General
- Target 2026-07-15_9290c3809a06b244696241aa9b2baef0_elex_mafia_stealc_tofsee
- Size 800KB
- Sample260716-b3hmssdy71
- SHA256 ccaaee8c59b0b2da7a0dfacbfa06288f7e2207d3542edfb9ecd6c7f8d2d4cb4c
- MD5 9290c3809a06b244696241aa9b2baef0
- SHA1 ce8aaecd4f77f194a10e3a8a95d078056a14b79b
- SHA512 ff89c0013c93b5d5053d6645ffcbf3aa45ac9b15476dda9b28881008188d5dd227c1a87e071bb417708a802b368f9c3c4c80365e67e7b6685a4a5172bcb3921f
- SSDEEP 12288:5X47XqdkFZX7jDL2Qg+fhdlgA2islFap0OoH6Jev5YCHGlWLh8yO/x0Q32lPRfI:5X47adsX7jv1g8gAADV6gh8yOZ0blPR
- TLSH T16C0512313546C032E062163A4BEAE7B95A2B3DB1472668C73BC477AE2E753D2E534307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_9290c3809a06b244696241aa9b2baef0_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_9290c3809a06b244696241aa9b2baef0_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_9290c3809a06b244696241aa9b2baef0_elex_mafia_stealc_tofsee
- Size 800KB
- SHA256 ccaaee8c59b0b2da7a0dfacbfa06288f7e2207d3542edfb9ecd6c7f8d2d4cb4c
- MD5 9290c3809a06b244696241aa9b2baef0
- SHA1 ce8aaecd4f77f194a10e3a8a95d078056a14b79b
- SHA512 ff89c0013c93b5d5053d6645ffcbf3aa45ac9b15476dda9b28881008188d5dd227c1a87e071bb417708a802b368f9c3c4c80365e67e7b6685a4a5172bcb3921f
- SSDEEP 12288:5X47XqdkFZX7jDL2Qg+fhdlgA2islFap0OoH6Jev5YCHGlWLh8yO/x0Q32lPRfI:5X47adsX7jv1g8gAADV6gh8yOZ0blPR
- TLSH T16C0512313546C032E062163A4BEAE7B95A2B3DB1472668C73BC477AE2E753D2E534307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE