General
- Target 2026-09-30_ec27fc959d3deff9862921af27d79092_elex_emotet_stop
- Size 208KB
- Sample260930-hpsdeawemb
- SHA256 f411555ca6b562eca05bcaa9e1eb3a860c3785ad079c6f90eb7588c241fc4f8d
- MD5 ec27fc959d3deff9862921af27d79092
- SHA1 523a5b7f9778c2abe10e3e719ce68f1cf3394880
- SHA512 0f7c22ff8a75fafe2d0ba43d397e5cae15f4a5f11a4aa28dd3187e9e9e3c89043eff121b69fedf33f65d89e5e0c4da3a9c9694059fa8d3d04a4cdbe06493cc6f
- SSDEEP 3072:TLQaL9tbLkRIgd1Lye9yjE2hWAN5XbDlURL+LOfH4pLthEjQT6j:/lZtbLWIgd1LZ9oECZbDlUd+LO/kEj1
- TLSH T1FA247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_ec27fc959d3deff9862921af27d79092_elex_emotet_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_ec27fc959d3deff9862921af27d79092_elex_emotet_stop
- Size 208KB
- SHA256 f411555ca6b562eca05bcaa9e1eb3a860c3785ad079c6f90eb7588c241fc4f8d
- MD5 ec27fc959d3deff9862921af27d79092
- SHA1 523a5b7f9778c2abe10e3e719ce68f1cf3394880
- SHA512 0f7c22ff8a75fafe2d0ba43d397e5cae15f4a5f11a4aa28dd3187e9e9e3c89043eff121b69fedf33f65d89e5e0c4da3a9c9694059fa8d3d04a4cdbe06493cc6f
- SSDEEP 3072:TLQaL9tbLkRIgd1Lye9yjE2hWAN5XbDlURL+LOfH4pLthEjQT6j:/lZtbLWIgd1LZ9oECZbDlUd+LO/kEj1
- TLSH T1FA247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory