General
- Target 2026-11-09_44756f1c020f80ecacb71366a43e25c6_elex_stealc_stop_tofsee
- Size 267KB
- Sample261110-z3sprsbc26
- SHA256 62ad32bb9662ece1b91d15b46b9a1112a6f5315b7589914ee370a8e7b51aeb61
- MD5 44756f1c020f80ecacb71366a43e25c6
- SHA1 866e3b31e8ea607e7c568006c411cd30119cdf05
- SHA512 5495b1181b3b81e3c442a9afe0bd828e0260a2c60e373205f4ebe8e229ca9dacb4d7e15265f9861d2a25f9dd6b90243b0c47b65f49999018ec80d659f7892ebd
- SSDEEP 6144:KGpt7wSUGOyNAU2icgxBaNfL98pyYCujo:Jpt74U2icgxBaNf+u
- TLSH T162444B213680C032E356173049E6E6F469A9BD794AA4E64FF7B47F391E311939A3720F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-09_44756f1c020f80ecacb71366a43e25c6_elex_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_44756f1c020f80ecacb71366a43e25c6_elex_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
112.175.88.208
-
112.175.88.209
-
112.175.88.207
Targets
-
- Target 2026-11-09_44756f1c020f80ecacb71366a43e25c6_elex_stealc_stop_tofsee
- Size 267KB
- SHA256 62ad32bb9662ece1b91d15b46b9a1112a6f5315b7589914ee370a8e7b51aeb61
- MD5 44756f1c020f80ecacb71366a43e25c6
- SHA1 866e3b31e8ea607e7c568006c411cd30119cdf05
- SHA512 5495b1181b3b81e3c442a9afe0bd828e0260a2c60e373205f4ebe8e229ca9dacb4d7e15265f9861d2a25f9dd6b90243b0c47b65f49999018ec80d659f7892ebd
- SSDEEP 6144:KGpt7wSUGOyNAU2icgxBaNfL98pyYCujo:Jpt74U2icgxBaNf+u
- TLSH T162444B213680C032E356173049E6E6F469A9BD794AA4E64FF7B47F391E311939A3720F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE