General
- Target 2026-07-15_cf611550f408a9de5ab860f4a5a795c3_elex_mafia_stealc_tofsee
- Size 535KB
- Sample260715-evs1caes4w
- SHA256 f9f515dfdf8829e75f2fa995099c9a204b0373e05d4a1ff80d6d4a2d2113a6b7
- MD5 cf611550f408a9de5ab860f4a5a795c3
- SHA1 14ee77ab336e7b722f949c03e9a374f011cb238f
- SHA512 aa5b38656e55a30ff5719d98f01a1870a56c1fa531af7ee223a8ea58e1de52203a47cbe4aa131fd889e748f1b42eee4fd68734a6ab976280e71609681b86e36e
- SSDEEP 12288:si4g+yU+0pAiv+ckB93Ofr8PKmySzsR2TZV7f+q5xUlvjosTdcG93Dn:si4gXn0pD+ckqz8fH4R+z7wlvjRhFJ
- TLSH T11CC401313182C033E26615354BE8CBA6653E38B2472668CF77C42FA96EB43E2D635357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_cf611550f408a9de5ab860f4a5a795c3_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_cf611550f408a9de5ab860f4a5a795c3_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_cf611550f408a9de5ab860f4a5a795c3_elex_mafia_stealc_tofsee
- Size 535KB
- SHA256 f9f515dfdf8829e75f2fa995099c9a204b0373e05d4a1ff80d6d4a2d2113a6b7
- MD5 cf611550f408a9de5ab860f4a5a795c3
- SHA1 14ee77ab336e7b722f949c03e9a374f011cb238f
- SHA512 aa5b38656e55a30ff5719d98f01a1870a56c1fa531af7ee223a8ea58e1de52203a47cbe4aa131fd889e748f1b42eee4fd68734a6ab976280e71609681b86e36e
- SSDEEP 12288:si4g+yU+0pAiv+ckB93Ofr8PKmySzsR2TZV7f+q5xUlvjosTdcG93Dn:si4gXn0pD+ckqz8fH4R+z7wlvjRhFJ
- TLSH T11CC401313182C033E26615354BE8CBA6653E38B2472668CF77C42FA96EB43E2D635357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE