General
- Target 2026-07-22_b667d3ead52d2d8670aa8a9c5f9fbef9_elex_mafia_stealc_tofsee
- Size 535KB
- Sample260722-vqjtwazbnf
- SHA256 abefed255944256e55d6e9833f636119993ad68f9fe46e4c788fd1dbd08c7763
- MD5 b667d3ead52d2d8670aa8a9c5f9fbef9
- SHA1 5dcb857114a870d68a1af20eeec69d156857c109
- SHA512 6cfdccac77f08b6e2c7a9f34e6539fca02dededbbd8ae789052f4401522770ab073e68279f0ee2686e3dc0d4382ec0bc9b74422ef0393cb7a18a754951260efd
- SSDEEP 12288:si4g+yU+0pAiv+jYpnysn0xaysS0qxUlvjosTdcG93Dn:si4gXn0pD+Upnp0YDjFlvjRhFJ
- TLSH T1B5C402213482C033E29719344BE5CBA66A7A3DB6471668CF37C42B696EB43D1E33535B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_b667d3ead52d2d8670aa8a9c5f9fbef9_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_b667d3ead52d2d8670aa8a9c5f9fbef9_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_b667d3ead52d2d8670aa8a9c5f9fbef9_elex_mafia_stealc_tofsee
- Size 535KB
- SHA256 abefed255944256e55d6e9833f636119993ad68f9fe46e4c788fd1dbd08c7763
- MD5 b667d3ead52d2d8670aa8a9c5f9fbef9
- SHA1 5dcb857114a870d68a1af20eeec69d156857c109
- SHA512 6cfdccac77f08b6e2c7a9f34e6539fca02dededbbd8ae789052f4401522770ab073e68279f0ee2686e3dc0d4382ec0bc9b74422ef0393cb7a18a754951260efd
- SSDEEP 12288:si4g+yU+0pAiv+jYpnysn0xaysS0qxUlvjosTdcG93Dn:si4gXn0pD+Upnp0YDjFlvjRhFJ
- TLSH T1B5C402213482C033E29719344BE5CBA66A7A3DB6471668CF37C42B696EB43D1E33535B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE