General
- Target 2026-08-05_e66adad38b4d7243003526b77e39ef5b_elex_emotet_stop
- Size 208KB
- Sample260805-n7atzaxaka
- SHA256 ff70f01ad903c08710eaae8119ab49219f13b0452d7b9fa94c9ae850de868911
- MD5 e66adad38b4d7243003526b77e39ef5b
- SHA1 a5fc10fc1b0fb149d359f59a1abb8ddabec579b1
- SHA512 90de37914c0f316d1bbd8ce545bbd45d9653ae6d7f8464203a4cfbf53e1521cd56dfd02833a5fea0dc26152f1e5ef61dde7a3a56a9b5fc127046e735a64c51f0
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOf/4NLthEjQT6c:MlZtbLWIgd1LZ9oECZbclc5+LOXQEje
- TLSH T1D8247D2236D2C073E4B7123188F6C7787BB6BD919B36928B77C03B4D6E315A68A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_e66adad38b4d7243003526b77e39ef5b_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_e66adad38b4d7243003526b77e39ef5b_elex_emotet_stop
- Size 208KB
- SHA256 ff70f01ad903c08710eaae8119ab49219f13b0452d7b9fa94c9ae850de868911
- MD5 e66adad38b4d7243003526b77e39ef5b
- SHA1 a5fc10fc1b0fb149d359f59a1abb8ddabec579b1
- SHA512 90de37914c0f316d1bbd8ce545bbd45d9653ae6d7f8464203a4cfbf53e1521cd56dfd02833a5fea0dc26152f1e5ef61dde7a3a56a9b5fc127046e735a64c51f0
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOf/4NLthEjQT6c:MlZtbLWIgd1LZ9oECZbclc5+LOXQEje
- TLSH T1D8247D2236D2C073E4B7123188F6C7787BB6BD919B36928B77C03B4D6E315A68A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory