General
- Target 2026-08-13_d38c69ffd40e6d0add63569f42dacdb7_elex_emotet_stop
- Size 222KB
- Sample260813-wehywatzds
- SHA256 d2033de6f48969b2801d4f857ad49297dec8fafd697ae71d8e61cfd7e3738cda
- MD5 d38c69ffd40e6d0add63569f42dacdb7
- SHA1 6a9761a8195b807e961c5a41aafc1f15640af15b
- SHA512 4d520579ae9d08882069c18427c27fe8ae05b9b1109a8beab299519010c377c09a057820d2f5b95a3f93747352c3ce365c97f4d64ed2f561d2e21888ce04fd8f
- SSDEEP 3072:yLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOfH4NLthEjQT6L:ClZtbLWIgd1LZ9oECZbclc5+LOPQEjd
- TLSH T1FA246C2236D1C072E5B7127588F6C77C77B6BDA08B36968B37C03B4D6E315A68A39341
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_d38c69ffd40e6d0add63569f42dacdb7_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_d38c69ffd40e6d0add63569f42dacdb7_elex_emotet_stop
- Size 222KB
- SHA256 d2033de6f48969b2801d4f857ad49297dec8fafd697ae71d8e61cfd7e3738cda
- MD5 d38c69ffd40e6d0add63569f42dacdb7
- SHA1 6a9761a8195b807e961c5a41aafc1f15640af15b
- SHA512 4d520579ae9d08882069c18427c27fe8ae05b9b1109a8beab299519010c377c09a057820d2f5b95a3f93747352c3ce365c97f4d64ed2f561d2e21888ce04fd8f
- SSDEEP 3072:yLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOfH4NLthEjQT6L:ClZtbLWIgd1LZ9oECZbclc5+LOPQEjd
- TLSH T1FA246C2236D1C072E5B7127588F6C77C77B6BDA08B36968B37C03B4D6E315A68A39341
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory