General
- Target 2026-08-01_fab923a481ef3255daab34760ee5dd31_elex_emotet_stop
- Size 448KB
- Sample260801-3chzeshn7s
- SHA256 aa785f41deace807c69245ae8fca94a00ac56aa5d966109624563c35e7e3f638
- MD5 fab923a481ef3255daab34760ee5dd31
- SHA1 ce2a9797210565b5dacd22d4f9fc91fc0d92c396
- SHA512 12864971e76d4e9ba1f1a88829a2a03dbbd6536c0ebb4142670f7ce9a259488443cd4fb1bfdaea48c630fa4a5c8f6e878222a26e9370e3e83e8a0e67c4162f87
- SSDEEP 6144:TlZtbLWIgd1LZ9oECZbxlUS+LOAkEjiPISUOgW9X+hOGzC/NM:RLWI09QZb6LOAkmZzcukG2/
- TLSH T1C7A49F20B9D58673E2630135689AF1A4B3BABCA0F765C28B3158B71C2773B90173E75D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_fab923a481ef3255daab34760ee5dd31_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_fab923a481ef3255daab34760ee5dd31_elex_emotet_stop
- Size 448KB
- SHA256 aa785f41deace807c69245ae8fca94a00ac56aa5d966109624563c35e7e3f638
- MD5 fab923a481ef3255daab34760ee5dd31
- SHA1 ce2a9797210565b5dacd22d4f9fc91fc0d92c396
- SHA512 12864971e76d4e9ba1f1a88829a2a03dbbd6536c0ebb4142670f7ce9a259488443cd4fb1bfdaea48c630fa4a5c8f6e878222a26e9370e3e83e8a0e67c4162f87
- SSDEEP 6144:TlZtbLWIgd1LZ9oECZbxlUS+LOAkEjiPISUOgW9X+hOGzC/NM:RLWI09QZb6LOAkmZzcukG2/
- TLSH T1C7A49F20B9D58673E2630135689AF1A4B3BABCA0F765C28B3158B71C2773B90173E75D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory