2026-08-01_ac3d315d154fbe6bcb4652e68ac33a9d_elex_emotet_floxif_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-01_ac3d315d154fbe6bcb4652e68ac33a9d_elex_emotet_floxif_stop
Size 1.3MB
Sample260801-tkdv1adc26
SHA256 bea48c7cd674f503b87c3e522d0b4f5fe552271a90fe5dd7b5c66fa05f6737d0
MD5 ac3d315d154fbe6bcb4652e68ac33a9d
SHA1 8a28d11c8a306581bd30df03efecde480d0b9222
SHA512 5bade177db716204ca27a91d11e67f9881207fa50bad4a837b4e1704e0f9bf8f3eb1ccc33d7de1e95fafb937fbd57a8fbadc701ee1c7021705111b562f540c67
SSDEEP 12288:9WAaCMee1zaAuI+APsfv1E3G8GG+czqhufUDGBjvrEH7PvQju:eIAPskG8GG+cLrEH7PvQa
TLSH
T1C8556D13D099C9B9DC0169F5D104D9F24C72ACAED9B9026F2F923C19727A343E09E97E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-08-01_ac3d315d154fbe6bcb4652e68ac33a9d_elex_emotet_floxif_stop

File Explorer

2026-08-01_ac3d315d154fbe6bcb4652e68ac33a9d_elex_emotet_floxif_stop

.exe 1.3MB

2026-08-01_ac3d315d154fbe6bcb4652e68ac33a9d_elex_emotet_floxif_stop

IMPHASH 9cf114d36741f0bdab38e5b638ed037b
SHA256 bea48c7cd674f503b87c3e522d0b4f5fe552271a90fe5dd7b5c66fa05f6737d0
MD5 ac3d315d154fbe6bcb4652e68ac33a9d
SHA1 8a28d11c8a306581bd30df03efecde480d0b9222
SHA512 5bade177db716204ca27a91d11e67f9881207fa50bad4a837b4e1704e0f9bf8f3eb1ccc33d7de1e95fafb937fbd57a8fbadc701ee1c7021705111b562f540c67
SSDEEP 12288:9WAaCMee1zaAuI+APsfv1E3G8GG+czqhufUDGBjvrEH7PvQju:eIAPskG8GG+cLrEH7PvQa
TLSH
T1C8556D13D099C9B9DC0169F5D104D9F24C72ACAED9B9026F2F923C19727A343E09E97E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

1c:39:bc:22:f0:c7:64:ef:09:ca:95:c8:9f:f3:9e:e0:a4:b3:61:01

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Fuji Xerox Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Solution Group,O=Fuji Xerox Co.\, Ltd.,L=Yokohama,ST=Kanagawa,C=JP

Chains

Apr 10, 2012

CN=Fuji Xerox Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Solution Group,O=Fuji Xerox Co.\, Ltd.,L=Yokohama,ST=Kanagawa,C=JP

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Fuji Xerox Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Solution Group,O=Fuji Xerox Co.\, Ltd.,L=Yokohama,ST=Kanagawa,C=JP

Serial Number

6d:a1:52:d0:b2:89:14:3c:6b:f4:7e:48:3d:c1:df:40

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 24, 2011 - Aug 23, 2012

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

Major OS version

Entry point

83039

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\docuworks731\jp\source\setup\release\Setup.pdb

kernel32

GetCPInfo GetOEMCP SetErrorMode HeapFree VirtualAlloc HeapReAlloc HeapAlloc GetCommandLineA GetProcessHeap GetStartupInfoA RtlUnwind ExitProcess RaiseException HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetACP IsValidCodePage HeapCreate VirtualFree GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers ReadFile GetThreadLocale InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags WritePrivateProfileStringA InterlockedDecrement GetModuleFileNameW FreeResource GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetCurrentProcessId GlobalAddAtomA SetLastError GlobalFree GlobalUnlock FormatMessageA LocalFree MulDiv GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA LoadLibraryA GlobalLock lstrcmpA GlobalAlloc FreeLibrary GetVersion InterlockedExchange CompareStringA MultiByteToWideChar Sleep GetTickCount GetTempPathA GetPrivateProfileStringA CloseHandle WriteFile GetLocalTime SetFilePointer CreateFileA FindResourceA ExpandEnvironmentStringsA GetFileAttributesA LoadResource FindClose GetLastError LockResource FindFirstFileA CreateMutexA SizeofResource GetCurrentProcess GetModuleHandleA WideCharToMultiByte GetProcAddress lstrcmpiA lstrlenA GetExitCodeProcess WaitForSingleObject GetVersionExA GetModuleFileNameA HeapDestroy GetSystemDirectoryA

user32

GetSysColorBrush LoadCursorA EndPaint BeginPaint ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog RegisterWindowMessageA LoadIconA WinHelpA GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetForegroundWindow SetActiveWindow GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow GetMenu CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx CopyRect PtInRect DefWindowProcA CallWindowProcA SystemParametersInfoA IsIconic GetWindowPlacement GetSystemMetrics GetWindowThreadProcessId GetLastActivePopup SetCursor SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos ValidateRect ExitWindowsEx UpdateWindow MessageBoxA EnableWindow LoadImageA SendMessageA GetMenuItemID GetMenuItemCount GetSubMenu GetWindowTextA SetWindowPos SetFocus IsWindowEnabled ShowWindow MoveWindow SetWindowLongA UnregisterClassA DestroyMenu GetWindowRect PostQuitMessage PostMessageA CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps GetWindow GetDlgCtrlID IsWindow SetWindowTextA GetWindowLongA IsDialogMessageA SendDlgItemMessageA GetDlgItem GetClientRect

gdi32

DeleteDC GetStockObject ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible GetObjectA DeleteObject SetMapMode RestoreDC SaveDC SetBkColor SetTextColor GetClipBox GetDeviceCaps CreateBitmap

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyA RegCloseKey RegQueryValueExA RegOpenKeyExA RegSetValueExA RegCreateKeyExA AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken

shell32

ShellExecuteExA

shlwapi

PathFindExtensionA PathFindFileNameA PathIsRelativeA

oleaut32

VariantClear VariantChangeType VariantInit

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-01_ac3d315d154fbe6bcb4652e68ac33a9d_elex_emotet_floxif_stop

PE Signature issue

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

shlwapi

oleaut32

generic