General
- Target 2026-07-20_35a6ca90e31bc4f6b645dc8fb6ebf5c5_elex_mafia_stealc_tofsee
- Size 486KB
- Sample260720-whyhqsat8m
- SHA256 e1f920907f926e8097ba3399fd38ad9561589dc8d6072d8d0b90fa49192ff963
- MD5 35a6ca90e31bc4f6b645dc8fb6ebf5c5
- SHA1 43242b4c99ea60f481c6f0229dff43c3da4f977e
- SHA512 19215db31521f5c59fb08ba5d5333936b9306ebc53f1fe598d7bdaee974e55a5aa9577a96cfb3b8558a4ba30bbc329bb2abf0fba2e7b0ecd0d18adc83a130f46
- SSDEEP 12288:frF2600C97YBldhHhEaCj3AyzCX2LXExJeUg:fro6s9srJQ8y10xMB
- TLSH T18DB4AD136A848032F57203361AA5BBB2052A7D615352F1F777917EBD6A73AC3E930237
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_35a6ca90e31bc4f6b645dc8fb6ebf5c5_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_35a6ca90e31bc4f6b645dc8fb6ebf5c5_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_35a6ca90e31bc4f6b645dc8fb6ebf5c5_elex_mafia_stealc_tofsee
- Size 486KB
- SHA256 e1f920907f926e8097ba3399fd38ad9561589dc8d6072d8d0b90fa49192ff963
- MD5 35a6ca90e31bc4f6b645dc8fb6ebf5c5
- SHA1 43242b4c99ea60f481c6f0229dff43c3da4f977e
- SHA512 19215db31521f5c59fb08ba5d5333936b9306ebc53f1fe598d7bdaee974e55a5aa9577a96cfb3b8558a4ba30bbc329bb2abf0fba2e7b0ecd0d18adc83a130f46
- SSDEEP 12288:frF2600C97YBldhHhEaCj3AyzCX2LXExJeUg:fro6s9srJQ8y10xMB
- TLSH T18DB4AD136A848032F57203361AA5BBB2052A7D615352F1F777917EBD6A73AC3E930237
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE