HKTL_SSHSCAN.GA-ELF

This Hacking Tool arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It arrives as a component bundled with malware/grayware packages.

Arrival Details

This Hacking Tool arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

It arrives as a component bundled with malware/grayware packages.

Other Details

This Hacking Tool does the following:

• The hacking tool requires the following arguments to proceed with its intended routine:
  • max forks - maximum forks allowed
• The hacking tool requires the following files to proceed with its intended routine:
  • mfu.txt - contains list of IP addresses that the hacking tool will try to access via SSH
  • pass_file - a list of space separated credentials.
• This hacking tool is a SSH brute force tool. It will try to access the servers listed in mfu.txt via SSH by using the credentials contained in the pass_file.
• This hacking tool creates and modifies the following file:
  • vuln.txt - contains result of the brute force SSH scan. Contains the list of the vulnerable IP addresses and their associated working credentials