General
- Target 2026-08-08_73c8015ad0331ffb701813e2501204f5_elex_stealc_stop_swisyn_tofsee
- Size 1.3MB
- Sample260808-lypwesdk8x
- SHA256 814ea11f781c57a6183b7fac9a55ba5353c801f7fe6d24243d6e0807dec83c51
- MD5 73c8015ad0331ffb701813e2501204f5
- SHA1 12be987e77f5d834a4cc5a3fe1cb31f8f433f409
- SHA512 9cc6717d8533e1b721ffd5706855e41999071a8bc175673df07e3e3de6b69f1ae1d7a3cb0958a495a953a2399e05c4ea2163bba8e4272bb0084991414f28d611
- SSDEEP 24576:cFOakivtCX8jD0MhSq73WMGYPmjDhUGhPmQYuXh6a5S0crqHGFd:sVtCX8P0Mhb7DGYahhPXYGh5cDL
- TLSH T19C55E0510F05C4B4C09652F16EE28231BB3D5E368FFBC443A6F26F18D7366DA39A1668
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_73c8015ad0331ffb701813e2501204f5_elex_stealc_stop_swisyn_tofsee.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_73c8015ad0331ffb701813e2501204f5_elex_stealc_stop_swisyn_tofsee.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_73c8015ad0331ffb701813e2501204f5_elex_stealc_stop_swisyn_tofsee
- Size 1.3MB
- SHA256 814ea11f781c57a6183b7fac9a55ba5353c801f7fe6d24243d6e0807dec83c51
- MD5 73c8015ad0331ffb701813e2501204f5
- SHA1 12be987e77f5d834a4cc5a3fe1cb31f8f433f409
- SHA512 9cc6717d8533e1b721ffd5706855e41999071a8bc175673df07e3e3de6b69f1ae1d7a3cb0958a495a953a2399e05c4ea2163bba8e4272bb0084991414f28d611
- SSDEEP 24576:cFOakivtCX8jD0MhSq73WMGYPmjDhUGhPmQYuXh6a5S0crqHGFd:sVtCX8P0Mhb7DGYahhPXYGh5cDL
- TLSH T19C55E0510F05C4B4C09652F16EE28231BB3D5E368FFBC443A6F26F18D7366DA39A1668
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2