General
- Target 2026-07-27_ca672c78cdeec999dcef71701fd7b90b_elex_mafia_stealc_tofsee
- Size 615KB
- Sample260727-rjxklsbd75
- SHA256 5638d282ef898bfdf6e6ac50c0ec8d8b0da9b387d87dd78e02e89063aa5cb55b
- MD5 ca672c78cdeec999dcef71701fd7b90b
- SHA1 361217bb436ac1bd9bd9c0424a7db0f980283f56
- SHA512 89dc1bcd802e86c0d5273efe2775ed34cf61c674ea99fc46eb996ac3e92c0ed58f0a11301361713573dcc168accf56522ce17593f256423b14fdd70e349bf64c
- SSDEEP 12288:mi4g+yU+0pAivzDcU3XeeTCj39jnT2C1o0zXNq8CbqDxUlvjosTdcG93+0pHEEH:mi4gXn0pDzD/a3VPzwMilvjRhFlpHEEH
- TLSH T183D4012672458233D25302711AEADBD6B73E78750326A8CB37C8566E2FB17D1D336386
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_ca672c78cdeec999dcef71701fd7b90b_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_ca672c78cdeec999dcef71701fd7b90b_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_ca672c78cdeec999dcef71701fd7b90b_elex_mafia_stealc_tofsee
- Size 615KB
- SHA256 5638d282ef898bfdf6e6ac50c0ec8d8b0da9b387d87dd78e02e89063aa5cb55b
- MD5 ca672c78cdeec999dcef71701fd7b90b
- SHA1 361217bb436ac1bd9bd9c0424a7db0f980283f56
- SHA512 89dc1bcd802e86c0d5273efe2775ed34cf61c674ea99fc46eb996ac3e92c0ed58f0a11301361713573dcc168accf56522ce17593f256423b14fdd70e349bf64c
- SSDEEP 12288:mi4g+yU+0pAivzDcU3XeeTCj39jnT2C1o0zXNq8CbqDxUlvjosTdcG93+0pHEEH:mi4gXn0pDzD/a3VPzwMilvjRhFlpHEEH
- TLSH T183D4012672458233D25302711AEADBD6B73E78750326A8CB37C8566E2FB17D1D336386
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE