Overview
overview
7Static
static
3EkexClient.exe
windows7-x64
7EkexClient.exe
windows10-1703-x64
7EkexClient.exe
windows10-2004-x64
7EkexClient.exe
windows11-21h2-x64
7EkexClient.exe
android-10-x64
EkexClient.exe
android-10-x64
EkexClient.exe
android-11-x64
EkexClient.exe
android-13-x64
EkexClient.exe
android-9-x86
EkexClient.exe
macos-10.15-amd64
1EkexClient.exe
macos-10.15-amd64
1EkexClient.exe
debian-12-armhf
EkexClient.exe
debian-12-mipsel
EkexClient.exe
debian-9-armhf
EkexClient.exe
debian-9-mips
EkexClient.exe
debian-9-mipsel
EkexClient.exe
ubuntu-18.04-amd64
EkexClient.exe
ubuntu-20.04-amd64
General
-
Target
EkexClient.exe
-
Size
16.7MB
-
Sample
240307-lkw3ksgd39
-
MD5
f41449ea10867dbadbeb9984997d1667
-
SHA1
69f2eb0752463eaad10cb18a2fff9e2fce79648a
-
SHA256
bcfa9fc0b223c49baca3ac64ed6025355b07a67be93e482386a74748afa8e442
-
SHA512
931d9c513b76a612ecc980291d26db8cd97f632147bea5d53d8a0fe02c955e24d7e6492e20d4102e208f46432400e8c61b8d2fce1106d49e8c040929de479230
-
SSDEEP
393216:oh9S2nnx837Xf+h2Jp5MLurEUWjljEh01tlypd7XiWCQaa:y9Dnxq7WhpdbJ91byr+VQaa
Behavioral task
behavioral1
Sample
EkexClient.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
EkexClient.exe
Resource
win10-20240221-en
Behavioral task
behavioral3
Sample
EkexClient.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral4
Sample
EkexClient.exe
Resource
win11-20240221-en
Behavioral task
behavioral5
Sample
EkexClient.exe
Resource
android-x64-20240221-en
Behavioral task
behavioral6
Sample
EkexClient.exe
Resource
android-x64-20240221-en
Behavioral task
behavioral7
Sample
EkexClient.exe
Resource
android-x64-arm64-20240221-en
Behavioral task
behavioral8
Sample
EkexClient.exe
Resource
android-33-x64-arm64-20240229-en
Behavioral task
behavioral9
Sample
EkexClient.exe
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral10
Sample
EkexClient.exe
Resource
macos-20240214-en
Behavioral task
behavioral11
Sample
EkexClient.exe
Resource
macos-20240214-en
Behavioral task
behavioral12
Sample
EkexClient.exe
Resource
debian12-armhf-20240221-en
Behavioral task
behavioral13
Sample
EkexClient.exe
Resource
debian12-mipsel-20240221-en
Behavioral task
behavioral14
Sample
EkexClient.exe
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral15
Sample
EkexClient.exe
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral16
Sample
EkexClient.exe
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral17
Sample
EkexClient.exe
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral18
Sample
EkexClient.exe
Resource
ubuntu2004-amd64-20240221-en
Malware Config
Targets
-
-
Target
EkexClient.exe
-
Size
16.7MB
-
MD5
f41449ea10867dbadbeb9984997d1667
-
SHA1
69f2eb0752463eaad10cb18a2fff9e2fce79648a
-
SHA256
bcfa9fc0b223c49baca3ac64ed6025355b07a67be93e482386a74748afa8e442
-
SHA512
931d9c513b76a612ecc980291d26db8cd97f632147bea5d53d8a0fe02c955e24d7e6492e20d4102e208f46432400e8c61b8d2fce1106d49e8c040929de479230
-
SSDEEP
393216:oh9S2nnx837Xf+h2Jp5MLurEUWjljEh01tlypd7XiWCQaa:y9Dnxq7WhpdbJ91byr+VQaa
-
Drops startup file
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-