General
- Target 2026-08-23_a08457d480a77e4c2de9e349c01fb291_elex_emotet_stop
- Size 208KB
- Sample260825-2x9gfazeme
- SHA256 681b267e67d20d8ef549fcd15543c91097059b7c2c38d597d459a8068048e95a
- MD5 a08457d480a77e4c2de9e349c01fb291
- SHA1 e9f6c0767307910d792ac0b4a8fc1f333c1b83fe
- SHA512 08becc2ab9bf3ed0ab74955511f8af69f59a65c4715b8fbaf39885f5376d7eb6294a2897292f36b91d66cc88128d8cdff385c873aa037172991b62577812b5ed
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOfg4NLthEjQT6E:MlZtbLWIgd1LZ9oECZbclc5+LO4QEjK
- TLSH T16F247D2235D2C073E4B7023188F6C7787BB6BD919B36928B77C03B4D6E715A68A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_a08457d480a77e4c2de9e349c01fb291_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_a08457d480a77e4c2de9e349c01fb291_elex_emotet_stop
- Size 208KB
- SHA256 681b267e67d20d8ef549fcd15543c91097059b7c2c38d597d459a8068048e95a
- MD5 a08457d480a77e4c2de9e349c01fb291
- SHA1 e9f6c0767307910d792ac0b4a8fc1f333c1b83fe
- SHA512 08becc2ab9bf3ed0ab74955511f8af69f59a65c4715b8fbaf39885f5376d7eb6294a2897292f36b91d66cc88128d8cdff385c873aa037172991b62577812b5ed
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOfg4NLthEjQT6E:MlZtbLWIgd1LZ9oECZbclc5+LO4QEjK
- TLSH T16F247D2235D2C073E4B7023188F6C7787BB6BD919B36928B77C03B4D6E715A68A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory