General
- Target 2026-08-10_ff27a3f3ef1342a6e8b6d0adcb09c870_elex_emotet_stop
- Size 208KB
- Sample260810-wldyhavapc
- SHA256 4888b347f5edc4e29cafd3735f3d70e55532269dfc5a0dc0b644d90ad98936e7
- MD5 ff27a3f3ef1342a6e8b6d0adcb09c870
- SHA1 85bf5eb68d8f8156b16e5e6f18ba20ec1f80fbf9
- SHA512 7eb1aed9e1b74494abb4ed9a256e81504b6ca4ed59bdbb7c16a90410fcc61c18d3c39907c818c9a855d2dce086832bc54de56b012fce358bb1d75b8cb96a93ab
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbIlUdL+LOfc4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbIlU5+LOkkEj1
- TLSH T189247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_ff27a3f3ef1342a6e8b6d0adcb09c870_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_ff27a3f3ef1342a6e8b6d0adcb09c870_elex_emotet_stop
- Size 208KB
- SHA256 4888b347f5edc4e29cafd3735f3d70e55532269dfc5a0dc0b644d90ad98936e7
- MD5 ff27a3f3ef1342a6e8b6d0adcb09c870
- SHA1 85bf5eb68d8f8156b16e5e6f18ba20ec1f80fbf9
- SHA512 7eb1aed9e1b74494abb4ed9a256e81504b6ca4ed59bdbb7c16a90410fcc61c18d3c39907c818c9a855d2dce086832bc54de56b012fce358bb1d75b8cb96a93ab
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbIlUdL+LOfc4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbIlU5+LOkkEj1
- TLSH T189247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory