General
- Target 2026-07-17_6b9579c435d480fb850fa782181527aa_elex_mafia_stealc_tofsee
- Size 561KB
- Sample260717-2jbcgsfz2l
- SHA256 9825f7c90ef9e94d952bac0b3587ad623219be43438ff01dd8738b858f77c195
- MD5 6b9579c435d480fb850fa782181527aa
- SHA1 2c69f60abe63b67bdee0c81370ef9e9ffcecedda
- SHA512 8fb1cbd510133d8cd237b521d804ef1f3bf7bd34afaa08bff986679166c58dee8637fd5d6ca93d107e84cc388d48d0a5a3fd2df231cc6e4069451aa4bad61360
- SSDEEP 12288:ob4bZudi79LiWNaAtWE6ZIO5OSCIMzQ+1C0ziwAk83Aa5nDU8cDJh8d5:ob4bcdkLiiarEUIJTzQzg1Od5
- TLSH T1EDC4CF1D3E708836EEE200BA469087A53926FDB30B2A75C727D4BEFE1D789D0463515E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_6b9579c435d480fb850fa782181527aa_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_6b9579c435d480fb850fa782181527aa_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_6b9579c435d480fb850fa782181527aa_elex_mafia_stealc_tofsee
- Size 561KB
- SHA256 9825f7c90ef9e94d952bac0b3587ad623219be43438ff01dd8738b858f77c195
- MD5 6b9579c435d480fb850fa782181527aa
- SHA1 2c69f60abe63b67bdee0c81370ef9e9ffcecedda
- SHA512 8fb1cbd510133d8cd237b521d804ef1f3bf7bd34afaa08bff986679166c58dee8637fd5d6ca93d107e84cc388d48d0a5a3fd2df231cc6e4069451aa4bad61360
- SSDEEP 12288:ob4bZudi79LiWNaAtWE6ZIO5OSCIMzQ+1C0ziwAk83Aa5nDU8cDJh8d5:ob4bcdkLiiarEUIJTzQzg1Od5
- TLSH T1EDC4CF1D3E708836EEE200BA469087A53926FDB30B2A75C727D4BEFE1D789D0463515E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE