General
- Target 2026-06-06_b16154855d036d6091564e8cea6d0389_elex_emotet_stop
- Size 448KB
- Sample260606-p3bfdaft8j
- SHA256 ac6966c9c136852a1e7a16f420e860e539245e43f54180e8e7dbd181ba470286
- MD5 b16154855d036d6091564e8cea6d0389
- SHA1 00cad49aef9f4acee11ff0d086bc46f46decd4b0
- SHA512 71166ee9a9c5e65f51275e51d98adb14e2bc497cb4fcb6a18e8a9bf911a5d7aa3022f18a934d8f60ea62574f43b6aab153ea45ce0ec8ce88d77d90328b9888ee
- SSDEEP 6144:TlZtbLWIgd1LZ9oECZbxlUS+LOxkEjiPISUOgW9X+hOGzC/NM:RLWI09QZb6LOxkmZzcukG2/
- TLSH T1E1A49F20B9D58673E2630135689AF1A4B3BABCA0F765C28B3158B71C2773B90173E75D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-06_b16154855d036d6091564e8cea6d0389_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-06_b16154855d036d6091564e8cea6d0389_elex_emotet_stop.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-06_b16154855d036d6091564e8cea6d0389_elex_emotet_stop
- Size 448KB
- SHA256 ac6966c9c136852a1e7a16f420e860e539245e43f54180e8e7dbd181ba470286
- MD5 b16154855d036d6091564e8cea6d0389
- SHA1 00cad49aef9f4acee11ff0d086bc46f46decd4b0
- SHA512 71166ee9a9c5e65f51275e51d98adb14e2bc497cb4fcb6a18e8a9bf911a5d7aa3022f18a934d8f60ea62574f43b6aab153ea45ce0ec8ce88d77d90328b9888ee
- SSDEEP 6144:TlZtbLWIgd1LZ9oECZbxlUS+LOxkEjiPISUOgW9X+hOGzC/NM:RLWI09QZb6LOxkmZzcukG2/
- TLSH T1E1A49F20B9D58673E2630135689AF1A4B3BABCA0F765C28B3158B71C2773B90173E75D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory