General
- Target 2026-07-30_61372590e988fc45f9c0224613151e8e_elex_mafia_stealc_tofsee
- Size 981KB
- Sample260730-2ev64agm2w
- SHA256 6a7aae7303c33396e30036ba7e08dd9c7d4a3bfcd49594bfa9a84f9210a918e0
- MD5 61372590e988fc45f9c0224613151e8e
- SHA1 8e7cc1ebddee92996446a7a1ecb7849fc7c852ca
- SHA512 0ed63bc784e0c113fd0afdd2de88fe047438003de0de565647e3d86aefd71c0818f46fbcce15bc38ff859e6fcc81ae33b82c6d29087c9a890992d4f27d80f6b7
- SSDEEP 12288:FvfTNJw8OLcroCiCOPcCiMKJLZmUAMsNfCL33otGQI+Dt/Xf5xbtJCG0F0S:FXTo8eXEcSLZmym833ofI+Xf5xbPh
- TLSH T1E5250111B9808076D5D629314EF987120ABB3EA647E278C777C47B053E73DC1A7392AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_61372590e988fc45f9c0224613151e8e_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_61372590e988fc45f9c0224613151e8e_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_61372590e988fc45f9c0224613151e8e_elex_mafia_stealc_tofsee
- Size 981KB
- SHA256 6a7aae7303c33396e30036ba7e08dd9c7d4a3bfcd49594bfa9a84f9210a918e0
- MD5 61372590e988fc45f9c0224613151e8e
- SHA1 8e7cc1ebddee92996446a7a1ecb7849fc7c852ca
- SHA512 0ed63bc784e0c113fd0afdd2de88fe047438003de0de565647e3d86aefd71c0818f46fbcce15bc38ff859e6fcc81ae33b82c6d29087c9a890992d4f27d80f6b7
- SSDEEP 12288:FvfTNJw8OLcroCiCOPcCiMKJLZmUAMsNfCL33otGQI+Dt/Xf5xbtJCG0F0S:FXTo8eXEcSLZmym833ofI+Xf5xbPh
- TLSH T1E5250111B9808076D5D629314EF987120ABB3EA647E278C777C47B053E73DC1A7392AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE