General
- Target 2026-07-19_277d4997d4cf1a463205ee84db5669f2_elex_emotet_stop
- Size 208KB
- Sample260719-yfwbpsav4q
- SHA256 35d6ee2d2e25d6e4173765dde830f6c0d8189cb96afffc1ded2e79c25d736d2a
- MD5 277d4997d4cf1a463205ee84db5669f2
- SHA1 b304329b820857e4879a3c44d5645daf82c9a5e2
- SHA512 52f66a6b7e3421d6627c282025ba52708cdec1ae051060d2eed24fa9edf8e28ee419491a13f863680b0e97ebd3e696709a544c7e79d074fab3e1c60e97e10320
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlFdL+LOfc4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFlF5+LOEkEj1
- TLSH T1A6247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_277d4997d4cf1a463205ee84db5669f2_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_277d4997d4cf1a463205ee84db5669f2_elex_emotet_stop
- Size 208KB
- SHA256 35d6ee2d2e25d6e4173765dde830f6c0d8189cb96afffc1ded2e79c25d736d2a
- MD5 277d4997d4cf1a463205ee84db5669f2
- SHA1 b304329b820857e4879a3c44d5645daf82c9a5e2
- SHA512 52f66a6b7e3421d6627c282025ba52708cdec1ae051060d2eed24fa9edf8e28ee419491a13f863680b0e97ebd3e696709a544c7e79d074fab3e1c60e97e10320
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlFdL+LOfc4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFlF5+LOEkEj1
- TLSH T1A6247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory