General
- Target 2026-08-09_4eda149314146f85ab6ea6a9358da690_elex_stealc_stop_swisyn_tofsee
- Size 1.3MB
- Sample260809-w9b4tatdre
- SHA256 006ac50dd6da68f204c3710952a808b51b698b779360e669d49ec5179311658c
- MD5 4eda149314146f85ab6ea6a9358da690
- SHA1 dfa18105d24ba3d27f1c5015a0f5c07fbff175e6
- SHA512 becc06e17dcdd41493e85febd39848b7b324567c7b69530fa455649b0b5ba608ee02b6a2e54abfd0bdd5499b1da520ce01678da3a74f679681cdb15dec6317af
- SSDEEP 24576:PFOaAivtCX8jD0MhSq73WMGYPmjDhUGhPmQYuXh6a5S0crqHGFS:tRtCX8P0Mhb7DGYahhPXYGh5cDM
- TLSH T1C255E0150F55C4B8C09646F06EE28230B73D5E368FFBC54366F26F18D2366EB79A0668
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_4eda149314146f85ab6ea6a9358da690_elex_stealc_stop_swisyn_tofsee.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_4eda149314146f85ab6ea6a9358da690_elex_stealc_stop_swisyn_tofsee.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_4eda149314146f85ab6ea6a9358da690_elex_stealc_stop_swisyn_tofsee
- Size 1.3MB
- SHA256 006ac50dd6da68f204c3710952a808b51b698b779360e669d49ec5179311658c
- MD5 4eda149314146f85ab6ea6a9358da690
- SHA1 dfa18105d24ba3d27f1c5015a0f5c07fbff175e6
- SHA512 becc06e17dcdd41493e85febd39848b7b324567c7b69530fa455649b0b5ba608ee02b6a2e54abfd0bdd5499b1da520ce01678da3a74f679681cdb15dec6317af
- SSDEEP 24576:PFOaAivtCX8jD0MhSq73WMGYPmjDhUGhPmQYuXh6a5S0crqHGFS:tRtCX8P0Mhb7DGYahhPXYGh5cDM
- TLSH T1C255E0150F55C4B8C09646F06EE28230B73D5E368FFBC54366F26F18D2366EB79A0668
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2