General
- Target 2026-07-20_04e9732832152668f42d78671b1a6d45_elex_mafia_stealc_tofsee
- Size 535KB
- Sample260720-r8bpfady5l
- SHA256 eac555efe0422585d5e073bb61862dec6b78b301d6e0d2948ce3dbc384c866b3
- MD5 04e9732832152668f42d78671b1a6d45
- SHA1 df3ee72f28fef8fdc39a4a1ad9c5a29a5d3771fb
- SHA512 2144da5bf6a0761de23b91e1e67dd4d9e0f30fe0edf6cd6277ad2c019f000d345111718f83977d3c13b93e57ccae2acf6c11a4690883bc0d8e4ef7d04851c85a
- SSDEEP 12288:si4g+yU+0pAiv+4s2KPK74t37eF8dZEqPhV8FVkDxUlvjosTdcG93Dn:si4gXn0pD+/P7t3OyZEqZVpilvjRhFJ
- TLSH T13BC401203152C037E26719304AE5DB65567E7CBA4726A8CF3BC42BAD6EB43D2D63434B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_04e9732832152668f42d78671b1a6d45_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_04e9732832152668f42d78671b1a6d45_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_04e9732832152668f42d78671b1a6d45_elex_mafia_stealc_tofsee
- Size 535KB
- SHA256 eac555efe0422585d5e073bb61862dec6b78b301d6e0d2948ce3dbc384c866b3
- MD5 04e9732832152668f42d78671b1a6d45
- SHA1 df3ee72f28fef8fdc39a4a1ad9c5a29a5d3771fb
- SHA512 2144da5bf6a0761de23b91e1e67dd4d9e0f30fe0edf6cd6277ad2c019f000d345111718f83977d3c13b93e57ccae2acf6c11a4690883bc0d8e4ef7d04851c85a
- SSDEEP 12288:si4g+yU+0pAiv+4s2KPK74t37eF8dZEqPhV8FVkDxUlvjosTdcG93Dn:si4gXn0pD+/P7t3OyZEqZVpilvjRhFJ
- TLSH T13BC401203152C037E26719304AE5DB65567E7CBA4726A8CF3BC42BAD6EB43D2D63434B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE