General
- Target 2026-07-20_ec4cef847f2cbc66f0698b63affb0c54_elex_mafia_stealc_tofsee
- Size 535KB
- Sample260720-px9e8acx51
- SHA256 bc397f039c90d1b46a8749083a67425a9045ac07bd2a4d4befc61717c6509370
- MD5 ec4cef847f2cbc66f0698b63affb0c54
- SHA1 a5d7b70c6640132d2858e8217b205487997de975
- SHA512 1c8b29b9084c8efdfbe62800ad2df4804f69ab11095675eded389b9ec0748478a15f2062b0aaa33917c20f363a5da3242d9e55537c17d959f555974d52f311eb
- SSDEEP 12288:si4g+yU+0pAiv+hZQm5qgJxFjTrgMIuF0uIPIxUlvjosTdcG93Dn:si4gXn0pD+jtqgJx1wsFKlvjRhFJ
- TLSH T19FC4F1203191C037E69B15344AE9C7652A7B39B64726B4CF3BD42AAD6EB03C2D73435B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_ec4cef847f2cbc66f0698b63affb0c54_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_ec4cef847f2cbc66f0698b63affb0c54_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_ec4cef847f2cbc66f0698b63affb0c54_elex_mafia_stealc_tofsee
- Size 535KB
- SHA256 bc397f039c90d1b46a8749083a67425a9045ac07bd2a4d4befc61717c6509370
- MD5 ec4cef847f2cbc66f0698b63affb0c54
- SHA1 a5d7b70c6640132d2858e8217b205487997de975
- SHA512 1c8b29b9084c8efdfbe62800ad2df4804f69ab11095675eded389b9ec0748478a15f2062b0aaa33917c20f363a5da3242d9e55537c17d959f555974d52f311eb
- SSDEEP 12288:si4g+yU+0pAiv+hZQm5qgJxFjTrgMIuF0uIPIxUlvjosTdcG93Dn:si4gXn0pD+jtqgJx1wsFKlvjRhFJ
- TLSH T19FC4F1203191C037E69B15344AE9C7652A7B39B64726B4CF3BD42AAD6EB03C2D73435B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE