964	6708	192.168.2.14	213.182.204.57
Oct 26, 2024 19:06:08.579267025 CEST	6708	51964	213.182.204.57	192.168.2.14
Oct 26, 2024 19:06:08.579355955 CEST	51964	6708	192.168.2.14	213.182.204.57
Oct 26, 2024 19:06:08.579426050 CEST	51964	6708	192.168.2.14	213.182.204.57
Oct 26, 2024 19:06:08.585731983 CEST	6708	51964	213.182.204.57	192.168.2.14
Oct 26, 2024 19:06:08.585807085 CEST	51964	6708	192.168.2.14	213.182.204.57
Oct 26, 2024 19:06:08.595678091 CEST	6708	51964	213.182.204.57	192.168.2.14
Oct 26, 2024 19:06:09.688536882 CEST	6708	51964	213.182.204.57	192.168.2.14
Oct 26, 2024 19:06:09.688553095 CEST	6708	51964	213.182.204.57	192.168.2.14
Oct 26, 2024 19:06:09.688563108 CEST	6708	51964	213.182.204.57	192.168.2.14
Oct 26, 2024 19:06:09.688723087 CEST	51964	6708	192.168.2.14	213.182.204.57
Oct 26, 2024 19:06:09.688723087 CEST	51964	6708	192.168.2.14	213.182.204.57
Oct 26, 2024 19:06:09.688756943 CEST	51964	6708	192.168.2.14	213.182.204.57
Oct 26, 2024 19:06:09.688756943 CEST	51964	6708	192.168.2.14	213.182.204.57
Oct 26, 2024 19:06:09.691665888 CEST	6708	51964	213.182.204.57	192.168.2.14
Oct 26, 2024 19:06:09.691731930 CEST	51964	6708	192.168.2.14	213.182.204.57
Oct 26, 2024 19:06:14.779731035 CEST	51422	15038	192.168.2.14	193.233.193.45
Oct 26, 2024 19:06:14.785224915 CEST	15038	51422	193.233.193.45	192.168.2.14
Oct 26, 2024 19:06:14.785334110 CEST	51422	15038	192.168.2.14	193.233.193.45
Oct 26, 2024 19:06:14.785398006 CEST	51422	15038	192.168.2.14	193.233.193.45
Oct 26, 2024 19:06:14.790771008 CEST	15038	51422	193.233.193.45	192.168.2.14
Oct 26, 2024 19:06:14.790844917 CEST	51422	15038	192.168.2.14	193.233.193.45
Oct 26, 2024 19:06:14.796372890 CEST	15038	51422	193.233.193.45	192.168.2.14
Oct 26, 2024 19:06:16.107227087 CEST	15038	51422	193.233.193.45	192.168.2.14
Oct 26, 2024 19:06:16.107577085 CEST	51422	15038	192.168.2.14	193.233.193.45
Oct 26, 2024 19:06:16.107577085 CEST	51422	15038	192.168.2.14	193.233.193.45

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 26, 2024 19:02:43.368704081 CEST	49604	53	192.168.2.14	137.220.52.23
Oct 26, 2024 19:02:43.528198957 CEST	54638	53	192.168.2.14	137.220.52.23
Oct 26, 2024 19:02:48.372476101 CEST	39366	53	192.168.2.14	64.176.6.48
Oct 26, 2024 19:02:48.532181978 CEST	38399	53	192.168.2.14	64.176.6.48
Oct 26, 2024 19:02:53.379117966 CEST	57422	53	192.168.2.14	139.84.165.176
Oct 26, 2024 19:02:53.536432981 CEST	49279	53	192.168.2.14	139.84.165.176
Oct 26, 2024 19:02:58.384910107 CEST	51212	53	192.168.2.14	168.235.111.72
Oct 26, 2024 19:02:58.473201990 CEST	53	51212	168.235.111.72	192.168.2.14
Oct 26, 2024 19:02:58.540055037 CEST	56964	53	192.168.2.14	168.235.111.72
Oct 26, 2024 19:02:58.627298117 CEST	53	56964	168.235.111.72	192.168.2.14
Oct 26, 2024 19:03:00.630378962 CEST	41833	53	192.168.2.14	178.254.22.166
Oct 26, 2024 19:03:04.105671883 CEST	51751	53	192.168.2.14	178.254.22.166
Oct 26, 2024 19:03:05.635684967 CEST	53728	53	192.168.2.14	70.34.254.19
Oct 26, 2024 19:03:09.108517885 CEST	54351	53	192.168.2.14	70.34.254.19
Oct 26, 2024 19:03:10.639188051 CEST	40063	53	192.168.2.14	80.152.203.134
Oct 26, 2024 19:03:10.662075996 CEST	53	40063	80.152.203.134	192.168.2.14
Oct 26, 2024 19:03:10.662749052 CEST	37798	53	192.168.2.14	202.61.197.122
Oct 26, 2024 19:03:10.673439026 CEST	53	37798	202.61.197.122	192.168.2.14
Oct 26, 2024 19:03:14.114347935 CEST	37995	53	192.168.2.14	80.152.203.134
Oct 26, 2024 19:03:14.137217045 CEST	53	37995	80.152.203.134	192.168.2.14
Oct 26, 2024 19:03:17.675343990 CEST	41978	53	192.168.2.14	64.176.6.48
Oct 26, 2024 19:03:20.070950985 CEST	51836	53	192.168.2.14	202.61.197.122
Oct 26, 2024 19:03:20.081805944 CEST	53	51836	202.61.197.122	192.168.2.14
Oct 26, 2024 19:03:22.679284096 CEST	34050	53	192.168.2.14	139.84.165.176
Oct 26, 2024 19:03:26.035371065 CEST	37293	53	192.168.2.14	139.84.165.176
Oct 26, 2024 19:03:27.682975054 CEST	33350	53	192.168.2.14	152.53.15.127
Oct 26, 2024 19:03:27.693641901 CEST	53	33350	152.53.15.127	192.168.2.14
Oct 26, 2024 19:03:29.300024986 CEST	33681	53	192.168.2.14	1.1.1.1
Oct 26, 2024 19:03:29.300084114 CEST	49377	53	192.168.2.14	1.1.1.1
Oct 26, 2024 19:03:29.307714939 CEST	53	49377	1.1.1.1	192.168.2.14
Oct 26, 2024 19:03:29.307873964 CEST	53	33681	1.1.1.1	192.168.2.14
Oct 26, 2024 19:03:31.123498917 CEST	60127	53	192.168.2.14	178.254.22.166
Oct 26, 2024 19:03:36.126410007 CEST	41547	53	192.168.2.14	194.36.144.87
Oct 26, 2024 19:03:36.366532087 CEST	53	41547	194.36.144.87	192.168.2.14
Oct 26, 2024 19:03:42.745572090 CEST	56147	53	192.168.2.14	51.158.108.203
Oct 26, 2024 19:03:42.761444092 CEST	53	56147	51.158.108.203	192.168.2.14
Oct 26, 2024 19:03:48.652678967 CEST	44680	53	192.168.2.14	139.84.165.176
Oct 26, 2024 19:03:53.658972025 CEST	54690	53	192.168.2.14	137.220.52.23
Oct 26, 2024 19:03:58.666251898 CEST	37141	53	192.168.2.14	168.235.111.72
Oct 26, 2024 19:03:58.759593964 CEST	53	37141	168.235.111.72	192.168.2.14
Oct 26, 2024 19:04:04.681572914 CEST	54651	53	192.168.2.14	137.220.52.23
Oct 26, 2024 19:04:09.686866999 CEST	33749	53	192.168.2.14	168.235.111.72
Oct 26, 2024 19:04:09.775333881 CEST	53	33749	168.235.111.72	192.168.2.14
Oct 26, 2024 19:04:16.108649015 CEST	57136	53	192.168.2.14	70.34.254.19
Oct 26, 2024 19:04:21.114779949 CEST	49459	53	192.168.2.14	178.254.22.166
Oct 26, 2024 19:04:26.121730089 CEST	41530	53	192.168.2.14	80.152.203.134
Oct 26, 2024 19:04:26.167563915 CEST	53	41530	80.152.203.134	192.168.2.14
Oct 26, 2024 19:04:32.014183998 CEST	35179	53	192.168.2.14	80.152.203.134
Oct 26, 2024 19:04:32.037455082 CEST	53	35179	80.152.203.134	192.168.2.14
Oct 26, 2024 19:04:38.024039984 CEST	41398	53	192.168.2.14	194.36.144.87
Oct 26, 2024 19:04:38.034766912 CEST	53	41398	194.36.144.87	192.168.2.14
Oct 26, 2024 19:04:44.389678955 CEST	50392	53	192.168.2.14	51.158.108.203
Oct 26, 2024 19:04:44.406212091 CEST	53	50392	51.158.108.203	192.168.2.14
Oct 26, 2024 19:04:50.738936901 CEST	58948	53	192.168.2.14	80.152.203.134
Oct 26, 2024 19:04:50.768537045 CEST	53	58948	80.152.203.134	192.168.2.14
Oct 26, 2024 19:04:56.621465921 CEST	51790	53	192.168.2.14	65.21.1.106
Oct 26, 2024 19:04:56.649575949 CEST	53	51790	65.21.1.106	192.168.2.14
Oct 26, 2024 19:05:02.499037027 CEST	59666	53	192.168.2.14	51.158.108.203
Oct 26, 2024 19:05:02.515500069 CEST	53	59666	51.158.108.203	192.168.2.14
Oct 26, 2024 19:05:08.418576956 CEST	46676	53	192.168.2.14	178.254.22.166
Oct 26, 2024 19:05:13.425653934 CEST	55232	53	192.168.2.14	137.220.52.23
Oct 26, 2024 19:05:18.431487083 CEST	38795	53	192.168.2.14	65.21.1.106
Oct 26, 2024 19:05:18.458798885 CEST	53	38795	65.21.1.106	192.168.2.14
Oct 26, 2024 19:05:24.383346081 CEST	34039	53	192.168.2.14	168.235.111.72
Oct 26, 2024 19:05:24.476670027 CEST	53	34039	168.235.111.72	192.168.2.14
Oct 26, 2024 19:05:30.843440056 CEST	33564	53	192.168.2.14	70.34.254.19
Oct 26, 2024 19:05:35.847934961 CEST	38617	53	192.168.2.14	152.53.15.127
Oct 26, 2024 19:05:35.859566927 CEST	53	38617	152.53.15.127	192.168.2.14
Oct 26, 2024 19:05:41.777817965 CEST	33778	53	192.168.2.14	65.21.1.106
Oct 26, 2024 19:05:41.804867029 CEST	53	33778	65.21.1.106	192.168.2.14
Oct 26, 2024 19:05:47.660489082 CEST	46966	53	192.168.2.14	137.220.52.23
Oct 26, 2024 19:05:52.667570114 CEST	54368	53	192.168.2.14	194.36.144.87
Oct 26, 2024 19:05:52.678332090 CEST	53	54368	194.36.144.87	192.168.2.14
Oct 26, 2024 19:05:58.527909994 CEST	41884	53	192.168.2.14	139.84.165.176
Oct 26, 2024 19:06:03.534394979 CEST	40741	53	192.168.2.14	5.161.109.23
Oct 26, 2024 19:06:08.540287971 CEST	56585	53	192.168.2.14	217.160.70.42
Oct 26, 2024 19:06:08.571752071 CEST	53	56585	217.160.70.42	192.168.2.14
Oct 26, 2024 19:06:14.691351891 CEST	49388	53	192.168.2.14	168.235.111.72
Oct 26, 2024 19:06:14.778814077 CEST	53	49388	168.235.111.72	192.168.2.14

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 26, 2024 19:02:43.368704081 CEST	192.168.2.14	137.220.52.23	0x1d6c	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:02:48.372476101 CEST	192.168.2.14	64.176.6.48	0x90b1	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:02:53.379117966 CEST	192.168.2.14	139.84.165.176	0x6d01	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:02:58.384910107 CEST	192.168.2.14	168.235.111.72	0xb67	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:04.105671883 CEST	192.168.2.14	178.254.22.166	0x9546	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:09.108517885 CEST	192.168.2.14	70.34.254.19	0x4d6b	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:14.114347935 CEST	192.168.2.14	80.152.203.134	0xc05a	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:20.070950985 CEST	192.168.2.14	202.61.197.122	0xc152	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:26.035371065 CEST	192.168.2.14	139.84.165.176	0x5896	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:29.300024986 CEST	192.168.2.14	1.1.1.1	0x9905	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:29.300084114 CEST	192.168.2.14	1.1.1.1	0x62dd	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Oct 26, 2024 19:03:31.123498917 CEST	192.168.2.14	178.254.22.166	0x2c73	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:36.126410007 CEST	192.168.2.14	194.36.144.87	0xc8be	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:42.745572090 CEST	192.168.2.14	51.158.108.203	0x799f	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:48.652678967 CEST	192.168.2.14	139.84.165.176	0xbe95	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:53.658972025 CEST	192.168.2.14	137.220.52.23	0x1e59	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:58.666251898 CEST	192.168.2.14	168.235.111.72	0xdd62	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:04.681572914 CEST	192.168.2.14	137.220.52.23	0x88a0	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:09.686866999 CEST	192.168.2.14	168.235.111.72	0x5e77	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:16.108649015 CEST	192.168.2.14	70.34.254.19	0x2117	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:21.114779949 CEST	192.168.2.14	178.254.22.166	0x6624	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:26.121730089 CEST	192.168.2.14	80.152.203.134	0xff46	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:32.014183998 CEST	192.168.2.14	80.152.203.134	0x9067	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:38.024039984 CEST	192.168.2.14	194.36.144.87	0x8cc6	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:44.389678955 CEST	192.168.2.14	51.158.108.203	0xd3dc	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:50.738936901 CEST	192.168.2.14	80.152.203.134	0xe49f	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:56.621465921 CEST	192.168.2.14	65.21.1.106	0xc089	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:02.499037027 CEST	192.168.2.14	51.158.108.203	0xe270	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:08.418576956 CEST	192.168.2.14	178.254.22.166	0xfc22	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:13.425653934 CEST	192.168.2.14	137.220.52.23	0xc037	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:18.431487083 CEST	192.168.2.14	65.21.1.106	0x38fd	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:24.383346081 CEST	192.168.2.14	168.235.111.72	0x706f	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:30.843440056 CEST	192.168.2.14	70.34.254.19	0x757d	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:35.847934961 CEST	192.168.2.14	152.53.15.127	0x96bc	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:41.777817965 CEST	192.168.2.14	65.21.1.106	0xf642	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:47.660489082 CEST	192.168.2.14	137.220.52.23	0x20b	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:52.667570114 CEST	192.168.2.14	194.36.144.87	0x192a	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:58.527909994 CEST	192.168.2.14	139.84.165.176	0xf0cf	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:06:03.534394979 CEST	192.168.2.14	5.161.109.23	0x89d4	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:06:08.540287971 CEST	192.168.2.14	217.160.70.42	0x96df	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:06:14.691351891 CEST	192.168.2.14	168.235.111.72	0xdc25	Standard query (0)	kingstonwikkerink.dyn	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 26, 2024 19:02:58.473201990 CEST	168.235.111.72	192.168.2.14	0xb67	No error (0)	kingstonwikkerink.dyn		31.13.248.89	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:02:58.473201990 CEST	168.235.111.72	192.168.2.14	0xb67	No error (0)	kingstonwikkerink.dyn		88.151.195.22	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:02:58.473201990 CEST	168.235.111.72	192.168.2.14	0xb67	No error (0)	kingstonwikkerink.dyn		194.87.198.29	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:02:58.473201990 CEST	168.235.111.72	192.168.2.14	0xb67	No error (0)	kingstonwikkerink.dyn		193.233.193.45	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:02:58.473201990 CEST	168.235.111.72	192.168.2.14	0xb67	No error (0)	kingstonwikkerink.dyn		86.107.100.80	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:02:58.473201990 CEST	168.235.111.72	192.168.2.14	0xb67	No error (0)	kingstonwikkerink.dyn		91.149.238.18	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:02:58.473201990 CEST	168.235.111.72	192.168.2.14	0xb67	No error (0)	kingstonwikkerink.dyn		91.149.218.232	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:02:58.473201990 CEST	168.235.111.72	192.168.2.14	0xb67	No error (0)	kingstonwikkerink.dyn		81.29.149.178	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:02:58.473201990 CEST	168.235.111.72	192.168.2.14	0xb67	No error (0)	kingstonwikkerink.dyn		185.82.200.181	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:02:58.473201990 CEST	168.235.111.72	192.168.2.14	0xb67	No error (0)	kingstonwikkerink.dyn		195.133.92.51	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:02:58.473201990 CEST	168.235.111.72	192.168.2.14	0xb67	No error (0)	kingstonwikkerink.dyn		213.182.204.57	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:02:58.627298117 CEST	168.235.111.72	192.168.2.14	0xb67	Format error (1)	kingstonwikkerink.dyn	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:10.662075996 CEST	80.152.203.134	192.168.2.14	0xc05a	Format error (1)	kingstonwikkerink.dyn	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:10.673439026 CEST	202.61.197.122	192.168.2.14	0xc6ba	Format error (1)	kingstonwikkerink.dyn	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:14.137217045 CEST	80.152.203.134	192.168.2.14	0xc05a	No error (0)	kingstonwikkerink.dyn		88.151.195.22	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:14.137217045 CEST	80.152.203.134	192.168.2.14	0xc05a	No error (0)	kingstonwikkerink.dyn		193.233.193.45	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:14.137217045 CEST	80.152.203.134	192.168.2.14	0xc05a	No error (0)	kingstonwikkerink.dyn		91.149.218.232	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:14.137217045 CEST	80.152.203.134	192.168.2.14	0xc05a	No error (0)	kingstonwikkerink.dyn		81.29.149.178	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:14.137217045 CEST	80.152.203.134	192.168.2.14	0xc05a	No error (0)	kingstonwikkerink.dyn		213.182.204.57	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:14.137217045 CEST	80.152.203.134	192.168.2.14	0xc05a	No error (0)	kingstonwikkerink.dyn		31.13.248.89	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:14.137217045 CEST	80.152.203.134	192.168.2.14	0xc05a	No error (0)	kingstonwikkerink.dyn		91.149.238.18	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:14.137217045 CEST	80.152.203.134	192.168.2.14	0xc05a	No error (0)	kingstonwikkerink.dyn		185.82.200.181	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:14.137217045 CEST	80.152.203.134	192.168.2.14	0xc05a	No error (0)	kingstonwikkerink.dyn		86.107.100.80	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:14.137217045 CEST	80.152.203.134	192.168.2.14	0xc05a	No error (0)	kingstonwikkerink.dyn		195.133.92.51	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:14.137217045 CEST	80.152.203.134	192.168.2.14	0xc05a	No error (0)	kingstonwikkerink.dyn		194.87.198.29	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:20.081805944 CEST	202.61.197.122	192.168.2.14	0xc152	No error (0)	kingstonwikkerink.dyn		91.149.218.232	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:20.081805944 CEST	202.61.197.122	192.168.2.14	0xc152	No error (0)	kingstonwikkerink.dyn		88.151.195.22	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:20.081805944 CEST	202.61.197.122	192.168.2.14	0xc152	No error (0)	kingstonwikkerink.dyn		193.233.193.45	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:20.081805944 CEST	202.61.197.122	192.168.2.14	0xc152	No error (0)	kingstonwikkerink.dyn		81.29.149.178	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:20.081805944 CEST	202.61.197.122	192.168.2.14	0xc152	No error (0)	kingstonwikkerink.dyn		195.133.92.51	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:20.081805944 CEST	202.61.197.122	192.168.2.14	0xc152	No error (0)	kingstonwikkerink.dyn		86.107.100.80	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:20.081805944 CEST	202.61.197.122	192.168.2.14	0xc152	No error (0)	kingstonwikkerink.dyn		194.87.198.29	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:20.081805944 CEST	202.61.197.122	192.168.2.14	0xc152	No error (0)	kingstonwikkerink.dyn		91.149.238.18	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:20.081805944 CEST	202.61.197.122	192.168.2.14	0xc152	No error (0)	kingstonwikkerink.dyn		213.182.204.57	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:20.081805944 CEST	202.61.197.122	192.168.2.14	0xc152	No error (0)	kingstonwikkerink.dyn		31.13.248.89	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:20.081805944 CEST	202.61.197.122	192.168.2.14	0xc152	No error (0)	kingstonwikkerink.dyn		185.82.200.181	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:29.307873964 CEST	1.1.1.1	192.168.2.14	0x9905	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:29.307873964 CEST	1.1.1.1	192.168.2.14	0x9905	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:36.366532087 CEST	194.36.144.87	192.168.2.14	0xc8be	No error (0)	kingstonwikkerink.dyn		185.82.200.181	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:36.366532087 CEST	194.36.144.87	192.168.2.14	0xc8be	No error (0)	kingstonwikkerink.dyn		194.87.198.29	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:36.366532087 CEST	194.36.144.87	192.168.2.14	0xc8be	No error (0)	kingstonwikkerink.dyn		193.233.193.45	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:36.366532087 CEST	194.36.144.87	192.168.2.14	0xc8be	No error (0)	kingstonwikkerink.dyn		213.182.204.57	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:36.366532087 CEST	194.36.144.87	192.168.2.14	0xc8be	No error (0)	kingstonwikkerink.dyn		81.29.149.178	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:36.366532087 CEST	194.36.144.87	192.168.2.14	0xc8be	No error (0)	kingstonwikkerink.dyn		31.13.248.89	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:36.366532087 CEST	194.36.144.87	192.168.2.14	0xc8be	No error (0)	kingstonwikkerink.dyn		86.107.100.80	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:36.366532087 CEST	194.36.144.87	192.168.2.14	0xc8be	No error (0)	kingstonwikkerink.dyn		91.149.218.232	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:36.366532087 CEST	194.36.144.87	192.168.2.14	0xc8be	No error (0)	kingstonwikkerink.dyn		195.133.92.51	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:36.366532087 CEST	194.36.144.87	192.168.2.14	0xc8be	No error (0)	kingstonwikkerink.dyn		91.149.238.18	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:36.366532087 CEST	194.36.144.87	192.168.2.14	0xc8be	No error (0)	kingstonwikkerink.dyn		88.151.195.22	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:42.761444092 CEST	51.158.108.203	192.168.2.14	0x799f	No error (0)	kingstonwikkerink.dyn		91.149.238.18	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:42.761444092 CEST	51.158.108.203	192.168.2.14	0x799f	No error (0)	kingstonwikkerink.dyn		31.13.248.89	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:42.761444092 CEST	51.158.108.203	192.168.2.14	0x799f	No error (0)	kingstonwikkerink.dyn		193.233.193.45	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:42.761444092 CEST	51.158.108.203	192.168.2.14	0x799f	No error (0)	kingstonwikkerink.dyn		81.29.149.178	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:42.761444092 CEST	51.158.108.203	192.168.2.14	0x799f	No error (0)	kingstonwikkerink.dyn		185.82.200.181	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:42.761444092 CEST	51.158.108.203	192.168.2.14	0x799f	No error (0)	kingstonwikkerink.dyn		194.87.198.29	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:42.761444092 CEST	51.158.108.203	192.168.2.14	0x799f	No error (0)	kingstonwikkerink.dyn		195.133.92.51	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:42.761444092 CEST	51.158.108.203	192.168.2.14	0x799f	No error (0)	kingstonwikkerink.dyn		88.151.195.22	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:42.761444092 CEST	51.158.108.203	192.168.2.14	0x799f	No error (0)	kingstonwikkerink.dyn		86.107.100.80	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:42.761444092 CEST	51.158.108.203	192.168.2.14	0x799f	No error (0)	kingstonwikkerink.dyn		91.149.218.232	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:42.761444092 CEST	51.158.108.203	192.168.2.14	0x799f	No error (0)	kingstonwikkerink.dyn		213.182.204.57	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:58.759593964 CEST	168.235.111.72	192.168.2.14	0xdd62	No error (0)	kingstonwikkerink.dyn		195.133.92.51	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:58.759593964 CEST	168.235.111.72	192.168.2.14	0xdd62	No error (0)	kingstonwikkerink.dyn		86.107.100.80	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:58.759593964 CEST	168.235.111.72	192.168.2.14	0xdd62	No error (0)	kingstonwikkerink.dyn		193.233.193.45	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:58.759593964 CEST	168.235.111.72	192.168.2.14	0xdd62	No error (0)	kingstonwikkerink.dyn		213.182.204.57	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:58.759593964 CEST	168.235.111.72	192.168.2.14	0xdd62	No error (0)	kingstonwikkerink.dyn		81.29.149.178	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:58.759593964 CEST	168.235.111.72	192.168.2.14	0xdd62	No error (0)	kingstonwikkerink.dyn		88.151.195.22	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:58.759593964 CEST	168.235.111.72	192.168.2.14	0xdd62	No error (0)	kingstonwikkerink.dyn		91.149.218.232	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:58.759593964 CEST	168.235.111.72	192.168.2.14	0xdd62	No error (0)	kingstonwikkerink.dyn		91.149.238.18	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:58.759593964 CEST	168.235.111.72	192.168.2.14	0xdd62	No error (0)	kingstonwikkerink.dyn		185.82.200.181	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:58.759593964 CEST	168.235.111.72	192.168.2.14	0xdd62	No error (0)	kingstonwikkerink.dyn		194.87.198.29	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:03:58.759593964 CEST	168.235.111.72	192.168.2.14	0xdd62	No error (0)	kingstonwikkerink.dyn		31.13.248.89	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:09.775333881 CEST	168.235.111.72	192.168.2.14	0x5e77	No error (0)	kingstonwikkerink.dyn		88.151.195.22	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:09.775333881 CEST	168.235.111.72	192.168.2.14	0x5e77	No error (0)	kingstonwikkerink.dyn		194.87.198.29	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:09.775333881 CEST	168.235.111.72	192.168.2.14	0x5e77	No error (0)	kingstonwikkerink.dyn		81.29.149.178	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:09.775333881 CEST	168.235.111.72	192.168.2.14	0x5e77	No error (0)	kingstonwikkerink.dyn		86.107.100.80	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:09.775333881 CEST	168.235.111.72	192.168.2.14	0x5e77	No error (0)	kingstonwikkerink.dyn		193.233.193.45	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:09.775333881 CEST	168.235.111.72	192.168.2.14	0x5e77	No error (0)	kingstonwikkerink.dyn		31.13.248.89	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:09.775333881 CEST	168.235.111.72	192.168.2.14	0x5e77	No error (0)	kingstonwikkerink.dyn		91.149.238.18	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:09.775333881 CEST	168.235.111.72	192.168.2.14	0x5e77	No error (0)	kingstonwikkerink.dyn		185.82.200.181	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:09.775333881 CEST	168.235.111.72	192.168.2.14	0x5e77	No error (0)	kingstonwikkerink.dyn		91.149.218.232	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:09.775333881 CEST	168.235.111.72	192.168.2.14	0x5e77	No error (0)	kingstonwikkerink.dyn		213.182.204.57	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:09.775333881 CEST	168.235.111.72	192.168.2.14	0x5e77	No error (0)	kingstonwikkerink.dyn		195.133.92.51	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:26.167563915 CEST	80.152.203.134	192.168.2.14	0xff46	No error (0)	kingstonwikkerink.dyn		91.149.238.18	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:26.167563915 CEST	80.152.203.134	192.168.2.14	0xff46	No error (0)	kingstonwikkerink.dyn		193.233.193.45	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:26.167563915 CEST	80.152.203.134	192.168.2.14	0xff46	No error (0)	kingstonwikkerink.dyn		185.82.200.181	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:26.167563915 CEST	80.152.203.134	192.168.2.14	0xff46	No error (0)	kingstonwikkerink.dyn		88.151.195.22	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:26.167563915 CEST	80.152.203.134	192.168.2.14	0xff46	No error (0)	kingstonwikkerink.dyn		213.182.204.57	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:26.167563915 CEST	80.152.203.134	192.168.2.14	0xff46	No error (0)	kingstonwikkerink.dyn		195.133.92.51	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:26.167563915 CEST	80.152.203.134	192.168.2.14	0xff46	No error (0)	kingstonwikkerink.dyn		81.29.149.178	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:26.167563915 CEST	80.152.203.134	192.168.2.14	0xff46	No error (0)	kingstonwikkerink.dyn		86.107.100.80	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:26.167563915 CEST	80.152.203.134	192.168.2.14	0xff46	No error (0)	kingstonwikkerink.dyn		31.13.248.89	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:26.167563915 CEST	80.152.203.134	192.168.2.14	0xff46	No error (0)	kingstonwikkerink.dyn		194.87.198.29	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:26.167563915 CEST	80.152.203.134	192.168.2.14	0xff46	No error (0)	kingstonwikkerink.dyn		91.149.218.232	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:32.037455082 CEST	80.152.203.134	192.168.2.14	0x9067	No error (0)	kingstonwikkerink.dyn		185.82.200.181	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:32.037455082 CEST	80.152.203.134	192.168.2.14	0x9067	No error (0)	kingstonwikkerink.dyn		86.107.100.80	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:32.037455082 CEST	80.152.203.134	192.168.2.14	0x9067	No error (0)	kingstonwikkerink.dyn		194.87.198.29	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:32.037455082 CEST	80.152.203.134	192.168.2.14	0x9067	No error (0)	kingstonwikkerink.dyn		81.29.149.178	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:32.037455082 CEST	80.152.203.134	192.168.2.14	0x9067	No error (0)	kingstonwikkerink.dyn		213.182.204.57	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:32.037455082 CEST	80.152.203.134	192.168.2.14	0x9067	No error (0)	kingstonwikkerink.dyn		88.151.195.22	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:32.037455082 CEST	80.152.203.134	192.168.2.14	0x9067	No error (0)	kingstonwikkerink.dyn		193.233.193.45	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:32.037455082 CEST	80.152.203.134	192.168.2.14	0x9067	No error (0)	kingstonwikkerink.dyn		91.149.238.18	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:32.037455082 CEST	80.152.203.134	192.168.2.14	0x9067	No error (0)	kingstonwikkerink.dyn		31.13.248.89	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:32.037455082 CEST	80.152.203.134	192.168.2.14	0x9067	No error (0)	kingstonwikkerink.dyn		91.149.218.232	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:32.037455082 CEST	80.152.203.134	192.168.2.14	0x9067	No error (0)	kingstonwikkerink.dyn		195.133.92.51	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:38.034766912 CEST	194.36.144.87	192.168.2.14	0x8cc6	No error (0)	kingstonwikkerink.dyn		185.82.200.181	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:38.034766912 CEST	194.36.144.87	192.168.2.14	0x8cc6	No error (0)	kingstonwikkerink.dyn		194.87.198.29	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:38.034766912 CEST	194.36.144.87	192.168.2.14	0x8cc6	No error (0)	kingstonwikkerink.dyn		193.233.193.45	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:38.034766912 CEST	194.36.144.87	192.168.2.14	0x8cc6	No error (0)	kingstonwikkerink.dyn		213.182.204.57	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:38.034766912 CEST	194.36.144.87	192.168.2.14	0x8cc6	No error (0)	kingstonwikkerink.dyn		81.29.149.178	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:38.034766912 CEST	194.36.144.87	192.168.2.14	0x8cc6	No error (0)	kingstonwikkerink.dyn		31.13.248.89	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:38.034766912 CEST	194.36.144.87	192.168.2.14	0x8cc6	No error (0)	kingstonwikkerink.dyn		86.107.100.80	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:38.034766912 CEST	194.36.144.87	192.168.2.14	0x8cc6	No error (0)	kingstonwikkerink.dyn		91.149.218.232	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:38.034766912 CEST	194.36.144.87	192.168.2.14	0x8cc6	No error (0)	kingstonwikkerink.dyn		195.133.92.51	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:38.034766912 CEST	194.36.144.87	192.168.2.14	0x8cc6	No error (0)	kingstonwikkerink.dyn		91.149.238.18	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:38.034766912 CEST	194.36.144.87	192.168.2.14	0x8cc6	No error (0)	kingstonwikkerink.dyn		88.151.195.22	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:44.406212091 CEST	51.158.108.203	192.168.2.14	0xd3dc	No error (0)	kingstonwikkerink.dyn		86.107.100.80	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:44.406212091 CEST	51.158.108.203	192.168.2.14	0xd3dc	No error (0)	kingstonwikkerink.dyn		91.149.218.232	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:44.406212091 CEST	51.158.108.203	192.168.2.14	0xd3dc	No error (0)	kingstonwikkerink.dyn		213.182.204.57	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:44.406212091 CEST	51.158.108.203	192.168.2.14	0xd3dc	No error (0)	kingstonwikkerink.dyn		91.149.238.18	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:44.406212091 CEST	51.158.108.203	192.168.2.14	0xd3dc	No error (0)	kingstonwikkerink.dyn		31.13.248.89	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:44.406212091 CEST	51.158.108.203	192.168.2.14	0xd3dc	No error (0)	kingstonwikkerink.dyn		193.233.193.45	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:44.406212091 CEST	51.158.108.203	192.168.2.14	0xd3dc	No error (0)	kingstonwikkerink.dyn		81.29.149.178	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:44.406212091 CEST	51.158.108.203	192.168.2.14	0xd3dc	No error (0)	kingstonwikkerink.dyn		185.82.200.181	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:44.406212091 CEST	51.158.108.203	192.168.2.14	0xd3dc	No error (0)	kingstonwikkerink.dyn		194.87.198.29	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:44.406212091 CEST	51.158.108.203	192.168.2.14	0xd3dc	No error (0)	kingstonwikkerink.dyn		195.133.92.51	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:44.406212091 CEST	51.158.108.203	192.168.2.14	0xd3dc	No error (0)	kingstonwikkerink.dyn		88.151.195.22	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:50.768537045 CEST	80.152.203.134	192.168.2.14	0xe49f	No error (0)	kingstonwikkerink.dyn		91.149.218.232	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:50.768537045 CEST	80.152.203.134	192.168.2.14	0xe49f	No error (0)	kingstonwikkerink.dyn		88.151.195.22	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:50.768537045 CEST	80.152.203.134	192.168.2.14	0xe49f	No error (0)	kingstonwikkerink.dyn		86.107.100.80	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:50.768537045 CEST	80.152.203.134	192.168.2.14	0xe49f	No error (0)	kingstonwikkerink.dyn		91.149.238.18	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:50.768537045 CEST	80.152.203.134	192.168.2.14	0xe49f	No error (0)	kingstonwikkerink.dyn		185.82.200.181	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:50.768537045 CEST	80.152.203.134	192.168.2.14	0xe49f	No error (0)	kingstonwikkerink.dyn		81.29.149.178	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:50.768537045 CEST	80.152.203.134	192.168.2.14	0xe49f	No error (0)	kingstonwikkerink.dyn		194.87.198.29	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:50.768537045 CEST	80.152.203.134	192.168.2.14	0xe49f	No error (0)	kingstonwikkerink.dyn		195.133.92.51	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:50.768537045 CEST	80.152.203.134	192.168.2.14	0xe49f	No error (0)	kingstonwikkerink.dyn		31.13.248.89	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:50.768537045 CEST	80.152.203.134	192.168.2.14	0xe49f	No error (0)	kingstonwikkerink.dyn		193.233.193.45	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:50.768537045 CEST	80.152.203.134	192.168.2.14	0xe49f	No error (0)	kingstonwikkerink.dyn		213.182.204.57	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:56.649575949 CEST	65.21.1.106	192.168.2.14	0xc089	No error (0)	kingstonwikkerink.dyn		88.151.195.22	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:56.649575949 CEST	65.21.1.106	192.168.2.14	0xc089	No error (0)	kingstonwikkerink.dyn		31.13.248.89	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:56.649575949 CEST	65.21.1.106	192.168.2.14	0xc089	No error (0)	kingstonwikkerink.dyn		91.149.218.232	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:56.649575949 CEST	65.21.1.106	192.168.2.14	0xc089	No error (0)	kingstonwikkerink.dyn		194.87.198.29	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:56.649575949 CEST	65.21.1.106	192.168.2.14	0xc089	No error (0)	kingstonwikkerink.dyn		185.82.200.181	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:56.649575949 CEST	65.21.1.106	192.168.2.14	0xc089	No error (0)	kingstonwikkerink.dyn		213.182.204.57	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:56.649575949 CEST	65.21.1.106	192.168.2.14	0xc089	No error (0)	kingstonwikkerink.dyn		81.29.149.178	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:56.649575949 CEST	65.21.1.106	192.168.2.14	0xc089	No error (0)	kingstonwikkerink.dyn		193.233.193.45	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:56.649575949 CEST	65.21.1.106	192.168.2.14	0xc089	No error (0)	kingstonwikkerink.dyn		91.149.238.18	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:56.649575949 CEST	65.21.1.106	192.168.2.14	0xc089	No error (0)	kingstonwikkerink.dyn		86.107.100.80	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:04:56.649575949 CEST	65.21.1.106	192.168.2.14	0xc089	No error (0)	kingstonwikkerink.dyn		195.133.92.51	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:02.515500069 CEST	51.158.108.203	192.168.2.14	0xe270	No error (0)	kingstonwikkerink.dyn		88.151.195.22	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:02.515500069 CEST	51.158.108.203	192.168.2.14	0xe270	No error (0)	kingstonwikkerink.dyn		86.107.100.80	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:02.515500069 CEST	51.158.108.203	192.168.2.14	0xe270	No error (0)	kingstonwikkerink.dyn		91.149.218.232	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:02.515500069 CEST	51.158.108.203	192.168.2.14	0xe270	No error (0)	kingstonwikkerink.dyn		213.182.204.57	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:02.515500069 CEST	51.158.108.203	192.168.2.14	0xe270	No error (0)	kingstonwikkerink.dyn		91.149.238.18	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:02.515500069 CEST	51.158.108.203	192.168.2.14	0xe270	No error (0)	kingstonwikkerink.dyn		31.13.248.89	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:02.515500069 CEST	51.158.108.203	192.168.2.14	0xe270	No error (0)	kingstonwikkerink.dyn		193.233.193.45	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:02.515500069 CEST	51.158.108.203	192.168.2.14	0xe270	No error (0)	kingstonwikkerink.dyn		81.29.149.178	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:02.515500069 CEST	51.158.108.203	192.168.2.14	0xe270	No error (0)	kingstonwikkerink.dyn		185.82.200.181	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:02.515500069 CEST	51.158.108.203	192.168.2.14	0xe270	No error (0)	kingstonwikkerink.dyn		194.87.198.29	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:02.515500069 CEST	51.158.108.203	192.168.2.14	0xe270	No error (0)	kingstonwikkerink.dyn		195.133.92.51	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:18.458798885 CEST	65.21.1.106	192.168.2.14	0x38fd	No error (0)	kingstonwikkerink.dyn		213.182.204.57	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:18.458798885 CEST	65.21.1.106	192.168.2.14	0x38fd	No error (0)	kingstonwikkerink.dyn		81.29.149.178	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:18.458798885 CEST	65.21.1.106	192.168.2.14	0x38fd	No error (0)	kingstonwikkerink.dyn		193.233.193.45	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:18.458798885 CEST	65.21.1.106	192.168.2.14	0x38fd	No error (0)	kingstonwikkerink.dyn		91.149.238.18	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:18.458798885 CEST	65.21.1.106	192.168.2.14	0x38fd	No error (0)	kingstonwikkerink.dyn		86.107.100.80	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:18.458798885 CEST	65.21.1.106	192.168.2.14	0x38fd	No error (0)	kingstonwikkerink.dyn		195.133.92.51	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:18.458798885 CEST	65.21.1.106	192.168.2.14	0x38fd	No error (0)	kingstonwikkerink.dyn		88.151.195.22	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:18.458798885 CEST	65.21.1.106	192.168.2.14	0x38fd	No error (0)	kingstonwikkerink.dyn		31.13.248.89	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:18.458798885 CEST	65.21.1.106	192.168.2.14	0x38fd	No error (0)	kingstonwikkerink.dyn		91.149.218.232	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:18.458798885 CEST	65.21.1.106	192.168.2.14	0x38fd	No error (0)	kingstonwikkerink.dyn		194.87.198.29	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:18.458798885 CEST	65.21.1.106	192.168.2.14	0x38fd	No error (0)	kingstonwikkerink.dyn		185.82.200.181	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:24.476670027 CEST	168.235.111.72	192.168.2.14	0x706f	No error (0)	kingstonwikkerink.dyn		31.13.248.89	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:24.476670027 CEST	168.235.111.72	192.168.2.14	0x706f	No error (0)	kingstonwikkerink.dyn		193.233.193.45	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:24.476670027 CEST	168.235.111.72	192.168.2.14	0x706f	No error (0)	kingstonwikkerink.dyn		91.149.218.232	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:24.476670027 CEST	168.235.111.72	192.168.2.14	0x706f	No error (0)	kingstonwikkerink.dyn		195.133.92.51	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:24.476670027 CEST	168.235.111.72	192.168.2.14	0x706f	No error (0)	kingstonwikkerink.dyn		185.82.200.181	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:24.476670027 CEST	168.235.111.72	192.168.2.14	0x706f	No error (0)	kingstonwikkerink.dyn		81.29.149.178	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:24.476670027 CEST	168.235.111.72	192.168.2.14	0x706f	No error (0)	kingstonwikkerink.dyn		91.149.238.18	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:24.476670027 CEST	168.235.111.72	192.168.2.14	0x706f	No error (0)	kingstonwikkerink.dyn		88.151.195.22	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:24.476670027 CEST	168.235.111.72	192.168.2.14	0x706f	No error (0)	kingstonwikkerink.dyn		213.182.204.57	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:24.476670027 CEST	168.235.111.72	192.168.2.14	0x706f	No error (0)	kingstonwikkerink.dyn		86.107.100.80	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:24.476670027 CEST	168.235.111.72	192.168.2.14	0x706f	No error (0)	kingstonwikkerink.dyn		194.87.198.29	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:35.859566927 CEST	152.53.15.127	192.168.2.14	0x96bc	No error (0)	kingstonwikkerink.dyn		185.82.200.181	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:35.859566927 CEST	152.53.15.127	192.168.2.14	0x96bc	No error (0)	kingstonwikkerink.dyn		195.133.92.51	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:35.859566927 CEST	152.53.15.127	192.168.2.14	0x96bc	No error (0)	kingstonwikkerink.dyn		91.149.218.232	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:35.859566927 CEST	152.53.15.127	192.168.2.14	0x96bc	No error (0)	kingstonwikkerink.dyn		31.13.248.89	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:35.859566927 CEST	152.53.15.127	192.168.2.14	0x96bc	No error (0)	kingstonwikkerink.dyn		86.107.100.80	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:35.859566927 CEST	152.53.15.127	192.168.2.14	0x96bc	No error (0)	kingstonwikkerink.dyn		91.149.238.18	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:35.859566927 CEST	152.53.15.127	192.168.2.14	0x96bc	No error (0)	kingstonwikkerink.dyn		193.233.193.45	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:35.859566927 CEST	152.53.15.127	192.168.2.14	0x96bc	No error (0)	kingstonwikkerink.dyn		194.87.198.29	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:35.859566927 CEST	152.53.15.127	192.168.2.14	0x96bc	No error (0)	kingstonwikkerink.dyn		213.182.204.57	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:35.859566927 CEST	152.53.15.127	192.168.2.14	0x96bc	No error (0)	kingstonwikkerink.dyn		88.151.195.22	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:35.859566927 CEST	152.53.15.127	192.168.2.14	0x96bc	No error (0)	kingstonwikkerink.dyn		81.29.149.178	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:41.804867029 CEST	65.21.1.106	192.168.2.14	0xf642	No error (0)	kingstonwikkerink.dyn		185.82.200.181	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:41.804867029 CEST	65.21.1.106	192.168.2.14	0xf642	No error (0)	kingstonwikkerink.dyn		213.182.204.57	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:41.804867029 CEST	65.21.1.106	192.168.2.14	0xf642	No error (0)	kingstonwikkerink.dyn		81.29.149.178	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:41.804867029 CEST	65.21.1.106	192.168.2.14	0xf642	No error (0)	kingstonwikkerink.dyn		193.233.193.45	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:41.804867029 CEST	65.21.1.106	192.168.2.14	0xf642	No error (0)	kingstonwikkerink.dyn		91.149.238.18	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:41.804867029 CEST	65.21.1.106	192.168.2.14	0xf642	No error (0)	kingstonwikkerink.dyn		86.107.100.80	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:41.804867029 CEST	65.21.1.106	192.168.2.14	0xf642	No error (0)	kingstonwikkerink.dyn		195.133.92.51	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:41.804867029 CEST	65.21.1.106	192.168.2.14	0xf642	No error (0)	kingstonwikkerink.dyn		88.151.195.22	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:41.804867029 CEST	65.21.1.106	192.168.2.14	0xf642	No error (0)	kingstonwikkerink.dyn		31.13.248.89	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:41.804867029 CEST	65.21.1.106	192.168.2.14	0xf642	No error (0)	kingstonwikkerink.dyn		91.149.218.232	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:41.804867029 CEST	65.21.1.106	192.168.2.14	0xf642	No error (0)	kingstonwikkerink.dyn		194.87.198.29	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:52.678332090 CEST	194.36.144.87	192.168.2.14	0x192a	No error (0)	kingstonwikkerink.dyn		193.233.193.45	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:52.678332090 CEST	194.36.144.87	192.168.2.14	0x192a	No error (0)	kingstonwikkerink.dyn		213.182.204.57	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:52.678332090 CEST	194.36.144.87	192.168.2.14	0x192a	No error (0)	kingstonwikkerink.dyn		81.29.149.178	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:52.678332090 CEST	194.36.144.87	192.168.2.14	0x192a	No error (0)	kingstonwikkerink.dyn		31.13.248.89	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:52.678332090 CEST	194.36.144.87	192.168.2.14	0x192a	No error (0)	kingstonwikkerink.dyn		86.107.100.80	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:52.678332090 CEST	194.36.144.87	192.168.2.14	0x192a	No error (0)	kingstonwikkerink.dyn		91.149.218.232	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:52.678332090 CEST	194.36.144.87	192.168.2.14	0x192a	No error (0)	kingstonwikkerink.dyn		195.133.92.51	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:52.678332090 CEST	194.36.144.87	192.168.2.14	0x192a	No error (0)	kingstonwikkerink.dyn		91.149.238.18	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:52.678332090 CEST	194.36.144.87	192.168.2.14	0x192a	No error (0)	kingstonwikkerink.dyn		88.151.195.22	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:52.678332090 CEST	194.36.144.87	192.168.2.14	0x192a	No error (0)	kingstonwikkerink.dyn		185.82.200.181	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:05:52.678332090 CEST	194.36.144.87	192.168.2.14	0x192a	No error (0)	kingstonwikkerink.dyn		194.87.198.29	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:06:08.571752071 CEST	217.160.70.42	192.168.2.14	0x96df	No error (0)	kingstonwikkerink.dyn		91.149.238.18	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:06:08.571752071 CEST	217.160.70.42	192.168.2.14	0x96df	No error (0)	kingstonwikkerink.dyn		31.13.248.89	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:06:08.571752071 CEST	217.160.70.42	192.168.2.14	0x96df	No error (0)	kingstonwikkerink.dyn		195.133.92.51	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:06:08.571752071 CEST	217.160.70.42	192.168.2.14	0x96df	No error (0)	kingstonwikkerink.dyn		193.233.193.45	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:06:08.571752071 CEST	217.160.70.42	192.168.2.14	0x96df	No error (0)	kingstonwikkerink.dyn		213.182.204.57	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:06:08.571752071 CEST	217.160.70.42	192.168.2.14	0x96df	No error (0)	kingstonwikkerink.dyn		86.107.100.80	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:06:08.571752071 CEST	217.160.70.42	192.168.2.14	0x96df	No error (0)	kingstonwikkerink.dyn		91.149.218.232	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:06:08.571752071 CEST	217.160.70.42	192.168.2.14	0x96df	No error (0)	kingstonwikkerink.dyn		88.151.195.22	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:06:08.571752071 CEST	217.160.70.42	192.168.2.14	0x96df	No error (0)	kingstonwikkerink.dyn		81.29.149.178	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:06:08.571752071 CEST	217.160.70.42	192.168.2.14	0x96df	No error (0)	kingstonwikkerink.dyn		194.87.198.29	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:06:08.571752071 CEST	217.160.70.42	192.168.2.14	0x96df	No error (0)	kingstonwikkerink.dyn		185.82.200.181	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:06:14.778814077 CEST	168.235.111.72	192.168.2.14	0xdc25	No error (0)	kingstonwikkerink.dyn		91.149.218.232	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:06:14.778814077 CEST	168.235.111.72	192.168.2.14	0xdc25	No error (0)	kingstonwikkerink.dyn		31.13.248.89	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:06:14.778814077 CEST	168.235.111.72	192.168.2.14	0xdc25	No error (0)	kingstonwikkerink.dyn		86.107.100.80	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:06:14.778814077 CEST	168.235.111.72	192.168.2.14	0xdc25	No error (0)	kingstonwikkerink.dyn		81.29.149.178	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:06:14.778814077 CEST	168.235.111.72	192.168.2.14	0xdc25	No error (0)	kingstonwikkerink.dyn		194.87.198.29	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:06:14.778814077 CEST	168.235.111.72	192.168.2.14	0xdc25	No error (0)	kingstonwikkerink.dyn		88.151.195.22	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:06:14.778814077 CEST	168.235.111.72	192.168.2.14	0xdc25	No error (0)	kingstonwikkerink.dyn		195.133.92.51	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:06:14.778814077 CEST	168.235.111.72	192.168.2.14	0xdc25	No error (0)	kingstonwikkerink.dyn		91.149.238.18	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:06:14.778814077 CEST	168.235.111.72	192.168.2.14	0xdc25	No error (0)	kingstonwikkerink.dyn		193.233.193.45	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:06:14.778814077 CEST	168.235.111.72	192.168.2.14	0xdc25	No error (0)	kingstonwikkerink.dyn		213.182.204.57	A (IP address)	IN (0x0001)	false
Oct 26, 2024 19:06:14.778814077 CEST	168.235.111.72	192.168.2.14	0xdc25	No error (0)	kingstonwikkerink.dyn		185.82.200.181	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: harm4.elf PID: 5506, Parent PID: 5430

General

Start time (UTC):	17:02:42
Start date (UTC):	26/10/2024
Path:	/tmp/harm4.elf
Arguments:	/tmp/harm4.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: harm4.elf PID: 5508, Parent PID: 5506

General

Start time (UTC):	17:02:42
Start date (UTC):	26/10/2024
Path:	/tmp/harm4.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: harm4.elf PID: 5558, Parent PID: 5508

General

Start time (UTC):	17:02:42
Start date (UTC):	26/10/2024
Path:	/tmp/harm4.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: harm4.elf PID: 5559, Parent PID: 5508

General

Start time (UTC):	17:02:42
Start date (UTC):	26/10/2024
Path:	/tmp/harm4.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: harm4.elf PID: 5510, Parent PID: 5506

General

Start time (UTC):	17:02:42
Start date (UTC):	26/10/2024
Path:	/tmp/harm4.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: harm4.elf PID: 5520, Parent PID: 5506

General

Start time (UTC):	17:02:42
Start date (UTC):	26/10/2024
Path:	/tmp/harm4.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report harm4.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: harm4.elf PID: 5506, Parent PID: 5430

General

Chronological Activities

Analysis Process: harm4.elf PID: 5508, Parent PID: 5506

General

Chronological Activities

Analysis Process: harm4.elf PID: 5558, Parent PID: 5508

General

Chronological Activities

Analysis Process: harm4.elf PID: 5559, Parent PID: 5508

General

Chronological Activities

Analysis Process: harm4.elf PID: 5510, Parent PID: 5506

General

Chronological Activities

Analysis Process: harm4.elf PID: 5520, Parent PID: 5506

General

Chronological Activities

Linux Analysis Report
harm4.elf