General
- Target 2026-07-20_590a2c2e89ed29112e8b634e077c7e18_elex_mafia_stealc_tofsee
- Size 535KB
- Sample260720-teb48aft8r
- SHA256 11e93d0c03db53579b6045516bb3c97e022ddd8f1a86d0a33c9b5fac0d3ee17f
- MD5 590a2c2e89ed29112e8b634e077c7e18
- SHA1 a8e3664712c8cb97db967479b50442e0b885a686
- SHA512 7eb34eda2f0c2f327d5f8f96daa2e7cd5d113f9eff367dc637901ffb756b7962ce5f9308675f21ee14fbb8da63525234e9d1a031b4687d1c40a7555e81a8eda6
- SSDEEP 12288:si4g+yU+0pAiv+HGrRtnNlwlnkcnBXyxUlvjosTdcG93Dn:si4gXn0pD+mLn7mke9lvjRhFJ
- TLSH T19BC4F1243682C037E2A715344AE9CBA6667B39754B26B4CF37845B7D2EB03D2D63530B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_590a2c2e89ed29112e8b634e077c7e18_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_590a2c2e89ed29112e8b634e077c7e18_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_590a2c2e89ed29112e8b634e077c7e18_elex_mafia_stealc_tofsee
- Size 535KB
- SHA256 11e93d0c03db53579b6045516bb3c97e022ddd8f1a86d0a33c9b5fac0d3ee17f
- MD5 590a2c2e89ed29112e8b634e077c7e18
- SHA1 a8e3664712c8cb97db967479b50442e0b885a686
- SHA512 7eb34eda2f0c2f327d5f8f96daa2e7cd5d113f9eff367dc637901ffb756b7962ce5f9308675f21ee14fbb8da63525234e9d1a031b4687d1c40a7555e81a8eda6
- SSDEEP 12288:si4g+yU+0pAiv+HGrRtnNlwlnkcnBXyxUlvjosTdcG93Dn:si4gXn0pD+mLn7mke9lvjRhFJ
- TLSH T19BC4F1243682C037E2A715344AE9CBA6667B39754B26B4CF37845B7D2EB03D2D63530B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE