General
- Target 2026-07-20_6b236776a624c8b332d18a24edf6ab3e_elex_mafia_stealc_tofsee
- Size 535KB
- Sample260720-tbvr6afs8n
- SHA256 110c3a86dc1510cec97acc509c5f700195b36834219110d265eb10eb36674c46
- MD5 6b236776a624c8b332d18a24edf6ab3e
- SHA1 1860a9e6d9282428b7e622f89cd6928b664c40b8
- SHA512 877527df74b364c8c0d2a68de1c09e0331ec310686b19aa9d1e44bfbed2bf7ee755f9b5045f6620246e00d1200c2bd13af1c67ca3cdb436a1cce9d12f35bcfd1
- SSDEEP 12288:si4g+yU+0pAiv+3dsA4vbjpX0tJ38QH3jxUlvjosTdcG93Dn:si4gXn0pD+NsLvbjJ0P8QH3ClvjRhFJ
- TLSH T13BC4F1213592C037E2A6193547E5CBA9667E39B6472264CF37C42B6D2EB03C2D73934B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_6b236776a624c8b332d18a24edf6ab3e_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_6b236776a624c8b332d18a24edf6ab3e_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_6b236776a624c8b332d18a24edf6ab3e_elex_mafia_stealc_tofsee
- Size 535KB
- SHA256 110c3a86dc1510cec97acc509c5f700195b36834219110d265eb10eb36674c46
- MD5 6b236776a624c8b332d18a24edf6ab3e
- SHA1 1860a9e6d9282428b7e622f89cd6928b664c40b8
- SHA512 877527df74b364c8c0d2a68de1c09e0331ec310686b19aa9d1e44bfbed2bf7ee755f9b5045f6620246e00d1200c2bd13af1c67ca3cdb436a1cce9d12f35bcfd1
- SSDEEP 12288:si4g+yU+0pAiv+3dsA4vbjpX0tJ38QH3jxUlvjosTdcG93Dn:si4gXn0pD+NsLvbjJ0P8QH3ClvjRhFJ
- TLSH T13BC4F1213592C037E2A6193547E5CBA9667E39B6472264CF37C42B6D2EB03C2D73934B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE