General
- Target 2026-04-24_fdf47ef624c047b8b1d8ae8093348144_elex_mafia_stealc_tofsee
- Size 465KB
- Sample260424-ry481adt81
- SHA256 92702c3fe6f8bb5a41c9671828d0e5a8bccc229885bdca6ea2c33b274197247a
- MD5 fdf47ef624c047b8b1d8ae8093348144
- SHA1 b0ef0e8a7a1b746579233332a458a36a6597be00
- SHA512 4762bca80b0eb61874ca3905ac2186c78b89739a03c724e4348659087637589f8483df2b02d28998d9b3be68996af5d13a13d6870c73c7b48750df88412bbb8d
- SSDEEP 6144:jFrJxvldL4c5ONK1xgWbd1s79+iStLE2tUy9SoiZ74p99OdBTok3+f9rY1C8UNen:Bb4bZudi79LGG5qyTok329UUH5jA
- TLSH T124A4E0203582C037E5A706384BF1D775297A7D615B22A8CB37D02BAE6EB42E2D731357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-24_fdf47ef624c047b8b1d8ae8093348144_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260130-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-24_fdf47ef624c047b8b1d8ae8093348144_elex_mafia_stealc_tofsee.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-24_fdf47ef624c047b8b1d8ae8093348144_elex_mafia_stealc_tofsee
- Size 465KB
- SHA256 92702c3fe6f8bb5a41c9671828d0e5a8bccc229885bdca6ea2c33b274197247a
- MD5 fdf47ef624c047b8b1d8ae8093348144
- SHA1 b0ef0e8a7a1b746579233332a458a36a6597be00
- SHA512 4762bca80b0eb61874ca3905ac2186c78b89739a03c724e4348659087637589f8483df2b02d28998d9b3be68996af5d13a13d6870c73c7b48750df88412bbb8d
- SSDEEP 6144:jFrJxvldL4c5ONK1xgWbd1s79+iStLE2tUy9SoiZ74p99OdBTok3+f9rY1C8UNen:Bb4bZudi79LGG5qyTok329UUH5jA
- TLSH T124A4E0203582C037E5A706384BF1D775297A7D615B22A8CB37D02BAE6EB42E2D731357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE