General
- Target 2026-08-17_23ce573b9d263d71b13c91a5f5e5f0e3_elex_mafia_stealc_tofsee
- Size 462KB
- Sample260817-ngs8mazva1
- SHA256 ae015068b1a919b69415cb9b0bad0cb004c82aad27ed5c25defd9ba0a21d51df
- MD5 23ce573b9d263d71b13c91a5f5e5f0e3
- SHA1 4da4cd69719da741cce2c1057bf0911df177e5e8
- SHA512 1e01b51e187ac29d8a9f2c1510454d5810b00af29d56ef6b4f6bc5a533de673c4c624e0a46fb7d4d1b75c70526d6b8161fb4d43070390399268ad4d30244d9c2
- SSDEEP 6144:zRPu8zwNAZYCZrIik3tHwz3UeF3Y5EI2i5H7Va3iTjigvyztsH5f:zJrIik3iz3vRWImUSHnvZ9
- TLSH T181A4E0267685C032E1E712754FE5CBA2697ABE356733A0C72B9027BD6EB03D19634307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_23ce573b9d263d71b13c91a5f5e5f0e3_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_23ce573b9d263d71b13c91a5f5e5f0e3_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_23ce573b9d263d71b13c91a5f5e5f0e3_elex_mafia_stealc_tofsee
- Size 462KB
- SHA256 ae015068b1a919b69415cb9b0bad0cb004c82aad27ed5c25defd9ba0a21d51df
- MD5 23ce573b9d263d71b13c91a5f5e5f0e3
- SHA1 4da4cd69719da741cce2c1057bf0911df177e5e8
- SHA512 1e01b51e187ac29d8a9f2c1510454d5810b00af29d56ef6b4f6bc5a533de673c4c624e0a46fb7d4d1b75c70526d6b8161fb4d43070390399268ad4d30244d9c2
- SSDEEP 6144:zRPu8zwNAZYCZrIik3tHwz3UeF3Y5EI2i5H7Va3iTjigvyztsH5f:zJrIik3iz3vRWImUSHnvZ9
- TLSH T181A4E0267685C032E1E712754FE5CBA2697ABE356733A0C72B9027BD6EB03D19634307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE