General
- Target 2026-06-05_641654f736ae1c2a2bfab790fb7cdc2a_elex_mafia_stealc_tofsee
- Size 535KB
- Sample260605-qadkpsf151
- SHA256 8c2cb16fca569e174585c19c9aaa5dd71a058b96adc61d6dd0770a5ecc887a8b
- MD5 641654f736ae1c2a2bfab790fb7cdc2a
- SHA1 0a281775d9b1ce91afc8d001a17b2621f1c23770
- SHA512 cb87f8820ee56c7547d3db5dc342090de8b31bbb6a2ccd9902ce6f3137b2247c2d37398a2972182377fb28ef0599955b24f52b486d8b7eda8b363dfe42b98075
- SSDEEP 12288:si4g+yU+0pAiv+I2wkKtRCl4KzlV2yjpKpOtvQUxKQKuVxUlvjosTdcG93Dn:si4gXn0pD+2kKtMBVJ1vxhKTlvjRhFJ
- TLSH T1A7C401203582C037E26615354BE9DB6A56BE7C724725A8CF27C42B6E2E703D2DB7530B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-05_641654f736ae1c2a2bfab790fb7cdc2a_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-05_641654f736ae1c2a2bfab790fb7cdc2a_elex_mafia_stealc_tofsee.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-05_641654f736ae1c2a2bfab790fb7cdc2a_elex_mafia_stealc_tofsee
- Size 535KB
- SHA256 8c2cb16fca569e174585c19c9aaa5dd71a058b96adc61d6dd0770a5ecc887a8b
- MD5 641654f736ae1c2a2bfab790fb7cdc2a
- SHA1 0a281775d9b1ce91afc8d001a17b2621f1c23770
- SHA512 cb87f8820ee56c7547d3db5dc342090de8b31bbb6a2ccd9902ce6f3137b2247c2d37398a2972182377fb28ef0599955b24f52b486d8b7eda8b363dfe42b98075
- SSDEEP 12288:si4g+yU+0pAiv+I2wkKtRCl4KzlV2yjpKpOtvQUxKQKuVxUlvjosTdcG93Dn:si4gXn0pD+2kKtMBVJ1vxhKTlvjRhFJ
- TLSH T1A7C401203582C037E26615354BE9DB6A56BE7C724725A8CF27C42B6E2E703D2DB7530B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE