General
- Target 2026-08-04_37852a1232b42fae022799c39fb703ac_elex_mafia_stealc_tofsee
- Size 800KB
- Sample260804-zergssxxhs
- SHA256 b9571c07a8a07cd2c1c7d2e4081f518b28aaa4bbe03bd9c31bef87cd3cb04db9
- MD5 37852a1232b42fae022799c39fb703ac
- SHA1 f31728a76374408b0c1a9956c5d6585497214473
- SHA512 a405707c419348fe3e4beb63aea6f123895b043811e0a7e1ed00e4eb2b2ed72871ffae0502ad99e0f5fcc3f8f62d38dfa7c8c11fd574b3533e922fd82bea60f0
- SSDEEP 12288:CX47XqdkFZXpuOTsAR/yhM+F2IBW0OoH6Jev5YCHGlWLh8yO/x0Q32lPRfIA:CX47adsX7VAtfbV6gh8yOZ0blPR
- TLSH T18A0512217586C033E157063A46E9ABA45A2E3D718729ACC73BD43BBE6E713D2D634307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_37852a1232b42fae022799c39fb703ac_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_37852a1232b42fae022799c39fb703ac_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_37852a1232b42fae022799c39fb703ac_elex_mafia_stealc_tofsee
- Size 800KB
- SHA256 b9571c07a8a07cd2c1c7d2e4081f518b28aaa4bbe03bd9c31bef87cd3cb04db9
- MD5 37852a1232b42fae022799c39fb703ac
- SHA1 f31728a76374408b0c1a9956c5d6585497214473
- SHA512 a405707c419348fe3e4beb63aea6f123895b043811e0a7e1ed00e4eb2b2ed72871ffae0502ad99e0f5fcc3f8f62d38dfa7c8c11fd574b3533e922fd82bea60f0
- SSDEEP 12288:CX47XqdkFZXpuOTsAR/yhM+F2IBW0OoH6Jev5YCHGlWLh8yO/x0Q32lPRfIA:CX47adsX7VAtfbV6gh8yOZ0blPR
- TLSH T18A0512217586C033E157063A46E9ABA45A2E3D718729ACC73BD43BBE6E713D2D634307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE