General
- Target 2026-07-20_492d1880b349585a21e68d4e0db1f37c_elex_stealc_stop_swisyn_tofsee
- Size 1.0MB
- Sample260720-ry8lesdt6j
- SHA256 c7dffc197daee4e7fffad1063e04afccf23afb271dd9525626f46747d700b493
- MD5 492d1880b349585a21e68d4e0db1f37c
- SHA1 f37030b2b1e255394a9fac9a4ef764ac0642e6b0
- SHA512 1e9ccea760a65726d03bdd04e6920449681b2f127e748429b7835ca1d93b8dd645f5983ffb625fd6eb581fa4dec867e07386ec3cb63e806f4be63f637de41d05
- SSDEEP 24576:PFOaQivtCXWeGKM/NGzTukzl7AMx55JXE5nDy3ZqDYx:thtCXWPh/m3mMzU5DYZpx
- TLSH T18F35AD2D2560C03BD9134FF284D5DF2B6510F9513B63A91FA2916E987A31E826BF3237
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_492d1880b349585a21e68d4e0db1f37c_elex_stealc_stop_swisyn_tofsee.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_492d1880b349585a21e68d4e0db1f37c_elex_stealc_stop_swisyn_tofsee.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_492d1880b349585a21e68d4e0db1f37c_elex_stealc_stop_swisyn_tofsee
- Size 1.0MB
- SHA256 c7dffc197daee4e7fffad1063e04afccf23afb271dd9525626f46747d700b493
- MD5 492d1880b349585a21e68d4e0db1f37c
- SHA1 f37030b2b1e255394a9fac9a4ef764ac0642e6b0
- SHA512 1e9ccea760a65726d03bdd04e6920449681b2f127e748429b7835ca1d93b8dd645f5983ffb625fd6eb581fa4dec867e07386ec3cb63e806f4be63f637de41d05
- SSDEEP 24576:PFOaQivtCXWeGKM/NGzTukzl7AMx55JXE5nDy3ZqDYx:thtCXWPh/m3mMzU5DYZpx
- TLSH T18F35AD2D2560C03BD9134FF284D5DF2B6510F9513B63A91FA2916E987A31E826BF3237
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2