General
- Target 2026-07-06_9ec4b397804c965e2fe6e9a3b9c382c9_elex_mafia_stealc_tofsee
- Size 535KB
- Sample260707-cdr1lsfx5s
- SHA256 cd8b18b82fe347b5f133196919abf090999832cb01a7623ce36ef594652a51a2
- MD5 9ec4b397804c965e2fe6e9a3b9c382c9
- SHA1 61ef6992a8d2d53289caff02b942c01887934c35
- SHA512 eda3ab7611e517e4a2bd43af6869933a9d855eb15ea601ec03a03aabf20eb7405b70174b38f109ef7205da09882fff99286f0b12b2d939c4466ad09ca3e52113
- SSDEEP 12288:si4g+yU+0pAiv+tvdOLZRdfFxEf4RjnXqxUlvjosTdcG93Dn:si4gXn0pD+BwLZjUsFlvjRhFJ
- TLSH T1C0C4F1203591C033E26719354BF5CBA6A67A39B24716A8CF3BC02B6D6EB03D2D635347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_9ec4b397804c965e2fe6e9a3b9c382c9_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_9ec4b397804c965e2fe6e9a3b9c382c9_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260706-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_9ec4b397804c965e2fe6e9a3b9c382c9_elex_mafia_stealc_tofsee
- Size 535KB
- SHA256 cd8b18b82fe347b5f133196919abf090999832cb01a7623ce36ef594652a51a2
- MD5 9ec4b397804c965e2fe6e9a3b9c382c9
- SHA1 61ef6992a8d2d53289caff02b942c01887934c35
- SHA512 eda3ab7611e517e4a2bd43af6869933a9d855eb15ea601ec03a03aabf20eb7405b70174b38f109ef7205da09882fff99286f0b12b2d939c4466ad09ca3e52113
- SSDEEP 12288:si4g+yU+0pAiv+tvdOLZRdfFxEf4RjnXqxUlvjosTdcG93Dn:si4gXn0pD+BwLZjUsFlvjRhFJ
- TLSH T1C0C4F1203591C033E26719354BF5CBA6A67A39B24716A8CF3BC02B6D6EB03D2D635347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE