General
- Target 2026-06-28_5cff5e67f7bd9f50ea51aafd11aee186_elex_mafia_stealc_tofsee
- Size 428KB
- Sample260628-19am7sft3y
- SHA256 03767a5ac89bf40194238401227b3e5b565f427b58501804d029c8f049c78a02
- MD5 5cff5e67f7bd9f50ea51aafd11aee186
- SHA1 219f00c820b6003f62c42890fa2175678daca224
- SHA512 edc61157148509ee7146824c352c79bbf10f9e87694d0f0a94259e56e737c12d05693027a778db15110be0a28f35ecb46018f1655db7d49f15b3800d2711868c
- SSDEEP 12288:Z594+AcL4tBekiuKzEro/di38bOwhTEV8IuzfpQ7m6l:BL4tBekiuVr4is9TW8i7D
- TLSH T1B594F0363582C033D6A701390BF5CB6A597A79A14B22A8C77BD41BB95FA03E1D73434B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_5cff5e67f7bd9f50ea51aafd11aee186_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_5cff5e67f7bd9f50ea51aafd11aee186_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260618-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_5cff5e67f7bd9f50ea51aafd11aee186_elex_mafia_stealc_tofsee
- Size 428KB
- SHA256 03767a5ac89bf40194238401227b3e5b565f427b58501804d029c8f049c78a02
- MD5 5cff5e67f7bd9f50ea51aafd11aee186
- SHA1 219f00c820b6003f62c42890fa2175678daca224
- SHA512 edc61157148509ee7146824c352c79bbf10f9e87694d0f0a94259e56e737c12d05693027a778db15110be0a28f35ecb46018f1655db7d49f15b3800d2711868c
- SSDEEP 12288:Z594+AcL4tBekiuKzEro/di38bOwhTEV8IuzfpQ7m6l:BL4tBekiuVr4is9TW8i7D
- TLSH T1B594F0363582C033D6A701390BF5CB6A597A79A14B22A8C77BD41BB95FA03E1D73434B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.