General

  • Target
    2026-05-09_c03056384e232ba5c0d0a8dc8e384851_elex_mafia_stealc_tofsee
  • Size 486KB
  • Sample260509-xhydeact2z
  • SHA256 240d81c758fe775a00108477de083061c59badf0f324ccfc9287d8ba00aede77
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-05-09_c03056384e232ba5c0d0a8dc8e384851_elex_mafia_stealc_tofsee
    • Size 486KB
    • SHA256 240d81c758fe775a00108477de083061c59badf0f324ccfc9287d8ba00aede77
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks