General
- Target 2026-11-09_97c206edd8a5bfca9336404edef8f1cc_elex_stealc_stop_tofsee
- Size 263KB
- Sample261109-3leclawxbw
- SHA256 98ca75f72cb76ad9eff1e44f8de3bff82fb10de4e779f6afa88bb2747dabc555
- MD5 97c206edd8a5bfca9336404edef8f1cc
- SHA1 09c14c96305683b170f4de1287ddb730afa5dbec
- SHA512 617473248ea076c76bead598e0e1dd6bf2f916f03de27496c4844797dd1c57b025448a224a50ad56a6e29d9735423bd89d243f610186fa7033d5551d6d966c9d
- SSDEEP 3072:0G7ZveDrZ5pzqO5kDEjUrqfZZY577T9LngvBe/GJI9E5UJmkJUv:04e33pzqO56QUufZK577hLn6eF9Jmks
- TLSH T1D4444B213680C032E356273049E6E6F559A97C794AA4E64FF7B47F391E315938A3720F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-09_97c206edd8a5bfca9336404edef8f1cc_elex_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_97c206edd8a5bfca9336404edef8f1cc_elex_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
112.175.88.207
-
112.175.88.208
Targets
-
- Target 2026-11-09_97c206edd8a5bfca9336404edef8f1cc_elex_stealc_stop_tofsee
- Size 263KB
- SHA256 98ca75f72cb76ad9eff1e44f8de3bff82fb10de4e779f6afa88bb2747dabc555
- MD5 97c206edd8a5bfca9336404edef8f1cc
- SHA1 09c14c96305683b170f4de1287ddb730afa5dbec
- SHA512 617473248ea076c76bead598e0e1dd6bf2f916f03de27496c4844797dd1c57b025448a224a50ad56a6e29d9735423bd89d243f610186fa7033d5551d6d966c9d
- SSDEEP 3072:0G7ZveDrZ5pzqO5kDEjUrqfZZY577T9LngvBe/GJI9E5UJmkJUv:04e33pzqO56QUufZK577hLn6eF9Jmks
- TLSH T1D4444B213680C032E356273049E6E6F559A97C794AA4E64FF7B47F391E315938A3720F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE