General
- Target 2026-08-10_909dcc828938045c7ce4df183c3e0cc2_elex_mafia_stealc_tofsee
- Size 535KB
- Sample260810-113mmavshv
- SHA256 14cef3c917eeb0a7379ed0715d5d8453819b77f7c83269f9ef3a80e2c1838f3f
- MD5 909dcc828938045c7ce4df183c3e0cc2
- SHA1 be067d4bef0585fc60867177f1a294de8f568edc
- SHA512 ef85e36213421f862915d3a55986be150e208517a2a5530f8467d0e8274d03b2101968cc01c5fda7933ea1ed956d7254300d2a5eab4b3fa2130b5bb6bedb3528
- SSDEEP 12288:si4g+yU+0pAiv+r9e+zgjsjZT2DLUoLUlsAxUlvjosTdcG93Dn:si4gXn0pD+rI+EjsjZT2DLUoDLlvjRhr
- TLSH T1A2C401203152C033E2A715344BE9CBA5A67E79765B25A8DF3BC42BAE1E703D2D634347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_909dcc828938045c7ce4df183c3e0cc2_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_909dcc828938045c7ce4df183c3e0cc2_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_909dcc828938045c7ce4df183c3e0cc2_elex_mafia_stealc_tofsee
- Size 535KB
- SHA256 14cef3c917eeb0a7379ed0715d5d8453819b77f7c83269f9ef3a80e2c1838f3f
- MD5 909dcc828938045c7ce4df183c3e0cc2
- SHA1 be067d4bef0585fc60867177f1a294de8f568edc
- SHA512 ef85e36213421f862915d3a55986be150e208517a2a5530f8467d0e8274d03b2101968cc01c5fda7933ea1ed956d7254300d2a5eab4b3fa2130b5bb6bedb3528
- SSDEEP 12288:si4g+yU+0pAiv+r9e+zgjsjZT2DLUoLUlsAxUlvjosTdcG93Dn:si4gXn0pD+rI+EjsjZT2DLUoDLlvjRhr
- TLSH T1A2C401203152C033E2A715344BE9CBA5A67E79765B25A8DF3BC42BAE1E703D2D634347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE