General
- Target 2026-09-04_c022a04616adf980420880a9d18fd934_elex_emotet_stop
- Size 208KB
- Sample260904-2mbgnayvfs
- SHA256 d8515011c7b692e1719a2fe1da27fda4d00440afdfec1c7a0fb7985b0cb7e720
- MD5 c022a04616adf980420880a9d18fd934
- SHA1 12b335a910072f9b808e89f332ae6d2ac283d8bc
- SHA512 bc3fd57585b524326b8517e0b88ecd742b3217b7af7f1fe349b8ce1c0c6e38eaf1d569ba7386670c41b21b809afde1ced81f66160b3e225b49fc0764bfc4bf12
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFl1dL+LOfI4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFl15+LOwkEj1
- TLSH T146247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_c022a04616adf980420880a9d18fd934_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_c022a04616adf980420880a9d18fd934_elex_emotet_stop
- Size 208KB
- SHA256 d8515011c7b692e1719a2fe1da27fda4d00440afdfec1c7a0fb7985b0cb7e720
- MD5 c022a04616adf980420880a9d18fd934
- SHA1 12b335a910072f9b808e89f332ae6d2ac283d8bc
- SHA512 bc3fd57585b524326b8517e0b88ecd742b3217b7af7f1fe349b8ce1c0c6e38eaf1d569ba7386670c41b21b809afde1ced81f66160b3e225b49fc0764bfc4bf12
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFl1dL+LOfI4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFl15+LOwkEj1
- TLSH T146247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory