General
- Target 2026-05-22_4a12c52294684b4c004fd0e0814261ab_elex_emotet_stop
- Size 208KB
- Sample260522-we853acs2p
- SHA256 00c4befcfeb56ac52d08ada87bffb6f852cda5566af57e1f9020934aeee44119
- MD5 4a12c52294684b4c004fd0e0814261ab
- SHA1 463987aaa016b690fcab7f5b4eeb153f7e6ddb62
- SHA512 e9537df755392686b2cb345d98432e0e614ce6edaa9d7c72117dd8d5daf19203bb4d628ba07f6be8ea5d7db323c2be741a2355da658e30cbf609a8ef80cf27de
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOfw4NLthEjQT6E:MlZtbLWIgd1LZ9oECZbclc5+LOYQEjK
- TLSH T1D4247D2236D2C073E4B7023188F6C7787BB6BD919B36928B77C03B4D6E315A68A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_4a12c52294684b4c004fd0e0814261ab_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_4a12c52294684b4c004fd0e0814261ab_elex_emotet_stop.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_4a12c52294684b4c004fd0e0814261ab_elex_emotet_stop
- Size 208KB
- SHA256 00c4befcfeb56ac52d08ada87bffb6f852cda5566af57e1f9020934aeee44119
- MD5 4a12c52294684b4c004fd0e0814261ab
- SHA1 463987aaa016b690fcab7f5b4eeb153f7e6ddb62
- SHA512 e9537df755392686b2cb345d98432e0e614ce6edaa9d7c72117dd8d5daf19203bb4d628ba07f6be8ea5d7db323c2be741a2355da658e30cbf609a8ef80cf27de
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOfw4NLthEjQT6E:MlZtbLWIgd1LZ9oECZbclc5+LOYQEjK
- TLSH T1D4247D2236D2C073E4B7023188F6C7787BB6BD919B36928B77C03B4D6E315A68A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory