General
- Target 2026-04-24_bb063829f5dea6ad05cb1df882f79b52_elex_mafia_stealc_tofsee
- Size 462KB
- Sample260424-xdklrafx2s
- SHA256 e73ec93e24fc1f8992cb75817818c002e036e00f8acde02134e078e1f3002028
- MD5 bb063829f5dea6ad05cb1df882f79b52
- SHA1 c145e1d4c1132f17a39e543a1868b653d3ebd8e6
- SHA512 9549a78d5137be14816932ee7e3a6735ee0ba5cc00ddcd8c725baa1a9a96cb7d11faa11a530a675f5e339b00ec11438720be815780bee7390730f7c6a879e224
- SSDEEP 6144:0A4psmawWIrFUJe5X8bbU61Gbc1VMQqVLXmhuJGVVPu8HH+g2jYYsHZi:0oJe5X8bfA/XmwJGVVPHr2jA5i
- TLSH T1F7A4E1257885C032E2E312350EF9D7A2253ABD76A712A8C7BBD4376D6E702C1DA75307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-24_bb063829f5dea6ad05cb1df882f79b52_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260130-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-24_bb063829f5dea6ad05cb1df882f79b52_elex_mafia_stealc_tofsee.exe
Resource
win11-20260130-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-24_bb063829f5dea6ad05cb1df882f79b52_elex_mafia_stealc_tofsee
- Size 462KB
- SHA256 e73ec93e24fc1f8992cb75817818c002e036e00f8acde02134e078e1f3002028
- MD5 bb063829f5dea6ad05cb1df882f79b52
- SHA1 c145e1d4c1132f17a39e543a1868b653d3ebd8e6
- SHA512 9549a78d5137be14816932ee7e3a6735ee0ba5cc00ddcd8c725baa1a9a96cb7d11faa11a530a675f5e339b00ec11438720be815780bee7390730f7c6a879e224
- SSDEEP 6144:0A4psmawWIrFUJe5X8bbU61Gbc1VMQqVLXmhuJGVVPu8HH+g2jYYsHZi:0oJe5X8bfA/XmwJGVVPHr2jA5i
- TLSH T1F7A4E1257885C032E2E312350EF9D7A2253ABD76A712A8C7BBD4376D6E702C1DA75307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE