General
- Target 2026-09-12_fe00607a1dc8ed4ec1bb8e2fba2b8baf_elex_emotet_stop
- Size 208KB
- Sample260913-xgd85ssbkd
- SHA256 29022c020077a881981129e515836172c3a4939bcef410067d1b9a9723fc401f
- MD5 fe00607a1dc8ed4ec1bb8e2fba2b8baf
- SHA1 dc692461e76443fd9795e04c999174c03c1fa2e7
- SHA512 1d5c4f8ae0ff34ec74b05067ce78f71cfa38419b273333a89cd645db452c1cf58885bb8e064e44887e003303f7437f0051c11df9c35cad1d1a4e1eb7d94ba32b
- SSDEEP 3072:jLQaL9tbLkRIgd1Lye9yjE2hWAN5Xbsl9dL+LOfh4pLthEjQT6j:vlZtbLWIgd1LZ9oECZbsl95+LO5kEj1
- TLSH T146247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_fe00607a1dc8ed4ec1bb8e2fba2b8baf_elex_emotet_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_fe00607a1dc8ed4ec1bb8e2fba2b8baf_elex_emotet_stop
- Size 208KB
- SHA256 29022c020077a881981129e515836172c3a4939bcef410067d1b9a9723fc401f
- MD5 fe00607a1dc8ed4ec1bb8e2fba2b8baf
- SHA1 dc692461e76443fd9795e04c999174c03c1fa2e7
- SHA512 1d5c4f8ae0ff34ec74b05067ce78f71cfa38419b273333a89cd645db452c1cf58885bb8e064e44887e003303f7437f0051c11df9c35cad1d1a4e1eb7d94ba32b
- SSDEEP 3072:jLQaL9tbLkRIgd1Lye9yjE2hWAN5Xbsl9dL+LOfh4pLthEjQT6j:vlZtbLWIgd1LZ9oECZbsl95+LO5kEj1
- TLSH T146247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory