Extracted

• • Target
    2026-08-25_80ea228068195552a60fd1d4fa9f0265_elex_stealc_stop_tofsee
  • Size 264KB
  • SHA256 65a586524322bef74544738a0e835090f661c55e563bf7d16d943de74cb6fde6
  • MD5 80ea228068195552a60fd1d4fa9f0265
  • SHA1 24e71db170edb32e6bdd36eb942901ae9c532fd3
  • SHA512 3bb5b0eaeea1554085610f8b0df1f00a7dfdc320911db1d1f689888e09c1b7f3c71fd91dedd2bea06bbe2cf4e4038b2b6fa79651b6f27a0f2d0216a4ce2aa156
  • SSDEEP 3072:AUApueDWSppTaeskDEjUrqfkZ557YzAL9gFoI3X3fZE5UANaX:ASeyGpTaesaQUufkL57YsL9NIx9ANaX
  • TLSH
    T1EB444C213680C032E366273049E6E6F459A97D794AA4E64FF7B47F391E315938A3720F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryexecutionstealcurelasstealertrojan

  • Detects Stealc stealer Version 3

  • Family: Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Family: Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2