General
- Target 2026-07-05_c1ffc52f4805a17f85c01fe883845872_elex_emotet_stop
- Size 208KB
- Sample260705-ffv2tshw8t
- SHA256 b8b79280e616a3a86122299933677a68261c9e585802f1dd6a3d7eb6a79cd8a0
- MD5 c1ffc52f4805a17f85c01fe883845872
- SHA1 ffa3287c47506ca7d4d85970055383a59410a946
- SHA512 fdfc9d6155ecdabdb234d81f5bcd202381bbfb7b838139b57d00d98fa08395a04c718af0de1ff6eb0993fca2eb0f6a2a987f22be31f5a8139d3891be8a87c87d
- SSDEEP 3072:HLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlFLL+LIfnHLthEOmN6j:rlZtbLWIgd1LZ9oECZbFlFf+LIvEOx
- TLSH T18A249E2235C2CC73D4B3023688E6876C7BB5BD91573696CB5BC03A49AE715D68B3B381
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_c1ffc52f4805a17f85c01fe883845872_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_c1ffc52f4805a17f85c01fe883845872_elex_emotet_stop.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_c1ffc52f4805a17f85c01fe883845872_elex_emotet_stop
- Size 208KB
- SHA256 b8b79280e616a3a86122299933677a68261c9e585802f1dd6a3d7eb6a79cd8a0
- MD5 c1ffc52f4805a17f85c01fe883845872
- SHA1 ffa3287c47506ca7d4d85970055383a59410a946
- SHA512 fdfc9d6155ecdabdb234d81f5bcd202381bbfb7b838139b57d00d98fa08395a04c718af0de1ff6eb0993fca2eb0f6a2a987f22be31f5a8139d3891be8a87c87d
- SSDEEP 3072:HLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlFLL+LIfnHLthEOmN6j:rlZtbLWIgd1LZ9oECZbFlFf+LIvEOx
- TLSH T18A249E2235C2CC73D4B3023688E6876C7BB5BD91573696CB5BC03A49AE715D68B3B381
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.