General
- Target 2026-08-16_3d4992aaa2b0e0ce6c2820f1da0fcaa2_elex_emotet_stop
- Size 208KB
- Sample260816-wwpsrafb56
- SHA256 f6a55d639c3b12d2817827f518bab484f3dca7017c83a0b476aaa66398260ef8
- MD5 3d4992aaa2b0e0ce6c2820f1da0fcaa2
- SHA1 66ddc513f39c2952dce249f813a42078bbf4edff
- SHA512 8af89b6f6e562c78f5e62652e9f6d91883b2d62e91746d8262a739c30248773d5f9fa19cb964806b612c07b1eff940d823bf8a763583f87a624c061406683d39
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFledL+LOfq4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFle5+LOykEj1
- TLSH T1AC247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_3d4992aaa2b0e0ce6c2820f1da0fcaa2_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_3d4992aaa2b0e0ce6c2820f1da0fcaa2_elex_emotet_stop
- Size 208KB
- SHA256 f6a55d639c3b12d2817827f518bab484f3dca7017c83a0b476aaa66398260ef8
- MD5 3d4992aaa2b0e0ce6c2820f1da0fcaa2
- SHA1 66ddc513f39c2952dce249f813a42078bbf4edff
- SHA512 8af89b6f6e562c78f5e62652e9f6d91883b2d62e91746d8262a739c30248773d5f9fa19cb964806b612c07b1eff940d823bf8a763583f87a624c061406683d39
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFledL+LOfq4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFle5+LOykEj1
- TLSH T1AC247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory