Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
EkexClient.exe
-
Size
16.7MB
-
Sample
240307-lf3dssgc37
-
MD5
f41449ea10867dbadbeb9984997d1667
-
SHA1
69f2eb0752463eaad10cb18a2fff9e2fce79648a
-
SHA256
bcfa9fc0b223c49baca3ac64ed6025355b07a67be93e482386a74748afa8e442
-
SHA512
931d9c513b76a612ecc980291d26db8cd97f632147bea5d53d8a0fe02c955e24d7e6492e20d4102e208f46432400e8c61b8d2fce1106d49e8c040929de479230
-
SSDEEP
393216:oh9S2nnx837Xf+h2Jp5MLurEUWjljEh01tlypd7XiWCQaa:y9Dnxq7WhpdbJ91byr+VQaa
Behavioral task
behavioral1
Sample
EkexClient.exe
Resource
win10-20240221-en
Behavioral task
behavioral2
Sample
EkexClient.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
EkexClient.exe
Resource
win11-20240221-en
Behavioral task
behavioral4
Sample
EkexClient.exe.pyc
Resource
win10-20240221-en
Behavioral task
behavioral5
Sample
EkexClient.exe.pyc
Resource
win10v2004-20240226-en
Behavioral task
behavioral6
Sample
EkexClient.exe.pyc
Resource
win11-20240221-en
Malware Config
Targets
-
-
Target
EkexClient.exe
-
Size
16.7MB
-
MD5
f41449ea10867dbadbeb9984997d1667
-
SHA1
69f2eb0752463eaad10cb18a2fff9e2fce79648a
-
SHA256
bcfa9fc0b223c49baca3ac64ed6025355b07a67be93e482386a74748afa8e442
-
SHA512
931d9c513b76a612ecc980291d26db8cd97f632147bea5d53d8a0fe02c955e24d7e6492e20d4102e208f46432400e8c61b8d2fce1106d49e8c040929de479230
-
SSDEEP
393216:oh9S2nnx837Xf+h2Jp5MLurEUWjljEh01tlypd7XiWCQaa:y9Dnxq7WhpdbJ91byr+VQaa
-
Drops startup file
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
-
-
Target
EkexClient.exe.pyc
-
Size
69KB
-
MD5
2a4c573d98e6559ddc315dfc091a841a
-
SHA1
396ec4ae1c2845a867ddd3010db5da3be86c5740
-
SHA256
ad38b897bf067494c60d592e27b36d187691b66f8fb07639c6bc436f1838d775
-
SHA512
729096e3305421e02e3d4ddb2c2094c84bd38f264c01230bb9b127b4cf75de01bbaafb9dcf7a54d1b800521d5a59b70535ec9b6de2931a15999c71e1f3d00b54
-
SSDEEP
768:0+PS3Irw/gMxvCWUL8OsvPi3K2nFcWAXTxcPdCA79/GleK1AnjdRnrBI5y:0TIrYv+SNxjlJKpVrn
Score3/10 -