General
- Target 2026-10-02_03faa1221ad3b248ba966409af55268c_elex_emotet_stop
- Size 208KB
- Sample261003-wpvenawses
- SHA256 ade01e204525f7d036c3f97d3f64bd217d87c39fd6da153aaebf2c318aff2ccf
- MD5 03faa1221ad3b248ba966409af55268c
- SHA1 3bbc11d00ef2a5c48f05c59607770459b313cc4a
- SHA512 2df22cc156a3b5c114f338787a3944bf7f2e398ac601623f70cb3f25edb93097c60d58fca29cfe518b6b5193a8825d2aa9a473e649189543a015fda6061af7b6
- SSDEEP 3072:TLQaL9tbLkRIgd1Lye9yjE2hWAN5XbDlURL+LOfO4pLthEjQT6j:/lZtbLWIgd1LZ9oECZbDlUd+LOGkEj1
- TLSH T193247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_03faa1221ad3b248ba966409af55268c_elex_emotet_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_03faa1221ad3b248ba966409af55268c_elex_emotet_stop
- Size 208KB
- SHA256 ade01e204525f7d036c3f97d3f64bd217d87c39fd6da153aaebf2c318aff2ccf
- MD5 03faa1221ad3b248ba966409af55268c
- SHA1 3bbc11d00ef2a5c48f05c59607770459b313cc4a
- SHA512 2df22cc156a3b5c114f338787a3944bf7f2e398ac601623f70cb3f25edb93097c60d58fca29cfe518b6b5193a8825d2aa9a473e649189543a015fda6061af7b6
- SSDEEP 3072:TLQaL9tbLkRIgd1Lye9yjE2hWAN5XbDlURL+LOfO4pLthEjQT6j:/lZtbLWIgd1LZ9oECZbDlUd+LOGkEj1
- TLSH T193247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory