Index

2026-10-01_7f34ab3ce35577ebe95f0e82567fb131_elex_mafia_stealc_tofsee Oct 2

47b432333d24556c3fc5a7d52608fe77d78b6b382998d34f3b947abe0524fe9c ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex malware masquerading as Word

2026-10-01_8aae327d9432ee7d8b263c68800cc68c_elex_mafia_stealc_tofsee Oct 2

107ab891c11ae9df82855169a8689e1bbdaae8598a1faf80bc69d7b5f454af78 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerading malware with C2 and evasion

2026-10-01_89c3979c790d8c902420f064dd655743_elex_mafia_stealc_tofsee Oct 2

4a290bfe4f4e5b1a9b2d89144707e34fe30f659dc196ce45f42ffe47510b6ce9 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerades as Word, Elex malware

2026-10-01_932a712ad1f9fe5759aa25125e8bdfcf_elex_mafia_stealc_tofsee Oct 2

2ce461f95854b9aadee77f391eda73b1603be111cd2aa7317ce179420a147388 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan, masquerades as Word

2026-10-01_a6c49450308de6335546cd56457653ec_elex_mafia_stealc_tofsee Oct 2

a82a1539579e2bf1ff5f204e5a8d846c409810f2c021adca842663ec6110452b ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerading malware with C2 and evasion

2026-10-01_ef727c584aeb2cb77ed3d4c20cf4866b_elex_mafia_stealc_tofsee Oct 1

f57654e943e2e7fe3299a93aae614b1ce9743b2e3cf00e4ec6cc17c6c13a5e1e ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word

2026-09-30_10c87931ae08d4da257be7b05ad2fd72_elex_mafia_stealc_tofsee Oct 1

bb3c8639ee7a9bc01ea0f4948f84de07c9b70d7c497df3c8cc4aec84c7dc2bde ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerades as Word, drops payload

2026-09-30_8b032eeca43e292bf03a7cd84baf447e_elex_mafia_stealc_tofsee Oct 1

f9008ddc342547136d320fa412f454d494f596a7d35d1236dcd753acf21182e1 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word

2026-09-30_a9baf662c9e3d8c3d1f03f3e4d00ccbd_elex_mafia_stealc_tofsee Oct 1

27adb9e9327a67bb87bba10123f5adcf35f6e0c147a02a166eb1b452a33eebb6 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan, masquerades as Word

2026-09-30_ce318908a3cddef68c310b094b6bdd3d_elex_mafia_stealc_tofsee Oct 1

132a993ccdf50c4dff113441cb3e6a2b1af8d61a10fe2b6d562c0191a898ece6 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerades as Word, Elex malware

2026-09-30_e38e85e305c919728d0ddfb363685846_elex_mafia_stealc_tofsee Oct 1

97f62c4e3424a0dcb68468931a8220fc7f20a6fba3de7351d8a0612d45e16462 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word

2026-09-30_3314010e2ac11c564fafd0bd46ad7952_elex_mafia_stealc_tofsee Sep 30

76929134ef475f7dbf75faa559dac1007382dd85a8f2394d464610c2e973ef4f ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan, masquerades as Word

2026-09-30_8f78d7991a4fde1e458cfc6fcae0adbc_elex_mafia_stealc_tofsee Sep 30

1a45447113c3d9511c78b69570f2f9e458e2f310b49af2878871d16e60a73bed ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan, masquerades as Word

2026-09-30_d3152aeeecd3ca005b58d5982c53b62c_elex_mafia_stealc_tofsee Sep 30

359e0d8e111c9f720ec26b01b2f00cccc1d55167132aaaafdd53d543efdb80eb ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerades as Word, Elex malware

2026-09-29_94fcba4f5cb4cd7ed3cf6f63d3d994b8_elex_mafia_stealc_tofsee Sep 29

8cacdb786f194c0a038ef8193b773ab982277cea219c1f538e27b744eff85c9b ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan, masquerades as Word

2026-09-28_03ab77fb60351ad62869ef6b647078e1_elex_mafia_stealc_tofsee Sep 29

7320e352d887a7efb143ee832d6e7e180917ecf8d71c5d392b2af2a1d9023787 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerading malware with C2 config

2026-09-28_26675d3a2fe53e14ef2b1bf7ce306b9f_elex_mafia_stealc_tofsee Sep 29

b209bfc80e6a738b712873fc7d063147cc3d94aea3c1b47007ddb33f80807269 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerading malware with C2 config

2026-09-28_2e253e3c5c0e9b6bd1c0e222cdeaca6d_elex_mafia_stealc_tofsee Sep 29

c63d77bd367cb9c848a3fa1bc28c82de69155e44efb6dfde4cea96c30e566b91 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex malware masquerading as Word

2026-09-28_2d0b2b9ee84403fa19e31da038440f6c_elex_mafia_stealc_tofsee Sep 29

99ad724a750e633be096165ec0e5208e3521a7feaa4af1b2c6070e19439fcbac ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex malware masquerading as Word

2026-09-28_2bbdaaea3c174236526dff15b868be05_elex_mafia_stealc_tofsee Sep 29

dedaf265d9951dc615790c16acd9b4a645cc9466b040638537d1a0ed9020aadd ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerading malware with C2 config

2026-09-28_5bec5ce40b154439f0ced1f5ea047b6d_elex_mafia_stealc_tofsee Sep 29

45842ba1af59a0e83eb8de1a3b2e4c6f6ff9c06f951414008ac0287936f5cc61 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerading malware with C2 and evasion

2026-09-28_86236cab26004718342623ef5da00862_elex_mafia_stealc_tofsee Sep 29

29eb8f691c5d7249a5219704ec10f39589a43590e0c73398cc56f5427b3a368a ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerading malware with C2 and evasion

2026-09-28_85f12efdb4d97693e09bfb3d5fe29974_elex_mafia_stealc_tofsee Sep 29

186d58ba36d45d4ecc3bd637196644b790df19af9318ac0502ecb4a03f8d0d05 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan, masquerades as Word

2026-09-28_94e5c3cf4f604ecc4508a002578d2295_elex_mafia_stealc_tofsee Sep 29

f3e59974f93ae950b01555220ba474ffee6162c0f23233d48fa39f46aaae5009 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan, masquerades as Word

2026-09-28_9b603c3e9e23c96e72eb80c474a3bd28_elex_mafia_stealc_tofsee Sep 29

7ea717cb4ffbd32e51008e9fb4c55805000a71b1d892ba668420595c33bb4c46 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex malware masquerading as Word

2026-09-28_a201822e7eecaac24e34320ca1a1cdf4_elex_mafia_stealc_tofsee Sep 29

adeb6c5e386ed36175bf8b2ec21c060acd0f30f1c8439cc72432986bd8c801be ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex malware masquerading as Word

2026-09-28_ac2d6848b66822284e20308c3ab5345a_elex_mafia_stealc_tofsee Sep 28

733a482315a664017013873043aa9c189433a832f6a9d111e7a8ae0ab3c569b1 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerades as Word, Elex malware

2026-09-28_cace361b597dcfdfb369277de65c471e_elex_mafia_stealc_tofsee Sep 28

e008ad4dff53cd8984f7bf61581bc389c5938356eb06732a66339cdece15b874 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word

2026-09-28_ce848d780a9e9c24976b899aaeaa8acc_elex_mafia_stealc_tofsee Sep 28

05070deb5b5430c4925b88f91959ab8d4c0ff65d2b70a42d3c870a7686007113 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex malware masquerading as Word

2026-09-28_f3184928fee35852053fba5d4f98707a_elex_mafia_stealc_tofsee Sep 28

e78f9f68ada2b42df709e1ac2e79a16d9697b155480605e0792224a7cae3a553 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% version-resource/office-suite

2026-09-27_053fda3d43e3f977b4d7e9a533c60e03_elex_mafia_stealc_tofsee Sep 28

ba0b6a451f47c9fef5f8e45ddff1f70d39dbb576891acb86a2980fac98be1d36 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerading malware with C2 config

2026-09-27_1da8416d4429bed81f4a2b5857f8c19e_elex_mafia_stealc_tofsee Sep 28

095bbeacc0135f984f44b8ec8b3ce8dad03fc7202c65a672cf3337ec2892c97b ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerading malware with C2 config

2026-09-27_1ad58446e01fd9db92aa7e8822d3d929_elex_mafia_stealc_tofsee Sep 28

8be8d350a94bd78f007973abe24f0cfb6f0e30795502daab154ba34469178159 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word

2026-09-27_2433ca4cd1ba33ffcc485a3a808866fb_elex_mafia_stealc_tofsee Sep 28

06d3e64f6e319f925d0cf8a3d5b46e8fe9d37bbb41fa4dcf2a9b0d4f87f5857d ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerading malware with C2 config

2026-09-27_2f70adef75b88a3448905abb78d67441_elex_mafia_stealc_tofsee Sep 28

12abe59ba18a9a35916a0de258973975716ff56d9b3f7ade241e6f899e074b92 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word

2026-09-27_2ed80b6c1367f53ecab2015c9d6689f1_elex_mafia_stealc_tofsee Sep 28

1cd98cc60ed838a5db2ac5d88c050d1522ec739ac0155b2eadd7988727b6c875 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word

2026-09-27_47d513f48cd4b676518e71f61c3c6a28_elex_mafia_stealc_tofsee Sep 28

72d6f55b5af26ca1eaa521515c1f5a63f1bf8b7746f2cc78968c0d305c2f52d4 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word

2026-09-27_5454f6495c089de5c645ee4559620e28_elex_mafia_stealc_tofsee Sep 28

fd3e8adfe7dec4656b9a95d94fa9e78db0a6dd68475ca256037bbe7a12a1c1f0 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerading malware with C2 config

2026-09-27_532c54eed60c9904464fb100aee44a1c_elex_mafia_stealc_tofsee Sep 28

7dd9c968cdd683ef55490f2454efbe6fa842f352ff562d5d62fdc235382e2e30 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

version-resource/office-suite

2026-09-27_5fcb5a3f7f05a2e51de8b10ff15c679e_elex_mafia_stealc_tofsee Sep 28

0f05b3ee8725542840f3a0319a96df860f432daaeb6750c9dd40a76b1adab78b ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerading malware with C2 config

2026-09-27_6af6f5cd50acfd7619eed8e769952095_elex_mafia_stealc_tofsee Sep 28

aabaea9e16f5eb74982c6a1577bf4643635899635e1bd0fdcd2b519656323d50 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerades as Word, Elex malware

2026-09-27_94595f113fa32d14bc278b99e2dba9df_elex_mafia_stealc_tofsee Sep 27

9630e1a91674ba4f0a53d00530336eccf7ef2bb719d8b35f9e1dc607feed64c2 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan, masquerades as Word

2026-09-27_a5233ed038401ee3bd7d838b2ae405a3_elex_mafia_stealc_tofsee Sep 27

fe6c9e88271f5aa14b73799e3bffe47ed7e70146641ba25400c4f49b82fd609f ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan, masquerades as Word

2026-09-27_af84892ce24d752a59f53d9bf2538996_elex_mafia_stealc_tofsee Sep 27

5f69fc14237b0497ecfd7430e36dc2b8c788ba69bef8ac0d564d51d9186a636c ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% version-resource/office-suite

2026-09-27_b2fd27219179ca2f470e6689bcc37bdf_elex_mafia_stealc_tofsee Sep 27

c3f3bd3bc3df3867a4f1b7a4b27362937885730aa7c2019d068ce08faeb5ba19 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word

2026-09-27_ba3210f7f0068bdeea7febb48a195e22_elex_mafia_stealc_tofsee Sep 27

87e7db00fdadc4b5b16568e971a9a46a75814fea1fea215ec5bdbece12a29b4a ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerading malware with C2 config

2026-09-27_c8a8e7fcb368f43d267daad68dcc5a99_elex_mafia_stealc_tofsee Sep 27

91bd225daad221fa5ee9261f91ade74043dd54422d3f0671c71cd88738d0fba5 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerading malware with C2 and evasion

2026-09-27_c79c89ac3947d7bdc5937456ff2103ea_elex_mafia_stealc_tofsee Sep 27

cd9686236c5499609c263b95d1e61beaba3e9a66b27c4a6ddbf9407d42ff563f ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerading malware with C2 config

2026-09-27_cf85bb7e99ad733836eeb38e57c81e02_elex_mafia_stealc_tofsee Sep 27

aed383633a159424f5b9d7e93de0e2b971695cb7af24253b7f2d0985a19658f3 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word

2026-09-27_e92ca34d5f7248a1fca3e19a54f66f23_elex_mafia_stealc_tofsee Sep 27

e763e664d07410329a2711399acf227fc5e7483c80f4158629b52fc88e8cc172 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% version-resource/office-suite

2026-09-27_f08fed7272cbb21374cc6039a9f1b7d8_elex_mafia_stealc_tofsee Sep 27

e197c0f60733e5bf2bb0d3d3dcd2b882551c7f1d000c41d76dcb78dbfaa0144e ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan, masquerades as Word

2026-09-26_8c839ef9dc8b118878275aa64face4bf_elex_mafia_stealc_tofsee Sep 27

20c058e2c4468855a7edc8740ad73bf9882f04a40dd9fcf52edaeb33dccbd8b3 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word

2026-09-26_9fc547946b94e71a851f88d428590392_elex_mafia_stealc_tofsee Sep 27

d182a7b219ea8561c661e5bed7ff81453a3840013e636e93c49f06ef53259a3c ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerading malware with C2 config

2026-09-26_07706998204651ccb0f23bccd0178387_elex_mafia_stealc_tofsee Sep 27

252e06974f5c06b7978ad6b62d4e3bfe07280724e1cfad512e727f4f3e352978 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

version-resource/office-suite

2026-09-26_1a3d48764effc7dd45a152614b3f5ea4_elex_mafia_stealc_tofsee Sep 26

4a3ae5f6b6f6bbbd1a0c6ef7584d884d742230a73820b26eebb356f574fd71d5 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word

2026-09-26_17fb6cc65cc1dbba80825c45424f9336_elex_mafia_stealc_tofsee Sep 26

8c43f874881c237c171b22f29d59eff29b1bf88d694e9878e1c4e3ae1d2e0d26 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan, masquerades as Word

2026-09-26_1f40a8da84629de0a6e4ce8d842e755b_elex_mafia_stealc_tofsee Sep 26

45ff7f1f730d2cedb9616cafd5a769b47d9da41b8c3c69f931fb38528b2c8abf ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan, masquerades as Word

2026-09-26_1ec4ad95b87b3bb56567933ff68cc198_elex_mafia_stealc_tofsee Sep 26

8b499df3c97cb99b7c9a24d2c46c09e227d681922afe7fb86bfb3c04d9bc4197 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word

2026-09-26_1e57fe4e319be9f079c0e921f4f21db6_elex_mafia_stealc_tofsee Sep 26

cd5d80a7aa6a8d3d525c6d0ac28ead5c9c7cc6b4e97e092f58c266ca5c700231 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

version-resource/office-suite

2026-09-26_285be4dd208acc307ed7c9d3a46fceff_elex_mafia_stealc_tofsee Sep 26

b353cf91b059fb70349051d63f669e3824b6df51181fab21f41e8e1132ee8694 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerading malware with C2 config

2026-09-26_3eb359d04215e625d5760f806aeb190b_elex_mafia_stealc_tofsee Sep 26

682c56e664eeabceab37931e9b8cb7f4952dc2278ba9d418e2042d31190d1b6b ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerading malware with C2 config

2026-09-26_6368dfd94a62c29ac7f92e7c0717a92d_elex_mafia_stealc_tofsee Sep 26

fe6098b3073ea3ae8eec2ce92ce52d233309c4338ce5d61c0b19f3f45759215b ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word

2026-09-26_78a9e50aac727386996a93ecc274ef76_elex_mafia_stealc_tofsee Sep 26

74bd009200c73eea1b3965cc98065fe874c825d15b9540580b9fa0e4aa01f528 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word

2026-09-26_81666c2dc840e19d7c0464fdf6edb4e3_elex_mafia_stealc_tofsee Sep 26

2ef1f60ebe85ba9387f767f6ff384e8872c745eea89ddf84d2308e8e33fda874 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word

2026-09-26_881dcb9b1f06c1187d148a067fbb0b65_elex_mafia_stealc_tofsee Sep 26

b1958c960aafd7b0ac8276e3136c1fabf08a9bb7ac7d98541c37e76992d90862 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerades as Word, drops payload

2026-09-26_97a9cac7d755101eb7a441280c4bb9d8_elex_mafia_stealc_tofsee Sep 26

8ef75088899fb915728caace41c23b5dbcf7a89d6ae9041d44a2770c96c4ffad ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex malware masquerading as Word

2026-09-26_a6b6853eaeeb335e71e8fdef49bc9ec8_elex_mafia_stealc_tofsee Sep 26

3bb167125f53360380d0b88d85d63cef54d3d9bb25c82d8b28017e5bfe8e77b4 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word

2026-09-26_ae9e15de5a27bdec49565ab7e8723092_elex_mafia_stealc_tofsee Sep 26

1814d0dd92f166d90f912941d35fda8841dca49df64326ffe357c48bf366123b ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerades as Word, Elex malware

2026-09-26_ae8c1de782eacde0dac2a54b06031b64_elex_mafia_stealc_tofsee Sep 26

10617ff2b10cca8bde8efa1155386d32876421f6ca6e0bfc77b6910a3b292ea9 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerading malware with C2 and evasion

2026-09-26_d04fdc01d7227b3bfab796b7e4e0c1a6_elex_mafia_stealc_tofsee Sep 26

0144c18ece3bf7d417c2f236592ad0714863340cb0ffe60397483cf2072997ca ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word

2026-09-26_d5f95fc02c0d0ff3b1ac09fd2a23199e_elex_mafia_stealc_tofsee Sep 26

80990f3c2683a72c23867187052ed701b2ea6d54965b47b3268ade14a9837879 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word

2026-09-26_d53452401922bfb3a0dfd8a87a8bce31_elex_mafia_stealc_tofsee Sep 26

2bb3288edda32452af0bb791ea473b89e91e1e06d1fa5cdd878607ef00e6443b ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerading malware with C2 and evasion

2026-09-26_dc5f6cca0507291786f19ee78422c3c9_elex_mafia_stealc_tofsee Sep 26

1a5d69160e79d8f3abce1b8fa2d9adb569ab94834e2aa8886ddc903c646ccdef ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerading malware with C2 config

2026-09-24_ff34afda77c1679070a5c084ba8a0981_elex_mafia_stealc_tofsee Sep 26

7a11b0d7d90070fa3574ba0a7c2bc237231dee8297ab3e4743f8ab341db6c360 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex malware masquerading as Word

2026-09-25_4c96a01fec7a6b37af3237d01cd86f6c_elex_mafia_stealc_tofsee Sep 25

c81f031595e45ebd1a5562391b9742df5297c3a9e7781bc02b0299bca5acdcec ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word

2026-09-25_609dd8464cb0423b1db6a44e16f76bbb_elex_mafia_stealc_tofsee Sep 25

7a96bd6d40fe7ed7470aa3cfef57f1b924377b772d7e49c66ec7683e20a158bf ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerading malware with C2 and evasion

2026-09-25_6c439883fee19fc5d9f86d1816c09a34_elex_mafia_stealc_tofsee Sep 25

df6f0625a7cbec2a2024a2c64a0615da8f64708cef2162704978f0ff99c6160c ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word

2026-09-25_6a12e7c066894624b5bdac1d08ed3287_elex_mafia_stealc_tofsee Sep 25

1d07686eca3dbc437384f66084d251f4a3d44e9ec438c1b51a96cc58a2291cb4 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerading malware with C2 and evasion

2026-09-24_1f5ae07118210ed004288bdc17db5627_elex_mafia_stealc_tofsee Sep 25

35bf4373dc160269430f091b2c06d15af36fc5dd32ef3ffda6fe6ce41f16aa5a ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

version-resource/office-suite

2026-09-24_2c4c32c0e442cfd3573f15fd8e2f79a3_elex_mafia_stealc_tofsee Sep 25

f9562797d3c006f816ca5a451a906484d76d3fa6abb05dca26f1f22f0ebc9ed2 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

version-resource/office-suite

2026-09-24_6abd86311ae2f71b6fb10acd337814c5_elex_mafia_stealc_tofsee Sep 25

857e797225d9e1d0cd43508f5b9e0a813740c666fbaf43dac870432ebabd61c5 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

version-resource/office-suite

2026-09-24_8b7293733bc258e5dd10045594572d4b_elex_mafia_stealc_tofsee Sep 25

c1ad2291b12ae822f1ea19de2630991d4de3bad1881f6ae58d30de61369d7a2b ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex malware masquerading as Word

2026-09-24_8a2d10bf6d777c7d25d66ade81c1ce2e_elex_mafia_stealc_tofsee Sep 25

cdcd20d892802ea68d96b84055146e02f5cae28cd7235b02766a245feab82313 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerading malware with C2 config

2026-09-24_8a0d78fd07f911e3439a4f8f17e4f07f_elex_mafia_stealc_tofsee Sep 25

d77cd1b44bd68172911cd5b21afa335129b5e242517f5d48c0be9134b0d63eef ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Masquerades as Word, Elex malware

2026-09-24_88f1490668a5114ea10db3cd09550da6_elex_mafia_stealc_tofsee Sep 25

16cb457c4a11d68481aa926496d73e111bd69022192deaf0aee599ec876bacb7 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

version-resource/office-suite

2026-09-24_94c72f455dabe4345fb74dd36f5dfb0b_elex_mafia_stealc_tofsee Sep 25

9bfcddc5720c185ecaf2bf9c2e9d7dcdc992cdd4e637565daf457b71038a5d59 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word

2026-09-24_b660dc6bfc526615d12f7e59cadb8462_elex_mafia_stealc_tofsee Sep 24

ab061550c2ad744fd4cb32d95b21449c5317514c05056ddf82498b46785c41ee ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word

2026-09-24_bc83045ee34c7c6942d3c1e0815cadb7_elex_mafia_stealc_tofsee Sep 24

f8022803fd1672ca607bac0b98d7b593c1372ee40dadb80e929c2afc0ed34b15 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex stealer, masquerades as Word

2026-09-23_0f4c153e661aa0eb06dfed03fc17b679_elex_mafia_stealc_tofsee Sep 24

95bb6c82f6fefa74a37bdda7a805a04f6246f9a365f7c0407ec5084948a6eb11 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex malware masquerading as Word

2026-09-23_06208b74d173a9df6c7af7e6d7143e96_elex_mafia_stealc_tofsee Sep 24

8285e8a3a58d9ec4d6bff2845bb7322e83ba03372f2d923924733572a0ad1d97 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan, masquerades as Word

2026-09-23_fc9937a4ebdded19d38f334e2104893f_elex_mafia_stealc_tofsee Sep 24

db24409fe5229a118a676e543c112bcf4aaf7a907e5804115472fe28129db396 ✓ K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word

2026-04-09_0e3478d2da9b21152936ef4819ac2068_elex_mafia_stealc_tofsee Apr 24 vxunderground-inthewild

61067e53938c519ef6b5af786584f7f5f52f4a5c48efb08b5c5078380d6d190b K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word

2026-04-10_eadc91b8b88942bdfa5675d267d9427c_elex_mafia_stealc_tofsee Apr 24 vxunderground-inthewild

ef060738bb609548a739dbf0b1ea2867be724389e199a1e2ac58eb55356cfda1 K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan, masquerades as Word

2026-04-09_9bdbf448e3686eed25d9606a91526f92_elex_mafia_stealc_tofsee Apr 24 vxunderground-inthewild

4530fae238d2187bd6848e2b606220483efd377fe7fc533827ec549fab64154b K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

version-resource/office-suite

2026-02-07_3a26b692b3bc7f5bbcf2ea974aa61b23_elex_mafia_stealc_tofsee Apr 24 _unknown

28914a00b7386c7779374813e03b0b1657f35065605fb78fe9a4d493cae4b4ec K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

version-resource/office-suite

2026-03-19_abf2c6bdd58c0f4313c1c7c187889bc0_elex_mafia_stealc_tofsee Apr 24 _unknown

66b19d6deceb6b1f87815716c093502e51b0f6d369e4929b77f66afbe005b437 K(Mc)O₅(Er₆As₇C₂PPr)H₈(CmCrDb₅F₄Os₁₀Po₉TiU)Md₆(Bi₁₂HePaPtSi)Th

100% Elex trojan masquerading as Word