General
- Target 2026-08-18_79ff81c7217dbe065e524dbbc12de961_elex_emotet_stop
- Size 208KB
- Sample260818-sbb5dacq3z
- SHA256 bdffc41218ae56ccde434e2cf9917a853b44aaec4f630fea0253597211e76dea
- MD5 79ff81c7217dbe065e524dbbc12de961
- SHA1 757de4eaa728e9dcc8c8ae4532bac55c86d73131
- SHA512 f352e0dc00aa988d1a987fb5b96a26f6081fbfd333f9a76edc8d499b576c7d0c9e934d4ea71b99ba2ce0910bcbe7dad12d39891a231e6f2cd469d5b4150528e9
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlcdL+LOfW4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFlc5+LOOkEj1
- TLSH T1E8247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_79ff81c7217dbe065e524dbbc12de961_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_79ff81c7217dbe065e524dbbc12de961_elex_emotet_stop
- Size 208KB
- SHA256 bdffc41218ae56ccde434e2cf9917a853b44aaec4f630fea0253597211e76dea
- MD5 79ff81c7217dbe065e524dbbc12de961
- SHA1 757de4eaa728e9dcc8c8ae4532bac55c86d73131
- SHA512 f352e0dc00aa988d1a987fb5b96a26f6081fbfd333f9a76edc8d499b576c7d0c9e934d4ea71b99ba2ce0910bcbe7dad12d39891a231e6f2cd469d5b4150528e9
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlcdL+LOfW4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFlc5+LOOkEj1
- TLSH T1E8247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory