General
- Target 2026-08-10_924d3e55d357f8620eea6b4c399f518a_elex_stealc_stop_swisyn_tofsee
- Size 1.0MB
- Sample260810-sjtpdsha37
- SHA256 6bf6b5680f96ec5978e928fc80bb86e8c82f99bdcee04bef6a5d2c5e5ebdb9e6
- MD5 924d3e55d357f8620eea6b4c399f518a
- SHA1 89cb19fc882b72ff01720315f54637335caf8f5c
- SHA512 3f566f451a325e762326cc135b19d9e4c4683f44d21410082e058fd6989f5a7d00486f427a97d8bfa6644b34729b916a4d6e62d6a495877b691a681e5e34e5cc
- SSDEEP 24576:zFOafivtCXWeGKr/NGzTukzxNabhVFQ4SS+o:5+tCXWPm/m3Kt/QTM
- TLSH T13835AD5A2561C037C9134FF284E4DF676520FD613B23A91FA2912E957A70E426BF323B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_924d3e55d357f8620eea6b4c399f518a_elex_stealc_stop_swisyn_tofsee.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_924d3e55d357f8620eea6b4c399f518a_elex_stealc_stop_swisyn_tofsee.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_924d3e55d357f8620eea6b4c399f518a_elex_stealc_stop_swisyn_tofsee
- Size 1.0MB
- SHA256 6bf6b5680f96ec5978e928fc80bb86e8c82f99bdcee04bef6a5d2c5e5ebdb9e6
- MD5 924d3e55d357f8620eea6b4c399f518a
- SHA1 89cb19fc882b72ff01720315f54637335caf8f5c
- SHA512 3f566f451a325e762326cc135b19d9e4c4683f44d21410082e058fd6989f5a7d00486f427a97d8bfa6644b34729b916a4d6e62d6a495877b691a681e5e34e5cc
- SSDEEP 24576:zFOafivtCXWeGKr/NGzTukzxNabhVFQ4SS+o:5+tCXWPm/m3Kt/QTM
- TLSH T13835AD5A2561C037C9134FF284E4DF676520FD613B23A91FA2912E957A70E426BF323B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2