General
- Target 2026-05-04_0dfc8f07186909eafaedd47e5bd42544_elex_mafia_stealc_tofsee
- Size 457KB
- Sample260504-vd3ffsb12j
- SHA256 1cee9f63338d15dc5fa1c2843017ee2fbce29f726c1a20a402d5b16085e7ef12
- MD5 0dfc8f07186909eafaedd47e5bd42544
- SHA1 abc8f245de76afe669ede23891bd8b53e2ee2ebd
- SHA512 6d60fbaf2fbde23e5278f6065a4e2197c74d0f719a498fbbaa366b4d67af836c22834023349fc34e81255d44a4d02c5fe2f82e2bd6d6d2f2032feba21ab4aaf2
- SSDEEP 12288:frF2600C972SfkfimoTA98dLzCVfSJeU:fro6s96SfUnoTFY6M
- TLSH T121A4E121798AC032E6A312350AF1DB62163BBE76572661C77BC47BADBF702D19634307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-04_0dfc8f07186909eafaedd47e5bd42544_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260130-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-04_0dfc8f07186909eafaedd47e5bd42544_elex_mafia_stealc_tofsee.exe
Resource
win11-20260130-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-04_0dfc8f07186909eafaedd47e5bd42544_elex_mafia_stealc_tofsee
- Size 457KB
- SHA256 1cee9f63338d15dc5fa1c2843017ee2fbce29f726c1a20a402d5b16085e7ef12
- MD5 0dfc8f07186909eafaedd47e5bd42544
- SHA1 abc8f245de76afe669ede23891bd8b53e2ee2ebd
- SHA512 6d60fbaf2fbde23e5278f6065a4e2197c74d0f719a498fbbaa366b4d67af836c22834023349fc34e81255d44a4d02c5fe2f82e2bd6d6d2f2032feba21ab4aaf2
- SSDEEP 12288:frF2600C972SfkfimoTA98dLzCVfSJeU:fro6s96SfUnoTFY6M
- TLSH T121A4E121798AC032E6A312350AF1DB62163BBE76572661C77BC47BADBF702D19634307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE