General
- Target 2026-08-17_4aa643cd2adbe24e40e6543300ad8dbb_elex_mafia_stealc_tofsee
- Size 462KB
- Sample260817-qm7pback2y
- SHA256 171e7696d5ba77f399dfe9e369bb7c2de29273a2930dbf0dbdf0d56961b5bd3f
- MD5 4aa643cd2adbe24e40e6543300ad8dbb
- SHA1 93a08dd7f8a035d6262d27bb42707b2cc9d3db52
- SHA512 a2ed67921bb6a9b4d6f2f5959f384bbc114555ea0f76959221b3bb6b3444be09303dd8350fdb94b9baf3398f83a57ab5c34dc0f1038a4de3ad5c1fbdb64d46e9
- SSDEEP 6144:zRPu8zwNAZYCZrIik3tHDb3uBrVcyqdK/MHy0EqR3edqgezwB+uyF5MsH5f:zJrIik3BbgrVYdKmy0TwdqDG+z19
- TLSH T177A4E021B6C1C032E2E602710BE9DB66697ABE35573264C76B80277D6EB13C2D771307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_4aa643cd2adbe24e40e6543300ad8dbb_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_4aa643cd2adbe24e40e6543300ad8dbb_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260710-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_4aa643cd2adbe24e40e6543300ad8dbb_elex_mafia_stealc_tofsee
- Size 462KB
- SHA256 171e7696d5ba77f399dfe9e369bb7c2de29273a2930dbf0dbdf0d56961b5bd3f
- MD5 4aa643cd2adbe24e40e6543300ad8dbb
- SHA1 93a08dd7f8a035d6262d27bb42707b2cc9d3db52
- SHA512 a2ed67921bb6a9b4d6f2f5959f384bbc114555ea0f76959221b3bb6b3444be09303dd8350fdb94b9baf3398f83a57ab5c34dc0f1038a4de3ad5c1fbdb64d46e9
- SSDEEP 6144:zRPu8zwNAZYCZrIik3tHDb3uBrVcyqdK/MHy0EqR3edqgezwB+uyF5MsH5f:zJrIik3BbgrVYdKmy0TwdqDG+z19
- TLSH T177A4E021B6C1C032E2E602710BE9DB66697ABE35573264C76B80277D6EB13C2D771307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE