General
- Target 2026-08-17_357e0b6b742b1534e081d1f8da4290dc_elex_emotet_stop
- Size 208KB
- Sample260817-2fvlys1cng
- SHA256 55ff034e70eafc69549cc6497e51c7859716a1f1263afc7d0eedcdb477af18c9
- MD5 357e0b6b742b1534e081d1f8da4290dc
- SHA1 7668c92839bee5af6d1a3ba2d5c0de8f12c1afa8
- SHA512 6c03fd89c09f62e5c02b62f3f2c1a6ab2fd7bcf8db75478cd7f3d7d4b418a80ade9e0ba2eea57efa79fcdec243dcba38fa99b9cb29d04e0273d59084f8b8579f
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbdlUKL+LOfJ4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbdlUS+LOBkEj1
- TLSH T112247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_357e0b6b742b1534e081d1f8da4290dc_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_357e0b6b742b1534e081d1f8da4290dc_elex_emotet_stop
- Size 208KB
- SHA256 55ff034e70eafc69549cc6497e51c7859716a1f1263afc7d0eedcdb477af18c9
- MD5 357e0b6b742b1534e081d1f8da4290dc
- SHA1 7668c92839bee5af6d1a3ba2d5c0de8f12c1afa8
- SHA512 6c03fd89c09f62e5c02b62f3f2c1a6ab2fd7bcf8db75478cd7f3d7d4b418a80ade9e0ba2eea57efa79fcdec243dcba38fa99b9cb29d04e0273d59084f8b8579f
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbdlUKL+LOfJ4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbdlUS+LOBkEj1
- TLSH T112247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory