General
- Target 2026-04-24_166ecadabafc9f01c902e960c1742ff2_elex_mafia_stealc_tofsee
- Size 535KB
- Sample260424-ph3dcshw31
- SHA256 29163ce9a2a1d6f612b18d6fbdd068f07d4d37bbc774088242b2951220e75921
- MD5 166ecadabafc9f01c902e960c1742ff2
- SHA1 e9ea11daa6d49bf27f94195ef3f8d982f4760b0c
- SHA512 a9b55b0be4d864bd630860b00c6d4ce7440c9fa389bb92279587706b7749852f479efc36971cb6e906056a1dbf4aa2b2d5d042918a8e80f945175b7ac110f220
- SSDEEP 12288:si4g+yU+0pAiv+JzAczeuddnwYaZgVvMxUlvjosTdcG93Dn:si4gXn0pD+NTrddnwY3vlvjRhFJ
- TLSH T187C4F1203592C033D6A719354AE4CB65567F39B64726A8CF37C42BAE6EB03C2D63435B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-24_166ecadabafc9f01c902e960c1742ff2_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-24_166ecadabafc9f01c902e960c1742ff2_elex_mafia_stealc_tofsee.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-24_166ecadabafc9f01c902e960c1742ff2_elex_mafia_stealc_tofsee
- Size 535KB
- SHA256 29163ce9a2a1d6f612b18d6fbdd068f07d4d37bbc774088242b2951220e75921
- MD5 166ecadabafc9f01c902e960c1742ff2
- SHA1 e9ea11daa6d49bf27f94195ef3f8d982f4760b0c
- SHA512 a9b55b0be4d864bd630860b00c6d4ce7440c9fa389bb92279587706b7749852f479efc36971cb6e906056a1dbf4aa2b2d5d042918a8e80f945175b7ac110f220
- SSDEEP 12288:si4g+yU+0pAiv+JzAczeuddnwYaZgVvMxUlvjosTdcG93Dn:si4gXn0pD+NTrddnwY3vlvjRhFJ
- TLSH T187C4F1203592C033D6A719354AE4CB65567F39B64726A8CF37C42BAE6EB03C2D63435B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE