General
- Target 2026-07-01_ed7381af4c0d0646d26eb50cae5a17f1_elex_mafia_stealc_tofsee
- Size 535KB
- Sample260701-py9glsev2r
- SHA256 db93f0ddc75251bfb8145138f6fba04a2ce92127bbcd1b2baa45cd907bb58c75
- MD5 ed7381af4c0d0646d26eb50cae5a17f1
- SHA1 af4787aeb0771a1d6c76e717c671edbbf331437f
- SHA512 9f0223cc9776a3510bc99258779d87c9cd9195a1c3c28342b210c6e0a74563a5b8b51356e391dcaa548807d7fcea6b309e423a4e531c9d61fa6172a3cd119f64
- SSDEEP 12288:si4g+yU+0pAiv+mXV7fUGEDowkzNvCe6FkRMVhxUlvjosTdcG93Dn:si4gXn0pD+87MGPwk5vB9PlvjRhFJ
- TLSH T1D4C401203455C037E6A721354AF9CBA6667B78724729A8CF3BD42BAD2E703C2D635307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_ed7381af4c0d0646d26eb50cae5a17f1_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_ed7381af4c0d0646d26eb50cae5a17f1_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_ed7381af4c0d0646d26eb50cae5a17f1_elex_mafia_stealc_tofsee
- Size 535KB
- SHA256 db93f0ddc75251bfb8145138f6fba04a2ce92127bbcd1b2baa45cd907bb58c75
- MD5 ed7381af4c0d0646d26eb50cae5a17f1
- SHA1 af4787aeb0771a1d6c76e717c671edbbf331437f
- SHA512 9f0223cc9776a3510bc99258779d87c9cd9195a1c3c28342b210c6e0a74563a5b8b51356e391dcaa548807d7fcea6b309e423a4e531c9d61fa6172a3cd119f64
- SSDEEP 12288:si4g+yU+0pAiv+mXV7fUGEDowkzNvCe6FkRMVhxUlvjosTdcG93Dn:si4gXn0pD+87MGPwk5vB9PlvjRhFJ
- TLSH T1D4C401203455C037E6A721354AF9CBA6667B78724729A8CF3BD42BAD2E703C2D635307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE