General
- Target 2026-09-04_8aaaaed67e37d19e9c4c017b36a60b79_elex_emotet_stop
- Size 208KB
- Sample260905-evjfxawfre
- SHA256 4c91dc6e6673c5bfa61d28697a86ca4ece479d7720ec1e57885771d1264662d4
- MD5 8aaaaed67e37d19e9c4c017b36a60b79
- SHA1 9edfac7a8c6550828c07405acf0962f0e07f928c
- SHA512 6e1e8b407d7d9783d49844bbe78d8b82f7276b727fcb3b78ca25c2902e1a381e26336222eaf1ff56aadaa133ce9f395ab2c971d64d57cb89ab489b2184f3e29a
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFliKL+LOfD4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFliS+LOLkEj1
- TLSH T18B247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_8aaaaed67e37d19e9c4c017b36a60b79_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_8aaaaed67e37d19e9c4c017b36a60b79_elex_emotet_stop
- Size 208KB
- SHA256 4c91dc6e6673c5bfa61d28697a86ca4ece479d7720ec1e57885771d1264662d4
- MD5 8aaaaed67e37d19e9c4c017b36a60b79
- SHA1 9edfac7a8c6550828c07405acf0962f0e07f928c
- SHA512 6e1e8b407d7d9783d49844bbe78d8b82f7276b727fcb3b78ca25c2902e1a381e26336222eaf1ff56aadaa133ce9f395ab2c971d64d57cb89ab489b2184f3e29a
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFliKL+LOfD4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFliS+LOLkEj1
- TLSH T18B247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory