General
- Target 2026-08-03_b0c8226529ad14eb159405a5fc5e59d5_elex_stealc_stop_tofsee
- Size 264KB
- Sample260803-nbspxaxvds
- SHA256 746bc57a3bde86f549a8ee20f14c8f922d0323375f21c20199268a5f23bc4770
- MD5 b0c8226529ad14eb159405a5fc5e59d5
- SHA1 2f2c464626781cf9c02443ec144bd5c77c450e8d
- SHA512 8e031321772477591373e518941bbdb6411784b78b010e0e4496fcb3c4bac90ce2171a7ac80788b2f84716fd2b6cb927bb6bc0a92bd675f706e4fe7c8497db89
- SSDEEP 3072:AUApueDWSppTaeskDEjUrqfkZ557YzAL9gFoI3X3fZE5UANaa:ASeyGpTaesaQUufkL57YsL9NIx9ANaa
- TLSH T1A1444C213680C032E366273049E6E6F459A97D794AA4E64FF7B47F391E315938A3720F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_b0c8226529ad14eb159405a5fc5e59d5_elex_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
112.175.88.207
-
112.175.88.208
Targets
-
- Target 2026-08-03_b0c8226529ad14eb159405a5fc5e59d5_elex_stealc_stop_tofsee
- Size 264KB
- SHA256 746bc57a3bde86f549a8ee20f14c8f922d0323375f21c20199268a5f23bc4770
- MD5 b0c8226529ad14eb159405a5fc5e59d5
- SHA1 2f2c464626781cf9c02443ec144bd5c77c450e8d
- SHA512 8e031321772477591373e518941bbdb6411784b78b010e0e4496fcb3c4bac90ce2171a7ac80788b2f84716fd2b6cb927bb6bc0a92bd675f706e4fe7c8497db89
- SSDEEP 3072:AUApueDWSppTaeskDEjUrqfkZ557YzAL9gFoI3X3fZE5UANaa:ASeyGpTaesaQUufkL57YsL9NIx9ANaa
- TLSH T1A1444C213680C032E366273049E6E6F459A97D794AA4E64FF7B47F391E315938A3720F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE