General

  • Target
    2026-11-09_97c206edd8a5bfca9336404edef8f1cc_elex_stealc_stop_tofsee
  • Size 263KB
  • Sample261109-3leclawxbw
  • SHA256 98ca75f72cb76ad9eff1e44f8de3bff82fb10de4e779f6afa88bb2747dabc555
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • urelas

C2
  • 112.175.88.207

  • 112.175.88.208

Targets

    • Target
      2026-11-09_97c206edd8a5bfca9336404edef8f1cc_elex_stealc_stop_tofsee
    • Size 263KB
    • SHA256 98ca75f72cb76ad9eff1e44f8de3bff82fb10de4e779f6afa88bb2747dabc555
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks