General
- Target 2026-07-08_d5673da85c709ca5778aa6d8115627f3_elex_emotet_stop
- Size 282KB
- Sample260708-ym23tsfy7q
- SHA256 9d3ad10f9ff9e47d08f09cba90bb489336e77010ebb345eeb04475935d3b48fe
- MD5 d5673da85c709ca5778aa6d8115627f3
- SHA1 e2720b90d8a53a9c34110bc0892062547ccfbb9a
- SHA512 48a8c2b5885d380ebb73d16b9035cfc0b6aff8d1d5da5932d98a876afe94d9f10eebaedbefd8782511217575d69c17bb6201ec695ff666b33520bfbe1dd6f23e
- SSDEEP 6144:TlZtbLWIgd1LZ9oECZbxlUS+LOikEjiPISUOgW9X+hOGzC/:RLWI09QZb6LOikmZzcukG2/
- TLSH T1AB549F1776C28273D5A3037209DAC6E9B73ABC71573686C72794730D2B72EA5873A381
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_d5673da85c709ca5778aa6d8115627f3_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_d5673da85c709ca5778aa6d8115627f3_elex_emotet_stop.exe
Resource
win11ltsc2024-20260706-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_d5673da85c709ca5778aa6d8115627f3_elex_emotet_stop
- Size 282KB
- SHA256 9d3ad10f9ff9e47d08f09cba90bb489336e77010ebb345eeb04475935d3b48fe
- MD5 d5673da85c709ca5778aa6d8115627f3
- SHA1 e2720b90d8a53a9c34110bc0892062547ccfbb9a
- SHA512 48a8c2b5885d380ebb73d16b9035cfc0b6aff8d1d5da5932d98a876afe94d9f10eebaedbefd8782511217575d69c17bb6201ec695ff666b33520bfbe1dd6f23e
- SSDEEP 6144:TlZtbLWIgd1LZ9oECZbxlUS+LOikEjiPISUOgW9X+hOGzC/:RLWI09QZb6LOikmZzcukG2/
- TLSH T1AB549F1776C28273D5A3037209DAC6E9B73ABC71573686C72794730D2B72EA5873A381
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory