General
- Target 2026-05-03_47d21246c2a9fb4729b23f93433fee58_elex_stealc_stop_tofsee
- Size 264KB
- Sample260503-kyr54set4x
- SHA256 471b12b259d0c3cd058885951ce243c46575fd204e048a06bf66dfdf7a6d9a45
- MD5 47d21246c2a9fb4729b23f93433fee58
- SHA1 2328da866c5c54b33cf5c202f554d9991544935a
- SHA512 26e690f727fe80de9b1b6e0a0183bcc0a4c384b2ec3681d7e518b566d3007c9c83606995a561f326f99d10c4cd9fa743010084b55f871e6c56d4cc3a8cfb9323
- SSDEEP 3072:AUApueDWSppTaeskDEjUrqfkZ557YzAL9gFoI3X3fZE5UANaO:ASeyGpTaesaQUufkL57YsL9NIx9ANaO
- TLSH T161444C213680C032E366273049E6E6F459A97D794AA4E64FF7B47F391E315938A3720F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-03_47d21246c2a9fb4729b23f93433fee58_elex_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
112.175.88.207
-
112.175.88.208
Targets
-
- Target 2026-05-03_47d21246c2a9fb4729b23f93433fee58_elex_stealc_stop_tofsee
- Size 264KB
- SHA256 471b12b259d0c3cd058885951ce243c46575fd204e048a06bf66dfdf7a6d9a45
- MD5 47d21246c2a9fb4729b23f93433fee58
- SHA1 2328da866c5c54b33cf5c202f554d9991544935a
- SHA512 26e690f727fe80de9b1b6e0a0183bcc0a4c384b2ec3681d7e518b566d3007c9c83606995a561f326f99d10c4cd9fa743010084b55f871e6c56d4cc3a8cfb9323
- SSDEEP 3072:AUApueDWSppTaeskDEjUrqfkZ557YzAL9gFoI3X3fZE5UANaO:ASeyGpTaesaQUufkL57YsL9NIx9ANaO
- TLSH T161444C213680C032E366273049E6E6F459A97D794AA4E64FF7B47F391E315938A3720F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE