Overview

overview

7

Static

static

3

EKTEDIR.exe

windows7-x64

5

EKTEDIR.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    EKTEDIR.exe

  • Size

    746KB

  • Sample

    240325-nm1vnahc6t

  • MD5

    9be19c8e10fb09797a0e3d3c5fc7396f

  • SHA1

    51a0a99ede2c3be78a34699fbc213c449c4a1fe3

  • SHA256

    fb73f5a127c2ad0f07f45f1c4c556213dd3ce4b4076f4ae20fc8d37988fc883a

  • SHA512

    fb93321f88eedbf5e88db24dfdc31086006e5815a22d40d5ac7e71ceda822cc83406f566ea3e152c572ffd9dcaf6eb6222e7fcfe50b7400b7152f68a0044b0dc

  • SSDEEP

    12288:UyE0oN04r6Eqc9IVZcrur34V2y9PlQZaePquUvLwW+mL0Sq4e3AyfijHBA:AA4m3xZcruj4MONMP3k+mL+ni

Score
7/10

Malware Config

Targets

    • Target

      EKTEDIR.exe

    • Size

      746KB

    • MD5

      9be19c8e10fb09797a0e3d3c5fc7396f

    • SHA1

      51a0a99ede2c3be78a34699fbc213c449c4a1fe3

    • SHA256

      fb73f5a127c2ad0f07f45f1c4c556213dd3ce4b4076f4ae20fc8d37988fc883a

    • SHA512

      fb93321f88eedbf5e88db24dfdc31086006e5815a22d40d5ac7e71ceda822cc83406f566ea3e152c572ffd9dcaf6eb6222e7fcfe50b7400b7152f68a0044b0dc

    • SSDEEP

      12288:UyE0oN04r6Eqc9IVZcrur34V2y9PlQZaePquUvLwW+mL0Sq4e3AyfijHBA:AA4m3xZcruj4MONMP3k+mL+ni

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks