General
- Target 2026-10-04_ecbd5433e8b943d83ce48058496a7484_elex_emotet_stop
- Size 448KB
- Sample261004-2sndeayfjg
- SHA256 e1f0d6e1154673ba9d0a99875d4500945a61ed862524362dcfc6bbcce636565f
- MD5 ecbd5433e8b943d83ce48058496a7484
- SHA1 f8d516e32679782ab19521c08dd99756fb19225a
- SHA512 a16773d429075962743a57d7e0efb8b52d4aba2874a97c9810504b381185663b37b1ac69dc9f679bf67f419d66e41d748173dd82447146475b4ccf69fda39cc6
- SSDEEP 6144:MlZtbLWIgd1LZ9oECZbxlUS+LOdkEjWbjcSbcY+CaQdaFOY4iGFYtR:OLWI09QZb6LOdkFbz+xt4vF
- TLSH T1C4A4BF12B6C1C072D8AF01328CE6C7A81BB5BD629F7152CB77D8774E9E721D28A35391
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-04_ecbd5433e8b943d83ce48058496a7484_elex_emotet_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-04_ecbd5433e8b943d83ce48058496a7484_elex_emotet_stop
- Size 448KB
- SHA256 e1f0d6e1154673ba9d0a99875d4500945a61ed862524362dcfc6bbcce636565f
- MD5 ecbd5433e8b943d83ce48058496a7484
- SHA1 f8d516e32679782ab19521c08dd99756fb19225a
- SHA512 a16773d429075962743a57d7e0efb8b52d4aba2874a97c9810504b381185663b37b1ac69dc9f679bf67f419d66e41d748173dd82447146475b4ccf69fda39cc6
- SSDEEP 6144:MlZtbLWIgd1LZ9oECZbxlUS+LOdkEjWbjcSbcY+CaQdaFOY4iGFYtR:OLWI09QZb6LOdkFbz+xt4vF
- TLSH T1C4A4BF12B6C1C072D8AF01328CE6C7A81BB5BD629F7152CB77D8774E9E721D28A35391
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory