General
- Target 2026-07-21_25cf2aa1921a786d810127a138a7c3b0_elex_mafia_stealc_tofsee
- Size 561KB
- Sample260722-bffvpatvgs
- SHA256 d521eeaff629352dad3b2ede59f76304b642031c5691cd4773976ed8f3be0a32
- MD5 25cf2aa1921a786d810127a138a7c3b0
- SHA1 e32a4f591fbb230187126b128a9cdb96db237a80
- SHA512 2225652f67c26af838039af69a6640a9a12ac3673f945db3c9641babe6c653a92b491813718babc8dde18c6d39a27e578551d440e3b52e2d6c32d48b3d197ef8
- SSDEEP 12288:ob4bZudi79LVAGytgTxkDVuJHkF/jwDtvNoAk83Aa5nDU8cDJh8d5:ob4bcdkLVADGvJHkYtvNwOd5
- TLSH T168C4CF1D3A719936EEE100B946A083A53965FDB30B2D74C727E4BEFE1D389D0863612D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_25cf2aa1921a786d810127a138a7c3b0_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_25cf2aa1921a786d810127a138a7c3b0_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_25cf2aa1921a786d810127a138a7c3b0_elex_mafia_stealc_tofsee
- Size 561KB
- SHA256 d521eeaff629352dad3b2ede59f76304b642031c5691cd4773976ed8f3be0a32
- MD5 25cf2aa1921a786d810127a138a7c3b0
- SHA1 e32a4f591fbb230187126b128a9cdb96db237a80
- SHA512 2225652f67c26af838039af69a6640a9a12ac3673f945db3c9641babe6c653a92b491813718babc8dde18c6d39a27e578551d440e3b52e2d6c32d48b3d197ef8
- SSDEEP 12288:ob4bZudi79LVAGytgTxkDVuJHkF/jwDtvNoAk83Aa5nDU8cDJh8d5:ob4bcdkLVADGvJHkYtvNwOd5
- TLSH T168C4CF1D3A719936EEE100B946A083A53965FDB30B2D74C727E4BEFE1D389D0863612D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE