General
- Target 2026-04-16_36a5b349cdccfc7e06f39bd68df3bb37_elex_mafia_stealc_tofsee
- Size 535KB
- Sample260416-efcd2sav3t
- SHA256 2878406f355f7ce31ea114cd6caf61d27a32d9386aa13353902194f2dff764c1
- MD5 36a5b349cdccfc7e06f39bd68df3bb37
- SHA1 f2a30e7cf87033285b424cdc7d09999f2488bf08
- SHA512 0b1d62cc88cc7f0a9906b478a8970fb55af1173d52b0a4276a8259c5f5013ca256d542facc276eb6a5ea1e4e0d91589c0418a4bd756148547c5f15c303646a37
- SSDEEP 12288:si4g+yU+0pAiv+jDQeZ+XTgWY/ApN1ETAEUlM0xUlvjosTdcG93Dn:si4gXn0pD+js4gkH4P1aT3lvjRhFJ
- TLSH T10AC4F1303192C033D6A715750BE5D7A5667E39B60726A8CF3BC02BAD6EA02D2D739347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-16_36a5b349cdccfc7e06f39bd68df3bb37_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-16_36a5b349cdccfc7e06f39bd68df3bb37_elex_mafia_stealc_tofsee.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-16_36a5b349cdccfc7e06f39bd68df3bb37_elex_mafia_stealc_tofsee
- Size 535KB
- SHA256 2878406f355f7ce31ea114cd6caf61d27a32d9386aa13353902194f2dff764c1
- MD5 36a5b349cdccfc7e06f39bd68df3bb37
- SHA1 f2a30e7cf87033285b424cdc7d09999f2488bf08
- SHA512 0b1d62cc88cc7f0a9906b478a8970fb55af1173d52b0a4276a8259c5f5013ca256d542facc276eb6a5ea1e4e0d91589c0418a4bd756148547c5f15c303646a37
- SSDEEP 12288:si4g+yU+0pAiv+jDQeZ+XTgWY/ApN1ETAEUlM0xUlvjosTdcG93Dn:si4gXn0pD+js4gkH4P1aT3lvjRhFJ
- TLSH T10AC4F1303192C033D6A715750BE5D7A5667E39B60726A8CF3BC02BAD6EA02D2D739347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE