General
- Target 2026-08-04_88486018a872b6ce49e639b4e1f33c8b_elex_mafia_stealc_tofsee
- Size 800KB
- Sample260804-x451dawwcw
- SHA256 e9e76b0a6b1f8ee8ff946febfe559810185dfb330f5ea1cf81ca460522623b1c
- MD5 88486018a872b6ce49e639b4e1f33c8b
- SHA1 a44193cb4f9d6bf792c834009f566b9ce5975f51
- SHA512 e3fe0da97016041b2a2dcaa7aab2901963d2c915ce7e20d5e2e6a210801980e0aba04a1749adedb86046e28964e6b1d63f1129a9fc7d0201f9786abe1fb1753e
- SSDEEP 12288:CX47XqdkFZX4UhQtO3h3x+pxVgL0OoH6Jev5YCHGlWLh8yO/x0Q32lPRfIA:CX47adsXfpsb3V6gh8yOZ0blPR
- TLSH T1130512213642C033E162163547E6EBA51A3E3DA18726ACC73BD43BBD6E752D2D63530B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_88486018a872b6ce49e639b4e1f33c8b_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_88486018a872b6ce49e639b4e1f33c8b_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_88486018a872b6ce49e639b4e1f33c8b_elex_mafia_stealc_tofsee
- Size 800KB
- SHA256 e9e76b0a6b1f8ee8ff946febfe559810185dfb330f5ea1cf81ca460522623b1c
- MD5 88486018a872b6ce49e639b4e1f33c8b
- SHA1 a44193cb4f9d6bf792c834009f566b9ce5975f51
- SHA512 e3fe0da97016041b2a2dcaa7aab2901963d2c915ce7e20d5e2e6a210801980e0aba04a1749adedb86046e28964e6b1d63f1129a9fc7d0201f9786abe1fb1753e
- SSDEEP 12288:CX47XqdkFZX4UhQtO3h3x+pxVgL0OoH6Jev5YCHGlWLh8yO/x0Q32lPRfIA:CX47adsXfpsb3V6gh8yOZ0blPR
- TLSH T1130512213642C033E162163547E6EBA51A3E3DA18726ACC73BD43BBD6E752D2D63530B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE