General
- Target 2026-05-06_bd284a624a45755801dbb5def0ecf2b3_elex_mafia_stealc_tofsee
- Size 535KB
- Sample260506-pc2vmshy7v
- SHA256 ab22f3d6b99d80e41407e2f2385aadb19487eb8d166f745281978191ab94fa0e
- MD5 bd284a624a45755801dbb5def0ecf2b3
- SHA1 51e85c8932974637458cd4caaa770a5948f260ff
- SHA512 d3cc06065a5b00d55dd8d430f03acbbf27f429a05ef40d65038ec3a414cde511c8e26f6b577b93d3266d9e1aa76a51c0d2c808705a402d01779d34a65458b257
- SSDEEP 12288:si4g+yU+0pAiv+JkoXnSwNOnq173RRgKkTHxUlvjosTdcG93Dn:si4gXn0pD+yo3aA73sKkqlvjRhFJ
- TLSH T119C4F1213542C033E2B715354AE9CBA6567E79764722B8CF3B842B6D2FB43D29638347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-06_bd284a624a45755801dbb5def0ecf2b3_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-06_bd284a624a45755801dbb5def0ecf2b3_elex_mafia_stealc_tofsee.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-06_bd284a624a45755801dbb5def0ecf2b3_elex_mafia_stealc_tofsee
- Size 535KB
- SHA256 ab22f3d6b99d80e41407e2f2385aadb19487eb8d166f745281978191ab94fa0e
- MD5 bd284a624a45755801dbb5def0ecf2b3
- SHA1 51e85c8932974637458cd4caaa770a5948f260ff
- SHA512 d3cc06065a5b00d55dd8d430f03acbbf27f429a05ef40d65038ec3a414cde511c8e26f6b577b93d3266d9e1aa76a51c0d2c808705a402d01779d34a65458b257
- SSDEEP 12288:si4g+yU+0pAiv+JkoXnSwNOnq173RRgKkTHxUlvjosTdcG93Dn:si4gXn0pD+yo3aA73sKkqlvjRhFJ
- TLSH T119C4F1213542C033E2B715354AE9CBA6567E79764722B8CF3B842B6D2FB43D29638347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE