General
- Target 2026-07-30_02cd85c56b6691aea9a8380b551a9d68_elex_emotet_stop
- Size 208KB
- Sample260730-hwbz1ashma
- SHA256 9faf9cc10da3e727e69377f63f6291143279441f55f65f7ebac210d9cf3e504f
- MD5 02cd85c56b6691aea9a8380b551a9d68
- SHA1 7e99e0b6e7099bd659cf7f5db474211850463a2e
- SHA512 3f020627205331006b391812b612eeff16d21c4f56d86dd9ea338010c3154a7e03be0becda1c3519200f669ba05a2750e2a704ce04f5c495a5b72de1c4f32080
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOfo4NLthEjQT6c:MlZtbLWIgd1LZ9oECZbclc5+LOQQEje
- TLSH T1B8247D2236D2C073E4B7023188F6C7787BB6BD919B36928B77C03B4D6E715A68A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_02cd85c56b6691aea9a8380b551a9d68_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_02cd85c56b6691aea9a8380b551a9d68_elex_emotet_stop
- Size 208KB
- SHA256 9faf9cc10da3e727e69377f63f6291143279441f55f65f7ebac210d9cf3e504f
- MD5 02cd85c56b6691aea9a8380b551a9d68
- SHA1 7e99e0b6e7099bd659cf7f5db474211850463a2e
- SHA512 3f020627205331006b391812b612eeff16d21c4f56d86dd9ea338010c3154a7e03be0becda1c3519200f669ba05a2750e2a704ce04f5c495a5b72de1c4f32080
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOfo4NLthEjQT6c:MlZtbLWIgd1LZ9oECZbclc5+LOQQEje
- TLSH T1B8247D2236D2C073E4B7023188F6C7787BB6BD919B36928B77C03B4D6E715A68A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory