General
- Target 2026-09-29_47e790e754c740a983d68255d533a219_elex_emotet_stop
- Size 208KB
- Sample260930-cd7fascc46
- SHA256 b1132c591b84485b6e17f76db263eedc650f498985a576f8fe80d1b33fa4970c
- MD5 47e790e754c740a983d68255d533a219
- SHA1 afe0a402c1630ab5a3d66f606b0e949024d37b76
- SHA512 b0c7de88917f026d0f380c35da61e096741fdf64e207d70ced7e008657cf0e4354e7c6e61ed7373044c9239bc5b59aa37c5dd6fe1585b4451fed70742ccf0857
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOf94NLthEjQT6j:MlZtbLWIgd1LZ9oECZbclc5+LOlQEj1
- TLSH T1DC247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_47e790e754c740a983d68255d533a219_elex_emotet_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_47e790e754c740a983d68255d533a219_elex_emotet_stop.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_47e790e754c740a983d68255d533a219_elex_emotet_stop
- Size 208KB
- SHA256 b1132c591b84485b6e17f76db263eedc650f498985a576f8fe80d1b33fa4970c
- MD5 47e790e754c740a983d68255d533a219
- SHA1 afe0a402c1630ab5a3d66f606b0e949024d37b76
- SHA512 b0c7de88917f026d0f380c35da61e096741fdf64e207d70ced7e008657cf0e4354e7c6e61ed7373044c9239bc5b59aa37c5dd6fe1585b4451fed70742ccf0857
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbclcdL+LOf94NLthEjQT6j:MlZtbLWIgd1LZ9oECZbclc5+LOlQEj1
- TLSH T1DC247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory