General
- Target 2026-05-03_0412d313c08f861d17dc98ed62a867c4_elex_mafia_stealc_tofsee
- Size 535KB
- Sample260503-pkfmdahs81
- SHA256 8ba272cf3de26c35e359e58766dba7ab54546e833fb953408ae08555c1d142ff
- MD5 0412d313c08f861d17dc98ed62a867c4
- SHA1 8d9c5abc2c9897b40d0b2ae7f8492baa61005f9d
- SHA512 2636cd0dd740c601c11ca611b2f21bfd5faabe4c812908164559071f8c0e35377c4127e384eb06bc913191ab487960697d3aeb12a8b351fb4b92ba15ea48173c
- SSDEEP 12288:si4g+yU+0pAiv+c06y35YCj0b81GoaxUlvjosTdcG93Dn:si4gXn0pD+cw35dUBoVlvjRhFJ
- TLSH T1B8C4F1203182C037E26615354BE9DB66667A7CB64725B8CF3BC42B6D2FB42D1D63434B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-03_0412d313c08f861d17dc98ed62a867c4_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-03_0412d313c08f861d17dc98ed62a867c4_elex_mafia_stealc_tofsee.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-03_0412d313c08f861d17dc98ed62a867c4_elex_mafia_stealc_tofsee
- Size 535KB
- SHA256 8ba272cf3de26c35e359e58766dba7ab54546e833fb953408ae08555c1d142ff
- MD5 0412d313c08f861d17dc98ed62a867c4
- SHA1 8d9c5abc2c9897b40d0b2ae7f8492baa61005f9d
- SHA512 2636cd0dd740c601c11ca611b2f21bfd5faabe4c812908164559071f8c0e35377c4127e384eb06bc913191ab487960697d3aeb12a8b351fb4b92ba15ea48173c
- SSDEEP 12288:si4g+yU+0pAiv+c06y35YCj0b81GoaxUlvjosTdcG93Dn:si4gXn0pD+cw35dUBoVlvjRhFJ
- TLSH T1B8C4F1203182C037E26615354BE9DB66667A7CB64725B8CF3BC42B6D2FB42D1D63434B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE