General
- Target 2026-07-09_501f22e3cf18bd18cd926b122101de41_elex_mafia_stealc_tofsee
- Size 800KB
- Sample260709-v3x72aex2l
- SHA256 cd817bdc3bcf46b9e0a646e7d80943d571cb96740db7cf1730c5f9f1616391d2
- MD5 501f22e3cf18bd18cd926b122101de41
- SHA1 9e51755a4034e4e826b53876adc2c8d3fe0cea90
- SHA512 c28d2aea98ee41369cea1e531966bde6ff18b59ad1268fc0d42330d57003263b79d507ca25c988ea76fe32432d22afa5e16871ceca728ca351201181eb745635
- SSDEEP 24576:5X47adsXtDDcEzcnBVAIV6gh8yOZ0blPR:5X4WdsXtv1cHAI8gB5ZPR
- TLSH T1950512217542C033E163163A07F6ABA9593F3DB2472668C72B947BAE6E353D2D634307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_501f22e3cf18bd18cd926b122101de41_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_501f22e3cf18bd18cd926b122101de41_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_501f22e3cf18bd18cd926b122101de41_elex_mafia_stealc_tofsee
- Size 800KB
- SHA256 cd817bdc3bcf46b9e0a646e7d80943d571cb96740db7cf1730c5f9f1616391d2
- MD5 501f22e3cf18bd18cd926b122101de41
- SHA1 9e51755a4034e4e826b53876adc2c8d3fe0cea90
- SHA512 c28d2aea98ee41369cea1e531966bde6ff18b59ad1268fc0d42330d57003263b79d507ca25c988ea76fe32432d22afa5e16871ceca728ca351201181eb745635
- SSDEEP 24576:5X47adsXtDDcEzcnBVAIV6gh8yOZ0blPR:5X4WdsXtv1cHAI8gB5ZPR
- TLSH T1950512217542C033E163163A07F6ABA9593F3DB2472668C72B947BAE6E353D2D634307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE