General
- Target 2026-07-17_1d605e2f709244e07844908b0aaa3f5c_elex_mafia_stealc_tofsee
- Size 535KB
- Sample260717-vxavjsgx4n
- SHA256 bb6cf66887b29b67ca025c8a55349efcdbfb7aa01aea008ddd0c1ef0ba72438e
- MD5 1d605e2f709244e07844908b0aaa3f5c
- SHA1 16e1acac2f48dc4ba29b8644a05a90e0d85cbc4c
- SHA512 c9eebe475f22cfd772d8233945df6fe00161880bbd88a00baba6bb8ebf6ec3bf73aaf8a204e985f2dacdea0c80e1f8a89e7a3553b591350888338168c23707f7
- SSDEEP 12288:si4g+yU+0pAiv+iohh//JkniYDPVOMatwxUlvjosTdcG93Dn:si4gXn0pD+Thh//JADt7aVlvjRhFJ
- TLSH T1E7C4F1313591C033E26A15350BE5CBA66A7A79B64726A8CF37C52FAD2EB03D1D234347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_1d605e2f709244e07844908b0aaa3f5c_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_1d605e2f709244e07844908b0aaa3f5c_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_1d605e2f709244e07844908b0aaa3f5c_elex_mafia_stealc_tofsee
- Size 535KB
- SHA256 bb6cf66887b29b67ca025c8a55349efcdbfb7aa01aea008ddd0c1ef0ba72438e
- MD5 1d605e2f709244e07844908b0aaa3f5c
- SHA1 16e1acac2f48dc4ba29b8644a05a90e0d85cbc4c
- SHA512 c9eebe475f22cfd772d8233945df6fe00161880bbd88a00baba6bb8ebf6ec3bf73aaf8a204e985f2dacdea0c80e1f8a89e7a3553b591350888338168c23707f7
- SSDEEP 12288:si4g+yU+0pAiv+iohh//JkniYDPVOMatwxUlvjosTdcG93Dn:si4gXn0pD+Thh//JADt7aVlvjRhFJ
- TLSH T1E7C4F1313591C033E26A15350BE5CBA66A7A79B64726A8CF37C52FAD2EB03D1D234347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE