General
- Target 2026-07-15_3799a7ffc7d16bb7bd6649f02d4bf24c_elex_mafia_stealc_tofsee
- Size 535KB
- Sample260715-fr1rfse13s
- SHA256 74e4b4f6eba068a4912cfba21af4ed50c7597fef1e4e1f2f5fca64de9850d245
- MD5 3799a7ffc7d16bb7bd6649f02d4bf24c
- SHA1 fd14eb689fcf9705809b4927a980173a494405e5
- SHA512 cc66b95b4df131657e49e52ada3dc45438dde18288fa0064da633f469d19ca8ec20301554b14351df4c9d0879f04ecae8876bac036883f3c0728933a2a2ed91c
- SSDEEP 12288:si4g+yU+0pAiv+Mk3ceHP/xPm2o7K3IWAuz+MT7xUlvjosTdcG93Dn:si4gXn0pD+8eHP/xP/3b5GlvjRhFJ
- TLSH T16AC4F1213182C033D2AB15310AF9CBA6567A7DB64B16A8CF77D42B6D2EB03D2D675307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_3799a7ffc7d16bb7bd6649f02d4bf24c_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_3799a7ffc7d16bb7bd6649f02d4bf24c_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_3799a7ffc7d16bb7bd6649f02d4bf24c_elex_mafia_stealc_tofsee
- Size 535KB
- SHA256 74e4b4f6eba068a4912cfba21af4ed50c7597fef1e4e1f2f5fca64de9850d245
- MD5 3799a7ffc7d16bb7bd6649f02d4bf24c
- SHA1 fd14eb689fcf9705809b4927a980173a494405e5
- SHA512 cc66b95b4df131657e49e52ada3dc45438dde18288fa0064da633f469d19ca8ec20301554b14351df4c9d0879f04ecae8876bac036883f3c0728933a2a2ed91c
- SSDEEP 12288:si4g+yU+0pAiv+Mk3ceHP/xPm2o7K3IWAuz+MT7xUlvjosTdcG93Dn:si4gXn0pD+8eHP/xP/3b5GlvjRhFJ
- TLSH T16AC4F1213182C033D2AB15310AF9CBA6567A7DB64B16A8CF77D42B6D2EB03D2D675307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE