General
- Target 2026-08-20_a1348f0b18489b743842f72cbe1f8189_elex_emotet_stop
- Size 208KB
- Sample260820-nvs5sayzcs
- SHA256 82f13273952b7852b2ac9168abee0db12846b15dc3ea86e50d1f1eb55ce98b78
- MD5 a1348f0b18489b743842f72cbe1f8189
- SHA1 8290c802f9a1f67a05da8471e8b1d52ea608873e
- SHA512 6f82f8ccac1cab4c5c42fc0fbf853943821773bf211c577b994eeac0c919230d4b1969f0fb30113d690f4ee11513c893e3e120b41fbf640c5d149474855db287
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlFdL+LOfW4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFlF5+LOukEj1
- TLSH T10A247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_a1348f0b18489b743842f72cbe1f8189_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_a1348f0b18489b743842f72cbe1f8189_elex_emotet_stop
- Size 208KB
- SHA256 82f13273952b7852b2ac9168abee0db12846b15dc3ea86e50d1f1eb55ce98b78
- MD5 a1348f0b18489b743842f72cbe1f8189
- SHA1 8290c802f9a1f67a05da8471e8b1d52ea608873e
- SHA512 6f82f8ccac1cab4c5c42fc0fbf853943821773bf211c577b994eeac0c919230d4b1969f0fb30113d690f4ee11513c893e3e120b41fbf640c5d149474855db287
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlFdL+LOfW4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFlF5+LOukEj1
- TLSH T10A247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory