General
- Target 2026-08-08_73c8015ad0331ffb701813e2501204f5_elex_stealc_stop_swisyn_tofsee
- Size 1.3MB
- Sample260808-lypwesdk8x
- SHA256 814ea11f781c57a6183b7fac9a55ba5353c801f7fe6d24243d6e0807dec83c51
- MD5 73c8015ad0331ffb701813e2501204f5
- SHA1 12be987e77f5d834a4cc5a3fe1cb31f8f433f409
- SHA512 9cc6717d8533e1b721ffd5706855e41999071a8bc175673df07e3e3de6b69f1ae1d7a3cb0958a495a953a2399e05c4ea2163bba8e4272bb0084991414f28d611
- SSDEEP 24576:cFOakivtCX8jD0MhSq73WMGYPmjDhUGhPmQYuXh6a5S0crqHGFd:sVtCX8P0Mhb7DGYahhPXYGh5cDL
- TLSH T19C55E0510F05C4B4C09652F16EE28231BB3D5E368FFBC443A6F26F18D7366DA39A1668
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_73c8015ad0331ffb701813e2501204f5_elex_stealc_stop_swisyn_tofsee.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_73c8015ad0331ffb701813e2501204f5_elex_stealc_stop_swisyn_tofsee.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_73c8015ad0331ffb701813e2501204f5_elex_stealc_stop_swisyn_tofsee
- Size 1.3MB
- SHA256 814ea11f781c57a6183b7fac9a55ba5353c801f7fe6d24243d6e0807dec83c51
- MD5 73c8015ad0331ffb701813e2501204f5
- SHA1 12be987e77f5d834a4cc5a3fe1cb31f8f433f409
- SHA512 9cc6717d8533e1b721ffd5706855e41999071a8bc175673df07e3e3de6b69f1ae1d7a3cb0958a495a953a2399e05c4ea2163bba8e4272bb0084991414f28d611
- SSDEEP 24576:cFOakivtCX8jD0MhSq73WMGYPmjDhUGhPmQYuXh6a5S0crqHGFd:sVtCX8P0Mhb7DGYahhPXYGh5cDL
- TLSH T19C55E0510F05C4B4C09652F16EE28231BB3D5E368FFBC443A6F26F18D7366DA39A1668
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies visibility of hidden/system files in Explorer
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2