Edit tour

Linux Analysis Report
morte.ppc.elf

Overview

General Information

Sample name:	morte.ppc.elf
Analysis ID:	1635841
MD5:	8825e9417e23f9ad69bf8e7417c21229
SHA1:	a11353e1cd4e982dbe4a4b8c182735e3cd91e589
SHA256:	f74ea955d0f8003bcc5ce2ea0d18050596ab906644d158b630814d05fdac0251
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	60
Range:	0 - 100

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Sample is packed with UPX

Detected TCP or UDP traffic on non-standard ports

ELF contains segments with high entropy indicating compressed/encrypted content

Executes the "systemctl" command used for controlling the systemd system and service manager

Reads system version information

Sample contains only a LOAD segment without any section mappings

Sample listens on a socket

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1635841
Start date and time:	2025-03-12 02:45:40 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	morte.ppc.elf
Detection:	MAL
Classification:	mal60.evad.linELF@0/0@0/0

Runtime Messages

Command:	/tmp/morte.ppc.elf
PID:	5730
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	lzrd cock fest"/proc/"/exe
Standard Error:

Process Tree

system is lnxubuntu20

morte.ppc.elf (PID: 5730, Parent: 5537, MD5: ae65271c943d3451b7f026d1fadccea6) Arguments: /tmp/morte.ppc.elf

morte.ppc.elf New Fork (PID: 5732, Parent: 5730)

morte.ppc.elf New Fork (PID: 5734, Parent: 5732)

systemd New Fork (PID: 5779, Parent: 1)

snap-failure (PID: 5779, Parent: 1, MD5: 69136a7d575731ce62349f2e4d3e5c36) Arguments: /usr/lib/snapd/snap-failure snapd

snap-failure New Fork (PID: 5796, Parent: 5779)

systemctl (PID: 5796, Parent: 5779, MD5: 4deddfb6741481f68aeac522cc26ff4b) Arguments: systemctl stop snapd.socket

snap-failure New Fork (PID: 5797, Parent: 5779)

cleanup

Yara Signatures

⊘No yara matches

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: morte.ppc.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: morte.ppc.elf

ReversingLabs: Detection: 28%

Source: global traffic

TCP traffic: 192.168.2.13:38726 -> 176.65.134.62:7777

Source: /tmp/morte.ppc.elf (PID: 5732)

Socket: 127.0.0.1:25724

Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62
Source: unknown	TCP traffic detected without corresponding DNS query: 176.65.134.62

Source: morte.ppc.elf

String found in binary or memory: http://upx.sf.net

Source: LOAD without section mappings

Program segment: 0x100000

Source: classification engine

Classification label: mal60.evad.linELF@0/0@0/0

Data Obfuscation

Sample is packed with UPX

Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Id: UPX 3.94 Copyright (C) 1996-2017 the UPX Team. All Rights Reserved. $

Source: /usr/lib/snapd/snap-failure (PID: 5796)

Systemctl executable: /usr/bin/systemctl -> systemctl stop snapd.socket

Jump to behavior

Source: /usr/lib/snapd/snap-failure (PID: 5779)

Reads version info: /proc/version

Jump to behavior

Source: morte.ppc.elf

Submission file: segment LOAD with 7.9717 entropy (max. 8.0)

Source: /tmp/morte.ppc.elf (PID: 5730)

Queries kernel information via 'uname':

Jump to behavior

Source: morte.ppc.elf, 5730.1.000056521fc31000.000056521fce1000.rw-.sdmp	Binary or memory string: !/etc/qemu-binfmt/ppc11!hotpluggableq
Source: morte.ppc.elf, 5734.1.000056521fc31000.000056521fce1000.rw-.sdmp	Binary or memory string: !/etc/qemu-binfmt/ppc1
Source: morte.ppc.elf, 5730.1.000056521fc31000.000056521fce1000.rw-.sdmp, morte.ppc.elf, 5734.1.000056521fc31000.000056521fce1000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/ppc
Source: morte.ppc.elf, 5730.1.00007fff79ecc000.00007fff79eed000.rw-.sdmp, morte.ppc.elf, 5734.1.00007fff79ecc000.00007fff79eed000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-ppc
Source: morte.ppc.elf, 5730.1.00007fff79ecc000.00007fff79eed000.rw-.sdmp, morte.ppc.elf, 5734.1.00007fff79ecc000.00007fff79eed000.rw-.sdmp	Binary or memory string: <x86_64/usr/bin/qemu-ppc/tmp/morte.ppc.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/morte.ppc.elf

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Systemd Service	1 Systemd Service	11 Obfuscated Files or Information	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	Junk Data	Exfiltration Over Bluetooth	Network Denial of Service

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
morte.ppc.elf	29%	ReversingLabs	Linux.Trojan.Mirai
morte.ppc.elf	100%	Avira	EXP/ELF.Agent.F.118

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://upx.sf.net	morte.ppc.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
176.65.134.62	unknown	Germany		56325	DIOGELO-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
176.65.134.62	morte.sh4.elf	Get hash	malicious	Unknown	Browse
	morte.mpsl.elf	Get hash	malicious	Unknown	Browse
	morte.ppc.elf	Get hash	malicious	Unknown	Browse
	morte.arm.elf	Get hash	malicious	Unknown	Browse
	morte.mips.elf	Get hash	malicious	Unknown	Browse
	morte.mpsl.elf	Get hash	malicious	Unknown	Browse
	morte.x86.elf	Get hash	malicious	Unknown	Browse
	morte.sh4.elf	Get hash	malicious	Unknown	Browse
	morte.m68k.elf	Get hash	malicious	Unknown	Browse
	morte.arm7.elf	Get hash	malicious	Unknown	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
DIOGELO-ASGB	morte.sh4.elf	Get hash	malicious	Unknown	Browse	176.65.134.62
	morte.mpsl.elf	Get hash	malicious	Unknown	Browse	176.65.134.62
	morte.ppc.elf	Get hash	malicious	Unknown	Browse	176.65.134.62
	morte.arm.elf	Get hash	malicious	Unknown	Browse	176.65.134.62
	morte.mips.elf	Get hash	malicious	Unknown	Browse	176.65.134.62
	morte.mpsl.elf	Get hash	malicious	Unknown	Browse	176.65.134.62
	morte.x86.elf	Get hash	malicious	Unknown	Browse	176.65.134.62
	morte.sh4.elf	Get hash	malicious	Unknown	Browse	176.65.134.62
	morte.m68k.elf	Get hash	malicious	Unknown	Browse	176.65.134.62
	morte.arm7.elf	Get hash	malicious	Unknown	Browse	176.65.134.62

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit MSB executable, PowerPC or cisco 4500, version 1 (GNU/Linux), statically linked, no section header
Entropy (8bit):	7.969844022008009
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	morte.ppc.elf
File size:	44'572 bytes
MD5:	8825e9417e23f9ad69bf8e7417c21229
SHA1:	a11353e1cd4e982dbe4a4b8c182735e3cd91e589
SHA256:	f74ea955d0f8003bcc5ce2ea0d18050596ab906644d158b630814d05fdac0251
SHA512:	f8b9b52c6a39c95d36ad1769727596746481eb505ed072370cb9cd6882d8d8fe50478b008c0147d546366948f76da8b9b247bc3d54987e3af08981fa4edb159a
SSDEEP:	768:74OJyb4Y+5S1DwbImgZMXswJI45KUdAjBlx0uvOsQavM8ljDtdCXj84uVcqgw09P:74OUgyDwbIbZMdJI455OjBlxpG1ajDtc
TLSH:	BA13F147DABC2D03DFB9FE74AEC142E563A00A8F3341D351341296D2A35646F8581AEA
File Content Preview:	.ELF...........................4.........4. ...(...........................................@...@...@................dt.Q................................UPX!.......................W.......?.E.h4...@b.............rt...Z!K.......T.(..l1....\|.\|]oV.,.dJ\|]...y.

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	PowerPC
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - Linux
ABI Version:	0
Entry Point Address:	0x109b18
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	0
Section Header Size:	40
Number of Section Headers:	0
Header String Table Index:	0

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align
LOAD	0x0	0x100000	0x100000	0xad00	0xad00	7.9717	0x5	R E	0x10000
LOAD	0x1f40	0x10031f40	0x10031f40	0x0	0x0	0.0000	0x6	RW	0x10000
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 12, 2025 02:47:14.652879000 CET	38726	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:14.658224106 CET	7777	38726	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:14.658341885 CET	38726	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:14.712229967 CET	38726	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:14.716974974 CET	7777	38726	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:14.717025042 CET	38726	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:14.721681118 CET	7777	38726	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:15.340186119 CET	7777	38726	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:15.340517998 CET	38726	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:15.340517998 CET	38726	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:15.340878963 CET	38728	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:15.345575094 CET	7777	38728	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:15.345665932 CET	38728	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:15.346292973 CET	38728	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:15.350974083 CET	7777	38728	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:15.351047993 CET	38728	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:15.355746031 CET	7777	38728	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:16.042117119 CET	7777	38728	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:16.042445898 CET	38728	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:16.042445898 CET	38728	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:16.042761087 CET	38730	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:16.047827959 CET	7777	38730	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:16.047877073 CET	38730	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:16.048343897 CET	38730	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:16.053050995 CET	7777	38730	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:16.053100109 CET	38730	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:16.057837963 CET	7777	38730	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:16.721301079 CET	7777	38730	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:16.721520901 CET	38730	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:16.721564054 CET	38730	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:16.721982002 CET	38732	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:16.726746082 CET	7777	38732	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:16.726820946 CET	38732	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:16.727298021 CET	38732	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:16.732038975 CET	7777	38732	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:16.732085943 CET	38732	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:16.740076065 CET	7777	38732	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:17.414072990 CET	7777	38732	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:17.414304018 CET	38732	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:17.414328098 CET	38732	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:17.414752960 CET	38734	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:17.420022011 CET	7777	38734	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:17.420078993 CET	38734	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:17.420623064 CET	38734	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:17.428298950 CET	7777	38734	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:17.428343058 CET	38734	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:17.435062885 CET	7777	38734	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:18.279017925 CET	7777	38734	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:18.279141903 CET	38734	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:18.279181004 CET	38734	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:18.279339075 CET	7777	38734	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:18.279403925 CET	38734	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:18.279520988 CET	7777	38734	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:18.279577971 CET	38734	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:18.279864073 CET	38736	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:18.284749031 CET	7777	38736	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:18.284804106 CET	38736	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:18.285444021 CET	38736	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:18.290230036 CET	7777	38736	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:18.290277958 CET	38736	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:18.295010090 CET	7777	38736	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:18.960444927 CET	7777	38736	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:18.960613966 CET	38736	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:18.960649967 CET	38736	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:18.961149931 CET	38738	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:18.965892076 CET	7777	38738	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:18.966012955 CET	38738	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:18.966587067 CET	38738	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:18.971261978 CET	7777	38738	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:18.971318960 CET	38738	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:18.976057053 CET	7777	38738	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:19.666397095 CET	7777	38738	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:19.666543007 CET	38738	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:19.666585922 CET	38738	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:19.667105913 CET	38740	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:19.671865940 CET	7777	38740	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:19.671922922 CET	38740	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:19.672470093 CET	38740	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:19.677227974 CET	7777	38740	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:19.677284956 CET	38740	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:19.682023048 CET	7777	38740	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:20.385307074 CET	7777	38740	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:20.385430098 CET	38740	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:20.385477066 CET	38740	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:20.385943890 CET	38742	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:20.390707016 CET	7777	38742	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:20.390789032 CET	38742	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:20.391331911 CET	38742	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:20.396094084 CET	7777	38742	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:20.396197081 CET	38742	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:20.400907993 CET	7777	38742	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:21.067070007 CET	7777	38742	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:21.067222118 CET	38742	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:21.067327023 CET	38742	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:21.067998886 CET	38744	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:21.072752953 CET	7777	38744	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:21.072823048 CET	38744	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:21.073602915 CET	38744	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:21.078300953 CET	7777	38744	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:21.078356981 CET	38744	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:21.083120108 CET	7777	38744	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:21.769804955 CET	7777	38744	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:21.769965887 CET	38744	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:21.770097017 CET	38744	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:21.770746946 CET	38746	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:21.775496006 CET	7777	38746	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:21.775584936 CET	38746	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:21.776712894 CET	38746	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:21.781392097 CET	7777	38746	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:21.781480074 CET	38746	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:21.786109924 CET	7777	38746	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:22.458960056 CET	7777	38746	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:22.459114075 CET	38746	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:22.459170103 CET	38746	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:22.459842920 CET	38748	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:22.464581013 CET	7777	38748	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:22.464668989 CET	38748	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:22.465392113 CET	38748	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:22.470133066 CET	7777	38748	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:22.470204115 CET	38748	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:22.474987030 CET	7777	38748	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:23.296921968 CET	7777	38748	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:23.297272921 CET	38748	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:23.297272921 CET	38748	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:23.297821045 CET	38750	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:23.302556038 CET	7777	38750	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:23.302620888 CET	38750	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:23.303241968 CET	38750	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:23.307926893 CET	7777	38750	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:23.307987928 CET	38750	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:23.312737942 CET	7777	38750	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:23.982851982 CET	7777	38750	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:23.983042955 CET	38750	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:23.983092070 CET	38750	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:23.983589888 CET	38752	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:23.988398075 CET	7777	38752	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:23.988457918 CET	38752	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:23.989022970 CET	38752	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:23.993701935 CET	7777	38752	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:23.993755102 CET	38752	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:23.998475075 CET	7777	38752	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:24.684870005 CET	7777	38752	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:24.684999943 CET	38752	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:24.685044050 CET	38752	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:24.685700893 CET	38754	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:24.690402031 CET	7777	38754	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:24.690499067 CET	38754	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:24.691132069 CET	38754	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:24.695777893 CET	7777	38754	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:24.695838928 CET	38754	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:24.700508118 CET	7777	38754	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:25.401093960 CET	7777	38754	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:25.401289940 CET	38754	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:25.401290894 CET	38754	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:25.401848078 CET	38756	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:25.406624079 CET	7777	38756	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:25.406677961 CET	38756	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:25.407305956 CET	38756	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:25.412086010 CET	7777	38756	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:25.412136078 CET	38756	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:25.416846991 CET	7777	38756	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:26.090473890 CET	7777	38756	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:26.090749979 CET	38756	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:26.090750933 CET	38756	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:26.091212034 CET	38758	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:26.096045017 CET	7777	38758	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:26.096132040 CET	38758	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:26.096699953 CET	38758	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:26.101485014 CET	7777	38758	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:26.101591110 CET	38758	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:26.106373072 CET	7777	38758	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:26.779710054 CET	7777	38758	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:26.779901981 CET	38758	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:26.779962063 CET	38758	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:26.780742884 CET	38760	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:26.785481930 CET	7777	38760	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:26.785550117 CET	38760	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:26.786573887 CET	38760	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:26.791259050 CET	7777	38760	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:26.791320086 CET	38760	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:26.796035051 CET	7777	38760	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:27.467025995 CET	7777	38760	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:27.467231035 CET	38760	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:27.467231035 CET	38760	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:27.467639923 CET	38762	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:27.472359896 CET	7777	38762	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:27.472412109 CET	38762	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:27.472955942 CET	38762	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:27.477634907 CET	7777	38762	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:27.477737904 CET	38762	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:27.482403040 CET	7777	38762	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:28.175200939 CET	7777	38762	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:28.175438881 CET	38762	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:28.175438881 CET	38762	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:28.175844908 CET	38764	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:28.180685997 CET	7777	38764	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:28.180820942 CET	38764	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:28.181282043 CET	38764	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:28.186048985 CET	7777	38764	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:28.186176062 CET	38764	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:28.190871954 CET	7777	38764	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:28.861298084 CET	7777	38764	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:28.861526966 CET	38764	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:28.861526966 CET	38764	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:28.861881018 CET	38766	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:28.866636038 CET	7777	38766	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:28.866698027 CET	38766	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:28.867224932 CET	38766	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:28.871910095 CET	7777	38766	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:28.871964931 CET	38766	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:28.876674891 CET	7777	38766	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:29.720613003 CET	7777	38766	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:29.720875025 CET	38766	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:29.720875025 CET	38766	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:29.721244097 CET	38768	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:29.726052999 CET	7777	38768	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:29.726142883 CET	38768	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:29.727032900 CET	38768	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:29.734601021 CET	7777	38768	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:29.734667063 CET	38768	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:29.739332914 CET	7777	38768	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:30.404215097 CET	7777	38768	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:30.404392958 CET	38768	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:30.404474974 CET	38768	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:30.404968977 CET	38770	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:30.409771919 CET	7777	38770	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:30.409887075 CET	38770	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:30.410546064 CET	38770	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:30.415247917 CET	7777	38770	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:30.415318012 CET	38770	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:30.420047998 CET	7777	38770	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:31.097043037 CET	7777	38770	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:31.097151041 CET	38770	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:31.097191095 CET	38770	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:31.097616911 CET	38772	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:31.102310896 CET	7777	38772	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:31.102408886 CET	38772	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:31.103425980 CET	38772	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:31.108098984 CET	7777	38772	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:31.108180046 CET	38772	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:31.112822056 CET	7777	38772	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:31.800096989 CET	7777	38772	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:31.800419092 CET	38772	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:31.800493002 CET	38772	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:31.801134109 CET	38774	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:31.805852890 CET	7777	38774	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:31.805932045 CET	38774	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:31.806926966 CET	38774	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:31.811623096 CET	7777	38774	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:31.811692953 CET	38774	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:31.816425085 CET	7777	38774	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:32.485047102 CET	7777	38774	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:32.485282898 CET	38774	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:32.485282898 CET	38774	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:32.486022949 CET	38776	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:32.490780115 CET	7777	38776	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:32.490853071 CET	38776	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:32.491893053 CET	38776	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:32.496584892 CET	7777	38776	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:32.496639013 CET	38776	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:32.501324892 CET	7777	38776	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:33.191766977 CET	7777	38776	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:33.191859961 CET	38776	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:33.191960096 CET	38776	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:33.192748070 CET	38778	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:33.197530031 CET	7777	38778	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:33.197621107 CET	38778	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:33.198635101 CET	38778	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:33.203381062 CET	7777	38778	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:33.203450918 CET	38778	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:33.208147049 CET	7777	38778	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:33.876844883 CET	7777	38778	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:33.876974106 CET	38778	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:33.877011061 CET	38778	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:33.877515078 CET	38780	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:33.883065939 CET	7777	38780	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:33.883138895 CET	38780	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:33.883716106 CET	38780	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:33.888606071 CET	7777	38780	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:33.888653040 CET	38780	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:33.893727064 CET	7777	38780	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:34.570871115 CET	7777	38780	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:34.571098089 CET	38780	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:34.571098089 CET	38780	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:34.571517944 CET	38782	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:34.576333046 CET	7777	38782	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:34.576386929 CET	38782	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:34.576946020 CET	38782	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:34.581656933 CET	7777	38782	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:34.581708908 CET	38782	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:34.586416960 CET	7777	38782	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:35.252729893 CET	7777	38782	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:35.252923012 CET	38782	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:35.253006935 CET	38782	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:35.253788948 CET	38784	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:35.258538008 CET	7777	38784	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:35.258625031 CET	38784	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:35.259624004 CET	38784	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:35.264405966 CET	7777	38784	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:35.264477968 CET	38784	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:35.269232035 CET	7777	38784	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:35.934524059 CET	7777	38784	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:35.934824944 CET	38784	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:35.934860945 CET	38784	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:35.935534000 CET	38786	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:35.940246105 CET	7777	38786	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:35.940318108 CET	38786	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:35.941277027 CET	38786	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:35.945987940 CET	7777	38786	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:35.946044922 CET	38786	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:35.950764894 CET	7777	38786	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:36.642920017 CET	7777	38786	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:36.643122911 CET	38786	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:36.643217087 CET	38786	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:36.643996954 CET	38788	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:36.648746014 CET	7777	38788	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:36.648852110 CET	38788	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:36.649862051 CET	38788	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:36.654546022 CET	7777	38788	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:36.654617071 CET	38788	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:36.659276009 CET	7777	38788	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:37.323753119 CET	7777	38788	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:37.323937893 CET	38788	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:37.324069023 CET	38788	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:37.324676037 CET	38790	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:37.329382896 CET	7777	38790	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:37.329462051 CET	38790	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:37.330446959 CET	38790	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:37.335130930 CET	7777	38790	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:37.335196018 CET	38790	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:37.339927912 CET	7777	38790	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:38.009762049 CET	7777	38790	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:38.009885073 CET	38790	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:38.009947062 CET	38790	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:38.010588884 CET	38792	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:38.016386986 CET	7777	38792	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:38.016460896 CET	38792	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:38.017438889 CET	38792	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:38.022464991 CET	7777	38792	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:38.022526026 CET	38792	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:38.027234077 CET	7777	38792	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:38.725116014 CET	7777	38792	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:38.725388050 CET	38792	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:38.725389004 CET	38792	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:38.725867033 CET	38794	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:38.730595112 CET	7777	38794	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:38.730679035 CET	38794	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:38.731270075 CET	38794	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:38.735960007 CET	7777	38794	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:38.736011982 CET	38794	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:38.740767956 CET	7777	38794	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:39.410748005 CET	7777	38794	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:39.410821915 CET	38794	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:39.410969973 CET	38794	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:39.411358118 CET	38796	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:39.416104078 CET	7777	38796	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:39.416163921 CET	38796	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:39.416788101 CET	38796	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:39.421443939 CET	7777	38796	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:39.421499968 CET	38796	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:39.426121950 CET	7777	38796	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:40.120246887 CET	7777	38796	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:40.120510101 CET	38796	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:40.120511055 CET	38796	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:40.121252060 CET	38798	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:40.125976086 CET	7777	38798	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:40.126053095 CET	38798	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:40.127275944 CET	38798	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:40.131954908 CET	7777	38798	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:40.132004976 CET	38798	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:40.136706114 CET	7777	38798	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:40.834002018 CET	7777	38798	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:40.834202051 CET	38798	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:40.834234953 CET	38798	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:40.835057974 CET	38800	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:40.839780092 CET	7777	38800	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:40.839849949 CET	38800	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:40.840771914 CET	38800	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:40.845432043 CET	7777	38800	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:40.845485926 CET	38800	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:40.850264072 CET	7777	38800	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:41.523952961 CET	7777	38800	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:41.524208069 CET	38800	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:41.524208069 CET	38800	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:41.524689913 CET	38802	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:41.529438019 CET	7777	38802	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:41.529500008 CET	38802	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:41.530237913 CET	38802	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:41.536475897 CET	7777	38802	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:41.536528111 CET	38802	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:41.542613029 CET	7777	38802	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:42.222299099 CET	7777	38802	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:42.222516060 CET	38802	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:42.222516060 CET	38802	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:42.222999096 CET	38804	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:42.228439093 CET	7777	38804	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:42.228518009 CET	38804	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:42.229108095 CET	38804	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:42.235819101 CET	7777	38804	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:42.235863924 CET	38804	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:42.241194963 CET	7777	38804	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:42.936577082 CET	7777	38804	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:42.936794996 CET	38804	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:42.936826944 CET	38804	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:42.937344074 CET	38806	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:42.942111969 CET	7777	38806	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:42.942162037 CET	38806	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:42.942773104 CET	38806	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:42.947470903 CET	7777	38806	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:42.947530985 CET	38806	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:42.952207088 CET	7777	38806	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:43.652354002 CET	7777	38806	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:43.652570963 CET	38806	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:43.652571917 CET	38806	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:43.653057098 CET	38808	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:43.659017086 CET	7777	38808	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:43.659069061 CET	38808	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:43.659636021 CET	38808	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:43.664391994 CET	7777	38808	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:43.664443016 CET	38808	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:43.669205904 CET	7777	38808	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:44.342266083 CET	7777	38808	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:44.342672110 CET	38808	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:44.342672110 CET	38808	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:44.343329906 CET	38810	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:44.348356009 CET	7777	38810	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:44.348440886 CET	38810	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:44.348925114 CET	38810	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:44.353615046 CET	7777	38810	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:44.353673935 CET	38810	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:44.358386993 CET	7777	38810	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:45.032505989 CET	7777	38810	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:45.032618046 CET	38810	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:45.032771111 CET	38810	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:45.033565998 CET	38812	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:45.038254976 CET	7777	38812	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:45.038327932 CET	38812	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:45.039294958 CET	38812	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:45.043970108 CET	7777	38812	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:45.044027090 CET	38812	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:45.048723936 CET	7777	38812	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:46.525556087 CET	7777	38812	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:46.525650978 CET	38812	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:46.525706053 CET	38812	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:46.526004076 CET	7777	38812	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:46.526055098 CET	38812	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:46.526103020 CET	38814	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:46.526240110 CET	7777	38812	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:46.526268959 CET	38812	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:46.531143904 CET	7777	38814	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:46.531275034 CET	38814	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:46.531725883 CET	38814	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:46.536401033 CET	7777	38814	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:46.536482096 CET	38814	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:46.541353941 CET	7777	38814	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:47.224292994 CET	7777	38814	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:47.224595070 CET	38814	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:47.224703074 CET	38814	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:47.225379944 CET	38816	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:47.231339931 CET	7777	38816	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:47.231435061 CET	38816	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:47.232351065 CET	38816	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:47.238040924 CET	7777	38816	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:47.238114119 CET	38816	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:47.243314028 CET	7777	38816	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:47.907984972 CET	7777	38816	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:47.908140898 CET	38816	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:47.908258915 CET	38816	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:47.909050941 CET	38818	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:47.915102959 CET	7777	38818	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:47.915184021 CET	38818	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:47.916117907 CET	38818	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:47.920753956 CET	7777	38818	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:47.920815945 CET	38818	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:47.925543070 CET	7777	38818	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:48.595279932 CET	7777	38818	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:48.595433950 CET	38818	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:48.595539093 CET	38818	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:48.596275091 CET	38820	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:48.600936890 CET	7777	38820	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:48.601070881 CET	38820	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:48.601990938 CET	38820	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:48.606637955 CET	7777	38820	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:48.606726885 CET	38820	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:48.611361980 CET	7777	38820	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:49.284507990 CET	7777	38820	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:49.284640074 CET	38820	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:49.284873009 CET	38820	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:49.285684109 CET	38822	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:49.290486097 CET	7777	38822	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:49.290575981 CET	38822	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:49.291500092 CET	38822	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:49.296257019 CET	7777	38822	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:49.296375036 CET	38822	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:49.301064968 CET	7777	38822	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:49.979840040 CET	7777	38822	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:49.980137110 CET	38822	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:49.980218887 CET	38822	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:49.980840921 CET	38824	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:49.985846043 CET	7777	38824	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:49.985923052 CET	38824	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:49.986831903 CET	38824	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:49.991805077 CET	7777	38824	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:49.991869926 CET	38824	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:49.996850967 CET	7777	38824	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:50.662563086 CET	7777	38824	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:50.662718058 CET	38824	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:50.662811995 CET	38824	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:50.663633108 CET	38826	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:50.668282986 CET	7777	38826	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:50.668358088 CET	38826	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:50.669426918 CET	38826	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:50.674125910 CET	7777	38826	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:50.674171925 CET	38826	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:50.678833961 CET	7777	38826	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:51.372198105 CET	7777	38826	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:51.372328043 CET	38826	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:51.372436047 CET	38826	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:51.373254061 CET	38828	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:51.378565073 CET	7777	38828	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:51.378645897 CET	38828	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:51.379651070 CET	38828	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:51.385348082 CET	7777	38828	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:51.385417938 CET	38828	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:51.391109943 CET	7777	38828	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:52.056233883 CET	7777	38828	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:52.056410074 CET	38828	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:52.056472063 CET	38828	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:52.057221889 CET	38830	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:52.061933994 CET	7777	38830	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:52.062002897 CET	38830	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:52.063064098 CET	38830	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:52.067734957 CET	7777	38830	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:52.067800045 CET	38830	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:52.072520018 CET	7777	38830	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:52.735224009 CET	7777	38830	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:52.735394955 CET	38830	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:52.735444069 CET	38830	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:52.735975981 CET	38832	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:52.740803957 CET	7777	38832	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:52.740890980 CET	38832	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:52.741456032 CET	38832	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:52.746217012 CET	7777	38832	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:52.746325016 CET	38832	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:52.751113892 CET	7777	38832	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:53.444973946 CET	7777	38832	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:53.445141077 CET	38832	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:53.445213079 CET	38832	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:53.445883989 CET	38834	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:53.453783989 CET	7777	38834	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:53.453835011 CET	38834	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:53.454415083 CET	38834	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:53.459153891 CET	7777	38834	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:53.459202051 CET	38834	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:53.464013100 CET	7777	38834	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:54.172636986 CET	7777	38834	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:54.172816038 CET	38834	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:54.172914028 CET	38834	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:54.173602104 CET	38836	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:54.178261042 CET	7777	38836	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:54.178350925 CET	38836	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:54.179222107 CET	38836	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:54.183924913 CET	7777	38836	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:54.183969975 CET	38836	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:54.188673973 CET	7777	38836	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:54.866687059 CET	7777	38836	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:54.866852999 CET	38836	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:54.866911888 CET	38836	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:54.867667913 CET	38838	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:54.872450113 CET	7777	38838	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:54.872522116 CET	38838	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:54.873476028 CET	38838	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:54.878137112 CET	7777	38838	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:54.878237963 CET	38838	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:54.882960081 CET	7777	38838	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:55.574764967 CET	7777	38838	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:55.574821949 CET	38838	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:55.574872971 CET	38838	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:55.585540056 CET	38840	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:55.590264082 CET	7777	38840	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:55.590332031 CET	38840	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:55.591125965 CET	38840	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:55.595877886 CET	7777	38840	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:55.595922947 CET	38840	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:55.600613117 CET	7777	38840	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:56.266460896 CET	7777	38840	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:56.266649961 CET	38840	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:56.266649961 CET	38840	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:56.267272949 CET	38842	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:56.272006989 CET	7777	38842	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:56.272099018 CET	38842	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:56.272981882 CET	38842	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:56.277671099 CET	7777	38842	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:56.277739048 CET	38842	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:56.282557011 CET	7777	38842	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:56.960735083 CET	7777	38842	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:56.960843086 CET	38842	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:56.960843086 CET	38842	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:56.961365938 CET	38844	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:56.986079931 CET	7777	38844	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:56.986149073 CET	38844	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:56.986989021 CET	38844	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:56.991625071 CET	7777	38844	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:56.991686106 CET	38844	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:56.996339083 CET	7777	38844	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:57.664597988 CET	7777	38844	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:57.664738894 CET	38844	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:57.664767027 CET	38844	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:57.665462017 CET	38846	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:57.670298100 CET	7777	38846	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:57.670367002 CET	38846	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:57.671114922 CET	38846	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:57.675781012 CET	7777	38846	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:57.675823927 CET	38846	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:57.680434942 CET	7777	38846	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:58.350140095 CET	7777	38846	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:58.350284100 CET	38846	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:58.350310087 CET	38846	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:58.350857973 CET	38848	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:58.355525017 CET	7777	38848	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:58.355587006 CET	38848	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:58.356409073 CET	38848	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:58.361063957 CET	7777	38848	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:58.361113071 CET	38848	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:58.365833044 CET	7777	38848	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:59.057028055 CET	7777	38848	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:59.057154894 CET	38848	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:59.057282925 CET	38848	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:59.057804108 CET	38850	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:59.062541008 CET	7777	38850	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:59.062589884 CET	38850	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:59.063205004 CET	38850	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:59.067867994 CET	7777	38850	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:59.067914009 CET	38850	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:59.072577000 CET	7777	38850	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:59.744194031 CET	7777	38850	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:59.744401932 CET	38850	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:59.744424105 CET	38850	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:59.744834900 CET	38852	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:59.749485016 CET	7777	38852	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:59.749550104 CET	38852	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:59.750178099 CET	38852	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:59.754792929 CET	7777	38852	176.65.134.62	192.168.2.13
Mar 12, 2025 02:47:59.754832983 CET	38852	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:47:59.759510040 CET	7777	38852	176.65.134.62	192.168.2.13
Mar 12, 2025 02:48:00.547413111 CET	7777	38852	176.65.134.62	192.168.2.13
Mar 12, 2025 02:48:00.547553062 CET	38852	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:48:00.547575951 CET	38852	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:48:00.547998905 CET	38854	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:48:00.552702904 CET	7777	38854	176.65.134.62	192.168.2.13
Mar 12, 2025 02:48:00.552767992 CET	38854	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:48:00.553354979 CET	38854	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:48:00.558022022 CET	7777	38854	176.65.134.62	192.168.2.13
Mar 12, 2025 02:48:00.558060884 CET	38854	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:48:00.562712908 CET	7777	38854	176.65.134.62	192.168.2.13
Mar 12, 2025 02:48:01.249088049 CET	7777	38854	176.65.134.62	192.168.2.13
Mar 12, 2025 02:48:01.249366999 CET	38854	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:48:01.249466896 CET	38854	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:48:01.250432968 CET	38856	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:48:01.255105019 CET	7777	38856	176.65.134.62	192.168.2.13
Mar 12, 2025 02:48:01.255177021 CET	38856	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:48:01.256445885 CET	38856	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:48:01.261087894 CET	7777	38856	176.65.134.62	192.168.2.13
Mar 12, 2025 02:48:01.261145115 CET	38856	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:48:01.265801907 CET	7777	38856	176.65.134.62	192.168.2.13
Mar 12, 2025 02:48:01.934031010 CET	7777	38856	176.65.134.62	192.168.2.13
Mar 12, 2025 02:48:01.934138060 CET	38856	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:48:01.934226036 CET	38856	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:48:01.935082912 CET	38858	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:48:01.939753056 CET	7777	38858	176.65.134.62	192.168.2.13
Mar 12, 2025 02:48:01.939830065 CET	38858	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:48:01.940866947 CET	38858	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:48:01.945497990 CET	7777	38858	176.65.134.62	192.168.2.13
Mar 12, 2025 02:48:01.945553064 CET	38858	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:48:01.950212002 CET	7777	38858	176.65.134.62	192.168.2.13
Mar 12, 2025 02:48:02.648951054 CET	7777	38858	176.65.134.62	192.168.2.13
Mar 12, 2025 02:48:02.649102926 CET	38858	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:48:02.649229050 CET	38858	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:48:02.649734020 CET	38860	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:48:02.654408932 CET	7777	38860	176.65.134.62	192.168.2.13
Mar 12, 2025 02:48:02.654480934 CET	38860	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:48:02.655483961 CET	38860	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:48:02.660129070 CET	7777	38860	176.65.134.62	192.168.2.13
Mar 12, 2025 02:48:02.660186052 CET	38860	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:48:02.664853096 CET	7777	38860	176.65.134.62	192.168.2.13
Mar 12, 2025 02:48:12.663777113 CET	38860	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:48:12.668521881 CET	7777	38860	176.65.134.62	192.168.2.13
Mar 12, 2025 02:48:12.876636982 CET	7777	38860	176.65.134.62	192.168.2.13
Mar 12, 2025 02:48:12.876812935 CET	38860	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:49:12.937622070 CET	38860	7777	192.168.2.13	176.65.134.62
Mar 12, 2025 02:49:12.942401886 CET	7777	38860	176.65.134.62	192.168.2.13
Mar 12, 2025 02:49:13.150852919 CET	7777	38860	176.65.134.62	192.168.2.13
Mar 12, 2025 02:49:13.151026964 CET	38860	7777	192.168.2.13	176.65.134.62

System Behavior

Analysis Process: morte.ppc.elf PID: 5730, Parent PID: 5537

General

Start time (UTC):	01:47:13
Start date (UTC):	12/03/2025
Path:	/tmp/morte.ppc.elf
Arguments:	/tmp/morte.ppc.elf
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Chronological Activities

Analysis Process: morte.ppc.elf PID: 5732, Parent PID: 5730

General

Start time (UTC):	01:47:13
Start date (UTC):	12/03/2025
Path:	/tmp/morte.ppc.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Chronological Activities

Analysis Process: morte.ppc.elf PID: 5734, Parent PID: 5732

General

Start time (UTC):	01:47:13
Start date (UTC):	12/03/2025
Path:	/tmp/morte.ppc.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Chronological Activities

Analysis Process: systemd PID: 5779, Parent PID: 1

General

Start time (UTC):	01:47:54
Start date (UTC):	12/03/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: snap-failure PID: 5779, Parent PID: 1

General

Start time (UTC):	01:47:54
Start date (UTC):	12/03/2025
Path:	/usr/lib/snapd/snap-failure
Arguments:	/usr/lib/snapd/snap-failure snapd
File size:	4764904 bytes
MD5 hash:	69136a7d575731ce62349f2e4d3e5c36

Chronological Activities

Analysis Process: snap-failure PID: 5796, Parent PID: 5779

General

Start time (UTC):	01:47:54
Start date (UTC):	12/03/2025
Path:	/usr/lib/snapd/snap-failure
Arguments:	-
File size:	4764904 bytes
MD5 hash:	69136a7d575731ce62349f2e4d3e5c36

Chronological Activities

Analysis Process: systemctl PID: 5796, Parent PID: 5779

General

Start time (UTC):	01:47:54
Start date (UTC):	12/03/2025
Path:	/usr/bin/systemctl
Arguments:	systemctl stop snapd.socket
File size:	996584 bytes
MD5 hash:	4deddfb6741481f68aeac522cc26ff4b

Chronological Activities

Analysis Process: snap-failure PID: 5797, Parent PID: 5779

General

Start time (UTC):	01:47:54
Start date (UTC):	12/03/2025
Path:	/usr/lib/snapd/snap-failure
Arguments:	-
File size:	4764904 bytes
MD5 hash:	69136a7d575731ce62349f2e4d3e5c36

Description:	Adversaries may create or modify systemd services to repeatedly execute malicious payloads as part of persistence. Systemd is a system and service manager commonly used for managing background daemon processes (also known as services) and other system resources.Systemd is the default initialization (init) system on many Linux distributions replacing legacy init systems, including SysVinit and Upstart, while remaining backwards compatible.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Creation, File: File Modification, Process: Process Creation, Service: Service Creation, Service: Service Modification
Platforms:	Linux
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report morte.ppc.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Yara Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: morte.ppc.elf PID: 5730, Parent PID: 5537

General

Chronological Activities

Analysis Process: morte.ppc.elf PID: 5732, Parent PID: 5730

General

Chronological Activities

Analysis Process: morte.ppc.elf PID: 5734, Parent PID: 5732

General

Chronological Activities

Analysis Process: systemd PID: 5779, Parent PID: 1

General

Chronological Activities

Analysis Process: snap-failure PID: 5779, Parent PID: 1

General

Chronological Activities

Analysis Process: snap-failure PID: 5796, Parent PID: 5779

General

Chronological Activities

Analysis Process: systemctl PID: 5796, Parent PID: 5779

General

Chronological Activities

Analysis Process: snap-failure PID: 5797, Parent PID: 5779

General

Linux Analysis Report
morte.ppc.elf