Edit tour

Linux Analysis Report
morte.mpsl.elf

Overview

General Information

Sample name:	morte.mpsl.elf
Analysis ID:	1635825
MD5:	e454c1defb1a67790af5d7f3acaa2fd2
SHA1:	a6c2abd9e1eeedb47aa4553c271d0e4251f3f0a4
SHA256:	8b478498dd477e17efe964373a38841076499d7f86b38294224793472b5b36b6
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	60
Range:	0 - 100

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Sample is packed with UPX

Detected TCP or UDP traffic on non-standard ports

ELF contains segments with high entropy indicating compressed/encrypted content

Sample contains only a LOAD segment without any section mappings

Sample listens on a socket

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1635825
Start date and time:	2025-03-12 02:27:21 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	morte.mpsl.elf
Detection:	MAL
Classification:	mal60.evad.linELF@0/0@0/0

Runtime Messages

Command:	/tmp/morte.mpsl.elf
PID:	5434
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	lzrd cock fest"/proc/"/exe
Standard Error:

Process Tree

system is lnxubuntu20

morte.mpsl.elf (PID: 5434, Parent: 5357, MD5: 0d6f61f82cf2f781c6eb0661071d42d9) Arguments: /tmp/morte.mpsl.elf

morte.mpsl.elf New Fork (PID: 5436, Parent: 5434)

morte.mpsl.elf New Fork (PID: 5438, Parent: 5436)

cleanup

Yara Signatures

⊘No yara matches

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: morte.mpsl.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: morte.mpsl.elf	ReversingLabs: Detection: 39%
Source: morte.mpsl.elf	Virustotal: Detection: 37%			Perma Link

Source: global traffic

TCP traffic: 192.168.2.13:38718 -> 176.65.134.62:7777

Source: /tmp/morte.mpsl.elf (PID: 5436)

Socket: 127.0.0.1:16384

Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62

Source: morte.mpsl.elf

String found in binary or memory: http://upx.sf.net

Source: LOAD without section mappings

Program segment: 0x100000

Source: classification engine

Classification label: mal60.evad.linELF@0/0@0/0

Data Obfuscation

Sample is packed with UPX

Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Id: UPX 3.94 Copyright (C) 1996-2017 the UPX Team. All Rights Reserved. $

Source: morte.mpsl.elf

Submission file: segment LOAD with 7.9557 entropy (max. 8.0)

Source: /tmp/morte.mpsl.elf (PID: 5434)

Queries kernel information via 'uname':

Jump to behavior

Source: morte.mpsl.elf, 5434.1.00007ffd8e947000.00007ffd8e968000.rw-.sdmp, morte.mpsl.elf, 5438.1.00007ffd8e947000.00007ffd8e968000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-mipsel/tmp/morte.mpsl.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/morte.mpsl.elf
Source: morte.mpsl.elf, 5434.1.000055df57ba4000.000055df57c4b000.rw-.sdmp, morte.mpsl.elf, 5438.1.000055df57ba4000.000055df57c2b000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mipsel
Source: morte.mpsl.elf, 5434.1.000055df57ba4000.000055df57c4b000.rw-.sdmp, morte.mpsl.elf, 5438.1.000055df57ba4000.000055df57c2b000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/mipsel
Source: morte.mpsl.elf, 5434.1.00007ffd8e947000.00007ffd8e968000.rw-.sdmp, morte.mpsl.elf, 5438.1.00007ffd8e947000.00007ffd8e968000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mipsel

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	11 Obfuscated Files or Information	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
morte.mpsl.elf	39%	ReversingLabs	Linux.Trojan.Mirai
morte.mpsl.elf	38%	Virustotal		Browse
morte.mpsl.elf	100%	Avira	EXP/ELF.Agent.M.28

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://upx.sf.net	morte.mpsl.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
176.65.134.62	unknown	Germany		56325	DIOGELO-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
176.65.134.62	morte.ppc.elf	Get hash	malicious	Unknown	Browse
	morte.arm.elf	Get hash	malicious	Unknown	Browse
	morte.mips.elf	Get hash	malicious	Unknown	Browse
	morte.mpsl.elf	Get hash	malicious	Unknown	Browse
	morte.x86.elf	Get hash	malicious	Unknown	Browse
	morte.sh4.elf	Get hash	malicious	Unknown	Browse
	morte.m68k.elf	Get hash	malicious	Unknown	Browse
	morte.arm7.elf	Get hash	malicious	Unknown	Browse
	morte.arm7.elf	Get hash	malicious	Mirai	Browse
	morte.x86.elf	Get hash	malicious	Unknown	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
DIOGELO-ASGB	morte.ppc.elf	Get hash	malicious	Unknown	Browse	176.65.134.62
	morte.arm.elf	Get hash	malicious	Unknown	Browse	176.65.134.62
	morte.mips.elf	Get hash	malicious	Unknown	Browse	176.65.134.62
	morte.mpsl.elf	Get hash	malicious	Unknown	Browse	176.65.134.62
	morte.x86.elf	Get hash	malicious	Unknown	Browse	176.65.134.62
	morte.sh4.elf	Get hash	malicious	Unknown	Browse	176.65.134.62
	morte.m68k.elf	Get hash	malicious	Unknown	Browse	176.65.134.62
	morte.arm7.elf	Get hash	malicious	Unknown	Browse	176.65.134.62
	morte.arm7.elf	Get hash	malicious	Mirai	Browse	176.65.134.62
	morte.x86.elf	Get hash	malicious	Unknown	Browse	176.65.134.62

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, no section header
Entropy (8bit):	7.953552903348195
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	morte.mpsl.elf
File size:	50'576 bytes
MD5:	e454c1defb1a67790af5d7f3acaa2fd2
SHA1:	a6c2abd9e1eeedb47aa4553c271d0e4251f3f0a4
SHA256:	8b478498dd477e17efe964373a38841076499d7f86b38294224793472b5b36b6
SHA512:	6016b85946378fa2f836271ce3bb1c4c142b1eb0b1d531d19813432a9c8d4e33331ac6a34dfc4a9eeef28ff62d2931cb7b7f32cda61f6b9faa67eb9638ba00ed
SSDEEP:	768:zpekNsnKUvfzABOIS+R9PKTkMyBNRIvnZL8Hz7Csgwf6GfNIMuXDta3LXbWR:zpekpUHKOIS+XiYMAlT2fwffS7XDtaTo
TLSH:	1F33F29E4A8A7D83CF2D7D3CA999A235D83824407AEF1E088312CD1F5B59BC7794D079
File Content Preview:	.ELF........................4...........4. ...(.....................U...U.....................F...F...................0.UPX!`........d...d......U..........?.E.h;....#......b.L#8...(.......1......)B.....uj.-........BT.o.U:.......$.I...5.".... .............

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x10b118
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	2
Section Header Offset:	0
Section Header Size:	40
Number of Section Headers:	0
Header String Table Index:	0

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Prog Interpreter	Section Mappings
LOAD	0x0	0x100000	0x100000	0xc455	0xc455	7.9557	0x5	R E	0x10000
LOAD	0xaab0	0x46aab0	0x46aab0	0x0	0x0	0.0000	0x6	RW	0x10000

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 12, 2025 02:28:08.187602043 CET	38718	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:08.192399025 CET	7777	38718	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:08.192464113 CET	38718	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:08.214720964 CET	38718	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:08.219381094 CET	7777	38718	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:08.219430923 CET	38718	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:08.224149942 CET	7777	38718	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:08.871977091 CET	7777	38718	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:08.872354984 CET	38718	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:08.872354984 CET	38718	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:08.872981071 CET	38720	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:08.877823114 CET	7777	38720	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:08.877882957 CET	38720	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:08.879024029 CET	38720	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:08.883723974 CET	7777	38720	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:08.883775949 CET	38720	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:08.888415098 CET	7777	38720	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:09.574845076 CET	7777	38720	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:09.574971914 CET	38720	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:09.575062990 CET	38720	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:09.575634956 CET	38722	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:09.580346107 CET	7777	38722	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:09.580401897 CET	38722	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:09.581279039 CET	38722	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:09.585931063 CET	7777	38722	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:09.585968971 CET	38722	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:09.590578079 CET	7777	38722	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:10.290345907 CET	7777	38722	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:10.290566921 CET	38722	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:10.290604115 CET	38722	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:10.291220903 CET	38724	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:10.295907974 CET	7777	38724	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:10.295989990 CET	38724	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:10.296854019 CET	38724	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:10.301501989 CET	7777	38724	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:10.301552057 CET	38724	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:10.306236029 CET	7777	38724	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:10.970689058 CET	7777	38724	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:10.971127987 CET	38724	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:10.971174002 CET	38724	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:10.971713066 CET	38726	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:10.976407051 CET	7777	38726	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:10.976491928 CET	38726	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:10.977277040 CET	38726	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:10.981936932 CET	7777	38726	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:10.981981039 CET	38726	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:10.986646891 CET	7777	38726	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:11.655827999 CET	7777	38726	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:11.655993938 CET	38726	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:11.656038046 CET	38726	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:11.656621933 CET	38728	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:11.661619902 CET	7777	38728	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:11.661683083 CET	38728	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:11.662724972 CET	38728	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:11.667979956 CET	7777	38728	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:11.668066025 CET	38728	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:11.673039913 CET	7777	38728	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:12.341728926 CET	7777	38728	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:12.341881990 CET	38728	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:12.341881990 CET	38728	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:12.342377901 CET	38730	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:12.347060919 CET	7777	38730	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:12.347115040 CET	38730	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:12.347734928 CET	38730	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:12.352432013 CET	7777	38730	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:12.352471113 CET	38730	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:12.357129097 CET	7777	38730	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:13.051223040 CET	7777	38730	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:13.051378012 CET	38730	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:13.051465988 CET	38730	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:13.052340984 CET	38732	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:13.056958914 CET	7777	38732	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:13.057056904 CET	38732	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:13.057797909 CET	38732	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:13.062455893 CET	7777	38732	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:13.062500000 CET	38732	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:13.067176104 CET	7777	38732	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:13.741822958 CET	7777	38732	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:13.741935968 CET	38732	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:13.742100000 CET	38732	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:13.742789030 CET	38734	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:13.747479916 CET	7777	38734	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:13.747566938 CET	38734	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:13.748646021 CET	38734	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:13.753397942 CET	7777	38734	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:13.753459930 CET	38734	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:13.758111000 CET	7777	38734	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:14.422322989 CET	7777	38734	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:14.422492981 CET	38734	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:14.422578096 CET	38734	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:14.423078060 CET	38736	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:14.427751064 CET	7777	38736	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:14.427798986 CET	38736	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:14.428498983 CET	38736	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:14.433175087 CET	7777	38736	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:14.433223963 CET	38736	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:14.437935114 CET	7777	38736	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:15.126652002 CET	7777	38736	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:15.126975060 CET	38736	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:15.127094030 CET	38736	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:15.127743959 CET	38738	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:15.132426977 CET	7777	38738	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:15.132484913 CET	38738	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:15.133537054 CET	38738	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:15.138137102 CET	7777	38738	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:15.138185978 CET	38738	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:15.142872095 CET	7777	38738	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:15.817862034 CET	7777	38738	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:15.817975998 CET	38738	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:15.818032026 CET	38738	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:15.818556070 CET	38740	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:15.823285103 CET	7777	38740	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:15.823349953 CET	38740	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:15.824318886 CET	38740	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:15.828933954 CET	7777	38740	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:15.828978062 CET	38740	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:15.833607912 CET	7777	38740	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:16.500094891 CET	7777	38740	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:16.500200033 CET	38740	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:16.500257969 CET	38740	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:16.501025915 CET	38742	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:16.505723953 CET	7777	38742	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:16.505785942 CET	38742	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:16.506905079 CET	38742	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:16.511583090 CET	7777	38742	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:16.511635065 CET	38742	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:16.516294003 CET	7777	38742	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:17.196533918 CET	7777	38742	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:17.196656942 CET	38742	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:17.196724892 CET	38742	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:17.197326899 CET	38744	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:17.202084064 CET	7777	38744	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:17.202136993 CET	38744	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:17.202887058 CET	38744	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:17.207494974 CET	7777	38744	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:17.207535028 CET	38744	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:17.212194920 CET	7777	38744	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:17.880928040 CET	7777	38744	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:17.881033897 CET	38744	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:17.881269932 CET	38744	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:17.881990910 CET	38746	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:17.886697054 CET	7777	38746	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:17.886786938 CET	38746	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:17.889530897 CET	38746	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:17.894120932 CET	7777	38746	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:17.894181967 CET	38746	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:17.898864031 CET	7777	38746	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:18.593600988 CET	7777	38746	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:18.593734980 CET	38746	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:18.593775034 CET	38746	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:18.594347954 CET	38748	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:18.599054098 CET	7777	38748	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:18.599113941 CET	38748	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:18.599693060 CET	38748	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:18.604336977 CET	7777	38748	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:18.604383945 CET	38748	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:18.609052896 CET	7777	38748	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:19.284287930 CET	7777	38748	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:19.284425974 CET	38748	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:19.284508944 CET	38748	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:19.285218000 CET	38750	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:19.289938927 CET	7777	38750	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:19.290011883 CET	38750	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:19.291099072 CET	38750	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:19.295794964 CET	7777	38750	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:19.295846939 CET	38750	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:19.300561905 CET	7777	38750	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:20.039669991 CET	7777	38750	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:20.039799929 CET	38750	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:20.039839983 CET	38750	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:20.040735960 CET	38752	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:20.047473907 CET	7777	38752	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:20.047538996 CET	38752	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:20.048856974 CET	38752	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:20.053765059 CET	7777	38752	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:20.053818941 CET	38752	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:20.058562040 CET	7777	38752	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:20.728600979 CET	7777	38752	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:20.728740931 CET	38752	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:20.728837013 CET	38752	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:20.729335070 CET	38754	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:20.734553099 CET	7777	38754	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:20.734636068 CET	38754	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:20.735460043 CET	38754	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:20.740581036 CET	7777	38754	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:20.740658998 CET	38754	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:20.746092081 CET	7777	38754	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:21.429582119 CET	7777	38754	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:21.429738045 CET	38754	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:21.429768085 CET	38754	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:21.430454969 CET	38756	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:21.435201883 CET	7777	38756	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:21.435270071 CET	38756	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:21.436141968 CET	38756	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:21.440862894 CET	7777	38756	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:21.440912962 CET	38756	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:21.445677042 CET	7777	38756	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:22.116211891 CET	7777	38756	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:22.116333008 CET	38756	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:22.116369009 CET	38756	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:22.117082119 CET	38758	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:22.122078896 CET	7777	38758	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:22.122169971 CET	38758	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:22.122916937 CET	38758	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:22.127543926 CET	7777	38758	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:22.127609015 CET	38758	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:22.132358074 CET	7777	38758	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:22.798212051 CET	7777	38758	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:22.798348904 CET	38758	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:22.798392057 CET	38758	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:22.799190044 CET	38760	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:22.803939104 CET	7777	38760	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:22.804001093 CET	38760	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:22.805063963 CET	38760	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:22.809827089 CET	7777	38760	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:22.809889078 CET	38760	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:22.814563990 CET	7777	38760	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:23.486031055 CET	7777	38760	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:23.486150980 CET	38760	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:23.486200094 CET	38760	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:23.487006903 CET	38762	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:23.491738081 CET	7777	38762	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:23.491799116 CET	38762	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:23.492819071 CET	38762	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:23.497488976 CET	7777	38762	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:23.497541904 CET	38762	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:23.502295971 CET	7777	38762	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:24.193819046 CET	7777	38762	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:24.193952084 CET	38762	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:24.194003105 CET	38762	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:24.194751024 CET	38764	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:24.199585915 CET	7777	38764	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:24.199672937 CET	38764	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:24.200752974 CET	38764	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:24.205424070 CET	7777	38764	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:24.205485106 CET	38764	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:24.210211992 CET	7777	38764	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:24.888245106 CET	7777	38764	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:24.888385057 CET	38764	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:24.888461113 CET	38764	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:24.889199972 CET	38766	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:24.897192001 CET	7777	38766	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:24.897300959 CET	38766	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:24.898051977 CET	38766	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:24.904444933 CET	7777	38766	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:24.904511929 CET	38766	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:24.909401894 CET	7777	38766	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:25.572032928 CET	7777	38766	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:25.572196960 CET	38766	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:25.572283983 CET	38766	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:25.572860003 CET	38768	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:25.577616930 CET	7777	38768	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:25.577683926 CET	38768	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:25.578438044 CET	38768	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:25.583132982 CET	7777	38768	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:25.583198071 CET	38768	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:25.587944984 CET	7777	38768	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:26.256402969 CET	7777	38768	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:26.256648064 CET	38768	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:26.256699085 CET	38768	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:26.257431030 CET	38770	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:26.262783051 CET	7777	38770	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:26.262860060 CET	38770	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:26.263607979 CET	38770	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:26.269109011 CET	7777	38770	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:26.269161940 CET	38770	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:26.275016069 CET	7777	38770	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:26.990432978 CET	7777	38770	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:26.990638971 CET	38770	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:26.990638971 CET	38770	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:26.991271973 CET	38772	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:26.995950937 CET	7777	38772	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:26.996006012 CET	38772	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:26.996754885 CET	38772	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:27.001698971 CET	7777	38772	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:27.001744986 CET	38772	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:27.006411076 CET	7777	38772	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:27.682425976 CET	7777	38772	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:27.682524920 CET	38772	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:27.682562113 CET	38772	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:27.683115005 CET	38774	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:27.687841892 CET	7777	38774	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:27.687900066 CET	38774	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:27.688628912 CET	38774	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:27.693269968 CET	7777	38774	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:27.693330050 CET	38774	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:27.698041916 CET	7777	38774	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:28.389605999 CET	7777	38774	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:28.389744043 CET	38774	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:28.389787912 CET	38774	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:28.390544891 CET	38776	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:28.395306110 CET	7777	38776	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:28.395374060 CET	38776	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:28.396401882 CET	38776	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:28.401118994 CET	7777	38776	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:28.401175022 CET	38776	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:28.405905008 CET	7777	38776	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:29.102077007 CET	7777	38776	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:29.102293015 CET	38776	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:29.102333069 CET	38776	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:29.102864027 CET	38778	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:29.107605934 CET	7777	38778	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:29.107671976 CET	38778	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:29.108436108 CET	38778	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:29.113099098 CET	7777	38778	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:29.113151073 CET	38778	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:29.117875099 CET	7777	38778	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:29.785655975 CET	7777	38778	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:29.785777092 CET	38778	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:29.785809994 CET	38778	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:29.786382914 CET	38780	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:29.791165113 CET	7777	38780	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:29.791240931 CET	38780	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:29.792090893 CET	38780	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:29.796747923 CET	7777	38780	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:29.796811104 CET	38780	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:29.801564932 CET	7777	38780	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:30.487552881 CET	7777	38780	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:30.487699032 CET	38780	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:30.487750053 CET	38780	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:30.488269091 CET	38782	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:30.493041992 CET	7777	38782	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:30.493125916 CET	38782	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:30.493808985 CET	38782	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:30.498553038 CET	7777	38782	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:30.498621941 CET	38782	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:30.503309011 CET	7777	38782	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:31.169336081 CET	7777	38782	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:31.169581890 CET	38782	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:31.169581890 CET	38782	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:31.170406103 CET	38784	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:31.175163984 CET	7777	38784	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:31.175335884 CET	38784	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:31.176337004 CET	38784	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:31.181056976 CET	7777	38784	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:31.181137085 CET	38784	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:31.185900927 CET	7777	38784	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:31.872374058 CET	7777	38784	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:31.872607946 CET	38784	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:31.872661114 CET	38784	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:31.873480082 CET	38786	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:31.878284931 CET	7777	38786	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:31.878370047 CET	38786	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:31.879550934 CET	38786	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:31.884260893 CET	7777	38786	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:31.884399891 CET	38786	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:31.889240026 CET	7777	38786	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:32.560374022 CET	7777	38786	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:32.560463905 CET	38786	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:32.560501099 CET	38786	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:32.561101913 CET	38788	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:32.565830946 CET	7777	38788	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:32.565920115 CET	38788	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:32.566627979 CET	38788	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:32.571280003 CET	7777	38788	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:32.571352005 CET	38788	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:32.575978041 CET	7777	38788	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:33.261689901 CET	7777	38788	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:33.261874914 CET	38788	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:33.261909962 CET	38788	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:33.262649059 CET	38790	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:33.267357111 CET	7777	38790	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:33.267425060 CET	38790	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:33.268174887 CET	38790	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:33.272823095 CET	7777	38790	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:33.272886992 CET	38790	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:33.277545929 CET	7777	38790	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:33.951864004 CET	7777	38790	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:33.952094078 CET	38790	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:33.952168941 CET	38790	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:33.952929974 CET	38792	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:33.958436012 CET	7777	38792	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:33.958518028 CET	38792	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:33.959414005 CET	38792	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:33.964543104 CET	7777	38792	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:33.964602947 CET	38792	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:33.971745968 CET	7777	38792	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:34.637268066 CET	7777	38792	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:34.637562990 CET	38792	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:34.637669086 CET	38792	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:34.638498068 CET	38794	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:34.645243883 CET	7777	38794	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:34.645370007 CET	38794	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:34.646506071 CET	38794	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:34.653168917 CET	7777	38794	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:34.653249025 CET	38794	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:34.659928083 CET	7777	38794	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:35.341507912 CET	7777	38794	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:35.341957092 CET	38794	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:35.342158079 CET	38794	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:35.342824936 CET	38796	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:35.347970009 CET	7777	38796	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:35.348057032 CET	38796	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:35.349175930 CET	38796	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:35.353807926 CET	7777	38796	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:35.353868008 CET	38796	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:35.358692884 CET	7777	38796	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:36.029139996 CET	7777	38796	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:36.029406071 CET	38796	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:36.029406071 CET	38796	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:36.030246973 CET	38798	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:36.035041094 CET	7777	38798	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:36.035109997 CET	38798	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:36.036024094 CET	38798	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:36.040699959 CET	7777	38798	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:36.040803909 CET	38798	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:36.045497894 CET	7777	38798	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:36.764839888 CET	7777	38798	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:36.765156031 CET	38798	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:36.765403032 CET	38798	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:36.766067982 CET	38800	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:36.771302938 CET	7777	38800	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:36.771389961 CET	38800	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:36.772522926 CET	38800	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:36.777914047 CET	7777	38800	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:36.777982950 CET	38800	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:36.783504009 CET	7777	38800	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:37.579925060 CET	7777	38800	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:37.580053091 CET	38800	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:37.580270052 CET	38800	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:37.581034899 CET	38802	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:37.587198973 CET	7777	38802	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:37.587333918 CET	38802	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:37.588299990 CET	38802	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:37.594377041 CET	7777	38802	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:37.594444990 CET	38802	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:37.600692034 CET	7777	38802	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:38.294724941 CET	7777	38802	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:38.294846058 CET	38802	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:38.294905901 CET	38802	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:38.295452118 CET	38804	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:38.300349951 CET	7777	38804	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:38.300401926 CET	38804	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:38.301379919 CET	38804	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:38.306839943 CET	7777	38804	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:38.306896925 CET	38804	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:38.311778069 CET	7777	38804	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:38.985759020 CET	7777	38804	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:38.985888004 CET	38804	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:38.985918045 CET	38804	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:38.986547947 CET	38806	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:38.991628885 CET	7777	38806	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:38.991714954 CET	38806	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:38.992600918 CET	38806	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:38.997447014 CET	7777	38806	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:38.997530937 CET	38806	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:39.002274036 CET	7777	38806	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:39.672734022 CET	7777	38806	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:39.672863960 CET	38806	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:39.672914028 CET	38806	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:39.673461914 CET	38808	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:39.678324938 CET	7777	38808	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:39.678407907 CET	38808	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:39.679377079 CET	38808	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:39.684096098 CET	7777	38808	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:39.684168100 CET	38808	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:39.688896894 CET	7777	38808	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:40.382463932 CET	7777	38808	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:40.382697105 CET	38808	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:40.382697105 CET	38808	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:40.383265018 CET	38810	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:40.387892962 CET	7777	38810	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:40.387963057 CET	38810	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:40.389306068 CET	38810	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:40.393906116 CET	7777	38810	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:40.393951893 CET	38810	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:40.398545027 CET	7777	38810	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:41.093437910 CET	7777	38810	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:41.093573093 CET	38810	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:41.093614101 CET	38810	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:41.094201088 CET	38812	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:41.099647045 CET	7777	38812	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:41.099710941 CET	38812	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:41.100519896 CET	38812	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:41.105207920 CET	7777	38812	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:41.105266094 CET	38812	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:41.109980106 CET	7777	38812	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:41.785475969 CET	7777	38812	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:41.785747051 CET	38812	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:41.785836935 CET	38812	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:41.786689997 CET	38814	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:41.791440964 CET	7777	38814	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:41.791536093 CET	38814	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:41.792536020 CET	38814	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:41.797209024 CET	7777	38814	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:41.797291994 CET	38814	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:41.801976919 CET	7777	38814	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:42.470103025 CET	7777	38814	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:42.470427990 CET	38814	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:42.470475912 CET	38814	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:42.471158028 CET	38816	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:42.475994110 CET	7777	38816	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:42.476100922 CET	38816	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:42.476808071 CET	38816	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:42.481406927 CET	7777	38816	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:42.481461048 CET	38816	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:42.486076117 CET	7777	38816	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:43.159279108 CET	7777	38816	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:43.159410000 CET	38816	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:43.159729004 CET	38816	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:43.160474062 CET	38818	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:43.165199041 CET	7777	38818	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:43.165291071 CET	38818	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:43.166279078 CET	38818	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:43.170929909 CET	7777	38818	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:43.170993090 CET	38818	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:43.175673008 CET	7777	38818	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:43.840198040 CET	7777	38818	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:43.840491056 CET	38818	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:43.840603113 CET	38818	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:43.841573000 CET	38820	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:43.846716881 CET	7777	38820	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:43.846798897 CET	38820	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:43.848007917 CET	38820	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:43.852830887 CET	7777	38820	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:43.852878094 CET	38820	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:43.857681036 CET	7777	38820	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:44.544922113 CET	7777	38820	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:44.545125961 CET	38820	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:44.545226097 CET	38820	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:44.546053886 CET	38822	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:44.550733089 CET	7777	38822	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:44.550862074 CET	38822	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:44.551605940 CET	38822	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:44.556353092 CET	7777	38822	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:44.556435108 CET	38822	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:44.561604023 CET	7777	38822	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:45.237272978 CET	7777	38822	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:45.237487078 CET	38822	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:45.237572908 CET	38822	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:45.238291025 CET	38824	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:45.242990017 CET	7777	38824	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:45.243061066 CET	38824	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:45.244045019 CET	38824	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:45.248725891 CET	7777	38824	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:45.248790026 CET	38824	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:45.253556967 CET	7777	38824	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:45.939327955 CET	7777	38824	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:45.939527988 CET	38824	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:45.939610958 CET	38824	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:45.940356970 CET	38826	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:45.945144892 CET	7777	38826	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:45.945251942 CET	38826	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:45.946299076 CET	38826	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:45.951014996 CET	7777	38826	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:45.951112032 CET	38826	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:45.955852032 CET	7777	38826	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:46.638425112 CET	7777	38826	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:46.638586998 CET	38826	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:46.638730049 CET	38826	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:46.639511108 CET	38828	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:46.644247055 CET	7777	38828	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:46.644323111 CET	38828	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:46.645246983 CET	38828	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:46.649938107 CET	7777	38828	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:46.650101900 CET	38828	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:46.654758930 CET	7777	38828	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:56.651743889 CET	38828	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:28:56.815037012 CET	7777	38828	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:57.016750097 CET	7777	38828	176.65.134.62	192.168.2.13
Mar 12, 2025 02:28:57.016866922 CET	38828	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:29:57.071686983 CET	38828	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:29:57.076633930 CET	7777	38828	176.65.134.62	192.168.2.13
Mar 12, 2025 02:29:57.282685041 CET	7777	38828	176.65.134.62	192.168.2.13
Mar 12, 2025 02:29:57.282824039 CET	38828	7777	192.168.2.13	176.65.134.62

System Behavior

Analysis Process: morte.mpsl.elf PID: 5434, Parent PID: 5357

General

Start time (UTC):	01:28:07
Start date (UTC):	12/03/2025
Path:	/tmp/morte.mpsl.elf
Arguments:	/tmp/morte.mpsl.elf
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Chronological Activities

Analysis Process: morte.mpsl.elf PID: 5436, Parent PID: 5434

General

Start time (UTC):	01:28:07
Start date (UTC):	12/03/2025
Path:	/tmp/morte.mpsl.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Chronological Activities

Analysis Process: morte.mpsl.elf PID: 5438, Parent PID: 5436

General

Start time (UTC):	01:28:07
Start date (UTC):	12/03/2025
Path:	/tmp/morte.mpsl.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report morte.mpsl.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Yara Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: morte.mpsl.elf PID: 5434, Parent PID: 5357

General

Chronological Activities

Analysis Process: morte.mpsl.elf PID: 5436, Parent PID: 5434

General

Chronological Activities

Analysis Process: morte.mpsl.elf PID: 5438, Parent PID: 5436

General

Chronological Activities

Linux Analysis Report
morte.mpsl.elf