General
- Target 2026-10-30_73c4a3502e29c1efe303524a817be66b_elex_stealc_stop_tofsee
- Size 262KB
- Sample261101-ayy9ba1yet
- SHA256 824d86e3ef403f44d6773d076fb10a2fd9665ec49f99243fd62d87bac819c72d
- MD5 73c4a3502e29c1efe303524a817be66b
- SHA1 8b02b6d74920507da0b4d00a6e349fce830bfc47
- SHA512 7c67e75cd782ed6ce229e1e0c0625f7a81a46d61f3aed0ab6d4b56d8e9a2dfe344633ecacb8b0fe3f46e804a7e04e7b35bf0ae761e9380609de0213ba7c52889
- SSDEEP 3072:0G7ZveDrZ5pzqO5kDEjUrqfZZY577T9LngvBe/GJI9E5UJmkJU3j:04e33pzqO56QUufZK577hLn6eF9JmkWj
- TLSH T18F444C213680C032E356273049E6E6F55AA97C794AA4E64FF7B47F391E315938A3720F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-30_73c4a3502e29c1efe303524a817be66b_elex_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-30_73c4a3502e29c1efe303524a817be66b_elex_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
112.175.88.207
-
112.175.88.208
Targets
-
- Target 2026-10-30_73c4a3502e29c1efe303524a817be66b_elex_stealc_stop_tofsee
- Size 262KB
- SHA256 824d86e3ef403f44d6773d076fb10a2fd9665ec49f99243fd62d87bac819c72d
- MD5 73c4a3502e29c1efe303524a817be66b
- SHA1 8b02b6d74920507da0b4d00a6e349fce830bfc47
- SHA512 7c67e75cd782ed6ce229e1e0c0625f7a81a46d61f3aed0ab6d4b56d8e9a2dfe344633ecacb8b0fe3f46e804a7e04e7b35bf0ae761e9380609de0213ba7c52889
- SSDEEP 3072:0G7ZveDrZ5pzqO5kDEjUrqfZZY577T9LngvBe/GJI9E5UJmkJU3j:04e33pzqO56QUufZK577hLn6eF9JmkWj
- TLSH T18F444C213680C032E356273049E6E6F55AA97C794AA4E64FF7B47F391E315938A3720F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE