General
- Target 2026-07-13_a412ccd5aeb170054ecbf4948f34b24c_elex_mafia_stealc_tofsee
- Size 462KB
- Sample260714-a7mlwabx3n
- SHA256 266cf3da9dc100cb8b260a08ba556b84d9b5244ab460572ee2ff3fc4088f9889
- MD5 a412ccd5aeb170054ecbf4948f34b24c
- SHA1 315f5bb21dd66547b89a92aa03c587928071f067
- SHA512 129e5f914e0a1b8e46804097e3aea5b2a36ff9614d127853ac8f67612725e87390b7ddaa42392d5c924bae9da3f5432d0b52f0c9ca56e1964302f458b7b252d7
- SSDEEP 6144:0A4psmawWIrFUJe5X8bbUsVKYIteq5L6/M73wVNveYaqYQyDZhwNm8yV5lLOaftB:0oJe5X8bDXIteq5/EqYaQyDZYoLK5i
- TLSH T10FA4F1357986C032E2E312354BF5CB61693ABDA25722A4CBBB88776D6F702D1D634307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_a412ccd5aeb170054ecbf4948f34b24c_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_a412ccd5aeb170054ecbf4948f34b24c_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_a412ccd5aeb170054ecbf4948f34b24c_elex_mafia_stealc_tofsee
- Size 462KB
- SHA256 266cf3da9dc100cb8b260a08ba556b84d9b5244ab460572ee2ff3fc4088f9889
- MD5 a412ccd5aeb170054ecbf4948f34b24c
- SHA1 315f5bb21dd66547b89a92aa03c587928071f067
- SHA512 129e5f914e0a1b8e46804097e3aea5b2a36ff9614d127853ac8f67612725e87390b7ddaa42392d5c924bae9da3f5432d0b52f0c9ca56e1964302f458b7b252d7
- SSDEEP 6144:0A4psmawWIrFUJe5X8bbUsVKYIteq5L6/M73wVNveYaqYQyDZhwNm8yV5lLOaftB:0oJe5X8bDXIteq5/EqYaQyDZYoLK5i
- TLSH T10FA4F1357986C032E2E312354BF5CB61693ABDA25722A4CBBB88776D6F702D1D634307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE