2026-08-03_5d8774fa24c2fdc3ad93797c5c6d17ef_elex_stealc_stop_tofsee

General

Target
2026-08-03_5d8774fa24c2fdc3ad93797c5c6d17ef_elex_stealc_stop_tofsee
Size 363KB
Sample260803-c5cp1axalg
SHA256 2e82130505f98f37df9fa0a3b88dc190b13f2afb34936c774aa9754504dece91
MD5 5d8774fa24c2fdc3ad93797c5c6d17ef
SHA1 a2168b6f5093e6d4a75298c40a239d1573bb9325
SHA512 cc7e32c732886955d7650c95b09b8b49abbc70c2ba74dba6fe989433ab9cddbd8f2c48d989ef376f85348d085ba7ef05d9cbc1d6643fc734f851769183e0091c
SSDEEP 6144:D95IzT4KtZYXQB0MmYOFEjXOxYRy5X7zuqGoh:DivtCXQB05tejKX7zuqGK
TLSH
T12D84169C21A1C077CA530FF284E5DF631115F9913B23A52EE6902E99BA30E964BF7137
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_5d8774fa24c2fdc3ad93797c5c6d17ef_elex_stealc_stop_tofsee

File Explorer

2026-08-03_5d8774fa24c2fdc3ad93797c5c6d17ef_elex_stealc_stop_tofsee

.exe 363KB

2026-08-03_5d8774fa24c2fdc3ad93797c5c6d17ef_elex_stealc_stop_tofsee

IMPHASH 07afe1e0c9da7fec9e5f700881a1f162
SHA256 2e82130505f98f37df9fa0a3b88dc190b13f2afb34936c774aa9754504dece91
MD5 5d8774fa24c2fdc3ad93797c5c6d17ef
SHA1 a2168b6f5093e6d4a75298c40a239d1573bb9325
SHA512 cc7e32c732886955d7650c95b09b8b49abbc70c2ba74dba6fe989433ab9cddbd8f2c48d989ef376f85348d085ba7ef05d9cbc1d6643fc734f851769183e0091c
SSDEEP 6144:D95IzT4KtZYXQB0MmYOFEjXOxYRy5X7zuqGoh:DivtCXQB05tejKX7zuqGK
TLSH
T12D84169C21A1C077CA530FF284E5DF631115F9913B23A52EE6902E99BA30E964BF7137
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

107954

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError MultiByteToWideChar WideCharToMultiByte LoadLibraryExW GetModuleFileNameW LocalFree FormatMessageW GetSystemDirectoryW CloseHandle SetFileTime CreateFileW SetFileAttributesW RemoveDirectoryW GetProcAddress GetModuleHandleW CreateDirectoryW DeleteFileW SetCurrentDirectoryW GetCurrentDirectoryW GetTempPathW SetLastError GetCurrentProcessId GetTickCount GetCurrentThreadId FindClose FindFirstFileW FindNextFileW GetModuleHandleA GetFileAttributesW GetFileSize SetFilePointer ReadFile WriteFile SetEndOfFile GetProcessAffinityMask GetCurrentProcess GetSystemInfo GlobalMemoryStatus GetFileInformationByHandle GetStdHandle WaitForMultipleObjects Sleep VirtualAlloc VirtualFree GetVersionExW lstrcatW lstrlenW WaitForSingleObject CreateEventW SetEvent ResetEvent InitializeCriticalSection GetExitCodeProcess CreateProcessW GetCommandLineW HeapSize LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA InitializeCriticalSectionAndSpinCount GetLocaleInfoA IsValidCodePage GetOEMCP GetACP GetCPInfo LoadLibraryA GetSystemTimeAsFileTime QueryPerformanceCounter GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA ExitProcess HeapCreate RtlUnwind RaiseException HeapAlloc HeapFree HeapReAlloc ExitThread CreateThread GetCommandLineA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement TerminateProcess IsDebuggerPresent

user32

DestroyWindow LoadIconW EndDialog KillTimer SetTimer SetWindowTextW PostMessageW SendMessageW MessageBoxW DialogBoxParamW GetWindowLongW SetWindowLongW ShowWindow LoadStringW CharUpperW GetDlgItem

shell32

ShellExecuteExW

oleaut32

VariantClear SysAllocStringLen SysStringLen

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_5d8774fa24c2fdc3ad93797c5c6d17ef_elex_stealc_stop_tofsee

kernel32

user32

shell32

oleaut32

generic