General
- Target 2026-04-25_4c28ca5be4127eef643f6b9051a67a31_elex_mafia_stealc_tofsee
- Size 467KB
- Sample260425-s82rasez3n
- SHA256 ce46532847ce77d33e59d48369c6350308cdf88423d0fbbb5f9c33692af1d2b8
- MD5 4c28ca5be4127eef643f6b9051a67a31
- SHA1 8884d966a5eb7741d7ef4e00ee5a02cfb524ebba
- SHA512 506aed85d48b99773afaacc73dada1d36436b6dc5d3374bfa9b48d9e2b4e47489b9ceb71f7e69122e1f52108fe459038e221bf1bc4c76736c7c3896ac75e7cde
- SSDEEP 12288:Bb4bZudi79Lg4waPvJrsdvTyQdX6Qzf3erIDxUGbNzMROSYps6Ak:Bb4bcdkLg4RvJAVbKQz5DxUGbNzOOVpB
- TLSH T12AA4F1203581C037E29719344AF5DB7A663E7DA24B22A8C73BD01BAD6EB42D1E735317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-25_4c28ca5be4127eef643f6b9051a67a31_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260130-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-25_4c28ca5be4127eef643f6b9051a67a31_elex_mafia_stealc_tofsee.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-25_4c28ca5be4127eef643f6b9051a67a31_elex_mafia_stealc_tofsee
- Size 467KB
- SHA256 ce46532847ce77d33e59d48369c6350308cdf88423d0fbbb5f9c33692af1d2b8
- MD5 4c28ca5be4127eef643f6b9051a67a31
- SHA1 8884d966a5eb7741d7ef4e00ee5a02cfb524ebba
- SHA512 506aed85d48b99773afaacc73dada1d36436b6dc5d3374bfa9b48d9e2b4e47489b9ceb71f7e69122e1f52108fe459038e221bf1bc4c76736c7c3896ac75e7cde
- SSDEEP 12288:Bb4bZudi79Lg4waPvJrsdvTyQdX6Qzf3erIDxUGbNzMROSYps6Ak:Bb4bcdkLg4RvJAVbKQz5DxUGbNzOOVpB
- TLSH T12AA4F1203581C037E29719344AF5DB7A663E7DA24B22A8C73BD01BAD6EB42D1E735317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE