General
- Target 2026-11-12_3f4da8a1b062b36c9cfb677b9179cb9a_elex_stealc_stop_tofsee
- Size 1.6MB
- Sample261113-fdgresfw8v
- SHA256 a7c44526c063619fc3bd5234a5a9fe95cadcbb6691eb4eda7ee0febd79c2f6bc
- MD5 3f4da8a1b062b36c9cfb677b9179cb9a
- SHA1 2a9df50fb6a2eb9d12b485b2f0c7fca388d13b24
- SHA512 8eaf854733390a595359dc4848755128968b9dda46e34e35020c48eea34e607665ac1a10c254a60b3613f577a4590890e424a4ba43407053edeb44390c26fe7b
- SSDEEP 24576:DIy/kLRKgXe4i7ojhsP5Lgrk1TWb4AN5:sykfe30jaNf1TWbdz
- TLSH T12075BE2279CDCD62C212AB3485B6896C62577FACBEB5CDCFE644BA3E1F332D14514206
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-12_3f4da8a1b062b36c9cfb677b9179cb9a_elex_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-12_3f4da8a1b062b36c9cfb677b9179cb9a_elex_stealc_stop_tofsee
- Size 1.6MB
- SHA256 a7c44526c063619fc3bd5234a5a9fe95cadcbb6691eb4eda7ee0febd79c2f6bc
- MD5 3f4da8a1b062b36c9cfb677b9179cb9a
- SHA1 2a9df50fb6a2eb9d12b485b2f0c7fca388d13b24
- SHA512 8eaf854733390a595359dc4848755128968b9dda46e34e35020c48eea34e607665ac1a10c254a60b3613f577a4590890e424a4ba43407053edeb44390c26fe7b
- SSDEEP 24576:DIy/kLRKgXe4i7ojhsP5Lgrk1TWb4AN5:sykfe30jaNf1TWbdz
- TLSH T12075BE2279CDCD62C212AB3485B6896C62577FACBEB5CDCFE644BA3E1F332D14514206
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1