Geacon and Geacon_Pro: A Constant Menace to Linux and Windows Systems
Tags
cmtmf-attack-pattern: Masquerading
country: China
attack-pattern: Data Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Masquerading - T1655 Python - T1059.006 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Connection Proxy - T1090 Masquerading - T1036 Masquerading
Show in Graph
Common Information
Type Value
UUID ff50caf7-31ea-4e46-8cc8-a35b6357a65e
Fingerprint b551b1db11338ace
Analysis status DONE
Considered CTI value 2
Text language
Published Oct. 3, 2024, midnight
Added to db Oct. 9, 2024, 8:29 p.m.
Last updated Nov. 14, 2024, 4:12 p.m.
Headline Geacon and Geacon_Pro: A Constant Menace to Linux and Windows Systems
Title Geacon and Geacon_Pro: A Constant Menace to Linux and Windows Systems
Detected Hints/Tags/Attributes 52/3/11
Source URLs
Redirection Url
Details Source https://hunt.io/blog/geacon-and-geacon-pro-a-constant-menace-to-linux-and-windows-systems
URL Provider
Details Provider Source level domain
Details hunt.io hunt.io
Attributes
Details Type #Events CTI Value
Details Domain 91 
360.net
Details Domain 57 
hunt.io
Details File 1 
ha.exe
Details File 1 
gslll.jsp
Details sha1 1 
fa21b1c5063d296d3402ff94a34b6b3a9285e59b
Details sha1 1 
d2746e2a30719760583c62b034312e16565e652e
Details sha1 1 
cab73e5f990143ed8311d760ceca7bb12e33c0d2
Details sha1 1 
20ebea093d50351f686fa80e64f9171e80bf50e8
Details sha1 1 
ffc4f2996cca934185bf36355fc4c09aef871435
Details sha1 1 
7fbfb47aee77fd965a5b703c12f5da7505af6fc6
Details sha1 1 
0e6c770f37ce2aa7942dce5350ca1fe781e5f479