General
- Target 2026-07-29_af496eb3df6254eacfaa011d31f526fc_elex_emotet_stop
- Size 208KB
- Sample260729-c1wmbaserd
- SHA256 3bdaf94ccef509e81fbb9cda6dcb43592ce3c1390d6b138b60551c636017c048
- MD5 af496eb3df6254eacfaa011d31f526fc
- SHA1 d7f6973e74f014beb0ed30b0cc667979cf4a3af9
- SHA512 1c64712f45809ac1818845db25ba7972f66f6ce1883a6d16a0cf1053eda6632c38e9f5bde66d71a6c726d624b21501cb610d04d9ff7d7d9568bd99d5cbded4f1
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbDlUfL+LOfM4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbDlUD+LOEkEj1
- TLSH T1CC247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_af496eb3df6254eacfaa011d31f526fc_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_af496eb3df6254eacfaa011d31f526fc_elex_emotet_stop
- Size 208KB
- SHA256 3bdaf94ccef509e81fbb9cda6dcb43592ce3c1390d6b138b60551c636017c048
- MD5 af496eb3df6254eacfaa011d31f526fc
- SHA1 d7f6973e74f014beb0ed30b0cc667979cf4a3af9
- SHA512 1c64712f45809ac1818845db25ba7972f66f6ce1883a6d16a0cf1053eda6632c38e9f5bde66d71a6c726d624b21501cb610d04d9ff7d7d9568bd99d5cbded4f1
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbDlUfL+LOfM4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbDlUD+LOEkEj1
- TLSH T1CC247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory