General
- Target 2026-09-04_5095a98533dc9557f0b498699a721b93_elex_emotet_stop
- Size 208KB
- Sample260905-m3ndtssgrb
- SHA256 f92dc6ea9837d21c9962b4ef4cbba0fff7d5a46e268129049326a3651f59cbd3
- MD5 5095a98533dc9557f0b498699a721b93
- SHA1 c776b2e8f777ef0a05014580004c5aed0c827e2c
- SHA512 a210ce9a75521d953ae3ba4e9a48c5547a9715b539153b4ddc2f9492d83c208a42e91b2b48fb407913b4b8c2e3f71bd3ed39578b41fd1a5d79f7a3b675d1f3c5
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlcKL+LOfM4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFlcS+LOkkEj1
- TLSH T129247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_5095a98533dc9557f0b498699a721b93_elex_emotet_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_5095a98533dc9557f0b498699a721b93_elex_emotet_stop
- Size 208KB
- SHA256 f92dc6ea9837d21c9962b4ef4cbba0fff7d5a46e268129049326a3651f59cbd3
- MD5 5095a98533dc9557f0b498699a721b93
- SHA1 c776b2e8f777ef0a05014580004c5aed0c827e2c
- SHA512 a210ce9a75521d953ae3ba4e9a48c5547a9715b539153b4ddc2f9492d83c208a42e91b2b48fb407913b4b8c2e3f71bd3ed39578b41fd1a5d79f7a3b675d1f3c5
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlcKL+LOfM4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFlcS+LOkkEj1
- TLSH T129247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory