General
- Target 2026-08-14_0917df2c43f7a2a3072eec64b5324877_elex_mafia_stealc_tofsee
- Size 447KB
- Sample260814-ykt97sbf82
- SHA256 d0165d410d929c61aee8a14d1ab19f92d64894d42e93eb026f48bb74d6ed0cfd
- MD5 0917df2c43f7a2a3072eec64b5324877
- SHA1 581bae099ba5ead29fc8aa6de80d89b691ce3757
- SHA512 8488592876b6744eb33c43fef5c0193123ebc164335cabfefe7a669d5f60db127ad0dc1a0ecac8d5e76efb8bb9988e4f1306dbd5226489daa111fe0dc772c9c6
- SSDEEP 6144:wRWgWcwtukwPTYpa1hz8j5eTuXtQjVc5cFD5FWoxs8NcL/CzXotqFrK6kcYl5gqZ:w/rYpa1hoj5W2e9LWoKizXoRqYUWkBY
- TLSH T18DA4E0257685C032E5A202764AF5C7B2193ABE755B26A0C7BBC4377E2FB12D29731307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_0917df2c43f7a2a3072eec64b5324877_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_0917df2c43f7a2a3072eec64b5324877_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_0917df2c43f7a2a3072eec64b5324877_elex_mafia_stealc_tofsee
- Size 447KB
- SHA256 d0165d410d929c61aee8a14d1ab19f92d64894d42e93eb026f48bb74d6ed0cfd
- MD5 0917df2c43f7a2a3072eec64b5324877
- SHA1 581bae099ba5ead29fc8aa6de80d89b691ce3757
- SHA512 8488592876b6744eb33c43fef5c0193123ebc164335cabfefe7a669d5f60db127ad0dc1a0ecac8d5e76efb8bb9988e4f1306dbd5226489daa111fe0dc772c9c6
- SSDEEP 6144:wRWgWcwtukwPTYpa1hz8j5eTuXtQjVc5cFD5FWoxs8NcL/CzXotqFrK6kcYl5gqZ:w/rYpa1hoj5W2e9LWoKizXoRqYUWkBY
- TLSH T18DA4E0257685C032E5A202764AF5C7B2193ABE755B26A0C7BBC4377E2FB12D29731307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE