General
- Target 2026-08-14_bb99d68408bd6c4030e766b8b3df4d20_elex_mafia_stealc_tofsee
- Size 12.7MB
- Sample260814-xpvk4azbld
- SHA256 601d2e03b42ccbadcf2a61c76e2c12ead864ca8de02793d6ab6fa3fd6dc3da43
- MD5 bb99d68408bd6c4030e766b8b3df4d20
- SHA1 d80e053a04379a2f2064a89ad9a7a986d38a1803
- SHA512 fab6af445a47c04a46e5504d36db239037f995b0c8b7d7fcf284b053751f0468d90a6d6ae8dde2e8ea1ffffe7118c5437659be7b18c0b5776bd7bf5ccd061502
- SSDEEP 12288:0SgcmFsXfGdf0BnZ3rGc+UsJzRytj3cp:0ShmeOf0BnZ7l6g3
- TLSH T11FD6E1227886C032E1A616754BE9CB65597ABE262B33B4C73BD0276D5F703D2DA34307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_bb99d68408bd6c4030e766b8b3df4d20_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_bb99d68408bd6c4030e766b8b3df4d20_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_bb99d68408bd6c4030e766b8b3df4d20_elex_mafia_stealc_tofsee
- Size 12.7MB
- SHA256 601d2e03b42ccbadcf2a61c76e2c12ead864ca8de02793d6ab6fa3fd6dc3da43
- MD5 bb99d68408bd6c4030e766b8b3df4d20
- SHA1 d80e053a04379a2f2064a89ad9a7a986d38a1803
- SHA512 fab6af445a47c04a46e5504d36db239037f995b0c8b7d7fcf284b053751f0468d90a6d6ae8dde2e8ea1ffffe7118c5437659be7b18c0b5776bd7bf5ccd061502
- SSDEEP 12288:0SgcmFsXfGdf0BnZ3rGc+UsJzRytj3cp:0ShmeOf0BnZ7l6g3
- TLSH T11FD6E1227886C032E1A616754BE9CB65597ABE262B33B4C73BD0276D5F703D2DA34307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE