General
- Target 2026-09-07_d261ce704904ef5cd450687c8dcdc22f_elex_stealc_stop_tofsee
- Size 714KB
- Sample260908-fr5emsdj4z
- SHA256 7c926877b321142e07f7bbd2d8b569817dfd262caaa8442f38024705540a6072
- MD5 d261ce704904ef5cd450687c8dcdc22f
- SHA1 26d82b583a1027e5c6d3498b1463291420ea396d
- SHA512 55277a58b7302006b2b5d8dffd39aee925d633d4e9d36f71e0ca8394d9099e6ea5d47f1547665d20f06b676310357641cdb25aca88f09f855feb1d8ffdaa9081
- SSDEEP 12288:Jw449bsAravfgGchah+H/cXy5YFSRNEaNZ2ONbQo2bzTWSaVVQtGLfHtVclBq+0:qVlsoaHsK+fM2jEaNZBqoeW7V6tGLfHj
- TLSH T19CF40210B686D037E5670876A9ACC7FE641CBA710F1050C7E7C81E6E27796E3DA3125B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-07_d261ce704904ef5cd450687c8dcdc22f_elex_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_d261ce704904ef5cd450687c8dcdc22f_elex_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_d261ce704904ef5cd450687c8dcdc22f_elex_stealc_stop_tofsee
- Size 714KB
- SHA256 7c926877b321142e07f7bbd2d8b569817dfd262caaa8442f38024705540a6072
- MD5 d261ce704904ef5cd450687c8dcdc22f
- SHA1 26d82b583a1027e5c6d3498b1463291420ea396d
- SHA512 55277a58b7302006b2b5d8dffd39aee925d633d4e9d36f71e0ca8394d9099e6ea5d47f1547665d20f06b676310357641cdb25aca88f09f855feb1d8ffdaa9081
- SSDEEP 12288:Jw449bsAravfgGchah+H/cXy5YFSRNEaNZ2ONbQo2bzTWSaVVQtGLfHtVclBq+0:qVlsoaHsK+fM2jEaNZBqoeW7V6tGLfHj
- TLSH T19CF40210B686D037E5670876A9ACC7FE641CBA710F1050C7E7C81E6E27796E3DA3125B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Port Monitors
Adversaries may use port monitors to run an adversary supplied DLL during system boot for persistence or privilege escalation.
-
Drops file in System32 directory