General
- Target 2026-09-24_14deef5f1240fafe83bb57dd8ee8f08c_elex_emotet_stop
- Size 208KB
- Sample260925-rwce7syape
- SHA256 8889e05383a60d1f952d3340cec8731aadbfa9168245f0c346c15f9e858fefa6
- MD5 14deef5f1240fafe83bb57dd8ee8f08c
- SHA1 d6a2cfaa85b332ae8a9f9f067df1e83593462d5b
- SHA512 f1f3b581d34dc424c074ecc3afdd7843517672f752d0722693e485dae1130edfa5fb9c93449334db2a16dd81072770e93cbbf853131fb9a9e7095d39444fff74
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlldL+LOfW4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFll5+LOekEj1
- TLSH T196247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_14deef5f1240fafe83bb57dd8ee8f08c_elex_emotet_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_14deef5f1240fafe83bb57dd8ee8f08c_elex_emotet_stop
- Size 208KB
- SHA256 8889e05383a60d1f952d3340cec8731aadbfa9168245f0c346c15f9e858fefa6
- MD5 14deef5f1240fafe83bb57dd8ee8f08c
- SHA1 d6a2cfaa85b332ae8a9f9f067df1e83593462d5b
- SHA512 f1f3b581d34dc424c074ecc3afdd7843517672f752d0722693e485dae1130edfa5fb9c93449334db2a16dd81072770e93cbbf853131fb9a9e7095d39444fff74
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlldL+LOfW4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFll5+LOekEj1
- TLSH T196247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory