General
- Target 2026-08-02_236c9bc749f0a25ed8a03132888495ab_elex_mafia_stealc_tofsee
- Size 800KB
- Sample260802-x16shazfra
- SHA256 cbcef6ccfa7f8a69bd4474d351dbfd43c17a365370ca1594ac18b2af78c22060
- MD5 236c9bc749f0a25ed8a03132888495ab
- SHA1 39797d0c0b7ee68026786c5a299348a978fb8b9b
- SHA512 fea78beafe59aa768f2fd39681bb85e6f8ca9d54dcef104d8b6891d2b7da812c48ba4fe4c25258a8c4a4938d8b702b15b31df74c521e9bcb60376854c0366a0b
- SSDEEP 24576:CX47adsXTtMQzMQcOHJDiV6gh8yOZ0blPR:CX4WdsXTBQ0Ni8gB5ZPR
- TLSH T1A80512213542C033E067163946E9EBB51A2A3D75872668C73BD43BBD6E703D2E63530B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_236c9bc749f0a25ed8a03132888495ab_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_236c9bc749f0a25ed8a03132888495ab_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_236c9bc749f0a25ed8a03132888495ab_elex_mafia_stealc_tofsee
- Size 800KB
- SHA256 cbcef6ccfa7f8a69bd4474d351dbfd43c17a365370ca1594ac18b2af78c22060
- MD5 236c9bc749f0a25ed8a03132888495ab
- SHA1 39797d0c0b7ee68026786c5a299348a978fb8b9b
- SHA512 fea78beafe59aa768f2fd39681bb85e6f8ca9d54dcef104d8b6891d2b7da812c48ba4fe4c25258a8c4a4938d8b702b15b31df74c521e9bcb60376854c0366a0b
- SSDEEP 24576:CX47adsXTtMQzMQcOHJDiV6gh8yOZ0blPR:CX4WdsXTBQ0Ni8gB5ZPR
- TLSH T1A80512213542C033E067163946E9EBB51A2A3D75872668C73BD43BBD6E703D2E63530B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE