General
- Target 2026-07-29_37608e07358b43723384166c36c9d273_elex_emotet_stop
- Size 208KB
- Sample260729-kfer3a11bt
- SHA256 e428c822281f29b966a67cd06341655d91cbeafbb8277e26e048baffeb1e3deb
- MD5 37608e07358b43723384166c36c9d273
- SHA1 a1b10f93ebcebb60b8cf34dc86d6917d399c0739
- SHA512 f939baa35bb038cc5d0b43e8750e0f23d4ddde7c9656097d00d7ed53254a46a4194fa3af7309fe23bdc253d4037727c33712317c7c223993333a5bd43e1dec68
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOfi4NLthEjQT6j:MlZtbLWIgd1LZ9oECZbclc5+LOKQEj1
- TLSH T168247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_37608e07358b43723384166c36c9d273_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_37608e07358b43723384166c36c9d273_elex_emotet_stop
- Size 208KB
- SHA256 e428c822281f29b966a67cd06341655d91cbeafbb8277e26e048baffeb1e3deb
- MD5 37608e07358b43723384166c36c9d273
- SHA1 a1b10f93ebcebb60b8cf34dc86d6917d399c0739
- SHA512 f939baa35bb038cc5d0b43e8750e0f23d4ddde7c9656097d00d7ed53254a46a4194fa3af7309fe23bdc253d4037727c33712317c7c223993333a5bd43e1dec68
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOfi4NLthEjQT6j:MlZtbLWIgd1LZ9oECZbclc5+LOKQEj1
- TLSH T168247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory