General
- Target 2026-11-03_444165981028f94fb7a3315dc0e26912_elex_emotet_stop
- Size 208KB
- Sample261104-18ssdsvxex
- SHA256 ec4555752239026b714a60d9c52967666c8a7d756f64d4c0ada43fb7f77fb604
- MD5 444165981028f94fb7a3315dc0e26912
- SHA1 61cb93f5275f5191c5452adbf36259db8f827b9b
- SHA512 137afb6de837f33222bdd121d0619b9bcfc766999257c3846689f81f4e401ac25218cbbac81fa1c3f2415670b67d2b0b8d5f73d63f5d4f6cd4210d0f0c75f68c
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFliKL+LOfz4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFliS+LObkEj1
- TLSH T17B247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_444165981028f94fb7a3315dc0e26912_elex_emotet_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_444165981028f94fb7a3315dc0e26912_elex_emotet_stop
- Size 208KB
- SHA256 ec4555752239026b714a60d9c52967666c8a7d756f64d4c0ada43fb7f77fb604
- MD5 444165981028f94fb7a3315dc0e26912
- SHA1 61cb93f5275f5191c5452adbf36259db8f827b9b
- SHA512 137afb6de837f33222bdd121d0619b9bcfc766999257c3846689f81f4e401ac25218cbbac81fa1c3f2415670b67d2b0b8d5f73d63f5d4f6cd4210d0f0c75f68c
- SSDEEP 3072:oLQaL9tbLkRIgd1Lye9yjE2hWAN5XbFliKL+LOfz4pLthEjQT6j:MlZtbLWIgd1LZ9oECZbFliS+LObkEj1
- TLSH T17B247D1236D2C073E4B7023188F6C7787BB6BDA19B36928B7BC03B4D6E715968A35351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory