General
- Target 2026-07-19_d3d2ead419cda50aa125fa6015cc7714_elex_mafia_stealc_tofsee
- Size 800KB
- Sample260720-avtjnah18j
- SHA256 db0e66c29e7f5d961fd0e0eda0ec6acadc2efb02b23f8fa2f9890216bb6baa08
- MD5 d3d2ead419cda50aa125fa6015cc7714
- SHA1 94ffbb38b3a381ddfc9bd359875f68c172b37364
- SHA512 b171c003e046124559f1e6b6810011a08611450b426e1aaa9cd8173fbb0a95c84b11708cd3b39cff513e700608d7cca78d98370af123bd3de1e1466eca7ceb75
- SSDEEP 12288:5X47XqdkFZX/4mb+/pEVP8Uu94VbVTQvXq50OoH6Jev5YCHGlWLh8yO/x0Q32lPf:5X47adsX/4mpx2maXZV6gh8yOZ0blPR
- TLSH T1220502217506C033E162053A07FAE7A95A2A3DB54725A8C73BD43BBD6E753D2DA3430B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_d3d2ead419cda50aa125fa6015cc7714_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_d3d2ead419cda50aa125fa6015cc7714_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_d3d2ead419cda50aa125fa6015cc7714_elex_mafia_stealc_tofsee
- Size 800KB
- SHA256 db0e66c29e7f5d961fd0e0eda0ec6acadc2efb02b23f8fa2f9890216bb6baa08
- MD5 d3d2ead419cda50aa125fa6015cc7714
- SHA1 94ffbb38b3a381ddfc9bd359875f68c172b37364
- SHA512 b171c003e046124559f1e6b6810011a08611450b426e1aaa9cd8173fbb0a95c84b11708cd3b39cff513e700608d7cca78d98370af123bd3de1e1466eca7ceb75
- SSDEEP 12288:5X47XqdkFZX/4mb+/pEVP8Uu94VbVTQvXq50OoH6Jev5YCHGlWLh8yO/x0Q32lPf:5X47adsX/4mpx2maXZV6gh8yOZ0blPR
- TLSH T1220502217506C033E162053A07FAE7A95A2A3DB54725A8C73BD43BBD6E753D2DA3430B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE