General
- Target 2026-10-16_fd1b68b0c7f8fc4a6190d94da53d00dd_elex_emotet_stop
- Size 208KB
- Sample261017-bthlfat1dv
- SHA256 3defb4e2ec83554d680824c3cf92341d8197933769c83cebf7c80c9e911ec05f
- MD5 fd1b68b0c7f8fc4a6190d94da53d00dd
- SHA1 c55ba5152023c50058945113f4867b7fdf8e3659
- SHA512 e4a9dd4a337ef4c78cfdf432efbf4959b6b542ed8ef31caf8f67f4048a0d7a58d03c128bba15e598b035a66757486b9098b465df9627e3761ee84940638c4dfc
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlcKL+LOf04pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFlcS+LO8kEj1
- TLSH T1BD247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-16_fd1b68b0c7f8fc4a6190d94da53d00dd_elex_emotet_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-16_fd1b68b0c7f8fc4a6190d94da53d00dd_elex_emotet_stop
- Size 208KB
- SHA256 3defb4e2ec83554d680824c3cf92341d8197933769c83cebf7c80c9e911ec05f
- MD5 fd1b68b0c7f8fc4a6190d94da53d00dd
- SHA1 c55ba5152023c50058945113f4867b7fdf8e3659
- SHA512 e4a9dd4a337ef4c78cfdf432efbf4959b6b542ed8ef31caf8f67f4048a0d7a58d03c128bba15e598b035a66757486b9098b465df9627e3761ee84940638c4dfc
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFlcKL+LOf04pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFlcS+LO8kEj1
- TLSH T1BD247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory