General
- Target 2026-07-29_75aae6c2e148d3fb43dd0afe91e8f391_elex_mafia_stealc_tofsee
- Size 535KB
- Sample260729-y6kynaed49
- SHA256 b2be2e9546dafaed28ff03dd5c8d7e532a8710fbacd79b41e28bea3e02dd7706
- MD5 75aae6c2e148d3fb43dd0afe91e8f391
- SHA1 695c47aca990244798b3c89637d80f8f7907139b
- SHA512 8dbf89b8843d29ad1d9b2f8e76ef6c8eb38434aafd49dbd93cf0b0079b4191fb8c5fb70ceab14009c47e6ddeedd7c6eca6de7c38637eaed9a08c1e0227e9616f
- SSDEEP 12288:si4g+yU+0pAiv+3dOeGZTeesqXwLzXRaIzsVYxUlvjosTdcG93Dn:si4gXn0pD+NOdtBsqXwLlamsVjlvjRhr
- TLSH T101C4F1313592C037E6A604314BE5DBA6667A79B6476278DF37C42B7E2E702C2D63430B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_75aae6c2e148d3fb43dd0afe91e8f391_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_75aae6c2e148d3fb43dd0afe91e8f391_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_75aae6c2e148d3fb43dd0afe91e8f391_elex_mafia_stealc_tofsee
- Size 535KB
- SHA256 b2be2e9546dafaed28ff03dd5c8d7e532a8710fbacd79b41e28bea3e02dd7706
- MD5 75aae6c2e148d3fb43dd0afe91e8f391
- SHA1 695c47aca990244798b3c89637d80f8f7907139b
- SHA512 8dbf89b8843d29ad1d9b2f8e76ef6c8eb38434aafd49dbd93cf0b0079b4191fb8c5fb70ceab14009c47e6ddeedd7c6eca6de7c38637eaed9a08c1e0227e9616f
- SSDEEP 12288:si4g+yU+0pAiv+3dOeGZTeesqXwLzXRaIzsVYxUlvjosTdcG93Dn:si4gXn0pD+NOdtBsqXwLlamsVjlvjRhr
- TLSH T101C4F1313592C037E6A604314BE5DBA6667A79B6476278DF37C42B7E2E702C2D63430B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE