General
- Target 2026-08-28_9f3c63e389ab509993d9b1a516544249_elex_emotet_stop
- Size 208KB
- Sample260828-m7acrswgrd
- SHA256 bf325ac50b46dccee9295dd7a873e09584b7a86ec6d4b044dcf7dd001fc35c18
- MD5 9f3c63e389ab509993d9b1a516544249
- SHA1 7afc48f102890983177549b8612eb230ef6555e0
- SHA512 7866b5126f8398077e4109cb27e27b32eb6e0cb37e907250a2d54a099b04b33347fad170b6d93b0193c05d4793549a13a478a14e9b3b24e4655cb8c2b704b563
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlldL+LOfK4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFll5+LOCkEj1
- TLSH T1F7247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-28_9f3c63e389ab509993d9b1a516544249_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_9f3c63e389ab509993d9b1a516544249_elex_emotet_stop
- Size 208KB
- SHA256 bf325ac50b46dccee9295dd7a873e09584b7a86ec6d4b044dcf7dd001fc35c18
- MD5 9f3c63e389ab509993d9b1a516544249
- SHA1 7afc48f102890983177549b8612eb230ef6555e0
- SHA512 7866b5126f8398077e4109cb27e27b32eb6e0cb37e907250a2d54a099b04b33347fad170b6d93b0193c05d4793549a13a478a14e9b3b24e4655cb8c2b704b563
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlldL+LOfK4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFll5+LOCkEj1
- TLSH T1F7247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory