General
- Target 2026-09-03_f1d44d6f30e5e216c598bc79f2d29bcc_elex_emotet_stop
- Size 208KB
- Sample260903-xmlv6szydz
- SHA256 a41ad79ca0a4ec1a6b4b2a290ac251219777e2c6f211eef9377ea0b9464209e4
- MD5 f1d44d6f30e5e216c598bc79f2d29bcc
- SHA1 1a62a84f48bc90565444259ba314a967f272b4c1
- SHA512 5da16d5dd3e55caa4db13a3d8f7dc2099db2d682fd41dc0f1975a063e8dd9ec5baff5adc7ab3c5d1cb9d08d174eeb3e34924e5054ee75a129d07ce7bb409baf5
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlldL+LOf74pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFll5+LOzkEj1
- TLSH T193247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-03_f1d44d6f30e5e216c598bc79f2d29bcc_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_f1d44d6f30e5e216c598bc79f2d29bcc_elex_emotet_stop
- Size 208KB
- SHA256 a41ad79ca0a4ec1a6b4b2a290ac251219777e2c6f211eef9377ea0b9464209e4
- MD5 f1d44d6f30e5e216c598bc79f2d29bcc
- SHA1 1a62a84f48bc90565444259ba314a967f272b4c1
- SHA512 5da16d5dd3e55caa4db13a3d8f7dc2099db2d682fd41dc0f1975a063e8dd9ec5baff5adc7ab3c5d1cb9d08d174eeb3e34924e5054ee75a129d07ce7bb409baf5
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlldL+LOf74pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFll5+LOzkEj1
- TLSH T193247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory