General
- Target 2026-05-06_3446223dc45c39b630896de495798a28_elex_mafia_stealc_tofsee
- Size 447KB
- Sample260506-phxg4set9p
- SHA256 3ba7c9663c16452cc18435179bc38be5d40093441ca21232575390109bfef49d
- MD5 3446223dc45c39b630896de495798a28
- SHA1 d2d0472faac30b540bc24b46ba0c1a11d88ddd3a
- SHA512 04c12585d450a1b87bcfe4b86edff538721971ce58f90eb3141d11b2a7baf6825a2a5ea151a465c4d26bf6327f427f96af20c1842b67da4a429695c02da960a5
- SSDEEP 6144:wRWgWcwtukwPTYpa1hz8j5eT75EqXsb2BZK239Fhz2ixoV38JhdLsH4:w/rYpa1hoj525vG3239FhKGJPwY
- TLSH T117A4E0257A86C032D59212344EF5CBB2593ABD366B22A4C7BBC0277D7FB12D1A635307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-06_3446223dc45c39b630896de495798a28_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260130-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-06_3446223dc45c39b630896de495798a28_elex_mafia_stealc_tofsee.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-06_3446223dc45c39b630896de495798a28_elex_mafia_stealc_tofsee
- Size 447KB
- SHA256 3ba7c9663c16452cc18435179bc38be5d40093441ca21232575390109bfef49d
- MD5 3446223dc45c39b630896de495798a28
- SHA1 d2d0472faac30b540bc24b46ba0c1a11d88ddd3a
- SHA512 04c12585d450a1b87bcfe4b86edff538721971ce58f90eb3141d11b2a7baf6825a2a5ea151a465c4d26bf6327f427f96af20c1842b67da4a429695c02da960a5
- SSDEEP 6144:wRWgWcwtukwPTYpa1hz8j5eT75EqXsb2BZK239Fhz2ixoV38JhdLsH4:w/rYpa1hoj525vG3239FhKGJPwY
- TLSH T117A4E0257A86C032D59212344EF5CBB2593ABD366B22A4C7BBC0277D7FB12D1A635307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE