General
- Target 2026-08-20_937964e3c5003c269fc426b1d23af95a_elex_emotet_stop
- Size 208KB
- Sample260820-3s5hcsxfle
- SHA256 98666c701d1e0e542fd6cc42e5f187d9a4b9e6902c1dda799fd539bb03198cd2
- MD5 937964e3c5003c269fc426b1d23af95a
- SHA1 36f956353a381fa08fde72461c556a1552ccf493
- SHA512 d6564180b14f54a09da4805ec1cb2b5588ea35ca9d048ec7b2a76690803d6c0ecaa15bc6b7ddd12456307cd78dc573c822168614057162ea26292953faa068d7
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOfi4NLthEjQT6E:MlZtbLWIgd1LZ9oECZbclc5+LO6QEjK
- TLSH T153247D2236D2C073E4B7123188F6C7787BB6BD919B36928B77C03B4D6E315A68A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_937964e3c5003c269fc426b1d23af95a_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_937964e3c5003c269fc426b1d23af95a_elex_emotet_stop
- Size 208KB
- SHA256 98666c701d1e0e542fd6cc42e5f187d9a4b9e6902c1dda799fd539bb03198cd2
- MD5 937964e3c5003c269fc426b1d23af95a
- SHA1 36f956353a381fa08fde72461c556a1552ccf493
- SHA512 d6564180b14f54a09da4805ec1cb2b5588ea35ca9d048ec7b2a76690803d6c0ecaa15bc6b7ddd12456307cd78dc573c822168614057162ea26292953faa068d7
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOfi4NLthEjQT6E:MlZtbLWIgd1LZ9oECZbclc5+LO6QEjK
- TLSH T153247D2236D2C073E4B7123188F6C7787BB6BD919B36928B77C03B4D6E315A68A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory