General
- Target 2026-07-27_cda300c465c6517631851f13c4969c5c_elex_emotet_stop
- Size 208KB
- Sample260727-jr2wasaa22
- SHA256 c44e3813d7e6435eff1628fbe53ef12e41115d4873f8699b41daf2cc35c4932c
- MD5 cda300c465c6517631851f13c4969c5c
- SHA1 59facc40cf7d3d0f6044ff435a47140f4c3b8ae2
- SHA512 473d6801ae9468ff8b2caebc054e7d536c0ca04712e4d2f067d17e3caf43f8ad5ecc652353b1090b0847ce853deec7cab464bb9789e7534b5b68b620a89f6236
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOfw4NLthEjQT6E:MlZtbLWIgd1LZ9oECZbclc5+LO4QEj6
- TLSH T188247D2236D2C073E4B7023188F6C7787BB6BD919B36928B77C03B4D6E715A68A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_cda300c465c6517631851f13c4969c5c_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_cda300c465c6517631851f13c4969c5c_elex_emotet_stop
- Size 208KB
- SHA256 c44e3813d7e6435eff1628fbe53ef12e41115d4873f8699b41daf2cc35c4932c
- MD5 cda300c465c6517631851f13c4969c5c
- SHA1 59facc40cf7d3d0f6044ff435a47140f4c3b8ae2
- SHA512 473d6801ae9468ff8b2caebc054e7d536c0ca04712e4d2f067d17e3caf43f8ad5ecc652353b1090b0847ce853deec7cab464bb9789e7534b5b68b620a89f6236
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOfw4NLthEjQT6E:MlZtbLWIgd1LZ9oECZbclc5+LO4QEj6
- TLSH T188247D2236D2C073E4B7023188F6C7787BB6BD919B36928B77C03B4D6E715A68A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory