2026-08-08_06b7b26c5bf7f5421127b589d78e5eab_elex_emotet_floxif_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_06b7b26c5bf7f5421127b589d78e5eab_elex_emotet_floxif_stop
Size 582KB
Sample260808-es57wstsas
SHA256 cfeccfadc45027192335cd65c19fb4063f8d27d41a13268756e7a401660f3f54
MD5 06b7b26c5bf7f5421127b589d78e5eab
SHA1 4f1a73149fe1f8ff2edfb25492376142b93d8e41
SHA512 622151b1646dc0cb29097c34026baf9ba0b1cff4f7cfe233ead0c5e656b2e99885446b51bae9aa491166728406bb90a84c96608b7e1511f7fb4b37c71ec930fe
SSDEEP 6144:5qq76D2WMzVmiwFbBDkiUKq5KUhn7XfPreXCenaX7memnTaKaLLuz2L7GhBV+Udx:s7MIiwF1DkArUx0BjvrEH7I
TLSH
T1FBC40982725A4FF4EEBBC33720492D1F15027DAD811254B96FCDBA298DF9201572E736
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-08-08_06b7b26c5bf7f5421127b589d78e5eab_elex_emotet_floxif_stop

File Explorer

2026-08-08_06b7b26c5bf7f5421127b589d78e5eab_elex_emotet_floxif_stop

.exe 582KB

2026-08-08_06b7b26c5bf7f5421127b589d78e5eab_elex_emotet_floxif_stop

IMPHASH 178b57f5aec2851ba5206ecbca7e1b52
SHA256 cfeccfadc45027192335cd65c19fb4063f8d27d41a13268756e7a401660f3f54
MD5 06b7b26c5bf7f5421127b589d78e5eab
SHA1 4f1a73149fe1f8ff2edfb25492376142b93d8e41
SHA512 622151b1646dc0cb29097c34026baf9ba0b1cff4f7cfe233ead0c5e656b2e99885446b51bae9aa491166728406bb90a84c96608b7e1511f7fb4b37c71ec930fe
SSDEEP 6144:5qq76D2WMzVmiwFbBDkiUKq5KUhn7XfPreXCenaX7memnTaKaLLuz2L7GhBV+Udx:s7MIiwF1DkArUx0BjvrEH7I
TLSH
T1FBC40982725A4FF4EEBBC33720492D1F15027DAD811254B96FCDBA298DF9201572E736
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

28:dc:3d:0d:af:2e:7d:51:c7:a2:f4:6a:64:03:34:b3:83:70:1a:4d

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Fuji Xerox Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Solution Service Development Group,O=Fuji Xerox Co.\, Ltd.,L=Yokohama,ST=Kanagawa,C=JP

Chains

Jun 18, 2013

CN=Fuji Xerox Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Solution Service Development Group,O=Fuji Xerox Co.\, Ltd.,L=Yokohama,ST=Kanagawa,C=JP

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Fuji Xerox Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Solution Service Development Group,O=Fuji Xerox Co.\, Ltd.,L=Yokohama,ST=Kanagawa,C=JP

Serial Number

29:66:2a:74:5c:40:15:70:38:f2:78:9d:69:05:e9:c3

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 21, 2012 - Aug 23, 2013

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

Major OS version

Entry point

74197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapFree HeapAlloc GetProcessHeap GetStartupInfoW RtlUnwind RaiseException ExitProcess HeapReAlloc HeapSize SetUnhandledExceptionFilter GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter TerminateProcess UnhandledExceptionFilter IsDebuggerPresent VirtualAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetConsoleCP GetConsoleMode GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetErrorMode lstrlenA FlushFileBuffers ReadFile GetThreadLocale WritePrivateProfileStringW InterlockedIncrement GetModuleHandleA GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc FormatMessageW LocalFree MulDiv GetCurrentProcessId GetCurrentThread ConvertDefaultLocale GetVersion EnumResourceLanguagesW lstrcmpA GetLocaleInfoW CompareStringA InterlockedExchange GlobalAlloc InterlockedDecrement GlobalLock GlobalUnlock GlobalFree FreeResource GetCurrentThreadId GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom LoadLibraryW FreeLibrary CompareStringW LoadLibraryA SetLastError lstrcmpW MultiByteToWideChar GetVersionExA GetTickCount Sleep CloseHandle GetModuleFileNameW GetFileAttributesW FindFirstFileW GetVersionExW GetPrivateProfileStringW lstrcmpiW GetLastError WaitForSingleObject GetTempPathW LoadResource GetLocalTime SizeofResource LockResource WriteFile SetFilePointer GetExitCodeProcess GetCurrentProcess CreateMutexW WideCharToMultiByte FindResourceW GetProcAddress CreateFileW FindClose GetSystemDirectoryW GetModuleHandleW GetSystemTimeAsFileTime lstrlenW

user32

UnregisterClassW LoadCursorW GetSysColorBrush EndPaint BeginPaint GrayStringW DrawTextExW DrawTextW TabbedTextOutW DestroyMenu ClientToScreen GetMessageW GetCursorPos ValidateRect SetCursor PostQuitMessage ReleaseDC GetDC SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW ModifyMenuW GetMenuState EnableMenuItem CheckMenuItem ShowWindow SetWindowTextW IsDialogMessageW GetActiveWindow CreateDialogIndirectParamW IsWindowEnabled GetNextDlgTabItem EndDialog RegisterWindowMessageW LoadIconW SendDlgItemMessageW SendDlgItemMessageA WinHelpW GetCapture CallNextHookEx GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW GetFocus IsWindow SetFocus GetWindowTextW GetLastActivePopup GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints GetKeyState IsWindowVisible GetClientRect GetMenu PostMessageW GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW GetSysColor AdjustWindowRectEx GetParent CopyRect PtInRect GetDlgCtrlID DefWindowProcW CallWindowProcW GetWindowLongW SetWindowLongW SystemParametersInfoA IsIconic GetWindowPlacement GetSystemMetrics GetWindow GetWindowRect SetWindowPos GetWindowThreadProcessId TranslateMessage PeekMessageW AttachThreadInput SetForegroundWindow ExitWindowsEx GetForegroundWindow MessageBoxW DispatchMessageW GetDesktopWindow SetActiveWindow SendMessageW UpdateWindow EnableWindow SetWindowsHookExW UnregisterClassA

gdi32

SetWindowExtEx ScaleWindowExtEx DeleteDC GetStockObject ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutW RectVisible PtVisible GetObjectW SetMapMode RestoreDC SaveDC ExtTextOutW DeleteObject GetDeviceCaps CreateBitmap SetBkColor SetTextColor GetClipBox

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

advapi32

RegOpenKeyW RegSetValueExW RegCreateKeyExW RegQueryValueW OpenProcessToken RegEnumKeyW RegDeleteKeyW RegCloseKey AdjustTokenPrivileges RegOpenKeyExW RegQueryValueExW LookupPrivilegeValueW

shell32

ShellExecuteExW

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW PathFindExtensionW

oleaut32

VariantClear VariantChangeType VariantInit

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_06b7b26c5bf7f5421127b589d78e5eab_elex_emotet_floxif_stop

PE Signature issue

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oleaut32

generic