General
- Target 2026-09-30_35fa5026e9d13466adc25bb64c546320_elex_emotet_stop
- Size 208KB
- Sample261001-trhsjaxy2l
- SHA256 5fb28033a17363079dfedc8756a43432d28a1d3ad62fa87e3fd61c9d38ac03e9
- MD5 35fa5026e9d13466adc25bb64c546320
- SHA1 e707e63db2bf5c056801b502eafce6cd8d8e3569
- SHA512 da19e183cd38ae68772fc128402a375af8bd15376a9410f8c0794b00e7eabedc2d09ec91be5cb09502221f895065571f585d279b30feb6dc901771567b002d9a
- SSDEEP 3072:TLQaL9tbLkRIgd1Lye9yjE2hWAN5XbDlURL+LOfG4pLthEjQT6j:/lZtbLWIgd1LZ9oECZbDlUd+LOekEj1
- TLSH T163247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_35fa5026e9d13466adc25bb64c546320_elex_emotet_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_35fa5026e9d13466adc25bb64c546320_elex_emotet_stop
- Size 208KB
- SHA256 5fb28033a17363079dfedc8756a43432d28a1d3ad62fa87e3fd61c9d38ac03e9
- MD5 35fa5026e9d13466adc25bb64c546320
- SHA1 e707e63db2bf5c056801b502eafce6cd8d8e3569
- SHA512 da19e183cd38ae68772fc128402a375af8bd15376a9410f8c0794b00e7eabedc2d09ec91be5cb09502221f895065571f585d279b30feb6dc901771567b002d9a
- SSDEEP 3072:TLQaL9tbLkRIgd1Lye9yjE2hWAN5XbDlURL+LOfG4pLthEjQT6j:/lZtbLWIgd1LZ9oECZbDlUd+LOekEj1
- TLSH T163247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory