General
- Target 2026-07-27_870e269382db1a5786f9196103f73333_elex_emotet_stop
- Size 208KB
- Sample260727-rtnepavwav
- SHA256 55cf343a919188a114a8a1a60c80d1a6e426555203bc8575392c07ad940570c6
- MD5 870e269382db1a5786f9196103f73333
- SHA1 35670e8d3a13bf9bd5be130aecc41850e192e0d2
- SHA512 4ca0e412bf5d7a8dd8f7a3ab00d6d1695adb60e0d823dae099c5895faa6b2d4f4903a1d7702402802d2c8eb20335812c75892dbc41ada706072e2d7b773fad1b
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlcdL+LOfZ4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFlc5+LOxkEj1
- TLSH T143247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_870e269382db1a5786f9196103f73333_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_870e269382db1a5786f9196103f73333_elex_emotet_stop
- Size 208KB
- SHA256 55cf343a919188a114a8a1a60c80d1a6e426555203bc8575392c07ad940570c6
- MD5 870e269382db1a5786f9196103f73333
- SHA1 35670e8d3a13bf9bd5be130aecc41850e192e0d2
- SHA512 4ca0e412bf5d7a8dd8f7a3ab00d6d1695adb60e0d823dae099c5895faa6b2d4f4903a1d7702402802d2c8eb20335812c75892dbc41ada706072e2d7b773fad1b
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlcdL+LOfZ4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFlc5+LOxkEj1
- TLSH T143247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory