General
- Target 2026-07-21_e98a726a068e12595c3996f2e93b3e40_elex_emotet_stop
- Size 208KB
- Sample260721-tx163acd66
- SHA256 0da7844500a75c7c91e88cf90c6dfee1c46577675ed281465e97fd3ed84b4264
- MD5 e98a726a068e12595c3996f2e93b3e40
- SHA1 167dbe84b3283d03b19961d5d805e15c8bedcdf2
- SHA512 b7d1ee7e20d95400b860ccddaa3e65ac8c17e46fb1be3d0ae59d99055aa289d9cca55b75637ab9191ed5ba9cd450e63fe542c96b9a655413188ba53394aeb1a6
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOfG4NLthEjQT6E:MlZtbLWIgd1LZ9oECZbclc5+LO+QEjK
- TLSH T1D7247D2236D2C073E4B7023188F6C7787BB6BD919B36928B77C03B4D6E715A68A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_e98a726a068e12595c3996f2e93b3e40_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_e98a726a068e12595c3996f2e93b3e40_elex_emotet_stop
- Size 208KB
- SHA256 0da7844500a75c7c91e88cf90c6dfee1c46577675ed281465e97fd3ed84b4264
- MD5 e98a726a068e12595c3996f2e93b3e40
- SHA1 167dbe84b3283d03b19961d5d805e15c8bedcdf2
- SHA512 b7d1ee7e20d95400b860ccddaa3e65ac8c17e46fb1be3d0ae59d99055aa289d9cca55b75637ab9191ed5ba9cd450e63fe542c96b9a655413188ba53394aeb1a6
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOfG4NLthEjQT6E:MlZtbLWIgd1LZ9oECZbclc5+LO+QEjK
- TLSH T1D7247D2236D2C073E4B7023188F6C7787BB6BD919B36928B77C03B4D6E715A68A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory