General
- Target 2026-07-17_aa02436e79272139d454751925b207ef_elex_emotet_stop
- Size 208KB
- Sample260717-1f4n7aav91
- SHA256 25a76ddb58a4b7978788dbc83205db1733762a39404943a35cf7cf9679725d26
- MD5 aa02436e79272139d454751925b207ef
- SHA1 e7eb748a25eb46c2bbb68abfeb1c221512f00009
- SHA512 d8c87b3fc5a57a4d1ad8d114b0e662d0a851485a6f8755dfda9ad50447c9f857a4499a45841806191dce304f72e0ea3cfb6c6ccd151ee2ddda792a854d8d233b
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOfK4NLthEjQT6c:MlZtbLWIgd1LZ9oECZbclc5+LOCQEje
- TLSH T1D0247D2236D2C073E4B7023188F6C7787BB6BD919B36928B77C03B4D6E715A68A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_aa02436e79272139d454751925b207ef_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_aa02436e79272139d454751925b207ef_elex_emotet_stop
- Size 208KB
- SHA256 25a76ddb58a4b7978788dbc83205db1733762a39404943a35cf7cf9679725d26
- MD5 aa02436e79272139d454751925b207ef
- SHA1 e7eb748a25eb46c2bbb68abfeb1c221512f00009
- SHA512 d8c87b3fc5a57a4d1ad8d114b0e662d0a851485a6f8755dfda9ad50447c9f857a4499a45841806191dce304f72e0ea3cfb6c6ccd151ee2ddda792a854d8d233b
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOfK4NLthEjQT6c:MlZtbLWIgd1LZ9oECZbclc5+LOCQEje
- TLSH T1D0247D2236D2C073E4B7023188F6C7787BB6BD919B36928B77C03B4D6E715A68A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory