General
- Target 2026-08-18_b16ee0d594630b01969e0d28415d2992_elex_emotet_stop
- Size 208KB
- Sample260818-nl2esssvdw
- SHA256 160eb098626c74588e20a0c21138f5cfe1315da3da7e123b55c3c6e5fc66ad9a
- MD5 b16ee0d594630b01969e0d28415d2992
- SHA1 4c9080cc949b4fbe3d2cdf6d972e6c8361164b46
- SHA512 5237e59c9ff2c336c933756f1cad6b5b8640954f6ff1e0fd65b1f1052e437d959e4c51d212d6b52cd7d4870487af525e96fa657a9d811fb10c5ee0838d840247
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlFdL+cOfI4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFlF5+cOQkEj1
- TLSH T131247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_b16ee0d594630b01969e0d28415d2992_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_b16ee0d594630b01969e0d28415d2992_elex_emotet_stop.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_b16ee0d594630b01969e0d28415d2992_elex_emotet_stop
- Size 208KB
- SHA256 160eb098626c74588e20a0c21138f5cfe1315da3da7e123b55c3c6e5fc66ad9a
- MD5 b16ee0d594630b01969e0d28415d2992
- SHA1 4c9080cc949b4fbe3d2cdf6d972e6c8361164b46
- SHA512 5237e59c9ff2c336c933756f1cad6b5b8640954f6ff1e0fd65b1f1052e437d959e4c51d212d6b52cd7d4870487af525e96fa657a9d811fb10c5ee0838d840247
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlFdL+cOfI4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFlF5+cOQkEj1
- TLSH T131247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory