General
- Target 2026-07-29_28187e2188413b69c1459f90d995a0a9_elex_emotet_stop
- Size 282KB
- Sample260729-zy4apsfr9z
- SHA256 f06d542e8a04ec3de8a0f2d4137ab71472a39f421f8f8d93921209c603da78ec
- MD5 28187e2188413b69c1459f90d995a0a9
- SHA1 8e78e5be611d0c63d4c8ddf2e0c961b662ac2e19
- SHA512 8cdd4467497e5159e9295a089d149abce380c2d73383824542139b05cf49a02996864cc105455597294aa1fd87e3b59117f0816426a7ed8b703c4b5f9675d7c0
- SSDEEP 6144:TlZtbLWIgd1LZ9oECZbxlUS+LOGkEjiPISUOgW9X+hOGzC/:RLWI09QZb6LOGkmZzcukG2/
- TLSH T114549F1776C28273D5A3037209DAC6E9B73ABC71573686C72794730D2B72EA5873A381
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_28187e2188413b69c1459f90d995a0a9_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_28187e2188413b69c1459f90d995a0a9_elex_emotet_stop
- Size 282KB
- SHA256 f06d542e8a04ec3de8a0f2d4137ab71472a39f421f8f8d93921209c603da78ec
- MD5 28187e2188413b69c1459f90d995a0a9
- SHA1 8e78e5be611d0c63d4c8ddf2e0c961b662ac2e19
- SHA512 8cdd4467497e5159e9295a089d149abce380c2d73383824542139b05cf49a02996864cc105455597294aa1fd87e3b59117f0816426a7ed8b703c4b5f9675d7c0
- SSDEEP 6144:TlZtbLWIgd1LZ9oECZbxlUS+LOGkEjiPISUOgW9X+hOGzC/:RLWI09QZb6LOGkmZzcukG2/
- TLSH T114549F1776C28273D5A3037209DAC6E9B73ABC71573686C72794730D2B72EA5873A381
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory