General
- Target 2026-08-03_703a0d0dc7f96e08aad20b474dc0d055_elex_mafia_stealc_tofsee
- Size 535KB
- Sample260803-k5q7dsfb87
- SHA256 0263c63b6f65e6e88f33fb454dd59faebacf9c577b151e91635c306a045f9929
- MD5 703a0d0dc7f96e08aad20b474dc0d055
- SHA1 f6bb0e51ab0537530f1484171acee3b3a14f7f7c
- SHA512 1f863a1ba814261483211c0c138cbeda9e11221f7f1ec909a0f5e443bd142cd3dd3b616004f4e80bb8779b728f368d91ce2f90314d7c275ad27249041402297a
- SSDEEP 12288:si4g+yU+0pAiv+IGf93T2RjudteOyQgGumMxUlvjosTdcG93Dn:si4gXn0pD+rZT2E7eOrg0lvjRhFJ
- TLSH T19EC4F1213592C033D27B11354BE6CB69653E7D764B2264CF3BC46B6A2EB93D2963034B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_703a0d0dc7f96e08aad20b474dc0d055_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_703a0d0dc7f96e08aad20b474dc0d055_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_703a0d0dc7f96e08aad20b474dc0d055_elex_mafia_stealc_tofsee
- Size 535KB
- SHA256 0263c63b6f65e6e88f33fb454dd59faebacf9c577b151e91635c306a045f9929
- MD5 703a0d0dc7f96e08aad20b474dc0d055
- SHA1 f6bb0e51ab0537530f1484171acee3b3a14f7f7c
- SHA512 1f863a1ba814261483211c0c138cbeda9e11221f7f1ec909a0f5e443bd142cd3dd3b616004f4e80bb8779b728f368d91ce2f90314d7c275ad27249041402297a
- SSDEEP 12288:si4g+yU+0pAiv+IGf93T2RjudteOyQgGumMxUlvjosTdcG93Dn:si4gXn0pD+rZT2E7eOrg0lvjRhFJ
- TLSH T19EC4F1213592C033D27B11354BE6CB69653E7D764B2264CF3BC46B6A2EB93D2963034B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE