General
- Target 2026-07-02_df370edad84e8fbcfbb5b45816c5a3c6_elex_mafia_stealc_tofsee
- Size 486KB
- Sample260702-rwbhxads2k
- SHA256 4d219a3607b6623df4bd69655863d07279b86d49674fd721bf066482e5073fa0
- MD5 df370edad84e8fbcfbb5b45816c5a3c6
- SHA1 ae9bf4861768e46dd7cb0f6ec3e9d249229208f1
- SHA512 457eb3b1d4bbef3ba16b42361a892cb8865e4524d3450678d90708392f8735e9138ab3713f9b307bd154a15a1e782613508aa70fcf07264ba4e9d4ee7c788db3
- SSDEEP 6144:fpzhInoFPRsVmVE600C978/i9Mpjaza3no2eewfzyXyIKCWHZYGKBZW832sHpeUg:frF2600C97ox3nfNw5ITWHqpPB3HJeUg
- TLSH T12BB4BD2369858022F17203361AA5F7B1152A7D615352F1F377923EBD6A73AC3DA30237
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_df370edad84e8fbcfbb5b45816c5a3c6_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_df370edad84e8fbcfbb5b45816c5a3c6_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_df370edad84e8fbcfbb5b45816c5a3c6_elex_mafia_stealc_tofsee
- Size 486KB
- SHA256 4d219a3607b6623df4bd69655863d07279b86d49674fd721bf066482e5073fa0
- MD5 df370edad84e8fbcfbb5b45816c5a3c6
- SHA1 ae9bf4861768e46dd7cb0f6ec3e9d249229208f1
- SHA512 457eb3b1d4bbef3ba16b42361a892cb8865e4524d3450678d90708392f8735e9138ab3713f9b307bd154a15a1e782613508aa70fcf07264ba4e9d4ee7c788db3
- SSDEEP 6144:fpzhInoFPRsVmVE600C978/i9Mpjaza3no2eewfzyXyIKCWHZYGKBZW832sHpeUg:frF2600C97ox3nfNw5ITWHqpPB3HJeUg
- TLSH T12BB4BD2369858022F17203361AA5F7B1152A7D615352F1F377923EBD6A73AC3DA30237
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE