General
- Target 2026-07-21_c4aef0595327b96d94c5392439dd7573_elex_emotet_stop
- Size 208KB
- Sample260721-r2laaswtgv
- SHA256 3af59cea681b7d6f4d9d0e3ea0091ee5a2cc4627f6731f53317bb04d4c86cdb0
- MD5 c4aef0595327b96d94c5392439dd7573
- SHA1 f818d643b6a6adbd91c72a8ea401471a39f59ab2
- SHA512 fbb8cef53425986ec3c1cc41a684918f1a34901ad27126ad6fc4a4a9b151d51e746641c5a49a7e2322852efc5c3b799940ba5320a4c84d9f9f2b25e1aea1fd5e
- SSDEEP 3072:jLQaL9tbLkRIgd1Lye9yjE2hWAN5Xbsl9dL+LOfy4pLthEjQT6j:vlZtbLWIgd1LZ9oECZbsl95+LOKkEj1
- TLSH T1EA247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_c4aef0595327b96d94c5392439dd7573_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_c4aef0595327b96d94c5392439dd7573_elex_emotet_stop
- Size 208KB
- SHA256 3af59cea681b7d6f4d9d0e3ea0091ee5a2cc4627f6731f53317bb04d4c86cdb0
- MD5 c4aef0595327b96d94c5392439dd7573
- SHA1 f818d643b6a6adbd91c72a8ea401471a39f59ab2
- SHA512 fbb8cef53425986ec3c1cc41a684918f1a34901ad27126ad6fc4a4a9b151d51e746641c5a49a7e2322852efc5c3b799940ba5320a4c84d9f9f2b25e1aea1fd5e
- SSDEEP 3072:jLQaL9tbLkRIgd1Lye9yjE2hWAN5Xbsl9dL+LOfy4pLthEjQT6j:vlZtbLWIgd1LZ9oECZbsl95+LOKkEj1
- TLSH T1EA247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory