General
- Target 2026-09-16_eb79c5c94a50b268b6e765c0aaf3ee54_elex_emotet_stop
- Size 208KB
- Sample260916-j39ehsvxgt
- SHA256 b58f54f21d287c6248392487b70f039632751527c3952e28450bddda5bf43702
- MD5 eb79c5c94a50b268b6e765c0aaf3ee54
- SHA1 32f56706e55e602dd8d626815dc3ba9fdecbd52d
- SHA512 f5f010ed08478e3ac8f3ead2acafc87008b7bbc34decb4ebc002f1232bb06dd89b1e06ed09471a2f9020f376b196ac4f21485ca4cd964ccae1e6d8e2ca363955
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlUtL+LOfl4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFlUp+LO9kEj1
- TLSH T173247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-16_eb79c5c94a50b268b6e765c0aaf3ee54_elex_emotet_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_eb79c5c94a50b268b6e765c0aaf3ee54_elex_emotet_stop
- Size 208KB
- SHA256 b58f54f21d287c6248392487b70f039632751527c3952e28450bddda5bf43702
- MD5 eb79c5c94a50b268b6e765c0aaf3ee54
- SHA1 32f56706e55e602dd8d626815dc3ba9fdecbd52d
- SHA512 f5f010ed08478e3ac8f3ead2acafc87008b7bbc34decb4ebc002f1232bb06dd89b1e06ed09471a2f9020f376b196ac4f21485ca4cd964ccae1e6d8e2ca363955
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlUtL+LOfl4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFlUp+LO9kEj1
- TLSH T173247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory