General
- Target 2026-07-14_8bab4e4ddb4796726b225f3fb0338324_elex_emotet_stop
- Size 208KB
- Sample260714-xffetabv4r
- SHA256 b4d0e2950dcf027d6d40b30ba38334381c53a53893d5e90549d44c485a443ca2
- MD5 8bab4e4ddb4796726b225f3fb0338324
- SHA1 f83b7069ec98e2c27cec79499ca6f34a7e97be47
- SHA512 1f92c056ace1b7c68c018ce25ef10417ccf9df9bd1652b33d9e6f4b08880872cf3aa6a9a471a6a6f357d8e1bd737163d638d2b9b908a1bdb17084ecfabd40c34
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOfy4NLthEjQT6j:MlZtbLWIgd1LZ9oECZbclc5+LOqQEj1
- TLSH T105247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_8bab4e4ddb4796726b225f3fb0338324_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_8bab4e4ddb4796726b225f3fb0338324_elex_emotet_stop.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_8bab4e4ddb4796726b225f3fb0338324_elex_emotet_stop
- Size 208KB
- SHA256 b4d0e2950dcf027d6d40b30ba38334381c53a53893d5e90549d44c485a443ca2
- MD5 8bab4e4ddb4796726b225f3fb0338324
- SHA1 f83b7069ec98e2c27cec79499ca6f34a7e97be47
- SHA512 1f92c056ace1b7c68c018ce25ef10417ccf9df9bd1652b33d9e6f4b08880872cf3aa6a9a471a6a6f357d8e1bd737163d638d2b9b908a1bdb17084ecfabd40c34
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOfy4NLthEjQT6j:MlZtbLWIgd1LZ9oECZbclc5+LOqQEj1
- TLSH T105247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory