General
- Target 2026-06-25_c2909380a8de2518a51c1ac67c26a858_elex_emotet_stop
- Size 208KB
- Sample260629-yrcnqsft2j
- SHA256 91d8234723281645765574b1c6458cbe2d03d33579e0ff587372d570e7e17094
- MD5 c2909380a8de2518a51c1ac67c26a858
- SHA1 cf15156ee94ee0f7e4588eb6d7e99e0319eaf1e9
- SHA512 a6597937b78ac7a10a20dc65ade812f1f0dce4091920113ccde754f56d6079626b25c33f75b32cc44132661bc7c0fb6eb5c3a0339c412e4f3ac72cb802b65161
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOfc4NLthEjQT6E:MlZtbLWIgd1LZ9oECZbclc5+LOUQEjq
- TLSH T14F247D2236D2C073E4B7023188F6C7787BB6BD919B36928B77C03B4D6E715A68A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-25_c2909380a8de2518a51c1ac67c26a858_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_c2909380a8de2518a51c1ac67c26a858_elex_emotet_stop.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_c2909380a8de2518a51c1ac67c26a858_elex_emotet_stop
- Size 208KB
- SHA256 91d8234723281645765574b1c6458cbe2d03d33579e0ff587372d570e7e17094
- MD5 c2909380a8de2518a51c1ac67c26a858
- SHA1 cf15156ee94ee0f7e4588eb6d7e99e0319eaf1e9
- SHA512 a6597937b78ac7a10a20dc65ade812f1f0dce4091920113ccde754f56d6079626b25c33f75b32cc44132661bc7c0fb6eb5c3a0339c412e4f3ac72cb802b65161
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOfc4NLthEjQT6E:MlZtbLWIgd1LZ9oECZbclc5+LOUQEjq
- TLSH T14F247D2236D2C073E4B7023188F6C7787BB6BD919B36928B77C03B4D6E715A68A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory