General
- Target 2026-06-28_5f1945c2ca640fd8920f98054c2216a6_elex_mafia_stealc_tofsee
- Size 435KB
- Sample260628-165zyafs7v
- SHA256 1dcd69b1ca694d4ab56f7ba7bcb2b3e499ec4bd4c37ce4ac056738d820004e32
- MD5 5f1945c2ca640fd8920f98054c2216a6
- SHA1 2ab642ae89c44c4a06fc335223d6e94ef541770d
- SHA512 e479310e131aec446d4116ec298649bec4e33a4c5f1649313af5a103173bf1eb386f8353264db979c7d58e0c5034399ddedcaddd3565b2f62d3d1aa98a5d087e
- SSDEEP 12288:4j4pdePiuVZPL4SoRfBLsxe4H0BYq5Qlid+8:4j4pdePiufL+z84BYq2idX
- TLSH T13594E0303186C03BE1A616388AE5CAA9597A7DA14B36A4C777C03BBE5F742D1D73434B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_5f1945c2ca640fd8920f98054c2216a6_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_5f1945c2ca640fd8920f98054c2216a6_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260618-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_5f1945c2ca640fd8920f98054c2216a6_elex_mafia_stealc_tofsee
- Size 435KB
- SHA256 1dcd69b1ca694d4ab56f7ba7bcb2b3e499ec4bd4c37ce4ac056738d820004e32
- MD5 5f1945c2ca640fd8920f98054c2216a6
- SHA1 2ab642ae89c44c4a06fc335223d6e94ef541770d
- SHA512 e479310e131aec446d4116ec298649bec4e33a4c5f1649313af5a103173bf1eb386f8353264db979c7d58e0c5034399ddedcaddd3565b2f62d3d1aa98a5d087e
- SSDEEP 12288:4j4pdePiuVZPL4SoRfBLsxe4H0BYq5Qlid+8:4j4pdePiufL+z84BYq2idX
- TLSH T13594E0303186C03BE1A616388AE5CAA9597A7DA14B36A4C777C03BBE5F742D1D73434B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.