General
- Target 2026-07-20_3672ee9a622fb5f3dcc2786223f84973_elex_mafia_stealc_tofsee
- Size 535KB
- Sample260720-qh99msdw3v
- SHA256 aff5c392fe7fd5f708353e4b38980e457c2ec18e3896c7c13a9b3530dd5408f0
- MD5 3672ee9a622fb5f3dcc2786223f84973
- SHA1 5168bc795f9bf57ef2759e8b2637f5f6d367b8c1
- SHA512 408dd35d18b70497c43734451bf19ceddb6c4cf13282bd832dc9da76fb1fcf96821ffc82600e56a410223c3b2b4f90b7164b78431bc337c483ada701ee5e1833
- SSDEEP 12288:si4g+yU+0pAiv+v7RYv4uOWKQyeT1YxUlvjosTdcG93Dn:si4gXn0pD+v7RYv/OW91jlvjRhFJ
- TLSH T158C401203592C037E2BB19344BE5CB56667A3DB6475264CF3BC42BAE6EB02D2D635307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_3672ee9a622fb5f3dcc2786223f84973_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_3672ee9a622fb5f3dcc2786223f84973_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_3672ee9a622fb5f3dcc2786223f84973_elex_mafia_stealc_tofsee
- Size 535KB
- SHA256 aff5c392fe7fd5f708353e4b38980e457c2ec18e3896c7c13a9b3530dd5408f0
- MD5 3672ee9a622fb5f3dcc2786223f84973
- SHA1 5168bc795f9bf57ef2759e8b2637f5f6d367b8c1
- SHA512 408dd35d18b70497c43734451bf19ceddb6c4cf13282bd832dc9da76fb1fcf96821ffc82600e56a410223c3b2b4f90b7164b78431bc337c483ada701ee5e1833
- SSDEEP 12288:si4g+yU+0pAiv+v7RYv4uOWKQyeT1YxUlvjosTdcG93Dn:si4gXn0pD+v7RYv/OW91jlvjRhFJ
- TLSH T158C401203592C037E2BB19344BE5CB56667A3DB6475264CF3BC42BAE6EB02D2D635307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE