General
- Target 2026-08-05_548f6efef55f2d55a4312294aa15f9f6_elex_mafia_stealc_tofsee
- Size 486KB
- Sample260805-w76weadd64
- SHA256 86e9cf4cc584c34715adf0eb684bb1ffc81d305a1ab12b335d1f5869f3e195b4
- MD5 548f6efef55f2d55a4312294aa15f9f6
- SHA1 201b2abcbe5af120f95b882dba0cb0f763cd435f
- SHA512 09a61a102f6a4d3dbd4e8c896068d6aa83076f668dcf38790d2b54f1caf8114234df090f56bbeee592b5c1aa9fca3cb84c5bca3441d4970bd31f49b77409296d
- SSDEEP 6144:fpzhInoFPRsVmVE600C978/NQY84ppaAi7kRo4tcRR29VhMVhjdKhSBW0ZAeIlpx:frF2600C97szPp4AoSpcj02bx5hzJeUg
- TLSH T1C3B4AD2369458032F07243361AA1BBB1152A7D615712F1F337A57EBD6A73AC3EA30237
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_548f6efef55f2d55a4312294aa15f9f6_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_548f6efef55f2d55a4312294aa15f9f6_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_548f6efef55f2d55a4312294aa15f9f6_elex_mafia_stealc_tofsee
- Size 486KB
- SHA256 86e9cf4cc584c34715adf0eb684bb1ffc81d305a1ab12b335d1f5869f3e195b4
- MD5 548f6efef55f2d55a4312294aa15f9f6
- SHA1 201b2abcbe5af120f95b882dba0cb0f763cd435f
- SHA512 09a61a102f6a4d3dbd4e8c896068d6aa83076f668dcf38790d2b54f1caf8114234df090f56bbeee592b5c1aa9fca3cb84c5bca3441d4970bd31f49b77409296d
- SSDEEP 6144:fpzhInoFPRsVmVE600C978/NQY84ppaAi7kRo4tcRR29VhMVhjdKhSBW0ZAeIlpx:frF2600C97szPp4AoSpcj02bx5hzJeUg
- TLSH T1C3B4AD2369458032F07243361AA1BBB1152A7D615712F1F337A57EBD6A73AC3EA30237
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE