Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
Satan.x86_64.elf

Overview

General Information

Sample name:Satan.x86_64.elf
Analysis ID:1561572
MD5:bfa617c0d8676301a6318cc7c5623ea2
SHA1:797c2ade765bc1458b62a6442081235356a46ab3
SHA256:d9bfca6ab055f77105be3a540ff9bfb63bd3e76e1d5437f243a56da87a6c6ec3
Tags:elfuser-abuse_ch
Infos:

Detection

Score:64
Range:0 - 100
Whitelisted:false

Signatures

Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Machine Learning detection for sample
Sample is packed with UPX
Detected TCP or UDP traffic on non-standard ports
ELF contains segments with high entropy indicating compressed/encrypted content
Enumerates processes within the "proc" file system
Sample contains only a LOAD segment without any section mappings
Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)
Yara signature match

Classification

General Information

Joe Sandbox version:41.0.0 Charoite
Analysis ID:1561572
Start date and time:2024-11-23 20:22:07 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 4m 36s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:Satan.x86_64.elf
Detection:MAL
Classification:mal64.evad.linELF@0/0@0/0

Warnings

  • VT rate limit hit for: Satan.x86_64.elf

Runtime Messages

Command:/tmp/Satan.x86_64.elf
PID:6235
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:
lzrd cock fest"/proc/"/exe
Standard Error:

Process Tree

  • system is lnxubuntu20
  • cleanup

Yara Signatures

Memory Dumps

SourceRuleDescriptionAuthorStrings
6237.1.0000000000400000.0000000000413000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0xfed8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xfeec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xffa0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xffb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xffc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xffdc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xfff0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x10004:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x10018:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1002c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x10040:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x10054:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x10068:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6237.1.0000000000400000.0000000000413000.r-x.sdmpLinux_Trojan_Mirai_564b8edaunknownunknown
  • 0x49b2:$a: 83 FE 01 76 12 0F B7 07 83 EE 02 48 83 C7 02 48 01 C1 83 FE 01
6236.1.0000000000400000.0000000000413000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0xfed8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xfeec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xffa0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xffb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xffc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xffdc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xfff0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x10004:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x10018:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1002c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x10040:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x10054:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x10068:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6236.1.0000000000400000.0000000000413000.r-x.sdmpLinux_Trojan_Mirai_564b8edaunknownunknown
  • 0x49b2:$a: 83 FE 01 76 12 0F B7 07 83 EE 02 48 83 C7 02 48 01 C1 83 FE 01
6235.1.0000000000400000.0000000000413000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0xfed8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xfeec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xffa0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xffb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xffc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xffdc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xfff0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x10004:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x10018:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1002c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x10040:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x10054:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x10068:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 7 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

barindex
Multi AV Scanner detection for submitted file
Source: Satan.x86_64.elfReversingLabs: Detection: 36%
Machine Learning detection for sample
Source: Satan.x86_64.elfJoe Sandbox ML: detected
Source: global trafficTCP traffic: 192.168.2.23:38370 -> 193.84.71.119:3778
Source: global trafficTCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global trafficTCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global trafficTCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: unknownTCP traffic detected without corresponding DNS query: 193.84.71.119
Source: Satan.x86_64.elfString found in binary or memory: http://upx.sf.net
Source: unknownNetwork traffic detected: HTTP traffic on port 43928 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 42836 -> 443

System Summary

barindex
Malicious sample detected (through community Yara rule)
Source: 6237.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6237.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_564b8eda Author: unknown
Source: 6236.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6236.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_564b8eda Author: unknown
Source: 6235.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6235.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_564b8eda Author: unknown
Source: 6241.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6241.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_564b8eda Author: unknown
Source: Process Memory Space: Satan.x86_64.elf PID: 6235, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Satan.x86_64.elf PID: 6236, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Satan.x86_64.elf PID: 6237, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Satan.x86_64.elf PID: 6241, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: LOAD without section mappingsProgram segment: 0x400000
Source: 6237.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6237.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_564b8eda reference_sample = ff04921d7bf9ca01ae33a9fc0743dce9ca250e42a33547c5665b1c9a0b5260ee, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 63a9e43902e7db0b7a20498b5a860e36201bacc407e9e336faca0b7cfbc37819, id = 564b8eda-6f0e-45b8-bef6-d61b0f090a36, last_modified = 2021-09-16
Source: 6236.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6236.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_564b8eda reference_sample = ff04921d7bf9ca01ae33a9fc0743dce9ca250e42a33547c5665b1c9a0b5260ee, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 63a9e43902e7db0b7a20498b5a860e36201bacc407e9e336faca0b7cfbc37819, id = 564b8eda-6f0e-45b8-bef6-d61b0f090a36, last_modified = 2021-09-16
Source: 6235.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6235.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_564b8eda reference_sample = ff04921d7bf9ca01ae33a9fc0743dce9ca250e42a33547c5665b1c9a0b5260ee, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 63a9e43902e7db0b7a20498b5a860e36201bacc407e9e336faca0b7cfbc37819, id = 564b8eda-6f0e-45b8-bef6-d61b0f090a36, last_modified = 2021-09-16
Source: 6241.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6241.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_564b8eda reference_sample = ff04921d7bf9ca01ae33a9fc0743dce9ca250e42a33547c5665b1c9a0b5260ee, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 63a9e43902e7db0b7a20498b5a860e36201bacc407e9e336faca0b7cfbc37819, id = 564b8eda-6f0e-45b8-bef6-d61b0f090a36, last_modified = 2021-09-16
Source: Process Memory Space: Satan.x86_64.elf PID: 6235, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Satan.x86_64.elf PID: 6236, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Satan.x86_64.elf PID: 6237, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Satan.x86_64.elf PID: 6241, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: classification engineClassification label: mal64.evad.linELF@0/0@0/0

Data Obfuscation

barindex
Sample is packed with UPX
Source: initial sampleString containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sampleString containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sampleString containing UPX found: $Id: UPX 3.94 Copyright (C) 1996-2017 the UPX Team. All Rights Reserved. $
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/6235/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/1582/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/3088/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/230/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/110/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/231/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/111/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/232/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/1579/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/112/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/233/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/1699/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/113/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/234/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/1335/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/1698/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/114/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/235/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/1334/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/1576/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/2302/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/115/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/236/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/116/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/237/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/117/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/118/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/910/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/119/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/912/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/10/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/2307/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/11/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/918/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/12/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/13/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/14/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/15/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/16/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/17/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/18/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/1594/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/120/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/121/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/1349/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/1/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/122/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/243/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/123/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/2/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/124/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/3/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/4/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/125/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/126/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/1344/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/1465/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/1586/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/127/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/6/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/248/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/128/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/249/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/1463/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/800/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/6238/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/9/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/801/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/20/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/21/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/1900/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/22/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/23/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/24/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/25/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/26/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/27/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/28/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/29/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/491/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/250/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/130/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/251/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/252/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/132/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/253/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/254/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/255/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/256/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/1599/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/257/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/1477/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/379/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/258/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/1476/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/259/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/1475/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/936/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/30/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/2208/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/35/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/1809/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/1494/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/260/statusJump to behavior
Source: /tmp/Satan.x86_64.elf (PID: 6235)File opened: /proc/261/statusJump to behavior
Source: Satan.x86_64.elfSubmission file: segment LOAD with 7.9613 entropy (max. 8.0)

Mitre Att&ck Matrix

ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath InterceptionPath Interception11
Obfuscated Files or Information		1
OS Credential Dumping		System Service DiscoveryRemote ServicesData from Local System1
Encrypted Channel		Exfiltration Over Other Network MediumAbuse Accessibility Features
CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable Media1
Non-Standard Port		Exfiltration Over BluetoothNetwork Denial of Service
Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive1
Application Layer Protocol		Automated ExfiltrationData Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Number of created Files
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1561572 Sample: Satan.x86_64.elf Startdate: 23/11/2024 Architecture: LINUX Score: 64 20 193.84.71.119, 3778, 38370, 38372 RADIOCABLE-ASES Poland 2->20 22 109.202.202.202, 80 INIT7CH Switzerland 2->22 24 2 other IPs or domains 2->24 26 Malicious sample detected (through community Yara rule) 2->26 28 Multi AV Scanner detection for submitted file 2->28 30 Machine Learning detection for sample 2->30 32 Sample is packed with UPX 2->32 8 Satan.x86_64.elf 2->8         started        signatures3 process4 process5 10 Satan.x86_64.elf 8->10         started        12 Satan.x86_64.elf 8->12         started        14 Satan.x86_64.elf 8->14         started        process6 16 Satan.x86_64.elf 10->16         started        18 Satan.x86_64.elf 10->18         started       

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

SourceDetectionScannerLabelLink
Satan.x86_64.elf37%ReversingLabsLinux.Backdoor.Mirai
Satan.x86_64.elf100%Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

URLs from Memory and Binaries

NameSourceMaliciousAntivirus DetectionReputation
http://upx.sf.netSatan.x86_64.elffalse
    		high

    World Map of Contacted IPs

    • No. of IPs < 25%
    • 25% < No. of IPs < 50%
    • 50% < No. of IPs < 75%
    • 75% < No. of IPs

    Public IPs

    IPDomainCountryFlagASNASN NameMalicious
    109.202.202.202
    		unknownSwitzerland
    		13030INIT7CHfalse
    193.84.71.119
    		unknownPoland
    		199478RADIOCABLE-ASESfalse
    91.189.91.43
    		unknownUnited Kingdom
    		41231CANONICAL-ASGBfalse
    91.189.91.42
    		unknownUnited Kingdom
    		41231CANONICAL-ASGBfalse

    Joe Sandbox View / Context

    IPs

    MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
    109.202.202.202kpLwzBouH4.elfGet hashmaliciousUnknownBrowse
    • ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
    193.84.71.119Satan.arm.elfGet hashmaliciousMiraiBrowse
      Satan.arm7.elfGet hashmaliciousMiraiBrowse
        Satan.sh4.elfGet hashmaliciousUnknownBrowse
          Satan.i686.elfGet hashmaliciousUnknownBrowse
            Satan.mpsl.elfGet hashmaliciousUnknownBrowse
              Satan.arm.elfGet hashmaliciousMiraiBrowse
                Satan.sh4.elfGet hashmaliciousUnknownBrowse
                  Satan.arm7.elfGet hashmaliciousMiraiBrowse
                    Satan.m68k.elfGet hashmaliciousMiraiBrowse
                      Satan.ppc.elfGet hashmaliciousUnknownBrowse
                        91.189.91.43Satan.arm.elfGet hashmaliciousMiraiBrowse
                          Satan.arm7.elfGet hashmaliciousMiraiBrowse
                            .i.elfGet hashmaliciousUnknownBrowse
                              Satan.sh4.elfGet hashmaliciousUnknownBrowse
                                main_arm.elfGet hashmaliciousMiraiBrowse
                                  wheiuwa4.elfGet hashmaliciousUnknownBrowse
                                    .i.elfGet hashmaliciousUnknownBrowse
                                      sshd.elfGet hashmaliciousUnknownBrowse
                                        sshd.elfGet hashmaliciousUnknownBrowse
                                          sora.arm6.elfGet hashmaliciousMiraiBrowse
                                            91.189.91.42Satan.arm.elfGet hashmaliciousMiraiBrowse
                                              Satan.arm7.elfGet hashmaliciousMiraiBrowse
                                                .i.elfGet hashmaliciousUnknownBrowse
                                                  Satan.sh4.elfGet hashmaliciousUnknownBrowse
                                                    main_ppc.elfGet hashmaliciousMiraiBrowse
                                                      main_arm.elfGet hashmaliciousMiraiBrowse
                                                        wheiuwa4.elfGet hashmaliciousUnknownBrowse
                                                          .i.elfGet hashmaliciousUnknownBrowse
                                                            sshd.elfGet hashmaliciousUnknownBrowse
                                                              sshd.elfGet hashmaliciousUnknownBrowse

                                                                Domains

                                                                ⊘No context

                                                                ASNs

                                                                MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                                RADIOCABLE-ASESSatan.arm.elfGet hashmaliciousMiraiBrowse
                                                                • 193.84.71.119
                                                                Satan.arm7.elfGet hashmaliciousMiraiBrowse
                                                                • 193.84.71.119
                                                                Satan.sh4.elfGet hashmaliciousUnknownBrowse
                                                                • 193.84.71.119
                                                                Satan.i686.elfGet hashmaliciousUnknownBrowse
                                                                • 193.84.71.119
                                                                Satan.mpsl.elfGet hashmaliciousUnknownBrowse
                                                                • 193.84.71.119
                                                                Satan.arm.elfGet hashmaliciousMiraiBrowse
                                                                • 193.84.71.119
                                                                Satan.sh4.elfGet hashmaliciousUnknownBrowse
                                                                • 193.84.71.119
                                                                Satan.arm7.elfGet hashmaliciousMiraiBrowse
                                                                • 193.84.71.119
                                                                Satan.m68k.elfGet hashmaliciousMiraiBrowse
                                                                • 193.84.71.119
                                                                Satan.ppc.elfGet hashmaliciousUnknownBrowse
                                                                • 193.84.71.119
                                                                CANONICAL-ASGBSatan.arm.elfGet hashmaliciousMiraiBrowse
                                                                • 91.189.91.42
                                                                Satan.arm7.elfGet hashmaliciousMiraiBrowse
                                                                • 91.189.91.42
                                                                .i.elfGet hashmaliciousUnknownBrowse
                                                                • 91.189.91.42
                                                                Satan.sh4.elfGet hashmaliciousUnknownBrowse
                                                                • 91.189.91.42
                                                                main_ppc.elfGet hashmaliciousMiraiBrowse
                                                                • 91.189.91.42
                                                                main_arm.elfGet hashmaliciousMiraiBrowse
                                                                • 91.189.91.42
                                                                wheiuwa4.elfGet hashmaliciousUnknownBrowse
                                                                • 91.189.91.42
                                                                .i.elfGet hashmaliciousUnknownBrowse
                                                                • 91.189.91.42
                                                                sshd.elfGet hashmaliciousUnknownBrowse
                                                                • 91.189.91.42
                                                                sshd.elfGet hashmaliciousUnknownBrowse
                                                                • 91.189.91.42
                                                                CANONICAL-ASGBSatan.arm.elfGet hashmaliciousMiraiBrowse
                                                                • 91.189.91.42
                                                                Satan.arm7.elfGet hashmaliciousMiraiBrowse
                                                                • 91.189.91.42
                                                                .i.elfGet hashmaliciousUnknownBrowse
                                                                • 91.189.91.42
                                                                Satan.sh4.elfGet hashmaliciousUnknownBrowse
                                                                • 91.189.91.42
                                                                main_ppc.elfGet hashmaliciousMiraiBrowse
                                                                • 91.189.91.42
                                                                main_arm.elfGet hashmaliciousMiraiBrowse
                                                                • 91.189.91.42
                                                                wheiuwa4.elfGet hashmaliciousUnknownBrowse
                                                                • 91.189.91.42
                                                                .i.elfGet hashmaliciousUnknownBrowse
                                                                • 91.189.91.42
                                                                sshd.elfGet hashmaliciousUnknownBrowse
                                                                • 91.189.91.42
                                                                sshd.elfGet hashmaliciousUnknownBrowse
                                                                • 91.189.91.42
                                                                INIT7CHSatan.arm.elfGet hashmaliciousMiraiBrowse
                                                                • 109.202.202.202
                                                                Satan.arm7.elfGet hashmaliciousMiraiBrowse
                                                                • 109.202.202.202
                                                                .i.elfGet hashmaliciousUnknownBrowse
                                                                • 109.202.202.202
                                                                Satan.sh4.elfGet hashmaliciousUnknownBrowse
                                                                • 109.202.202.202
                                                                main_ppc.elfGet hashmaliciousMiraiBrowse
                                                                • 109.202.202.202
                                                                main_arm.elfGet hashmaliciousMiraiBrowse
                                                                • 109.202.202.202
                                                                wheiuwa4.elfGet hashmaliciousUnknownBrowse
                                                                • 109.202.202.202
                                                                .i.elfGet hashmaliciousUnknownBrowse
                                                                • 109.202.202.202
                                                                sshd.elfGet hashmaliciousUnknownBrowse
                                                                • 109.202.202.202
                                                                sshd.elfGet hashmaliciousUnknownBrowse
                                                                • 109.202.202.202

                                                                JA3 Fingerprints

                                                                ⊘No context

                                                                Dropped Files

                                                                ⊘No context

                                                                Created / dropped Files

                                                                ⊘No created / dropped files found

                                                                Static File Info

                                                                General

                                                                File type:ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, no section header
                                                                Entropy (8bit):7.959339203826331
                                                                TrID:
                                                                • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                                                                File name:Satan.x86_64.elf
                                                                File size:37'540 bytes
                                                                MD5:bfa617c0d8676301a6318cc7c5623ea2
                                                                SHA1:797c2ade765bc1458b62a6442081235356a46ab3
                                                                SHA256:d9bfca6ab055f77105be3a540ff9bfb63bd3e76e1d5437f243a56da87a6c6ec3
                                                                SHA512:96aa3141d1ab328a265a351b6c8c55d85122ea50d6856da2c966c10b9c9f359c0d5f9c306e1ee68d310ae2f0e9b2bcc7c73686163859e7b9d4cd971aee5ce151
                                                                SSDEEP:768:3lsqCiE1wJ5TNw5zSLcsHrUz7bk/53B1g1hdiJFuXjNeFSx0v:3l6ikl5lIrms3B10hsvuXjNRO
                                                                TLSH:1BF2E1F3D57EF274EC3E277D4A15469AFD8E602AA2E0402F00D6753F08762697B15B80
                                                                File Content Preview:.ELF..............>.....`.@.....@...................@.8...@.......................@.......@....................... ......................Ka......Ka.............................Q.td....................................................@IQ.UPX!H.......P:..P:.

                                                                Static ELF Info

                                                                ELF header

                                                                Class:ELF64
                                                                Data:2's complement, little endian
                                                                Version:1 (current)
                                                                Machine:Advanced Micro Devices X86-64
                                                                Version Number:0x1
                                                                Type:EXEC (Executable file)
                                                                OS/ABI:UNIX - System V
                                                                ABI Version:0
                                                                Entry Point Address:0x408060
                                                                Flags:0x0
                                                                ELF Header Size:64
                                                                Program Header Offset:64
                                                                Program Header Size:56
                                                                Number of Program Headers:3
                                                                Section Header Offset:0
                                                                Section Header Size:64
                                                                Number of Section Headers:0
                                                                Header String Table Index:0

                                                                Program Segments

                                                                TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                                                                LOAD0x00x4000000x4000000x919c0x919c7.96130x5R E0x200000
                                                                LOAD0xb000x614b000x614b000x00x00.00000x6RW 0x1000
                                                                GNU_STACK0x00x00x00x00x00.00000x6RW 0x8

                                                                Network Behavior

                                                                Network Port Distribution

                                                                TCP Packets

                                                                TimestampSource PortDest PortSource IPDest IP
                                                                Nov 23, 2024 20:22:54.282373905 CET383703778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:22:54.408843994 CET377838370193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:22:54.408911943 CET383703778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:22:54.409730911 CET383703778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:22:54.529365063 CET377838370193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:22:54.529433966 CET383703778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:22:54.649221897 CET377838370193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:22:54.937032938 CET43928443192.168.2.2391.189.91.42
                                                                Nov 23, 2024 20:22:56.708786011 CET377838370193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:22:56.708947897 CET383703778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:22:56.834975958 CET377838370193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:22:57.710200071 CET383723778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:22:57.830178022 CET377838372193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:22:57.830395937 CET383723778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:22:57.831294060 CET383723778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:22:57.955482006 CET377838372193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:22:57.955563068 CET383723778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:22:58.079523087 CET377838372193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:22:59.685077906 CET383743778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:22:59.806097031 CET377838374193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:22:59.806193113 CET383743778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:22:59.807037115 CET383743778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:22:59.926580906 CET377838374193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:22:59.926693916 CET383743778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:00.049156904 CET377838374193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:00.154184103 CET377838372193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:00.154294968 CET383723778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:00.275535107 CET377838372193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:00.312294960 CET42836443192.168.2.2391.189.91.43
                                                                Nov 23, 2024 20:23:01.155466080 CET383763778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:01.282521963 CET377838376193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:01.282593012 CET383763778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:01.283345938 CET383763778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:01.515125990 CET377838376193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:01.515235901 CET383763778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:01.635634899 CET377838376193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:01.848165035 CET4251680192.168.2.23109.202.202.202
                                                                Nov 23, 2024 20:23:02.115788937 CET377838374193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:02.115931034 CET383743778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:02.235471010 CET377838374193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:03.117141962 CET383783778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:03.236886978 CET377838378193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:03.236967087 CET383783778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:03.237627983 CET383783778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:03.357254028 CET377838378193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:03.357340097 CET383783778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:03.476852894 CET377838378193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:03.724579096 CET377838376193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:03.724857092 CET383763778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:03.844455004 CET377838376193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:04.726063967 CET383803778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:04.846968889 CET377838380193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:04.847150087 CET383803778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:04.847968102 CET383803778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:04.968653917 CET377838380193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:04.968800068 CET383803778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:05.093318939 CET377838380193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:05.609018087 CET377838378193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:05.609180927 CET383783778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:05.729842901 CET377838378193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:06.610487938 CET383823778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:06.760227919 CET377838382193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:06.760313988 CET383823778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:06.761023045 CET383823778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:06.887015104 CET377838382193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:06.887204885 CET383823778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:07.010232925 CET377838382193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:07.193444967 CET377838380193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:07.193641901 CET383803778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:07.314937115 CET377838380193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:08.195466995 CET383843778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:08.315020084 CET377838384193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:08.315278053 CET383843778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:08.316348076 CET383843778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:08.436095953 CET377838384193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:08.436323881 CET383843778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:08.558268070 CET377838384193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:09.068696022 CET377838382193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:09.069046021 CET383823778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:09.192742109 CET377838382193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:10.070755005 CET383863778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:10.191713095 CET377838386193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:10.191943884 CET383863778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:10.193116903 CET383863778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:10.319674015 CET377838386193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:10.319829941 CET383863778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:10.501386881 CET377838386193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:10.695900917 CET377838384193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:10.696075916 CET383843778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:10.817430973 CET377838384193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:11.698364019 CET383883778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:11.879035950 CET377838388193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:11.879132986 CET383883778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:11.880321026 CET383883778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:12.062865019 CET377838388193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:12.062952995 CET383883778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:12.251857042 CET377838388193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:12.524657965 CET377838386193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:12.524981022 CET383863778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:12.645736933 CET377838386193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:13.526751995 CET383903778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:13.656584978 CET377838390193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:13.656698942 CET383903778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:13.657306910 CET383903778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:13.776757002 CET377838390193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:13.776833057 CET383903778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:13.896606922 CET377838390193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:14.271749973 CET377838388193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:14.271979094 CET383883778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:14.397281885 CET377838388193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:15.158494949 CET43928443192.168.2.2391.189.91.42
                                                                Nov 23, 2024 20:23:15.273518085 CET383923778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:15.393024921 CET377838392193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:15.393464088 CET383923778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:15.394133091 CET383923778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:15.513710976 CET377838392193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:15.514092922 CET383923778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:15.636027098 CET377838392193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:15.983952045 CET377838390193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:15.984416008 CET383903778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:16.104562044 CET377838390193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:16.986011028 CET383943778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:17.105721951 CET377838394193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:17.105957031 CET383943778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:17.106749058 CET383943778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:17.226296902 CET377838394193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:17.226691008 CET383943778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:17.347836971 CET377838394193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:17.749728918 CET377838392193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:17.749898911 CET383923778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:17.875881910 CET377838392193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:18.751183987 CET383963778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:18.873548985 CET377838396193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:18.873783112 CET383963778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:18.874392033 CET383963778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:18.997576952 CET377838396193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:18.997840881 CET383963778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:19.119107962 CET377838396193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:19.501775026 CET377838394193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:19.502017975 CET383943778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:19.678231955 CET377838394193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:20.503515005 CET383983778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:20.700676918 CET377838398193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:20.700833082 CET383983778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:20.701630116 CET383983778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:20.844183922 CET377838398193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:20.844300032 CET383983778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:20.967282057 CET377838398193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:21.249834061 CET377838396193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:21.250134945 CET383963778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:21.431723118 CET377838396193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:22.251290083 CET384003778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:22.377744913 CET377838400193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:22.377969027 CET384003778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:22.378622055 CET384003778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:22.502939939 CET377838400193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:22.503177881 CET384003778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:22.626995087 CET377838400193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:23.038093090 CET377838398193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:23.038541079 CET383983778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:23.158302069 CET377838398193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:24.039683104 CET384023778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:24.159414053 CET377838402193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:24.159694910 CET384023778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:24.160386086 CET384023778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:24.279802084 CET377838402193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:24.280070066 CET384023778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:24.399617910 CET377838402193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:24.678388119 CET377838400193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:24.678538084 CET384003778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:24.803939104 CET377838400193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:25.680355072 CET384043778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:25.804270029 CET377838404193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:25.804517984 CET384043778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:25.805624962 CET384043778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:25.926603079 CET377838404193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:25.926774025 CET384043778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:26.047895908 CET377838404193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:26.443936110 CET377838402193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:26.444200039 CET384023778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:26.569993973 CET377838402193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:27.444590092 CET42836443192.168.2.2391.189.91.43
                                                                Nov 23, 2024 20:23:27.446460009 CET384063778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:27.578973055 CET377838406193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:27.579123974 CET384063778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:27.580459118 CET384063778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:27.702362061 CET377838406193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:27.702450991 CET384063778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:27.822019100 CET377838406193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:28.179622889 CET377838404193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:28.180001020 CET384043778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:28.299640894 CET377838404193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:29.181968927 CET384083778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:29.306149006 CET377838408193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:29.306289911 CET384083778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:29.307331085 CET384083778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:29.428493023 CET377838408193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:29.428607941 CET384083778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:29.550764084 CET377838408193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:29.897263050 CET377838406193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:29.897488117 CET384063778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:30.017307043 CET377838406193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:30.899585009 CET384103778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:31.025872946 CET377838410193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:31.026019096 CET384103778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:31.027360916 CET384103778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:31.153558969 CET377838410193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:31.153670073 CET384103778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:31.278090954 CET377838410193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:31.540091038 CET4251680192.168.2.23109.202.202.202
                                                                Nov 23, 2024 20:23:31.687623978 CET377838408193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:31.687932014 CET384083778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:31.814095974 CET377838408193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:32.689270020 CET384123778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:32.814347029 CET377838412193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:32.814621925 CET384123778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:32.815373898 CET384123778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:32.937145948 CET377838412193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:32.937427998 CET384123778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:33.056849957 CET377838412193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:33.374989033 CET377838410193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:33.375152111 CET384103778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:33.711837053 CET377838410193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:34.376255989 CET384143778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:34.949407101 CET377838414193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:34.949599981 CET384143778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:34.950333118 CET384143778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:35.100277901 CET377838412193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:35.100442886 CET384123778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:35.475378036 CET384123778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:35.518346071 CET377838412193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:35.518683910 CET384123778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:35.553292990 CET377838414193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:35.553452969 CET384143778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:35.560991049 CET377838412193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:35.921587944 CET377838412193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:35.921710968 CET384123778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:36.036529064 CET377838414193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:36.101624966 CET384163778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:36.417402029 CET377838416193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:36.417551041 CET384163778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:36.418433905 CET384163778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:36.537965059 CET377838416193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:36.538063049 CET384163778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:36.658349991 CET377838416193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:37.750055075 CET377838414193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:37.750238895 CET384143778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:37.869683027 CET377838414193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:38.751729965 CET384183778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:38.812486887 CET377838416193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:38.812577963 CET384163778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:38.878087997 CET377838418193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:38.878139973 CET384183778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:38.878881931 CET384183778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:38.932538033 CET377838416193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:39.005079031 CET377838418193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:39.005244970 CET384183778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:39.210719109 CET377838418193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:39.813750029 CET384203778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:39.933341026 CET377838420193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:39.933463097 CET384203778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:39.934070110 CET384203778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:40.055946112 CET377838420193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:40.056034088 CET384203778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:40.182005882 CET377838420193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:41.178503036 CET377838418193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:41.178639889 CET384183778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:41.304959059 CET377838418193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:42.179747105 CET384223778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:42.282310009 CET377838420193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:42.282423973 CET384203778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:42.282438993 CET384203778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:42.306097984 CET377838422193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:42.306150913 CET384223778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:42.306936979 CET384223778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:42.405260086 CET377838420193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:42.430671930 CET377838422193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:42.430751085 CET384223778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:42.550496101 CET377838422193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:43.283847094 CET384243778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:43.408911943 CET377838424193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:43.409004927 CET384243778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:43.409692049 CET384243778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:43.533250093 CET377838424193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:43.533345938 CET384243778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:43.658035994 CET377838424193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:44.641135931 CET377838422193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:44.641293049 CET384223778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:44.762069941 CET377838422193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:45.642560959 CET384263778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:45.806857109 CET377838426193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:45.806962013 CET384263778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:45.807734013 CET384263778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:45.812828064 CET377838424193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:45.812890053 CET384243778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:45.930351019 CET377838426193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:45.930495024 CET384263778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:45.935164928 CET377838424193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:46.060931921 CET377838426193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:46.813872099 CET384283778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:46.939809084 CET377838428193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:46.939905882 CET384283778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:46.940570116 CET384283778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:47.078490019 CET377838428193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:47.078572035 CET384283778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:47.198012114 CET377838428193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:48.102199078 CET377838426193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:48.102360964 CET384263778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:48.228605032 CET377838426193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:49.103738070 CET384303778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:49.223243952 CET377838430193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:49.223345041 CET384303778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:49.224234104 CET384303778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:49.303508997 CET377838428193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:49.303605080 CET384283778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:49.347337008 CET377838430193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:49.347404957 CET384303778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:49.427485943 CET377838428193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:49.527174950 CET377838430193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:50.305442095 CET384323778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:50.487890959 CET377838432193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:50.488029957 CET384323778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:50.488801003 CET384323778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:50.609111071 CET377838432193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:50.609298944 CET384323778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:50.729077101 CET377838432193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:51.548522949 CET377838430193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:51.548770905 CET384303778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:51.670830011 CET377838430193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:52.552349091 CET384343778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:52.719499111 CET377838434193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:52.719588995 CET384343778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:52.721226931 CET384343778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:52.877830029 CET377838432193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:52.878020048 CET384323778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:53.054601908 CET377838434193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:53.054721117 CET384343778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:53.176867962 CET377838432193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:53.296586037 CET377838434193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:53.880626917 CET384363778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:54.000155926 CET377838436193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:54.000356913 CET384363778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:54.002074003 CET384363778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:54.127969980 CET377838436193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:54.128184080 CET384363778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:54.326284885 CET377838436193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:55.256913900 CET377838434193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:55.257204056 CET384343778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:55.381477118 CET377838434193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:56.112598896 CET43928443192.168.2.2391.189.91.42
                                                                Nov 23, 2024 20:23:56.259735107 CET384383778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:56.350650072 CET377838436193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:56.350898981 CET384363778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:56.385405064 CET377838438193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:56.385495901 CET384383778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:56.387247086 CET384383778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:56.475610971 CET377838436193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:56.511984110 CET377838438193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:56.512221098 CET384383778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:56.637602091 CET377838438193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:57.353096962 CET384403778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:57.472784042 CET377838440193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:57.472929955 CET384403778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:57.474312067 CET384403778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:57.593920946 CET377838440193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:57.594038010 CET384403778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:57.713646889 CET377838440193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:58.710052013 CET377838438193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:58.710397959 CET384383778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:58.829976082 CET377838438193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:59.713124037 CET384423778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:59.757057905 CET377838440193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:59.757280111 CET384403778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:59.877361059 CET377838442193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:23:59.877464056 CET384423778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:59.878881931 CET384423778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:23:59.898400068 CET377838440193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:00.020639896 CET377838442193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:00.020749092 CET384423778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:00.140301943 CET377838442193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:00.760139942 CET384443778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:00.884445906 CET377838444193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:00.884718895 CET384443778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:00.886327982 CET384443778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:01.012892008 CET377838444193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:01.013242960 CET384443778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:01.139760971 CET377838444193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:02.278676987 CET377838442193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:02.279072046 CET384423778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:02.402468920 CET377838442193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:03.234899998 CET377838444193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:03.235208035 CET384443778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:03.280724049 CET384463778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:03.359473944 CET377838444193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:03.406770945 CET377838446193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:03.407082081 CET384463778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:03.408607006 CET384463778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:03.534794092 CET377838446193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:03.535082102 CET384463778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:03.654685020 CET377838446193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:04.237643003 CET384483778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:04.358584881 CET377838448193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:04.358746052 CET384483778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:04.360349894 CET384483778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:04.483107090 CET377838448193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:04.483266115 CET384483778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:04.602889061 CET377838448193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:05.781804085 CET377838446193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:05.781960011 CET384463778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:05.910579920 CET377838446193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:06.719369888 CET377838448193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:06.719731092 CET384483778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:06.783551931 CET384503778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:06.840873003 CET377838448193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:06.903614044 CET377838450193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:06.903719902 CET384503778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:06.904484987 CET384503778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:07.025774002 CET377838450193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:07.025866985 CET384503778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:07.145374060 CET377838450193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:07.721934080 CET384523778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:07.842098951 CET377838452193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:07.842235088 CET384523778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:07.843745947 CET384523778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:07.969850063 CET377838452193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:07.970113039 CET384523778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:08.093803883 CET377838452193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:09.266633034 CET377838450193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:09.266988039 CET384503778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:09.386563063 CET377838450193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:10.235719919 CET377838452193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:10.235979080 CET384523778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:10.269239902 CET384543778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:10.356859922 CET377838452193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:10.391074896 CET377838454193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:10.391349077 CET384543778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:10.393012047 CET384543778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:10.513870955 CET377838454193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:10.514190912 CET384543778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:10.638801098 CET377838454193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:11.238473892 CET384563778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:11.359179020 CET377838456193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:11.359364033 CET384563778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:11.360905886 CET384563778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:11.482100010 CET377838456193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:11.482361078 CET384563778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:11.602566004 CET377838456193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:12.757415056 CET377838454193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:12.757776976 CET384543778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:12.888710022 CET377838454193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:13.688399076 CET377838456193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:13.688628912 CET384563778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:13.760360003 CET384583778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:13.825064898 CET377838456193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:13.880034924 CET377838458193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:13.880178928 CET384583778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:13.881927013 CET384583778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:14.038089991 CET377838458193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:14.038249016 CET384583778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:14.157913923 CET377838458193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:14.691303015 CET384603778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:14.867592096 CET377838460193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:14.867907047 CET384603778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:14.869564056 CET384603778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:14.989136934 CET377838460193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:14.989427090 CET384603778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:15.108920097 CET377838460193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:16.219657898 CET377838458193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:16.220088005 CET384583778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:16.339876890 CET377838458193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:17.179166079 CET377838460193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:17.179501057 CET384603778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:17.222700119 CET384623778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:17.299098969 CET377838460193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:17.342128038 CET377838462193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:17.342262983 CET384623778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:17.343801022 CET384623778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:17.475528002 CET377838462193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:17.475828886 CET384623778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:17.691432953 CET377838462193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:18.182121992 CET384643778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:18.304008007 CET377838464193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:18.304105043 CET384643778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:18.305715084 CET384643778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:18.436528921 CET377838464193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:18.436623096 CET384643778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:18.575443029 CET377838464193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:19.732450008 CET377838462193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:19.732795000 CET384623778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:19.862876892 CET377838462193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:20.688412905 CET377838464193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:20.688798904 CET384643778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:20.735203028 CET384663778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:20.820702076 CET377838464193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:20.867846966 CET377838466193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:20.867927074 CET384663778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:20.869628906 CET384663778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:21.007981062 CET377838466193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:21.008110046 CET384663778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:21.134555101 CET377838466193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:21.691669941 CET384683778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:21.818150043 CET377838468193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:21.818284035 CET384683778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:21.820029020 CET384683778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:22.005129099 CET377838468193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:22.005254030 CET384683778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:22.124826908 CET377838468193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:23.250843048 CET377838466193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:23.251233101 CET384663778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:23.376856089 CET377838466193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:24.210552931 CET377838468193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:24.210807085 CET384683778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:24.253992081 CET384703778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:24.330365896 CET377838468193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:24.389276981 CET377838470193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:24.389569998 CET384703778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:24.391261101 CET384703778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:24.544044971 CET377838470193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:24.544359922 CET384703778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:24.666204929 CET377838470193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:25.213553905 CET384723778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:25.364063025 CET377838472193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:25.364145994 CET384723778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:25.365768909 CET384723778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:25.485861063 CET377838472193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:25.485981941 CET384723778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:25.606374979 CET377838472193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:26.806945086 CET377838470193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:26.807218075 CET384703778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:26.926951885 CET377838470193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:27.695044041 CET377838472193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:27.695214033 CET384723778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:27.809211016 CET384743778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:27.816348076 CET377838472193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:27.930744886 CET377838474193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:27.930927038 CET384743778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:27.932282925 CET384743778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:28.053662062 CET377838474193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:28.053817987 CET384743778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:28.173842907 CET377838474193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:28.697151899 CET384763778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:28.818871021 CET377838476193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:28.818986893 CET384763778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:28.820164919 CET384763778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:28.940953970 CET377838476193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:28.941071033 CET384763778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:29.067678928 CET377838476193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:30.251116991 CET377838474193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:30.251385927 CET384743778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:30.371139050 CET377838474193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:31.188679934 CET377838476193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:31.189054012 CET384763778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:31.253777027 CET384783778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:31.315551043 CET377838476193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:31.380373001 CET377838478193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:31.380533934 CET384783778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:31.382209063 CET384783778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:31.505357981 CET377838478193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:31.505462885 CET384783778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:31.625153065 CET377838478193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:32.191227913 CET384803778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:32.314399004 CET377838480193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:32.314479113 CET384803778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:32.315490961 CET384803778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:32.441498041 CET377838480193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:32.441704988 CET384803778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:32.568176985 CET377838480193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:33.686438084 CET377838478193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:33.686804056 CET384783778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:33.812215090 CET377838478193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:34.672594070 CET377838480193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:34.672750950 CET384803778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:34.688942909 CET384823778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:34.827954054 CET377838480193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:34.827984095 CET377838482193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:34.828226089 CET384823778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:34.829382896 CET384823778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:34.953495026 CET377838482193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:34.953656912 CET384823778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:35.077958107 CET377838482193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:35.674865007 CET384843778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:35.798973083 CET377838484193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:35.799243927 CET384843778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:35.800532103 CET384843778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:35.927606106 CET377838484193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:35.927891970 CET384843778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:36.053128958 CET377838484193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:37.117105007 CET377838482193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:37.117490053 CET384823778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:37.243804932 CET377838482193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:38.119939089 CET384863778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:38.173444986 CET377838484193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:38.173665047 CET384843778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:38.246941090 CET377838486193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:38.247100115 CET384863778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:38.248728991 CET384863778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:38.300126076 CET377838484193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:38.375174999 CET377838486193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:38.375329018 CET384863778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:38.495035887 CET377838486193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:39.176142931 CET384883778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:39.302880049 CET377838488193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:39.303076029 CET384883778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:39.304912090 CET384883778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:39.425379992 CET377838488193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:39.425652027 CET384883778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:39.545353889 CET377838488193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:40.610810041 CET377838486193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:40.611206055 CET384863778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:40.737687111 CET377838486193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:41.613132954 CET384903778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:41.643976927 CET377838488193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:41.644109011 CET384883778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:41.733516932 CET377838490193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:41.733789921 CET384903778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:41.735060930 CET384903778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:41.763884068 CET377838488193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:41.854548931 CET377838490193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:41.854712963 CET384903778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:41.974925995 CET377838490193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:42.646002054 CET384923778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:42.768392086 CET377838492193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:42.768584013 CET384923778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:42.769879103 CET384923778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:42.891417980 CET377838492193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:42.891693115 CET384923778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:43.013437033 CET377838492193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:44.079651117 CET377838490193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:44.080024958 CET384903778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:44.206415892 CET377838490193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:45.082067013 CET384943778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:45.085971117 CET377838492193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:45.086111069 CET384923778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:45.208230972 CET377838494193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:45.208499908 CET384943778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:45.209547043 CET384943778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:45.212166071 CET377838492193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:45.330651045 CET377838494193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:45.330905914 CET384943778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:45.453696966 CET377838494193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:46.088053942 CET384963778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:46.213754892 CET377838496193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:46.214122057 CET384963778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:46.214821100 CET384963778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:46.339015961 CET377838496193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:46.339349985 CET384963778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:46.465261936 CET377838496193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:47.525837898 CET377838494193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:47.526006937 CET384943778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:47.645947933 CET377838494193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:48.527311087 CET384983778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:48.579663038 CET377838496193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:48.579863071 CET384963778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:48.649482965 CET377838498193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:48.649627924 CET384983778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:48.650895119 CET384983778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:48.704473019 CET377838496193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:48.777338982 CET377838498193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:48.777488947 CET384983778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:48.903655052 CET377838498193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:49.581644058 CET385003778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:49.705864906 CET377838500193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:49.706005096 CET385003778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:49.706720114 CET385003778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:49.827018023 CET377838500193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:49.827150106 CET385003778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:49.949120998 CET377838500193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:50.985928059 CET377838498193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:50.986237049 CET384983778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:51.106581926 CET377838498193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:51.987688065 CET385023778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:52.064423084 CET377838500193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:52.064604998 CET385003778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:52.108177900 CET377838502193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:52.108297110 CET385023778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:52.109505892 CET385023778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:52.184143066 CET377838500193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:52.229090929 CET377838502193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:52.229204893 CET385023778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:52.353251934 CET377838502193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:53.066212893 CET385043778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:53.190973043 CET377838504193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:53.191085100 CET385043778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:53.191925049 CET385043778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:53.311372042 CET377838504193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:53.311450958 CET385043778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:53.431245089 CET377838504193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:54.398978949 CET377838502193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:54.399342060 CET385023778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:54.522402048 CET377838502193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:55.401182890 CET385063778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:55.521250963 CET377838506193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:55.521493912 CET385063778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:55.522614956 CET385063778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:55.523847103 CET377838504193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:55.523967981 CET385043778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:55.643173933 CET377838506193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:55.643261909 CET385063778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:55.644270897 CET377838504193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:55.763618946 CET377838506193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:56.525806904 CET385083778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:56.645522118 CET377838508193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:56.645652056 CET385083778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:56.646938086 CET385083778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:56.766503096 CET377838508193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:56.766597986 CET385083778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:56.891406059 CET377838508193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:57.876955986 CET377838506193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:57.877248049 CET385063778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:58.000374079 CET377838506193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:58.879195929 CET385103778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:58.977029085 CET377838508193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:58.977267981 CET385083778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:58.999877930 CET377838510193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:59.000008106 CET385103778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:59.001123905 CET385103778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:59.099216938 CET377838508193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:59.123961926 CET377838510193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:59.124130011 CET385103778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:24:59.243916988 CET377838510193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:24:59.979181051 CET385123778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:25:00.099206924 CET377838512193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:25:00.099379063 CET385123778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:25:00.100683928 CET385123778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:25:00.220335960 CET377838512193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:25:00.220475912 CET385123778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:25:00.345318079 CET377838512193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:25:01.361283064 CET377838510193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:25:01.361707926 CET385103778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:25:01.485369921 CET377838510193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:25:02.363651037 CET385143778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:25:02.445965052 CET377838512193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:25:02.446120977 CET385123778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:25:02.483436108 CET377838514193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:25:02.483552933 CET385143778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:25:02.484658957 CET385143778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:25:02.565754890 CET377838512193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:25:02.604168892 CET377838514193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:25:02.604326963 CET385143778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:25:02.725169897 CET377838514193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:25:03.447617054 CET385163778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:25:03.567574978 CET377838516193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:25:03.567663908 CET385163778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:25:03.568430901 CET385163778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:25:03.688131094 CET377838516193.84.71.119192.168.2.23
                                                                Nov 23, 2024 20:25:03.688205004 CET385163778192.168.2.23193.84.71.119
                                                                Nov 23, 2024 20:25:03.809442997 CET377838516193.84.71.119192.168.2.23

                                                                System Behavior

                                                                General

                                                                Start time (UTC):19:22:53
                                                                Start date (UTC):23/11/2024
                                                                Path:/tmp/Satan.x86_64.elf
                                                                Arguments:/tmp/Satan.x86_64.elf
                                                                File size:37540 bytes
                                                                MD5 hash:bfa617c0d8676301a6318cc7c5623ea2

                                                                Chronological Activities


                                                                General

                                                                Start time (UTC):19:22:53
                                                                Start date (UTC):23/11/2024
                                                                Path:/tmp/Satan.x86_64.elf
                                                                Arguments:-
                                                                File size:37540 bytes
                                                                MD5 hash:bfa617c0d8676301a6318cc7c5623ea2

                                                                Chronological Activities


                                                                General

                                                                Start time (UTC):19:22:53
                                                                Start date (UTC):23/11/2024
                                                                Path:/tmp/Satan.x86_64.elf
                                                                Arguments:-
                                                                File size:37540 bytes
                                                                MD5 hash:bfa617c0d8676301a6318cc7c5623ea2

                                                                Chronological Activities


                                                                General

                                                                Start time (UTC):19:22:53
                                                                Start date (UTC):23/11/2024
                                                                Path:/tmp/Satan.x86_64.elf
                                                                Arguments:-
                                                                File size:37540 bytes
                                                                MD5 hash:bfa617c0d8676301a6318cc7c5623ea2

                                                                Chronological Activities


                                                                General

                                                                Start time (UTC):19:22:59
                                                                Start date (UTC):23/11/2024
                                                                Path:/tmp/Satan.x86_64.elf
                                                                Arguments:-
                                                                File size:37540 bytes
                                                                MD5 hash:bfa617c0d8676301a6318cc7c5623ea2

                                                                Chronological Activities


                                                                General

                                                                Start time (UTC):19:22:59
                                                                Start date (UTC):23/11/2024
                                                                Path:/tmp/Satan.x86_64.elf
                                                                Arguments:-
                                                                File size:37540 bytes
                                                                MD5 hash:bfa617c0d8676301a6318cc7c5623ea2

                                                                Chronological Activities