Linux Analysis Report
res.mips.elf

Overview

General Information

Sample name: res.mips.elf
Analysis ID: 1606856
MD5: 5084450d2aaf57c9c247915a1d1fe520
SHA1: b793c4904d3d4ad90ad3829cbbdd87138af31eb4
SHA256: 21048877b4fb1b3047be3c8bfa4a79a62fc4bde14f4afb701c16913ed4473af8
Tags: elfuser-abuse_ch
Infos:

Detection

Score: 60
Range: 0 - 100

Signatures

Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Sample tries to kill multiple processes (SIGKILL)
Detected TCP or UDP traffic on non-standard ports
Enumerates processes within the "proc" file system
Executes the "rm" command used to delete files or directories
Sample has stripped symbol table
Sample listens on a socket
Sample tries to kill a process (SIGKILL)
Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)
Uses the "uname" system call to query kernel version information (possible evasion)

Classification

AV Detection

barindex
Source: res.mips.elf Avira: detected
Source: res.mips.elf Virustotal: Detection: 32% Perma Link
Source: res.mips.elf ReversingLabs: Detection: 44%
Source: global traffic TCP traffic: 192.168.2.23:51926 -> 79.124.60.85:3277
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 246.23.226.226:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 115.125.86.184:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 139.202.154.37:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 66.232.241.131:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 121.175.21.115:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 193.248.160.59:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 61.193.101.222:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 110.2.129.127:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 200.213.15.181:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 188.24.179.217:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 148.244.168.104:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 155.174.211.163:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 9.203.26.43:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 48.243.93.85:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 112.67.183.22:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 221.2.41.82:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 214.137.145.251:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 118.34.95.63:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 218.155.26.49:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 62.135.99.58:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 205.99.41.188:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 152.117.126.158:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 199.76.229.164:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 5.171.250.53:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 245.159.193.3:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 132.231.53.130:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 48.254.173.168:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 151.34.22.35:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 31.38.234.235:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 91.156.129.119:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 6.179.136.169:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 41.176.179.124:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 54.121.139.249:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 185.59.83.131:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 58.214.137.240:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 8.194.216.46:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 27.123.169.72:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 174.60.112.201:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 215.44.120.88:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 56.134.120.227:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 95.212.179.181:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 58.173.139.181:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 75.164.51.81:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 16.154.150.132:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 1.125.78.89:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 145.90.218.194:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 92.11.245.159:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 40.73.253.36:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 23.14.235.10:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 146.90.123.1:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 253.123.85.25:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 245.167.31.200:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 13.192.114.253:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 60.81.6.213:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 181.28.254.47:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 240.39.76.105:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 143.222.175.121:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 138.134.47.144:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 241.102.79.81:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 159.137.234.77:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 121.32.249.218:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 97.5.56.17:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 140.106.228.76:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 35.124.109.81:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 44.137.183.125:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 101.139.38.1:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 135.55.232.136:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 131.18.114.108:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 132.169.27.74:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 54.185.157.206:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 45.103.27.39:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 182.190.49.146:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 61.204.101.61:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 7.113.85.58:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 254.230.44.0:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 25.172.138.120:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 253.111.196.115:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 156.67.216.183:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 197.247.178.170:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 5.44.164.142:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 165.66.217.31:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 31.242.162.168:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 195.52.195.252:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 164.49.35.240:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 104.185.109.35:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 169.12.71.0:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 111.90.92.222:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 87.114.28.236:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 72.129.80.63:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 62.65.195.73:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 77.104.181.91:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 132.247.59.119:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 3.39.52.176:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 145.57.60.139:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 22.193.214.99:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 195.85.240.249:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 166.133.95.124:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 46.112.118.80:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 69.20.192.178:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 90.214.221.130:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 105.103.46.9:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 103.96.63.195:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 69.228.129.43:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 101.179.90.59:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 22.22.81.90:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 84.98.105.233:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 42.91.38.206:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 135.78.225.46:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 174.33.191.102:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 208.223.70.234:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 130.201.160.246:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 174.48.21.120:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 68.157.112.31:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 96.25.231.40:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 17.66.4.85:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 2.132.36.6:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 93.11.43.205:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 81.149.193.24:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 180.133.88.228:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 240.34.142.159:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 2.11.228.148:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 109.106.9.179:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 82.98.174.171:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 54.160.75.146:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 167.91.76.62:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 70.64.71.106:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 5.10.75.180:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 12.116.243.180:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 161.210.129.39:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 200.8.45.194:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 114.117.55.45:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 98.141.253.223:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 41.100.239.176:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 134.188.137.220:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 94.242.186.167:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 200.163.58.252:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 242.118.127.159:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 249.47.14.58:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 194.49.77.38:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 110.72.24.5:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 149.139.84.71:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 16.176.213.28:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 113.25.102.81:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 130.55.108.123:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 2.217.108.202:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 208.71.195.244:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 91.1.175.198:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 103.173.35.115:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 101.27.248.226:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 122.99.2.57:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 166.101.189.159:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 173.109.88.229:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 161.91.52.253:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 31.107.42.130:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 18.135.215.230:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 193.123.192.127:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 25.36.130.247:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 6.57.53.60:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 149.65.56.104:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 218.112.52.95:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 146.119.234.243:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 169.3.174.114:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 37.129.230.244:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 194.227.177.251:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 188.16.62.140:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 73.246.157.161:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 103.245.73.144:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 19.225.226.81:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 184.196.97.210:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 248.126.71.101:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 152.186.153.141:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 205.173.75.68:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 31.17.251.176:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 58.110.212.20:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 140.231.128.212:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 168.41.47.78:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 212.111.245.238:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 158.128.39.223:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 133.98.20.44:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 222.67.165.39:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 153.207.156.77:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 255.174.64.207:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 248.228.119.156:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 136.152.108.228:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 145.61.74.239:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 45.136.117.51:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 215.160.220.38:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 175.119.0.200:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 220.222.167.143:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 74.211.90.172:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 165.57.86.12:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 146.252.185.106:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 63.122.0.236:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 202.190.59.63:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 77.203.90.114:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 117.157.171.114:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 148.70.96.74:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 221.39.115.148:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 69.77.67.159:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 106.107.50.4:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 157.108.232.18:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 12.169.29.14:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 27.178.121.84:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 166.42.187.52:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 181.120.114.58:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 93.253.195.179:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 243.200.143.166:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 41.101.133.98:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 39.225.97.152:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 81.135.17.40:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 19.199.114.192:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 149.224.47.197:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 122.127.106.84:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 162.57.97.152:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 46.193.244.37:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 203.39.1.0:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 79.238.48.95:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 151.202.133.91:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 73.70.9.195:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 219.106.178.22:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 65.9.175.45:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 133.8.129.254:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 179.11.114.10:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 211.9.233.113:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 92.91.231.105:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 13.197.173.226:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 114.19.66.68:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 70.241.50.24:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 40.153.73.143:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 109.134.11.185:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 14.53.141.173:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 119.70.148.28:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 51.228.8.74:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 6.166.202.141:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 73.62.243.156:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 2.4.16.46:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 91.152.118.58:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 92.80.178.141:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 216.94.3.184:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 106.151.175.124:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 213.113.238.113:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 118.11.29.215:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 102.40.107.214:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 119.186.85.78:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 65.80.77.181:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 56.99.231.104:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 65.25.51.40:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 212.229.215.22:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 39.105.246.180:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 53.208.222.28:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 1.178.155.129:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 193.110.81.203:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 197.69.169.166:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 59.235.169.99:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 251.177.161.136:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 12.232.70.176:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 93.173.162.48:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 212.82.57.44:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 126.193.42.178:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 68.126.54.90:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 144.197.162.46:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 8.94.116.221:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 120.59.184.78:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 72.100.179.169:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 28.177.61.18:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 148.190.185.43:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 245.102.177.34:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 61.164.45.1:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 217.236.109.123:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 84.0.84.119:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 128.94.47.116:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 45.27.51.182:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 47.128.8.2:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 205.90.91.208:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 126.14.16.253:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 58.138.183.222:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 151.80.37.112:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 199.166.46.127:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 83.235.235.149:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 125.109.164.156:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 163.75.71.143:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 205.167.193.175:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 61.25.138.138:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 52.222.58.64:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 136.205.174.214:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 213.148.163.25:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 3.200.152.77:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 137.49.208.234:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 55.138.153.113:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 79.180.238.238:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 81.73.209.66:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 48.239.182.92:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 109.30.149.71:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 25.131.37.16:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 107.9.89.122:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 72.207.133.51:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 206.254.82.211:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 214.131.43.210:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 32.135.88.189:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 161.255.23.222:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 131.126.129.217:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 240.43.55.216:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 12.188.183.37:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 220.105.24.205:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 199.220.82.48:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 130.114.202.101:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 87.114.97.152:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 222.164.87.156:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 101.141.236.91:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 39.229.180.122:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 23.128.40.100:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 39.204.127.228:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 34.14.252.242:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 129.133.96.47:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 45.68.147.166:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 63.102.132.19:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 125.229.211.181:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 42.213.249.189:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 106.73.156.122:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 139.45.215.216:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 212.170.162.47:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 26.68.189.25:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 41.161.57.70:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 219.247.59.140:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 168.66.171.214:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 80.11.178.102:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 90.70.23.223:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 180.162.222.62:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 151.231.149.52:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 175.162.1.219:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 213.9.18.39:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 197.20.243.108:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 185.208.199.93:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 129.69.121.131:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 183.15.179.126:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 248.94.77.121:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 252.57.252.225:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 88.90.110.163:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 129.114.234.173:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 100.138.237.232:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 133.102.51.56:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 94.255.64.227:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 22.25.30.177:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 178.200.233.151:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 201.240.89.240:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 5.74.104.46:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 129.187.213.159:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 176.114.244.62:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 111.7.192.240:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 99.184.228.125:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 117.70.89.3:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 89.71.45.220:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 171.33.10.209:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 143.216.43.162:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 129.225.125.200:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 141.93.21.7:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 24.128.111.115:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 4.138.192.190:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 50.178.121.28:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 5.30.14.198:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 206.127.193.79:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 22.75.111.250:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 44.216.230.204:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 139.33.32.128:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 62.49.204.136:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 204.38.213.203:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 59.59.217.4:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 99.168.39.244:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 160.127.26.237:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 177.44.153.122:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 53.216.126.211:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 253.61.100.143:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 62.182.135.53:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 197.10.170.67:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 158.162.10.79:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 87.10.157.250:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 91.124.168.137:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 83.88.227.149:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 60.131.254.55:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 103.23.212.180:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 54.116.162.35:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 173.254.18.144:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 57.126.138.121:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 101.73.139.199:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 137.229.71.94:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 208.11.43.182:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 129.111.162.9:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 152.127.68.52:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 50.55.100.117:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 149.51.87.93:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 162.83.65.90:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 136.101.152.251:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 177.0.129.254:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 251.24.75.161:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 101.68.146.170:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 57.63.11.58:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 109.115.255.95:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 203.83.249.87:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 214.153.142.169:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 180.226.136.244:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 19.215.131.179:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 88.178.101.166:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 169.66.45.27:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 187.227.82.37:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 162.5.151.10:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 126.18.5.197:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 83.96.10.242:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 52.30.17.19:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 73.161.246.35:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 45.61.56.76:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 212.233.207.170:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 247.250.48.52:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 155.90.219.204:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 27.81.9.229:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 53.127.73.161:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 219.114.165.64:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 89.129.151.185:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 222.211.143.41:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 66.70.132.110:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 98.37.255.154:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 75.88.145.228:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 70.194.147.213:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 252.168.156.155:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 189.165.170.152:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 165.217.28.24:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 5.177.251.208:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 160.84.143.194:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 51.213.64.155:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 177.19.106.67:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 165.0.159.197:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 58.215.163.80:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 107.144.194.177:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 206.248.128.174:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 122.204.189.210:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 186.65.20.253:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 211.149.168.31:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 240.208.70.140:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 134.25.238.136:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 168.2.171.113:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 166.23.24.38:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 66.215.125.83:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 115.92.235.12:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 100.78.142.83:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 52.191.52.158:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 205.123.15.53:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 194.39.140.183:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 99.18.139.182:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 206.89.101.100:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 62.53.240.80:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 79.18.86.166:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 17.37.234.93:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 165.197.144.234:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 28.171.226.174:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 180.194.103.226:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 144.183.185.23:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 156.218.159.231:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 159.102.113.147:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 255.227.214.251:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 250.179.114.44:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 74.168.164.252:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 157.44.240.214:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 146.52.164.186:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 208.71.177.15:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 128.243.167.1:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 70.16.241.155:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 79.156.105.234:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 12.147.139.68:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 134.226.245.26:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 253.230.9.154:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 80.228.81.8:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 160.59.30.111:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 16.91.39.90:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 195.35.143.53:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 162.85.155.38:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 88.69.159.109:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 77.214.112.147:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 23.108.122.219:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 83.29.125.60:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 205.26.72.212:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 53.190.114.158:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 124.194.254.8:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 70.128.10.67:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 88.182.126.48:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 150.37.252.73:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 98.52.247.48:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 244.254.244.14:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 136.249.92.54:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 251.97.248.55:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 142.127.7.151:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 169.3.7.98:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 111.239.184.10:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 109.124.202.244:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 223.121.194.187:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 128.14.134.123:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 251.75.250.6:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 65.197.55.244:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 221.184.83.113:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 223.16.139.206:2323
Source: global traffic TCP traffic: 192.168.2.23:20087 -> 72.238.212.158:2323
Source: /tmp/res.mips.elf (PID: 6236) Socket: 0.0.0.0:23 Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) Socket: 0.0.0.0:0 Jump to behavior
Source: global traffic TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80
Source: unknown TCP traffic detected without corresponding DNS query: 79.124.60.85
Source: unknown TCP traffic detected without corresponding DNS query: 79.124.60.85
Source: unknown TCP traffic detected without corresponding DNS query: 246.23.226.226
Source: unknown TCP traffic detected without corresponding DNS query: 162.161.145.226
Source: unknown TCP traffic detected without corresponding DNS query: 246.181.115.129
Source: unknown TCP traffic detected without corresponding DNS query: 99.88.233.97
Source: unknown TCP traffic detected without corresponding DNS query: 197.224.106.236
Source: unknown TCP traffic detected without corresponding DNS query: 153.116.7.151
Source: unknown TCP traffic detected without corresponding DNS query: 80.177.178.139
Source: unknown TCP traffic detected without corresponding DNS query: 132.102.111.141
Source: unknown TCP traffic detected without corresponding DNS query: 43.21.71.97
Source: unknown TCP traffic detected without corresponding DNS query: 115.125.86.184
Source: unknown TCP traffic detected without corresponding DNS query: 57.5.246.255
Source: unknown TCP traffic detected without corresponding DNS query: 181.6.204.206
Source: unknown TCP traffic detected without corresponding DNS query: 200.40.243.119
Source: unknown TCP traffic detected without corresponding DNS query: 168.63.84.195
Source: unknown TCP traffic detected without corresponding DNS query: 176.209.164.12
Source: unknown TCP traffic detected without corresponding DNS query: 66.223.50.24
Source: unknown TCP traffic detected without corresponding DNS query: 200.177.86.40
Source: unknown TCP traffic detected without corresponding DNS query: 150.57.109.20
Source: unknown TCP traffic detected without corresponding DNS query: 139.202.154.37
Source: unknown TCP traffic detected without corresponding DNS query: 103.102.196.155
Source: unknown TCP traffic detected without corresponding DNS query: 140.244.196.47
Source: unknown TCP traffic detected without corresponding DNS query: 17.94.34.179
Source: unknown TCP traffic detected without corresponding DNS query: 206.42.58.170
Source: unknown TCP traffic detected without corresponding DNS query: 5.35.242.111
Source: unknown TCP traffic detected without corresponding DNS query: 161.63.215.32
Source: unknown TCP traffic detected without corresponding DNS query: 37.183.79.219
Source: unknown TCP traffic detected without corresponding DNS query: 63.188.237.130
Source: unknown TCP traffic detected without corresponding DNS query: 66.232.241.131
Source: unknown TCP traffic detected without corresponding DNS query: 106.67.122.110
Source: unknown TCP traffic detected without corresponding DNS query: 77.99.103.75
Source: unknown TCP traffic detected without corresponding DNS query: 60.83.179.190
Source: unknown TCP traffic detected without corresponding DNS query: 253.173.224.72
Source: unknown TCP traffic detected without corresponding DNS query: 121.61.251.31
Source: unknown TCP traffic detected without corresponding DNS query: 104.228.206.84
Source: unknown TCP traffic detected without corresponding DNS query: 64.25.103.4
Source: unknown TCP traffic detected without corresponding DNS query: 165.149.75.15
Source: unknown TCP traffic detected without corresponding DNS query: 191.120.82.126
Source: unknown TCP traffic detected without corresponding DNS query: 121.175.21.115
Source: unknown TCP traffic detected without corresponding DNS query: 157.159.215.185
Source: unknown TCP traffic detected without corresponding DNS query: 216.200.30.223
Source: unknown TCP traffic detected without corresponding DNS query: 194.201.223.129
Source: unknown TCP traffic detected without corresponding DNS query: 243.26.72.164
Source: unknown TCP traffic detected without corresponding DNS query: 113.186.114.211
Source: unknown TCP traffic detected without corresponding DNS query: 11.49.171.112
Source: unknown TCP traffic detected without corresponding DNS query: 249.118.156.65
Source: unknown TCP traffic detected without corresponding DNS query: 193.248.160.59
Source: unknown TCP traffic detected without corresponding DNS query: 78.21.234.64
Source: unknown TCP traffic detected without corresponding DNS query: 185.16.60.39
Source: unknown Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

barindex
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 936, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 720, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 759, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 761, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 788, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 797, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 799, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 800, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 847, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 884, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 1334, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 1335, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 1389, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 1633, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 1809, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 1860, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 1872, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 1983, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 2048, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 2069, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 2096, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 2097, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 2102, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 2146, result: successful Jump to behavior
Source: ELF static info symbol of initial sample .symtab present: no
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 936, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 720, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 759, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 761, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 788, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 797, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 799, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 800, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 847, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 884, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 1334, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 1335, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 1389, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 1633, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 1809, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 1860, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 1872, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 1983, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 2048, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 2069, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 2096, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 2097, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 2102, result: successful Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) SIGKILL sent: pid: 2146, result: successful Jump to behavior
Source: classification engine Classification label: mal60.spre.linELF@0/0@0/0
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1582/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/2033/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1612/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1579/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1699/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1335/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1698/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/2028/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1334/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1576/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/2025/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/2146/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/910/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/912/fd Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/912/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/759/fd Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/759/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/517/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/918/fd Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/918/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1594/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1349/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1/fd Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1623/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/761/fd Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/761/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1622/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/884/fd Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/884/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1983/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/2038/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1344/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1465/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1586/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1860/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1463/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/800/fd Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/800/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/801/fd Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/801/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1629/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1627/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1900/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/491/fd Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/491/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/2050/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1877/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/772/fd Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/772/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1633/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1599/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1632/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/774/fd Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/774/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1477/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/654/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/896/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1476/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1872/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/2048/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/655/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1475/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/777/fd Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/777/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/656/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/657/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/658/fd Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/658/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/936/fd Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/936/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/419/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1639/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1638/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1809/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1494/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1890/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/2063/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/2062/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1888/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1886/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/420/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1489/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/785/fd Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/785/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1642/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/667/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/788/fd Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/788/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/789/fd Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/789/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1648/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/2078/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/2077/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/2074/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/670/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/793/fd Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/793/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1656/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1654/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/674/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/1532/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/675/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/796/fd Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/796/exe Jump to behavior
Source: /tmp/res.mips.elf (PID: 6236) File opened: /proc/676/exe Jump to behavior
Source: /usr/bin/xfce4-session (PID: 6327) Rm executable: /usr/bin/rm -> rm -f /home/saturnino/.cache/sessions/Thunar-2ec9153f1-6fa0-4067-96b1-e5fe875b1e51 Jump to behavior
Source: /tmp/res.mips.elf (PID: 6232) Queries kernel information via 'uname': Jump to behavior
Source: res.mips.elf, 6232.1.000055b219acb000.000055b219b52000.rw-.sdmp Binary or memory string: U!/etc/qemu-binfmt/mips
Source: res.mips.elf, 6232.1.000055b219acb000.000055b219b52000.rw-.sdmp Binary or memory string: /etc/qemu-binfmt/mips
Source: res.mips.elf, 6232.1.00007ffda985f000.00007ffda9880000.rw-.sdmp Binary or memory string: /usr/bin/qemu-mips
Source: res.mips.elf, 6232.1.00007ffda985f000.00007ffda9880000.rw-.sdmp Binary or memory string: x86_64/usr/bin/qemu-mips/tmp/res.mips.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/res.mips.elf
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs