General
- Target 2026-11-09_10907afa7cbc5f78096cd80d685bb535_elex_stealc_stop_tofsee
- Size 269KB
- Sample261111-dlsgsadv7r
- SHA256 dbd075a06f0b3832af5165096ea64203e4fda61fa95bf7184ee030869fd290a2
- MD5 10907afa7cbc5f78096cd80d685bb535
- SHA1 f1865edf921609976250fdb722e1251872fd1974
- SHA512 30d55a21a9c1f057acdba5315a1215cafed098892ecdd7b51a6687300cb1b2915b172112ee32e519af768eca2b8b46b3f30fb92c9bbd3feb39c7a11c47a3900d
- SSDEEP 3072:AUApueDWSppTaeskDEjUrqfkZ557YzAL9gFoI3X3fZE5UANafTm:ASeyGpTaesaQUufkL57YsL9NIx9ANaa
- TLSH T1A4444C213680C032E366273049E6E6F459A97D794AA4E64FF7B47F391E315938A3720F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-09_10907afa7cbc5f78096cd80d685bb535_elex_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_10907afa7cbc5f78096cd80d685bb535_elex_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
112.175.88.207
-
112.175.88.208
Targets
-
- Target 2026-11-09_10907afa7cbc5f78096cd80d685bb535_elex_stealc_stop_tofsee
- Size 269KB
- SHA256 dbd075a06f0b3832af5165096ea64203e4fda61fa95bf7184ee030869fd290a2
- MD5 10907afa7cbc5f78096cd80d685bb535
- SHA1 f1865edf921609976250fdb722e1251872fd1974
- SHA512 30d55a21a9c1f057acdba5315a1215cafed098892ecdd7b51a6687300cb1b2915b172112ee32e519af768eca2b8b46b3f30fb92c9bbd3feb39c7a11c47a3900d
- SSDEEP 3072:AUApueDWSppTaeskDEjUrqfkZ557YzAL9gFoI3X3fZE5UANafTm:ASeyGpTaesaQUufkL57YsL9NIx9ANaa
- TLSH T1A4444C213680C032E366273049E6E6F459A97D794AA4E64FF7B47F391E315938A3720F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE