General
- Target 2026-09-04_324fa5bb8ecc9b9291c4aa0db4c7265c_elex_mafia_stealc_tofsee
- Size 462KB
- Sample260905-r61wjsxapd
- SHA256 ac3cee752f9ebfde48faa3a4a34bd19490230735dbab7273022ed160b497d2a2
- MD5 324fa5bb8ecc9b9291c4aa0db4c7265c
- SHA1 35837a07c5d13b14796b6e79f976cd55f0f55985
- SHA512 1d5bc64d19f7b39527569e45b2c8bf90ab0d74e7f6086cda397b25f480cd69941f0c7cc9b585a02c53fd2f4116ab4776d02a65877460cedb77bedbc44fa72650
- SSDEEP 6144:zRPu8zwNAZYCZrIik3tHpovqBdNB42ZqXh+Q5vaeLb9ZXDvOt8ziQ5rsH5f:zJrIik3Avqx/ZqXIQZ/Xjw8jQ9
- TLSH T1B1A4E0257A86C032E1A612764EE4CB76583ABE356723A4CB3B90377D6EB03D19774307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_324fa5bb8ecc9b9291c4aa0db4c7265c_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_324fa5bb8ecc9b9291c4aa0db4c7265c_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260710-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_324fa5bb8ecc9b9291c4aa0db4c7265c_elex_mafia_stealc_tofsee
- Size 462KB
- SHA256 ac3cee752f9ebfde48faa3a4a34bd19490230735dbab7273022ed160b497d2a2
- MD5 324fa5bb8ecc9b9291c4aa0db4c7265c
- SHA1 35837a07c5d13b14796b6e79f976cd55f0f55985
- SHA512 1d5bc64d19f7b39527569e45b2c8bf90ab0d74e7f6086cda397b25f480cd69941f0c7cc9b585a02c53fd2f4116ab4776d02a65877460cedb77bedbc44fa72650
- SSDEEP 6144:zRPu8zwNAZYCZrIik3tHpovqBdNB42ZqXh+Q5vaeLb9ZXDvOt8ziQ5rsH5f:zJrIik3Avqx/ZqXIQZ/Xjw8jQ9
- TLSH T1B1A4E0257A86C032E1A612764EE4CB76583ABE356723A4CB3B90377D6EB03D19774307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE