General
- Target 2026-07-31_f52a576c0ac5511f060bcce0a022a8e3_elex_emotet_stop
- Size 208KB
- Sample260731-qnpvwsvsbz
- SHA256 cc5a0993ec39c1119252248ae813bdc563d7b5ebe21e98f5923ed641d4c050e3
- MD5 f52a576c0ac5511f060bcce0a022a8e3
- SHA1 bb8757287e947c19c1a42755510d5e8081791ae6
- SHA512 e05fdb51c95d1ad9cefe3baa6b511a249ef3b9769ba4064c49e96ea9f11d4b8c90e65b8d1207b1cfa05a84f245490137442731fa7c423d6245d298d695f1ac2f
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlFdL+cOf24pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFlF5+cOOkEj1
- TLSH T174247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_f52a576c0ac5511f060bcce0a022a8e3_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_f52a576c0ac5511f060bcce0a022a8e3_elex_emotet_stop.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_f52a576c0ac5511f060bcce0a022a8e3_elex_emotet_stop
- Size 208KB
- SHA256 cc5a0993ec39c1119252248ae813bdc563d7b5ebe21e98f5923ed641d4c050e3
- MD5 f52a576c0ac5511f060bcce0a022a8e3
- SHA1 bb8757287e947c19c1a42755510d5e8081791ae6
- SHA512 e05fdb51c95d1ad9cefe3baa6b511a249ef3b9769ba4064c49e96ea9f11d4b8c90e65b8d1207b1cfa05a84f245490137442731fa7c423d6245d298d695f1ac2f
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlFdL+cOf24pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFlF5+cOOkEj1
- TLSH T174247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory