General
- Target 2026-08-08_6c01b32643170130f16b6f05da4250f8_elex_emotet_stop
- Size 208KB
- Sample260808-nxd4mswcpg
- SHA256 e53da8228100cdcab093325d35f4c9ff67c5a9ca555da6c1b34e2ad6a7d90120
- MD5 6c01b32643170130f16b6f05da4250f8
- SHA1 463453f5dc2db579c4ce728fc7c9128033ebaa41
- SHA512 44a1d37b1d5f83c0070605bf3a017a83118ea76740db95e3d8ebde0f0f8bbb108b07b7b196a042746d766c44b3fc099c85f471d7a8ccf6e3178efab53687a134
- SSDEEP 3072:ALQaL9tbLkRIgd1Lye9yjE2hWAN5XbplU6L+LOftw9LthEoBHqj:UlZtbLWIgd1LZ9oECZbplUi+LO1QEog
- TLSH T124248D1235C2CC73E4B7027588F6C7787BB6BC919B3A928B7BC03B4D6E315968A25351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_6c01b32643170130f16b6f05da4250f8_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_6c01b32643170130f16b6f05da4250f8_elex_emotet_stop
- Size 208KB
- SHA256 e53da8228100cdcab093325d35f4c9ff67c5a9ca555da6c1b34e2ad6a7d90120
- MD5 6c01b32643170130f16b6f05da4250f8
- SHA1 463453f5dc2db579c4ce728fc7c9128033ebaa41
- SHA512 44a1d37b1d5f83c0070605bf3a017a83118ea76740db95e3d8ebde0f0f8bbb108b07b7b196a042746d766c44b3fc099c85f471d7a8ccf6e3178efab53687a134
- SSDEEP 3072:ALQaL9tbLkRIgd1Lye9yjE2hWAN5XbplU6L+LOftw9LthEoBHqj:UlZtbLWIgd1LZ9oECZbplUi+LO1QEog
- TLSH T124248D1235C2CC73E4B7027588F6C7787BB6BC919B3A928B7BC03B4D6E315968A25351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory