General
- Target 2026-08-16_0db785fa9571a936e0f82167c42f0e84_elex_emotet_stop
- Size 208KB
- Sample260816-3t3p6azbrf
- SHA256 d20c077f1b5f3366f332280c38e5640d08a2d6e94ca54dcaec459728f2478c62
- MD5 0db785fa9571a936e0f82167c42f0e84
- SHA1 5a765e7405b906215ee2fbc743f1734eb9749521
- SHA512 697595474b49fd5a604676e6e04cdf66f5dafcaac992e5a7f457dc6e3e3dce8037e5fa8596d771015a2379e749940f02cbd9284385bb6693103ee55f85b5a3de
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5Xb8lcdL+LOf04pLthEjQT6j:MlZtbLWIgd1LZ9oECZb8lc5+LO8kEj1
- TLSH T1DE247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_0db785fa9571a936e0f82167c42f0e84_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_0db785fa9571a936e0f82167c42f0e84_elex_emotet_stop
- Size 208KB
- SHA256 d20c077f1b5f3366f332280c38e5640d08a2d6e94ca54dcaec459728f2478c62
- MD5 0db785fa9571a936e0f82167c42f0e84
- SHA1 5a765e7405b906215ee2fbc743f1734eb9749521
- SHA512 697595474b49fd5a604676e6e04cdf66f5dafcaac992e5a7f457dc6e3e3dce8037e5fa8596d771015a2379e749940f02cbd9284385bb6693103ee55f85b5a3de
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5Xb8lcdL+LOf04pLthEjQT6j:MlZtbLWIgd1LZ9oECZb8lc5+LO8kEj1
- TLSH T1DE247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory