General
- Target 2026-10-01_48c0fc0e8fd294f6801c8eeac8fc3e75_elex_emotet_stop
- Size 208KB
- Sample261002-svs71atfld
- SHA256 7f81111d5699d653fbb19a6e8e2d58808b09b5c2167ba7c94d02057d8352b2e3
- MD5 48c0fc0e8fd294f6801c8eeac8fc3e75
- SHA1 d62496d3885ea7253a15a4e2413a77635b2732d5
- SHA512 7219d97e87f490f4e615df0101e2c2b0441b7713040da42b1f7d8a88f3c88f33bd44f93497eaca0bbc4b19b743daa2f08e0c8b68cb66e97b6cdd3a33f02ecfa0
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlqdL+LOfU4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFlq5+LOckEj1
- TLSH T1BC247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_48c0fc0e8fd294f6801c8eeac8fc3e75_elex_emotet_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_48c0fc0e8fd294f6801c8eeac8fc3e75_elex_emotet_stop
- Size 208KB
- SHA256 7f81111d5699d653fbb19a6e8e2d58808b09b5c2167ba7c94d02057d8352b2e3
- MD5 48c0fc0e8fd294f6801c8eeac8fc3e75
- SHA1 d62496d3885ea7253a15a4e2413a77635b2732d5
- SHA512 7219d97e87f490f4e615df0101e2c2b0441b7713040da42b1f7d8a88f3c88f33bd44f93497eaca0bbc4b19b743daa2f08e0c8b68cb66e97b6cdd3a33f02ecfa0
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlqdL+LOfU4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFlq5+LOckEj1
- TLSH T1BC247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory