General
- Target 2026-07-23_e0c0c6f5996e6f2d2719b4dcd2f49794_elex_mafia_stealc_tofsee
- Size 535KB
- Sample260723-ms5v5abh79
- SHA256 7d5517b42ba4ca19dc19f7aa4487fb979a73b5f887e88ebc1503f82e231c1db0
- MD5 e0c0c6f5996e6f2d2719b4dcd2f49794
- SHA1 a7fa378b9babd0b790242b2c7e4fa70ae608f81a
- SHA512 6dcf6ae7da33b0794e42f208401c1bdcdc73b6c9478247d73249852549b8b3f8c857842b099d1dc20f50e0e3b933e54bd4aa7da3882fca8ea9ab98fb02f6de28
- SSDEEP 12288:si4g+yU+0pAiv+11jMwi0fhesN9X2/1dfbZxUlvjosTdcG93Dn:si4gXn0pD+1BMw5IsHa15QlvjRhFJ
- TLSH T12AC4F1253492C037D2A715344AF9CB66667E3CB2872768CF37C42BA96FB02D29635347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_e0c0c6f5996e6f2d2719b4dcd2f49794_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_e0c0c6f5996e6f2d2719b4dcd2f49794_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_e0c0c6f5996e6f2d2719b4dcd2f49794_elex_mafia_stealc_tofsee
- Size 535KB
- SHA256 7d5517b42ba4ca19dc19f7aa4487fb979a73b5f887e88ebc1503f82e231c1db0
- MD5 e0c0c6f5996e6f2d2719b4dcd2f49794
- SHA1 a7fa378b9babd0b790242b2c7e4fa70ae608f81a
- SHA512 6dcf6ae7da33b0794e42f208401c1bdcdc73b6c9478247d73249852549b8b3f8c857842b099d1dc20f50e0e3b933e54bd4aa7da3882fca8ea9ab98fb02f6de28
- SSDEEP 12288:si4g+yU+0pAiv+11jMwi0fhesN9X2/1dfbZxUlvjosTdcG93Dn:si4gXn0pD+1BMw5IsHa15QlvjRhFJ
- TLSH T12AC4F1253492C037D2A715344AF9CB66667E3CB2872768CF37C42BA96FB02D29635347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE