General
- Target 2026-08-17_4f067b8c215e9b7157e05a1d131025a8_elex_emotet_stop
- Size 208KB
- Sample260817-x3cbnsysfv
- SHA256 de2d212b51fc4d01d2f45d5993388b3a0ab16c48bda25af6fe43e4bfd65846f2
- MD5 4f067b8c215e9b7157e05a1d131025a8
- SHA1 0d4079c1e1fe02c45e1b4f0f297cec59776675cc
- SHA512 d1dc40740948eeb37083b32e0586477d84a6b258a6b99905cac0bf62cce2ae053e0329a04e7f58d0b51db258e4ff689d408bac1d6bd97e8c0bb0bdf79a44bff7
- SSDEEP 3072:ILQaL9tbLkRIgd1Lye9yjE2hWAN5XbxlUKL+LOfb4pLthEjQT6j:slZtbLWIgd1LZ9oECZbxlUS+LOTkEj1
- TLSH T167247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_4f067b8c215e9b7157e05a1d131025a8_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_4f067b8c215e9b7157e05a1d131025a8_elex_emotet_stop
- Size 208KB
- SHA256 de2d212b51fc4d01d2f45d5993388b3a0ab16c48bda25af6fe43e4bfd65846f2
- MD5 4f067b8c215e9b7157e05a1d131025a8
- SHA1 0d4079c1e1fe02c45e1b4f0f297cec59776675cc
- SHA512 d1dc40740948eeb37083b32e0586477d84a6b258a6b99905cac0bf62cce2ae053e0329a04e7f58d0b51db258e4ff689d408bac1d6bd97e8c0bb0bdf79a44bff7
- SSDEEP 3072:ILQaL9tbLkRIgd1Lye9yjE2hWAN5XbxlUKL+LOfb4pLthEjQT6j:slZtbLWIgd1LZ9oECZbxlUS+LOTkEj1
- TLSH T167247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory