General
- Target 2026-11-09_76ea32f00d41f9062abc46dedc214134_elex_stealc_stop_tofsee
- Size 269KB
- Sample261110-s5vhtagd92
- SHA256 01dd4b19a440bd056cfcac719fcd7de5b32798e14e904469dd28ab8b596f789e
- MD5 76ea32f00d41f9062abc46dedc214134
- SHA1 76193c81a35bef2e05d5022b2e99fc2cc6d1ec32
- SHA512 755787659ada315bb0898973cf6d547b07cba58bf5136164ebd30f77eada5971e13b4eca53ba7d8b53d2d0b15ec5b263c3a8837f02fb4341e976dde0837cd4f6
- SSDEEP 3072:AUApueDWSppTaeskDEjUrqfkZ557YzAL9gFoI3X3fZE5UANaOI:ASeyGpTaesaQUufkL57YsL9NIx9ANa1
- TLSH T143444C213680C032E366273049E6E6F459A97D794AA4E64FF7B47F391E315938A3720F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-09_76ea32f00d41f9062abc46dedc214134_elex_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_76ea32f00d41f9062abc46dedc214134_elex_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
112.175.88.207
-
112.175.88.208
Targets
-
- Target 2026-11-09_76ea32f00d41f9062abc46dedc214134_elex_stealc_stop_tofsee
- Size 269KB
- SHA256 01dd4b19a440bd056cfcac719fcd7de5b32798e14e904469dd28ab8b596f789e
- MD5 76ea32f00d41f9062abc46dedc214134
- SHA1 76193c81a35bef2e05d5022b2e99fc2cc6d1ec32
- SHA512 755787659ada315bb0898973cf6d547b07cba58bf5136164ebd30f77eada5971e13b4eca53ba7d8b53d2d0b15ec5b263c3a8837f02fb4341e976dde0837cd4f6
- SSDEEP 3072:AUApueDWSppTaeskDEjUrqfkZ557YzAL9gFoI3X3fZE5UANaOI:ASeyGpTaesaQUufkL57YsL9NIx9ANa1
- TLSH T143444C213680C032E366273049E6E6F459A97D794AA4E64FF7B47F391E315938A3720F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE