General
- Target 2026-07-20_b0d47f903e6d0f892d4da2c9aa80febe_elex_mafia_stealc_tofsee
- Size 916KB
- Sample260720-ky52zact8r
- SHA256 52f976b7fe6d868e41476a863d923860131dcf4b2f34c0c37cc5e886c1136fe8
- MD5 b0d47f903e6d0f892d4da2c9aa80febe
- SHA1 6ca32296d32a4d9cb741e82b204863e4ba0d2d91
- SHA512 0ecbd8c5132dc40a79ba226c59f8430946e9615b4d429d5162c076fd7b8549ea4d485700c4370667e0334127acebeffa3e4a3546f09babc536b9a656299ad602
- SSDEEP 12288:VX47XqdkFZX4+s08gXL33+VX0OoH6Jev5YCHGlWLh8yO/x0Q32lPRfxA:VX47adsX4+sX4L35V6gh8yOZ0blPR
- TLSH T10B15F1385185C2B2D273833988E8F6CD4835B801573A74D7A3DC27BD99BDAD19E3960B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_b0d47f903e6d0f892d4da2c9aa80febe_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_b0d47f903e6d0f892d4da2c9aa80febe_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_b0d47f903e6d0f892d4da2c9aa80febe_elex_mafia_stealc_tofsee
- Size 916KB
- SHA256 52f976b7fe6d868e41476a863d923860131dcf4b2f34c0c37cc5e886c1136fe8
- MD5 b0d47f903e6d0f892d4da2c9aa80febe
- SHA1 6ca32296d32a4d9cb741e82b204863e4ba0d2d91
- SHA512 0ecbd8c5132dc40a79ba226c59f8430946e9615b4d429d5162c076fd7b8549ea4d485700c4370667e0334127acebeffa3e4a3546f09babc536b9a656299ad602
- SSDEEP 12288:VX47XqdkFZX4+s08gXL33+VX0OoH6Jev5YCHGlWLh8yO/x0Q32lPRfxA:VX47adsX4+sX4L35V6gh8yOZ0blPR
- TLSH T10B15F1385185C2B2D273833988E8F6CD4835B801573A74D7A3DC27BD99BDAD19E3960B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE