2026-07-10_efba98084afab130c9c18405d3502eef_elex_emotet_stop

General

Target
2026-07-10_efba98084afab130c9c18405d3502eef_elex_emotet_stop
Size 208KB
Sample260710-eynj2acy9p
SHA256 04dfeca6fd5c70828a4097339bee965ef21a55abd9438eac757d9bd2423ae838
MD5 efba98084afab130c9c18405d3502eef
SHA1 79cbd5cf6a3ee7e88473a05b6967ad4cebbbb933
SHA512 f4fa37096a673e76bfee9ca9b414c6452682f60a4088ec8b746b4acaf5da756fd8af060c397669fa4b50d6b18413bd6eb2cd9b45893224946fa962ec301b62b0
SSDEEP 1536:sTlQa/wYYItbLk9LIDQZd1Lypv6C7YE2vWArJ3ngI7JC6qqYlIjz7M7N/+X17VRK:aQaL9tbLkRIgd1LypyjE2vWAx9T1pY
TLSH
T158246B223AD2C0B3C5B711724CE8C77DB3F6B6A0CF26958777C42B4E6E611E55A3A241
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-10_efba98084afab130c9c18405d3502eef_elex_emotet_stop

File Explorer

2026-07-10_efba98084afab130c9c18405d3502eef_elex_emotet_stop

.exe 208KB

2026-07-10_efba98084afab130c9c18405d3502eef_elex_emotet_stop

IMPHASH 049558d419e3f5f918188b2bb24c1d3c
SHA256 04dfeca6fd5c70828a4097339bee965ef21a55abd9438eac757d9bd2423ae838
MD5 efba98084afab130c9c18405d3502eef
SHA1 79cbd5cf6a3ee7e88473a05b6967ad4cebbbb933
SHA512 f4fa37096a673e76bfee9ca9b414c6452682f60a4088ec8b746b4acaf5da756fd8af060c397669fa4b50d6b18413bd6eb2cd9b45893224946fa962ec301b62b0
SSDEEP 1536:sTlQa/wYYItbLk9LIDQZd1Lypv6C7YE2vWArJ3ngI7JC6qqYlIjz7M7N/+X17VRK:aQaL9tbLkRIgd1LypyjE2vWAx9T1pY
TLSH
T158246B223AD2C0B3C5B711724CE8C77DB3F6B6A0CF26958777C42B4E6E611E55A3A241
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

147867

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

psapi

GetModuleBaseNameA GetModuleFileNameExA EnumProcessModules EnumProcesses

GetOEMCP SetErrorMode GetSystemTimeAsFileTime HeapFree HeapAlloc VirtualAlloc HeapReAlloc GetCommandLineA GetProcessHeap GetStartupInfoA RtlUnwind ExitProcess RaiseException HeapSize TerminateProcess UnhandledExceptionFilter GetCPInfo IsDebuggerPresent SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate VirtualFree FreeEnvironm GetThreadLocale SetEndOfFile FlushFileBuffers SetFilePointer InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags FormatMessageA LocalFree MulDiv GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA InterlockedDecrement GetModuleFileNameW SetLastError GlobalAddAtomA GlobalUnlock GlobalFree FreeResource WritePrivateProfileStringA GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA LoadLibraryA FindResourceA LoadResource LockResource SizeofResource GlobalLock lstrcmpA GlobalAlloc FreeLibrary GlobalDeleteAtom GetVersion CompareStringA GetLastError InterlockedExchange MultiByteToWideChar WideCharToMultiByte lstrlenA Beep GetModuleHandleA GetProcAddress ReadFile GetFileSize GetModuleFileNameA GetCurrentProcess Sleep GetCurrentProcessId OpenProcess CopyFileA CloseHandle WriteFile CreateFileA FindClose FindFirstFileA GetTickCount SetUnhandledExceptionFilter ord9 ord12 ord8

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-10_efba98084afab130c9c18405d3502eef_elex_emotet_stop

psapi

generic