General
- Target 2026-07-29_f2903e2837c676d0a99a65edd2a01ad0_elex_mafia_stealc_tofsee
- Size 535KB
- Sample260729-xtny4sdd62
- SHA256 0d0b3be4d10c1c30f70a6168c908dd27c0bf8d394fa8335f37da7b99b590a82b
- MD5 f2903e2837c676d0a99a65edd2a01ad0
- SHA1 6263115e66770b7408ead03a5c13f891841e1cf3
- SHA512 3641b14021291ed7fd18d8f02d08c8654a488d42071c064dddd8f6a64d3312a67e39668c8d9ba36c6b8e856d5d467eb4a7f2e2f38610b9f5a518b4bf77fc9130
- SSDEEP 12288:si4g+yU+0pAiv+qyR3XgEwj8mG2jbRXl1txK9xUlvjosTdcG93Dn:si4gXn0pD+T9HZ2jb3TcMlvjRhFJ
- TLSH T1E6C401213581C033E2A724344AE9CB66667E7D754B12A8CF3BC42B6E6E743C2D27535B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_f2903e2837c676d0a99a65edd2a01ad0_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_f2903e2837c676d0a99a65edd2a01ad0_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_f2903e2837c676d0a99a65edd2a01ad0_elex_mafia_stealc_tofsee
- Size 535KB
- SHA256 0d0b3be4d10c1c30f70a6168c908dd27c0bf8d394fa8335f37da7b99b590a82b
- MD5 f2903e2837c676d0a99a65edd2a01ad0
- SHA1 6263115e66770b7408ead03a5c13f891841e1cf3
- SHA512 3641b14021291ed7fd18d8f02d08c8654a488d42071c064dddd8f6a64d3312a67e39668c8d9ba36c6b8e856d5d467eb4a7f2e2f38610b9f5a518b4bf77fc9130
- SSDEEP 12288:si4g+yU+0pAiv+qyR3XgEwj8mG2jbRXl1txK9xUlvjosTdcG93Dn:si4gXn0pD+T9HZ2jb3TcMlvjRhFJ
- TLSH T1E6C401213581C033E2A724344AE9CB66667E7D754B12A8CF3BC42B6E6E743C2D27535B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE